last executing test programs: 24.315751854s ago: executing program 1 (id=101): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000580)={{0x84, @multicast2, 0x4e23, 0x3, 'lc\x00', 0x2, 0x4, 0x7e}, {@private=0xa010102, 0x4e20, 0x2, 0xc8, 0x80012d58, 0x12d5c}}, 0x44) 23.890267126s ago: executing program 1 (id=102): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030007e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038004000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a30"], 0x84}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000) bind$inet6(0xffffffffffffffff, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x11, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(0xffffffffffffffff, &(0x7f0000000240)="6901a2c97ef941f4e46de72827ea8a2befa3d89fde9a664cc73e4e9b9e700e7ba27150e04f4ef307f01c111177857385d67c08e6a4ba67d7de6d5d0584f776e74967e6a9a0624a506e9a5db6c056582c6c77f5e9ee428bf7c67d88caacaa4b0dd745a8bb5ec1c990d499dc8b662acb9871517bfa1e66590a7bbf", 0x0, 0x0, &(0x7f00000001c0)={0xa, 0xfffe, 0x397, @empty}, 0x8) r3 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, &(0x7f0000000f80)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000e40)={0x20, 0x80, 0x1c, {0x1, 0x2, 0x5, 0x5, 0xaac6, 0x2, 0x1ff, 0x4, 0x856f, 0x1, 0x0, 0x2}}, 0x0, 0x0, 0x0, 0x0}) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r4, 0x80015b12, 0x0) syz_usb_connect(0x0, 0x56, &(0x7f0000000080)=ANY=[@ANYBLOB="010203010902440002000000000904fccaa837a24b1c548d21ea999700010dd5000000000705a3f6d2fb5b09040000014106cf0008240201000000000905c926000000009700"/81], 0x0) pipe(&(0x7f0000000040)) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000080008000c00000014040000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='stat\x00') preadv(r6, &(0x7f0000000340)=[{&(0x7f00000013c0)=""/125, 0x7d}], 0x1, 0x0, 0xffffffff) unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) socket$nl_xfrm(0x10, 0x3, 0x6) syz_usb_connect$uac1(0x6, 0x71, 0x0, 0x0) syz_clone(0x800000, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000380), &(0x7f0000000000)) 18.149872327s ago: executing program 1 (id=116): socket$inet_sctp(0x2, 0x5, 0x84) syz_usb_connect(0x3, 0x36, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) keyctl$update(0x2, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="449f52e61b2816571b6011a6a90ab18df43b15fa", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b00010067656e65766500001400028005000400800000000500"], 0x44}}, 0x40080) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x40201, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000380)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) write$tun(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="001c86dd2000100000004000000060ec97000fc811"], 0xffe) 16.822654508s ago: executing program 1 (id=118): sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7f03) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/pids.max\x00', 0x2, 0x0) write$cgroup_pid(r0, &(0x7f0000000080), 0x12) r1 = syz_io_uring_setup(0xc4f, &(0x7f0000000440)={0x0, 0xfffffffc, 0x10100, 0x7fe}, &(0x7f0000000400)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000100)=@IORING_OP_SHUTDOWN) io_uring_enter(r1, 0x2dbe, 0x0, 0x0, 0x0, 0x0) (async) r4 = syz_io_uring_setup(0x822, &(0x7f00000000c0)={0x0, 0xbdbb, 0x10, 0x1, 0x34f}, &(0x7f0000000140), &(0x7f0000000080)) io_uring_enter(r4, 0x47bc, 0x0, 0x21, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_ADDR={0x8}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0xa}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc4}}, 0x0) (async) r6 = dup(r0) ioctl$DMA_HEAP_IOCTL_ALLOC(r6, 0xc0184800, &(0x7f0000000000)={0x9, 0xffffffffffffffff, 0x80000}) 16.468080067s ago: executing program 1 (id=119): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="f80000001600010000000000000000006401010000000000000000000000000000000000000000000000ffff000000000000000000130000000080a000000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="fe80000000000000000000000000003a0000000033"], 0xf8}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e0000001000000000000000000000000fc00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000072c42572f64a264410b00000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbc18c8582fc7800000000000000000000000050019000000000028001a"], 0x120}}, 0x0) 15.810256236s ago: executing program 1 (id=123): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e23, 0x6d, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x5}}, 0x0, 0x0, 0x0, 0x3, 0x5a1, 0xb}, 0x9c) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmmsg$inet6(r1, &(0x7f00000004c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2d}}, 0xfffffff9}, 0x1c, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="2400000000000000290000003200000000000000000000000000ffffac1414aa", @ANYRES32=r2], 0x28}}], 0x1, 0x200440c0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000500)={[&(0x7f0000000000)='.+-:\x00', &(0x7f00000008c0)=' T\xfc\x81\x8e\x9f5\x0e \x043[B\xad\x13\x9f\xae\x8f\xbb\x9a\x0f\x9f\x13\xa5\xfc9\xbb\xa4.\xf4\xeb\x03\xf1\xb6\x8c\xc4E\x93\n&k\xec\xc8\\h\xd6\x1e\xcb\fA\\da/O\xdcn7\x1b@\xbf\xfb\x17J\xaaD\xe4j}\xbf\x93\xd0\xca\x9bH\xb8SB\x92C\x9c\xb2\x9a\x04\xe3\xe7\xfc\xcci\xc1\xe8\xf8\x1e6&\bE\x8f\x9b\xc6\x8d0\xa7 -\xecC8O*7\xba&\xf9\aC\xab\x03g\x06\xda\x8c)\xae\xe3\x16\x9dz\x87\xd6OZX\xa4\xee\xa7\xebe\x14Qp\x96\x00\xd0VK\xe2$i\xd4\xcb-\xd4\x82w\x13\x98\xfcW\x9d\xff\xed\xd4\x14;]\xf8\xccS\xddl\x96v\x97\x988\xa7sQ\x1aN\xbdU.\x89\\\xfa\xc2\xcd\xde\xb3am\x8e\x05Hd*&\xef=\xd1\xf1\xe7\xfb\x13S\x8d\xee\xf5^=M\x84x\xde\xf5\x8fso\xef\x8e\xcd\x95\xa2\xf0\x98[\xfc\xc7\xa2\x83\xc6\x90\xf9)&\x11GAWV/21vg\x84)\x06@\xa7\xa5\xc6\xb0o\x04\x86\x97\xcb\xd5\xb3\xef\x12\x95\x91\x1b8\xbc\x04\xad\xc5\xabU)\x80\xf4v\xeafTBl\x91\xf9\xce\xd5\xb6\xa78\xffP\x1a\xf2\aD\\ap\xd0\xd8\xbfv_\x11\xf4L\x9d\xccI\xffC\xd4\xa9\x85\xd2^\x1aW=t\x13\x9c\xd2\xde_\x88\xe9\xe0\xa7\xdfR\xd9\xcd&\xcf&e\x06\xc4\xc0\xcc\xfa\x9b\xde\xa5e\x04>x\x92%\x87\xa9\x1a`sP\xce\x8f{\x88a\x8c^\x7fQ\x05\x17\xef\xce\x15DH\xcd\xedt\x9c\x17O\xc01\xa5\x96\xb1\x17\xbbw\x19\xf9G\xf40\x1b\x1c]>\xd0\xee\xa3\xc5\x9e5\xcd\xa3K8\x11\x99\x15\xc9c\xecs\xe9\x02\xfe\x1e{\xdf\xc9f%\x16\xbe\xc5\x9d\x99\xacv2\x93\xef\x7f \x1c\x885\xe4\xc0\xa5\x98\xc9_\xa4uW\x9de\xf6\xfbMr=\xc4\xeb\x16P\xa0H\x03\xfd\x93\x1e\xfcI\x0f\xee\xf4|\x84\x83\xae\x99#yb-ur+\xbb\xe2}\x1f\x04\x89(\xc9\xef\xdc \x11\xf3\xbe\xb9HSE\x98?\xff_\xd6\xb2\x99\b\xcc\x01\xd3k\xe4\xb7@x']}) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) 7.467842321s ago: executing program 0 (id=144): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000207d1e512d00000000000109022400010000000009040000010300020009210000000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000800)=ANY=[@ANYBLOB="5c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000003c0012800e0001006970366772657461700000002800028008000d0001000000080014000000000006000300917000000600100000000000040012"], 0x5c}, 0x1, 0xba01}, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000c40)=ANY=[@ANYBLOB='\x00\x00W'], 0x0, 0x0, 0x0, 0x0}, 0x0) 6.518214267s ago: executing program 2 (id=148): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000000040)={0x1d, r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x4, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x10) syz_emit_ethernet(0x3a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaa0380c200000008004600002c0000000000069078ac141400ac1e00018903c90000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="3285000000000000"], 0x0) syz_usb_connect(0x5, 0x2d, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100000cb768405e0483020b990102030109021b000100000000090400000101292100090509"], 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a300000000044000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000210800034000000014600000000c0a010300000000000000000700fffe0900020073797a31000000000900010073797a300000ffff34000380300000802c000180250001002130404c6bfef3a31e2587ebd76200eb3ea056f39e3ab8a93c358099bf8cf3007d000000140000001000010000000000000000000084000a"], 0xec}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=@getchain={0x24, 0x11, 0x5, 0x0, 0x2000001, {0x0, 0x0, 0x0, 0x0, {0x1}, {0x9, 0xc}, {0xfff2, 0x6}}}, 0x24}}, 0x40044) sendmsg$can_bcm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="040000000100000096db000000000000", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="010000800100000004000060010200c40bfd856b4f935500"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x8044004) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x9, 0xa750, &(0x7f0000000b40)) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x42, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r8 = dup(r7) ioctl$KVM_SET_MSRS(r8, 0x4048aecb, &(0x7f00000000c0)=ANY=[@ANYRES64=r5, @ANYRES64]) renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./file7\x00', 0x0) 5.322196467s ago: executing program 0 (id=150): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c0000001200010003950000000000000a0900004001000000000000000000000000ffff"], 0x4c}}, 0x24008010) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40001, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000080)={'macvlan0\x00', @broadcast}) syz_usb_connect(0x4, 0x1b, &(0x7f0000000200)=ANY=[@ANYBLOB="0e011001af8740100304016045d30102030109020900000000805f3149a188c6c9e4a754b6318570f4e6fa93380e8cd88d", @ANYRESDEC=r0, @ANYRES8=r0, @ANYRES64=r0, @ANYRES64=r1], 0x0) 4.950763456s ago: executing program 3 (id=153): r0 = syz_open_dev$loop(&(0x7f0000000480), 0xd76, 0x181400) mount$fuse(0x0, 0x0, 0x0, 0xa02002, &(0x7f00000004c0)=ANY=[@ANYBLOB="66643dc6953bd340e3272b71d8f75d2e259bf1b1641dbb07e599bb12e499abcbe83cb20c3beb0dfa38c10e940b6828039ec26a486cc445322e0a22037201a9aafdefaad479199cd361137641824dfeb422ab103c6a236f4c9ae516aaf718425b7cbf0a21a98a672989ebb66211460e26e8d8f0a8338d62ea54b8dbc1492deefab8989d8802bb1b8c5d61349a79922cad342e87ed63595e043a81fa36feb0f49bca508854", @ANYRESDEC, @ANYBLOB="40ef35a971d35097635122028eb919802534a9e95b3ca94bf84415370e72798ba993e10be6a82eee4caa011b2c213a3a032f32435692c0ba1dc1f06b1de6bc83e6d684a1f35cf6c3d5", @ANYRESOCT]) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}, {0xffff, 0xffff}, {0x0, 0x10}}}, 0x24}}, 0x14) write$UHID_CREATE2(r1, &(0x7f0000000400)=ANY=[], 0x1df) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5, 0xc, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d9600010000000000000000000000000000000000005061e4fb00", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00", [0x400]}}) 4.771539814s ago: executing program 2 (id=154): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000001080)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000000000)=0x40000005, 0x4) recvmmsg(r0, &(0x7f00000037c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001100)=""/28, 0x1c}, 0x3ff}], 0x1, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x4000, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r1 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x68, 0x14, 0xf0b, 0xfffffffe, 0x0, {0x2, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xfff1, 0xa}, {0x6, 0xffff}}, [@TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}}, {0x4}}, {{0x1c, 0x1, {0xd, 0x4, 0xc, 0x487, 0x1, 0x0, 0x5}}, {0x4}}]}]}, 0x68}}, 0x0) 4.74619237s ago: executing program 0 (id=156): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20050850}, 0x2404c8c0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000a40), 0x40400, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/meminfo\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x8, 0x1, 0x40000334}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xffffffff, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000080)) syz_usb_connect(0x2, 0x0, 0x0, 0x0) io_uring_enter(r3, 0x847ba, 0x0, 0xe, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0xd, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41000, 0x39, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x2, 0x200008, 0x2, 0x20000}, 0x10}, 0x94) close(0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r0], 0x4c}}, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r6, 0x0, 0x9, &(0x7f0000000000)='\x00\x00\x00', 0x3) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) 4.59245488s ago: executing program 2 (id=157): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, &(0x7f00000001c0)='GPL\x00'}, 0x94) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) syz_genetlink_get_family_id$fou(0x0, r2) (async) r3 = socket$inet_udplite(0x2, 0x2, 0x88) (async) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) socket(0x10, 0x803, 0x0) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@fallback=r3, 0x5, 0x1, 0x9, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0], 0x0}, 0x40) (async) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000280)={0xfffffff7, 0x0}, 0x8) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240)={@map=r2, r0, 0x29, 0x2030, r2, @void, @void, @value=r6, @void, r5}, 0x20) (async) r7 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0xf691, 0x2000, 0x3, 0x169, 0x0, r2}, &(0x7f00000002c0)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r10 = gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) ioctl$SG_BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000300)={'\x00', 0x0, 0x3, 0x0, 0x3, 0x6, r10}) (async) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) (async) mbind(&(0x7f000024e000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x0, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) (async) io_uring_enter(r7, 0x708, 0x41e3, 0x0, 0x0, 0x0) (async) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) 4.470787374s ago: executing program 3 (id=159): syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00') (async) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) (async) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454c9, 0x1) (async) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0xffff030c) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000000c0), 0x0, 0x0) (async) r4 = gettid() kcmp(r4, r4, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) syz_emit_ethernet(0x22, &(0x7f0000000540)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa3f080645e00014ff8900000589907800000000ffffffff901e1e9f15285c6e22aec1b7101fba280a345fe3d9fabdfd68fec6b7272e5c8d7e0939db6e323a21d3d4eab193a74d775d3d1a18ff934bcfe3b79fbb93dc35d6a618e9ad907780638c31253073b3261e0f74c80fe2965fb4b30599e2de1b89dbe1ce10113e04d991a8f8916e66eef88e7b51ce66fe287a96d57bb58462b3967dc78378935d192e680a8ca044c05a6302f7c9f2b68d6f5243386a2c1c7d419dcd03c82571c4e1ab8e5938417d467061ead2a6e3a23349ecfe061202a00b2dcf5d47cac0859770b9c524e919"], 0x0) (async) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00'}) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xc, 0x0, 0x3}, 0x0) (async) fsopen(&(0x7f0000000380)='pipefs\x00', 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c0000001800f3d202000000fddbdf25b6543e94fd00c8070000000008000f0045cf6b5806001500030c0000"], 0x2c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1, 0x1e, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x0, 0x0, 0xd12c}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r7, 0x84, 0x7, &(0x7f00000001c0)={0x4}, 0x4) (async) sendto$inet6(r7, &(0x7f0000000180)="b8", 0x1, 0x2004c054, &(0x7f0000000140)={0xa, 0x4e23, 0x8000000, @loopback, 0xffffffff}, 0x1c) r8 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000180)={'veth0_virt_wifi\x00', &(0x7f0000000100)=@ethtool_cmd={0xa, 0xf, 0x80, 0x3, 0x1, 0x9, 0x80, 0x6, 0x3, 0x63, 0x9, 0x7, 0x1, 0x3, 0x7, 0x8001, [0x0, 0x7]}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x180000f, 0x13, r1, 0x1000) (async) r9 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) dup(r9) 4.263401299s ago: executing program 3 (id=160): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x6, 0x8, 0x0, 0x3}, 0x0) r2 = socket(0x1d, 0x2, 0x6) sendmmsg$sock(r2, 0x0, 0x0, 0x0) io_uring_setup(0x5f45, &(0x7f00000001c0)={0x0, 0x0, 0x80, 0x2, 0x80000}) r3 = openat$vmci(0xffffff9c, &(0x7f0000001180), 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000040)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, 0x0) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r3, 0x7af, &(0x7f0000001100)={@hyper, 0x10000}) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r3, 0x7b2, &(0x7f00000010c0)={0x0, 0x1}) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)=@o_path={&(0x7f0000000000)='./file0\x00'}, 0x14) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000040)={0x0, 0x1c000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, 0x0, 0x0) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2001, 0x0) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) 3.615105767s ago: executing program 2 (id=162): creat(&(0x7f0000000080)='./file0\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x8000, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x3a, 0x2, 0x0, "d569e8000000fa44966262631e8ac11e00"}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffffffffffffe, 0x4000}, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)={[], 0xfffffffffffffff4}) syz_usb_connect(0x2, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000dae11c105e0484028fa4010203010902"], 0x0) ioprio_get$pid(0x2, 0x0) syz_usb_connect(0x4, 0x5f, &(0x7f0000000440)=ANY=[@ANYRES8=r1, @ANYBLOB="9d6e2976c3dad02aaf4c9f18915523015240861317e1666a5100a90761ceb3e14f174742de792ecf69103816afb1608de690b68312d3e3cadc754a70f9dcf900979066c1437d5e935b8a98cb8a922f506f53d7f9a3d8f1bcb058694cb8510b5bdc7a19f18a8c4a8afad67631d23ede0726ed4470e86a83bd307764cee9d3288bf18e4ccef98771356191a68382018a137b9a7cd47c16b798bd4981213b7baa0119605026db15149cc81e79d8a456b5764ffa9c17afedabdb94a252f9b2da3740f33ebed10e"], 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_IPV6_DSTOPTS(r3, 0x29, 0x3b, 0x0, 0x3a) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000100)={0x0, 0xfffffffffffffe61, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9fb051c0f5657cc2dd449c9363ebeceb01001800"/30], 0x0, 0x1a, 0x0, 0x1, 0x5, 0x10000}, 0x28) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007800c00018008000140e00000020c00028008000140"], 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, 0x0) 2.143115125s ago: executing program 4 (id=166): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x3) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}, 0x0, 0x0, 0x43, 0x0, "0aaa8ff5a212a1bd3bbda613efd9c8b4965dca66db42f66a86e5781cf86717055a7c1d13e6507e5a774ef95f2fc1b947e03d5c8379123f2f1d34b0882e83d41b67cb9ff147c6d33a097d2269351b3ed3"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f00000012c0)={@in6={{0xa, 0x4e21, 0x0, @mcast2, 0x8}}, 0x0, 0x0, 0x34, 0x0, "0c9e089c1b4a04000bde79f04103c458187eb46c2d996aff287154e786455261c425a7519cc275d04e6205abd307a0c4fa3838bf399ad5bd35f21907c7988d1300"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x3, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}}, 0x0, 0x0, 0xf, 0x0, "a1c1dd75a6803e10951cd4b347113e55eb289519becf7542da0bc21470e441225642855b5f2f4bb561dc9363aed4a18d67efd5f2fdf98328de9441031348589b763d46d14810acc5f700"}, 0xd8) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r6, 0x4040ae77, &(0x7f0000000000)) listen(r4, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x4e21, 0x0, @loopback, 0xfffffc01}}, 0x0, 0x0, 0xc, 0x0, "a1c1dd75a68473ba07d945c3b03e10950cd4b347103e55eb4285bf274bca67efbff2fdf98328de9434031348589bf28046d14810000000e3bfffff00"}, 0xd8) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x0) r8 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r8, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) 1.847685677s ago: executing program 4 (id=167): mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) execve(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000800)={[], 0x1f}) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="5000000010001fff00000000fcdbdf2500005865", @ANYRES32=0x0, @ANYRESHEX=r0, @ANYRES32], 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 1.645824677s ago: executing program 4 (id=168): syz_clone3(&(0x7f00000001c0)={0x42323080, &(0x7f00000000c0), 0x0, 0x0, {0x1c}, 0x0, 0x0, 0x0, 0x0}, 0x58) munmap(&(0x7f0000001000/0x2000)=nil, 0x2000) r0 = gettid() sigaltstack(&(0x7f0000000480)={&(0x7f0000002340)=""/4126, 0x80000001, 0x101e}, 0x0) rt_sigqueueinfo(r0, 0x21, &(0x7f0000000100)={0x1f}) r1 = io_uring_setup(0xf80, &(0x7f0000000000)={0x0, 0xf163, 0x8, 0x3, 0x3d2}) syz_io_uring_setup(0x5e4e, &(0x7f0000000100)={0x0, 0xb08, 0x40, 0x3, 0xa8, 0x0, r1}, &(0x7f0000000080), &(0x7f0000000180)) 1.44880056s ago: executing program 0 (id=169): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0xfffffff2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000200)="2cbbbd990960443e1217091edee279ff6b404e8707ad8f8c60a56b5b92ababaa94e60383e5c37f3b330dc6217a1557504ecab301ea714f3929f817702d8b8ecb1ae21e3dfd712f9602794572ce385f738608a3b9b332bdcb7855352f098406a7497061ee35c11ae3bb85adcb54f8848e07a19988edd7ba1a0661e178e78816e66d4e38f76a3436f90f517a8baef82236d053d491be9238ba506492e4c59b6578c99d0e9fd7218c1aa5c03ea246688055966efe99a31bb2d8b7", 0xb9}, {&(0x7f00000002c0)="2e4a78a5bae61699565b9daf8f8867992e85b3e4ed5ae88dfd855960dafcfe3000b5e4bbd7a86a128c70caab304384d62c0a209f139555441969aa66b78b761a3c24c19c72cc29232f02b87c0166f5019f73b243bb06ae6e19234c60d30e7e8a68cd30651fd219609f153036fab455feb0c234de", 0x74}, {&(0x7f0000000340)="e9d9a12bfe8179fd063117ce0a76a5171b49de843ebb433d28c9a05bc611ff5c23b7d404ae1c3a142a0da09967e416e6ec0f7d25f98c09ea44e3c15690abf6cbaeedeffc6480da8b6702fbf32c5c204bc168a2411b1badb991c5a64a667312447c640507b28ecba93d2c2fa1a588811ccdacbd6f3927948baca7db493883440ea12c6b285842ad33ee4ebbebf6aaccb3cccba4af73af8702a619c50e5805a643d83e96680b5650d78069a3e48caf60cb771159f5f861ead9630ebd6fa057ae68dc1346d4223b8b060377af3b3ed871eb55b57b8c50f2f0bb4a5f8581ad347afd4b747721d0", 0xe5}, {&(0x7f0000000440)="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", 0x1000}, {&(0x7f0000001440)="348f2eec175e0a1b59d0f262288a12ad7f57ec69ba955f7b0b054867eab71f99f15baa1474ad27b1ee4536b96bd4d192a717626ed9c0a5c2b6bfab319ae6eeb6f016db8a264705981ad2a92cb72660149aa2a88fb70fdf434a4c68d4c8985afa4183f79b66f1c829bc6a", 0x6a}], 0x5, &(0x7f0000001540)=[{0xd8, 0x10a, 0x4, "3fe5c06b6d60567d46073e7b0420c25e760d6f82877122f2fb417989913d5def61e0d3a75bbac56db470a8f33cd86bd8fadfd396484310b7a9a92536a6ac28e2dba4b9cd776345107ec3e6c30fc05fc2334192fd2c9091fbcfe18573ae1a5cae6d9b3a48cb5bbf6eb027a46ab23b6e56789c95c7d8d25c7d34360f5e8e7a43e9e22df6537a393dc5b02966f61239a7a699837381310fac36b4975b88b534dba3d71a2671a179a9d7aff06a0d4cb5fd277890cd3fbe8d2c1fd171f085e268d46e7a2f9acca8"}], 0xd8}, 0x4010) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x4, 0x0, @mcast2}, {0xa, 0x4e21, 0xb, @ipv4={'\x00', '\xff\xff', @multicast1}}, r1}}, 0x48) 840.804879ms ago: executing program 3 (id=170): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0xb, &(0x7f0000000140)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x7000000, 0x79, 0x11, 0xb8}, [@printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}], {0x95, 0x0, 0x74, 0x20000000}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0x18, &(0x7f000000cf3d)=""/195, 0x0, 0xc, '\x00', 0x0, @fallback=0xd}, 0x59) 627.883222ms ago: executing program 4 (id=171): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000ffff00000000020000000900020073797a3100000000050001000700"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 627.454817ms ago: executing program 3 (id=172): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b05, &(0x7f00000004c0)={'wlan0\x00'}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000040)=0x14) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl1\x00', r1, 0x4, 0x7, 0x7, 0x6700, 0x7b, @private1, @private0, 0x875f, 0x7, 0xfffffffd, 0xfff}}) 362.84369ms ago: executing program 0 (id=173): syz_usb_connect(0x0, 0x48, &(0x7f0000000240)=ANY=[@ANYBLOB="120100001f6f334099041c10c1520102030109023600010100370809047403012b62b50c052406000005240043000d3e780f543831e4ad0202090582020002000000"], 0x0) (async) socket$nl_rdma(0x10, 0x3, 0x14) (async) r0 = socket$packet(0x11, 0x3, 0x300) fstatfs(r0, &(0x7f00000009c0)=""/254) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000980)=[{0x2006, 0x66, 0x0, 0x3}, {0x44d4, 0x27, 0x1, 0x2}]}, 0x10) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) (async) r3 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3fe, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000580)={0x1, @pix_mp={0xfffffffc, 0x0, 0x3631564e, 0x4, 0x2, [{}, {0x277c}, {}, {}, {}, {0xd360}, {0x7, 0xfffffffd}, {0x6, 0x80000}], 0x10, 0x0, 0x0, 0x0, 0x5}}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4}) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f00000000c0)={0x8, 0x2, 0x3, "cabf63b9e04593a164d0ad4c48d24ea6069003675b20f04a43b7a3768267bef7", 0x566600a}) (async) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000240)=0x1) syz_usb_connect$hid(0x6, 0x0, 0x0, 0x0) (async) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, 0x0) (async) socket$inet6_udp(0xa, 0x2, 0x0) socket(0x10, 0x3, 0x0) (async) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(0xffffffffffffffff, 0xc008551c, &(0x7f0000000000)=ANY=[@ANYBLOB="dddf753ee2000000317f864836dd93ffb48c04925842b9b5fd63e40bce2e7956163ba746f738db1b8e670882ce1031b716ef576a00"/64]) (async) socket$key(0xf, 0x3, 0x2) (async) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cgroups\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f00000001c0)={0x2020}, 0x2020) (async) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 361.486918ms ago: executing program 2 (id=174): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$isdn(0x22, 0x2, 0x25) bind$isdn(r1, &(0x7f0000000200)={0x22, 0x7f, 0x6, 0x3, 0x5}, 0x6) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000040)={0x80, 0xa0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10, 0x8}, {0x8, 0x8}, {}, {}, 0x0, 0x10, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x2, 0x6}) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$uinput(0xffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000040)={{0x596, 0x8, 0x5}, 'syz0\x00', 0x19}) ioctl$UI_DEV_CREATE(r2, 0x5501) read(r2, 0x0, 0x0) write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, &(0x7f0000000180)={0x1, 0xd}, 0x2) socket(0x2, 0x80805, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x2d}, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x2, 0x6e}, 0x2c) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000580)={{0x84, @multicast2, 0x4e23, 0x3, 'lc\x00', 0x2, 0x4, 0x7e}, {@private=0xa010102, 0x4e20, 0x2, 0xc8, 0x80012d58, 0x12d5c}}, 0x44) 340.057315ms ago: executing program 3 (id=175): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x8800) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) io_setup(0xeca2, &(0x7f0000000000)) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x1, 0x0, &(0x7f0000000480)) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) capset(0x0, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000100)='cdg\x00', 0x4) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000680)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0xfffffff7, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x4}, 0x50) close_range(r2, 0xffffffffffffffff, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/clients\x00', 0x0, 0x0) preadv(r4, &(0x7f0000004ec0)=[{&(0x7f0000004bc0)=""/68, 0x44}], 0x1, 0x8000, 0x0) r5 = syz_pidfd_open(0x0, 0x0) setns(r5, 0x8020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0x8, 0x72, 0x80000}, 0x20) open$dir(0x0, 0x400000, 0x100) socket$inet(0x2b, 0x800, 0x8) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) 325.667226ms ago: executing program 4 (id=176): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000440)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1}, &(0x7f0000000200), &(0x7f0000000240)=r0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000060010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) 107.75124ms ago: executing program 0 (id=177): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000034276d20402002c68e0100000001090212000100000000090400"], 0x0) (async) r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x4, @local, 0x7fff, 0x3}, 0x20) 13.548482ms ago: executing program 2 (id=178): syz_80211_inject_frame(&(0x7f0000000240)=@device_b, &(0x7f0000000000)=ANY=[], 0xb5) r0 = syz_open_dev$video(0x0, 0x8, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05640, &(0x7f0000000280)={0xa, @pix_mp={0xfffffffd, 0x87, 0x49433553, 0x3, 0x2, [{0x4, 0x2000003}, {0x200, 0x8}, {0x2, 0x8}, {0x8000007, 0x6}, {0x88b5, 0x3}, {0x2b, 0x10}, {0x9a1d, 0x172d}, {0x8, 0x40209}], 0x6, 0x4, 0x6, 0x1}}) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$unix(0x1, 0x2, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000ddda25c7f08f32f05bdb84a02dc12ab51367559aecf73ce764b2f95aa4fa5e5ec9d127b6fed27405ee31d15c6dbc383db59fd664d3310e5b207d110040a6a32f0e3f97428efb99c37385e8979d2dc5bf046a2000d4f61e86703c4440475ba16a145568913159e362193f229b1e27ec41d4899fed8c3d2b8951d2f08bd07713df0194fefa3a9a39047e0b9aab792ada997b7280b221b6", @ANYRES16=r3, @ANYBLOB="010028bd7000fddbdf250700000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900ff070000700000001400040073797a6b616c6c65723000000000000008000500070000000a0018000303030303030000"], 0x50}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$inet_sctp(0x2, 0x5, 0x84) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) 0s ago: executing program 4 (id=179): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x8, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x4, 0x1ff}}, @int={0xb, 0x0, 0x0, 0x1, 0x0, 0x26, 0x0, 0x5, 0x6}]}, {0x0, [0x5f, 0x1, 0x2e, 0x30, 0x5f, 0x2e]}}, &(0x7f0000000040)=""/233, 0x48, 0xe9, 0x1, 0x8}, 0x28) syz_usb_connect(0x0, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x4b, 0x41, 0x46, 0x8, 0x1660, 0x932, 0x80ea, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x5, 0x10, 0xf}}]}}]}}, 0x0) syz_usb_connect$cdc_ncm(0x1, 0x70, &(0x7f0000000340)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5e, 0x2, 0x1, 0x1, 0x20, 0xa, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x7, 0x24, 0x6, 0x0, 0x1, "f97f"}, {0x2, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x10001, 0x7, 0xfff9, 0x5}, {0x6, 0x24, 0x1a, 0x7, 0x2}}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0x3, 0x3, 0x3}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x9, 0x8, 0x20}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x7, 0x6, 0x5}}}}}}}]}}, &(0x7f0000000600)={0xa, &(0x7f00000002c0)={0xa, 0x6, 0x250, 0x3, 0x0, 0x0, 0x8, 0x9}, 0x6d, &(0x7f00000003c0)={0x5, 0xf, 0x6d, 0x6, [@ext_cap={0x7, 0x10, 0x2, 0x8, 0x9, 0x1, 0x2}, @ssp_cap={0x20, 0x10, 0xa, 0x6, 0x5, 0x8, 0x1e, 0x5}, @ssp_cap={0x18, 0x10, 0xa, 0x46, 0x3, 0x3ff, 0xf000, 0xc53, [0x3f00, 0x30, 0x0]}, @ssp_cap={0x14, 0x10, 0xa, 0x6, 0x2, 0x3, 0x0, 0x7, [0xc000, 0xff0000]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x3, 0xfb, 0x9, 0x7}, @wireless={0xb, 0x10, 0x1, 0xc, 0x4, 0x0, 0x8, 0x100, 0xa}]}, 0x4, [{0xde, &(0x7f0000000440)=@string={0xde, 0x3, "93434433fdb18575289e2ac5ff186161a916065be4eac430085816ff1e94f572e3124bb3e59b00c3f7ad3eff14d0161c8217dc7831dc144b6d443ead81430106fc9602662d6aaf35ff17b66463dbc2144edd1daed67628e18005592f9cb81e20b3b0f58c33b1e999436912dc54ee0878beb89f90eaf1ab34090fe0623c9cced48d0ed2ebfb1b98a18b1ec92826b8198e9499587d231f35cb58b8ae3c4f31ed203971374e0d844a5ca5f051388b5f553500306f2a596ee48f65bcfb908dff3730e75263c9f289aa46fa789ac15e8332c9f11b3cf22cbebe49136644ef"}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0xc46}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x410}}, {0x37, &(0x7f0000000680)=@string={0x37, 0x3, "d4e90f461758e1935784090ea6711e7fd7dbad9dfabedea0747d0ed1f6135b6e2323bc876241a2b9fd6eae0a7ff2c2a8cb5fd6e9ed"}}]}) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000040)={&(0x7f0000000100)=[{0x3e, 0x4000, 0x4e, &(0x7f0000000080)="a2daffb83506ef34de92c4987550c2733e829b7c8863725dce714c1972291bb6c63818ca6bb199e8fd980620aa3e32fc72761a85d7a8e14318c68c151528b7bf3150b6fe196efb784e1686afd829"}], 0x1}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r2 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x0, 0xbfdfffbc}, &(0x7f00000000c0)=0x0, &(0x7f0000000040)=0x0) r5 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r5, &(0x7f0000000100)=@name={0x1e, 0x2, 0x3, {{0x42, 0x4}, 0x4}}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x85c3}}) io_uring_enter(r2, 0x32d7, 0x0, 0x46, 0x0, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x20010, r2, 0x8c90e000) dup3(r6, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$FUSE(r7, &(0x7f00000034c0)={0x2020}, 0x2020) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000003000000fd0900008400000005010000", @ANYRES32, @ANYBLOB="000000000037b8610fc38807d500000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) r9 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100), 0x2200, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r9, 0x40085112, &(0x7f00000001c0)=@e={0xff, 0xa, 0xc, 0x2, @generic=0x1f, 0x8, 0x7, 0x4}) r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="780000001000830404000000fedbdf2500007400", @ANYRES32=r11, @ANYBLOB="0008000007500500580012800b0001006272696467650000480002800500190002000000050017000000000008001d00040000000c00220006000000000000000800040081000000050024"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f0000001700)="edefef69e50e69afb23d5de6e2e98934bd99cb650f27b100aab8193b54c1bffd8b3c25df380cc2d8e9d9d1b96905799c0895e2930bfe45d8c9a35e4ad4877b49cbf61656d8856f814603b7cf5e968e38c6b258eba73bc983bbf0f66b5a65624cdd804f7a922a343059f8a1e19806c4e7c9942c6620458ae5835aedcdd91e02f70a56d6551b5e5f047e9548530a70d9f951c5eea5ef966d4929414ab768dfa2dc81e94c29ad5871bbe7867d28bb45d5d09c81617cf7edbc1f31e660cdbad445148d6a7468c1f6e7f28a356970e8bfc2f2727e866ecc94553f870ef9d7c40d602f70f32dbdb65dc1dc2d4107dc6881c7a7647d6851e0f8750cbcffd4147b72e2bdcc6d36d00549025dcff2e1d4eb56a9e5f233040000040791", &(0x7f0000000380), 0x800, r8}, 0x38) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000200), 0x419646ffd51abc63) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.236' (ED25519) to the list of known hosts. [ 85.340463][ T5832] cgroup: Unknown subsys name 'net' [ 85.462533][ T5832] cgroup: Unknown subsys name 'cpuset' [ 85.471972][ T5832] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 87.246077][ T5832] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 91.311050][ T5847] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 91.319888][ T5847] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 91.328741][ T5847] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 91.336882][ T5847] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 91.345997][ T5847] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 91.347847][ T5850] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 91.368839][ T5850] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 91.376095][ T5851] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 91.383634][ T5850] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 91.385366][ T5851] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 91.393044][ T5850] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 91.399721][ T5851] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 91.413241][ T5851] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 91.420083][ T5850] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 91.438449][ T5851] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 91.439426][ T5850] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 91.453516][ T5851] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 91.468697][ T5850] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 91.491844][ T5858] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 91.505665][ T5858] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 91.512339][ T5856] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 91.521837][ T5858] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 91.529980][ T5858] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 91.532895][ T5847] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 91.555945][ T5847] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 92.199767][ T5861] chnl_net:caif_netlink_parms(): no params data found [ 92.332195][ T5859] chnl_net:caif_netlink_parms(): no params data found [ 92.444333][ T5864] chnl_net:caif_netlink_parms(): no params data found [ 92.464338][ T5860] chnl_net:caif_netlink_parms(): no params data found [ 92.544971][ T5865] chnl_net:caif_netlink_parms(): no params data found [ 92.605404][ T5861] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.612999][ T5861] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.620790][ T5861] bridge_slave_0: entered allmulticast mode [ 92.629452][ T5861] bridge_slave_0: entered promiscuous mode [ 92.686712][ T5861] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.694277][ T5861] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.702154][ T5861] bridge_slave_1: entered allmulticast mode [ 92.710570][ T5861] bridge_slave_1: entered promiscuous mode [ 92.771957][ T5859] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.779230][ T5859] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.786774][ T5859] bridge_slave_0: entered allmulticast mode [ 92.795132][ T5859] bridge_slave_0: entered promiscuous mode [ 92.863696][ T5859] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.873296][ T5859] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.881245][ T5859] bridge_slave_1: entered allmulticast mode [ 92.890999][ T5859] bridge_slave_1: entered promiscuous mode [ 92.916708][ T5861] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.930913][ T5861] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.010833][ T5860] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.018063][ T5860] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.025911][ T5860] bridge_slave_0: entered allmulticast mode [ 93.033660][ T5860] bridge_slave_0: entered promiscuous mode [ 93.089453][ T5864] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.096609][ T5864] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.104193][ T5864] bridge_slave_0: entered allmulticast mode [ 93.111694][ T5864] bridge_slave_0: entered promiscuous mode [ 93.124222][ T5859] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.157762][ T5861] team0: Port device team_slave_0 added [ 93.165344][ T5860] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.174233][ T5860] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.182240][ T5860] bridge_slave_1: entered allmulticast mode [ 93.190358][ T5860] bridge_slave_1: entered promiscuous mode [ 93.210774][ T5864] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.218000][ T5864] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.225476][ T5864] bridge_slave_1: entered allmulticast mode [ 93.233534][ T5864] bridge_slave_1: entered promiscuous mode [ 93.243619][ T5859] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.257323][ T5861] team0: Port device team_slave_1 added [ 93.291941][ T5865] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.300157][ T5865] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.307365][ T5865] bridge_slave_0: entered allmulticast mode [ 93.315066][ T5865] bridge_slave_0: entered promiscuous mode [ 93.377666][ T5861] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.384729][ T5861] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.411384][ T5861] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.437365][ T5865] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.444698][ T5865] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.452925][ T5865] bridge_slave_1: entered allmulticast mode [ 93.461106][ T5865] bridge_slave_1: entered promiscuous mode [ 93.472179][ T5864] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.496993][ T5861] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.504126][ T5861] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.531295][ T5853] Bluetooth: hci1: command tx timeout [ 93.537375][ T5861] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.548255][ T5853] Bluetooth: hci2: command tx timeout [ 93.557375][ T5860] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.582844][ T5864] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.595353][ T5859] team0: Port device team_slave_0 added [ 93.608316][ T5853] Bluetooth: hci4: command tx timeout [ 93.613058][ T5860] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.613913][ T5847] Bluetooth: hci0: command tx timeout [ 93.623410][ T5858] Bluetooth: hci3: command tx timeout [ 93.698922][ T5859] team0: Port device team_slave_1 added [ 93.708891][ T5864] team0: Port device team_slave_0 added [ 93.720536][ T5864] team0: Port device team_slave_1 added [ 93.743013][ T5865] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.810926][ T5860] team0: Port device team_slave_0 added [ 93.820057][ T5865] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.860664][ T5859] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.867695][ T5859] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.894222][ T5859] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.906241][ T5864] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.913958][ T5864] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.940564][ T5864] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.953727][ T5864] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.960975][ T5864] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.989002][ T5864] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.002269][ T5860] team0: Port device team_slave_1 added [ 94.027673][ T5861] hsr_slave_0: entered promiscuous mode [ 94.035119][ T5861] hsr_slave_1: entered promiscuous mode [ 94.042977][ T5859] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.050408][ T5859] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.077150][ T5859] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.147843][ T5865] team0: Port device team_slave_0 added [ 94.167353][ T5860] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.174457][ T5860] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.201290][ T5860] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.213916][ T5860] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.221425][ T5860] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.248399][ T5860] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.264468][ T5865] team0: Port device team_slave_1 added [ 94.414475][ T5865] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.421740][ T5865] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.447951][ T5865] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.461285][ T5865] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.468368][ T5865] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.494840][ T5865] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.518033][ T5864] hsr_slave_0: entered promiscuous mode [ 94.525324][ T5864] hsr_slave_1: entered promiscuous mode [ 94.532032][ T5864] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 94.540021][ T5864] Cannot create hsr debugfs directory [ 94.562677][ T5859] hsr_slave_0: entered promiscuous mode [ 94.570183][ T5859] hsr_slave_1: entered promiscuous mode [ 94.576457][ T5859] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 94.584578][ T5859] Cannot create hsr debugfs directory [ 94.660434][ T5860] hsr_slave_0: entered promiscuous mode [ 94.666991][ T5860] hsr_slave_1: entered promiscuous mode [ 94.673492][ T5860] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 94.681116][ T5860] Cannot create hsr debugfs directory [ 94.899772][ T5865] hsr_slave_0: entered promiscuous mode [ 94.906214][ T5865] hsr_slave_1: entered promiscuous mode [ 94.913105][ T5865] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 94.920949][ T5865] Cannot create hsr debugfs directory [ 95.288843][ T5861] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 95.331687][ T5861] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 95.359315][ T5861] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 95.371568][ T5861] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 95.467166][ T5864] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 95.481234][ T5864] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 95.493526][ T5864] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 95.503792][ T5864] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 95.614930][ T5858] Bluetooth: hci2: command tx timeout [ 95.614966][ T5847] Bluetooth: hci1: command tx timeout [ 95.673892][ T5859] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 95.686715][ T5859] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 95.690435][ T5847] Bluetooth: hci3: command tx timeout [ 95.693857][ T5853] Bluetooth: hci4: command tx timeout [ 95.704608][ T5858] Bluetooth: hci0: command tx timeout [ 95.726723][ T5859] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 95.754886][ T5859] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 95.871500][ T5861] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.881072][ T5860] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 95.892546][ T5860] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 95.907721][ T5864] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.924442][ T5860] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 95.961173][ T5860] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 96.019072][ T5865] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 96.036071][ T5865] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 96.048042][ T5865] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 96.072076][ T5861] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.082528][ T5864] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.104069][ T5865] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 96.146382][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.153798][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.165496][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.172772][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.185266][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.192555][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.231244][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.238514][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.361137][ T5859] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.422326][ T5861] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 96.452297][ T5859] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.512128][ T5864] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 96.529070][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.536374][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.550902][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.558078][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.610176][ T5860] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.669121][ T5861] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.726963][ T5860] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.761867][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.769143][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.792300][ T5864] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.819962][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.827183][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.874650][ T5865] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.973964][ T5865] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.990988][ T5859] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.001512][ T5861] veth0_vlan: entered promiscuous mode [ 97.029122][ T5864] veth0_vlan: entered promiscuous mode [ 97.041438][ T3475] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.048640][ T3475] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.073868][ T5861] veth1_vlan: entered promiscuous mode [ 97.094085][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.101754][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.111567][ T5864] veth1_vlan: entered promiscuous mode [ 97.193435][ T5860] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.220837][ T10] cfg80211: failed to load regulatory.db [ 97.270899][ T5864] veth0_macvtap: entered promiscuous mode [ 97.294517][ T5861] veth0_macvtap: entered promiscuous mode [ 97.316675][ T5861] veth1_macvtap: entered promiscuous mode [ 97.326195][ T5864] veth1_macvtap: entered promiscuous mode [ 97.341069][ T5859] veth0_vlan: entered promiscuous mode [ 97.392448][ T5859] veth1_vlan: entered promiscuous mode [ 97.410681][ T5860] veth0_vlan: entered promiscuous mode [ 97.430214][ T5861] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.444595][ T5864] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.467912][ T5860] veth1_vlan: entered promiscuous mode [ 97.483489][ T5861] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.498981][ T5861] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.507954][ T5861] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.517812][ T5861] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.527542][ T5861] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.544062][ T5864] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.563850][ T5865] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.584095][ T5864] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.593409][ T5864] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.603892][ T5864] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.614611][ T5864] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.689147][ T5858] Bluetooth: hci2: command tx timeout [ 97.698531][ T5858] Bluetooth: hci1: command tx timeout [ 97.770249][ T5858] Bluetooth: hci0: command tx timeout [ 97.770938][ T5853] Bluetooth: hci4: command tx timeout [ 97.775705][ T5858] Bluetooth: hci3: command tx timeout [ 97.804227][ T5859] veth0_macvtap: entered promiscuous mode [ 97.838948][ T5859] veth1_macvtap: entered promiscuous mode [ 97.848201][ T5860] veth0_macvtap: entered promiscuous mode [ 97.860773][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.865896][ T5865] veth0_vlan: entered promiscuous mode [ 97.869514][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.928835][ T3475] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.930894][ T5860] veth1_macvtap: entered promiscuous mode [ 97.936721][ T3475] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.981719][ T5865] veth1_vlan: entered promiscuous mode [ 98.004862][ T5859] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.048627][ T5859] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.060998][ T5859] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.061007][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.077809][ T5859] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.087836][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.089639][ T5859] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.105719][ T5859] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.140885][ T3475] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.153109][ T3475] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.182050][ T5860] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.204858][ T5860] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.255652][ T5860] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.265305][ T5860] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.274398][ T5860] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.283869][ T5860] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.307187][ T5865] veth0_macvtap: entered promiscuous mode [ 98.332352][ T5864] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 98.382662][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.391403][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.415586][ T5865] veth1_macvtap: entered promiscuous mode [ 98.592313][ T5865] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.632448][ T5865] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.664028][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.676738][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.703613][ T5865] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.712589][ T5944] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 98.713127][ T5865] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.740262][ T5865] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.755222][ T5865] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.776260][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.785928][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.829998][ T5940] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 98.934732][ T3475] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.976537][ T3475] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.989548][ T5940] usb 3-1: Using ep0 maxpacket: 16 [ 99.014630][ T5940] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 99.059826][ T5940] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 99.097470][ T5940] usb 3-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 99.106660][ T5940] usb 3-1: Manufacturer: syz [ 99.112389][ T5940] usb 3-1: SerialNumber: syz [ 99.138670][ T5940] usb 3-1: config 0 descriptor?? [ 99.170069][ T5940] em28xx 3-1:0.0: New device syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 99.191436][ T5940] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 99.197888][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.226934][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.333051][ T5951] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4'. [ 99.349409][ T5906] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 99.366267][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.398967][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.471928][ T5940] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 99.560488][ T5906] usb 2-1: config 0 has an invalid interface number: 255 but max is 0 [ 99.588178][ T5906] usb 2-1: config 0 has no interface number 0 [ 99.598248][ T5906] usb 2-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 99.617281][ T5940] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 99.625472][ T5906] usb 2-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 99.625518][ T5906] usb 2-1: config 0 interface 255 has no altsetting 0 [ 99.625555][ T5906] usb 2-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 99.625578][ T5906] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.668641][ T5906] usb 2-1: config 0 descriptor?? [ 99.687188][ T5940] em28xx 3-1:0.0: board has no eeprom [ 99.695825][ T5906] ums-realtek 2-1:0.255: USB Mass Storage device detected [ 99.773733][ T5858] Bluetooth: hci1: command tx timeout [ 99.780323][ T5858] Bluetooth: hci2: command tx timeout [ 99.850175][ T5858] Bluetooth: hci4: command tx timeout [ 99.855685][ T5858] Bluetooth: hci0: command tx timeout [ 99.861335][ T5847] Bluetooth: hci3: command tx timeout [ 99.867808][ T5940] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 99.875904][ T5940] em28xx 3-1:0.0: dvb set to bulk mode. [ 99.886331][ T24] em28xx 3-1:0.0: Binding DVB extension [ 99.893694][ T5949] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 99.942299][ T5940] usb 3-1: USB disconnect, device number 2 [ 99.950416][ T5940] em28xx 3-1:0.0: Disconnecting em28xx [ 100.016308][ T5949] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.038988][ T5949] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.078566][ T43] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 100.112864][ T5965] mmap: syz.4.5 (5965) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 100.143102][ T5846] usb 2-1: USB disconnect, device number 2 [ 100.189349][ T24] em28xx 3-1:0.0: Registering input extension [ 100.231686][ T5940] em28xx 3-1:0.0: Closing input extension [ 100.260641][ T5971] process 'syz.2.8' launched './file0' with NULL argv: empty string added [ 100.278291][ T43] usb 4-1: Using ep0 maxpacket: 32 [ 100.289716][ T43] usb 4-1: config index 0 descriptor too short (expected 9, got 0) [ 100.303592][ T43] usb 4-1: can't read configurations, error -22 [ 100.311776][ T5940] em28xx 3-1:0.0: Freeing device [ 100.468968][ T43] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 100.476798][ T24] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 100.668230][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 100.678445][ T43] usb 4-1: Using ep0 maxpacket: 32 [ 100.693203][ T24] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 100.760410][ T24] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 100.769613][ T43] usb 4-1: config index 0 descriptor too short (expected 9, got 0) [ 100.777908][ T43] usb 4-1: can't read configurations, error -22 [ 100.790642][ T43] usb usb4-port1: attempt power cycle [ 100.810162][ T24] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 100.833201][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.842080][ T24] usb 1-1: Product: syz [ 100.846378][ T24] usb 1-1: Manufacturer: syz [ 100.857090][ T24] usb 1-1: SerialNumber: syz [ 101.201251][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 101.202376][ T24] usb 1-1: 0:2 : does not exist [ 101.216554][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 101.236579][ T43] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 101.318916][ T0] NOHZ tick-stop error: local softirq work is pending, handler #242!!! [ 101.399859][ T43] usb 4-1: Using ep0 maxpacket: 32 [ 101.427380][ T24] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 101.437761][ T43] usb 4-1: config index 0 descriptor too short (expected 9, got 0) [ 101.560464][ T43] usb 4-1: can't read configurations, error -22 [ 101.601884][ T24] usb 1-1: USB disconnect, device number 2 [ 101.753330][ T43] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 101.893342][ T3420] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 102.414315][ T43] usb 4-1: Using ep0 maxpacket: 32 [ 102.448269][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 102.479739][ T43] usb 4-1: config index 0 descriptor too short (expected 9, got 0) [ 102.498330][ T43] usb 4-1: can't read configurations, error -22 [ 102.519322][ T43] usb usb4-port1: unable to enumerate USB device [ 102.620432][ T3420] usb 5-1: config 0 has no interfaces? [ 102.659622][ T3420] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 102.680223][ T3420] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.698532][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 102.703603][ T3420] usb 5-1: Product: syz [ 102.707520][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 102.719761][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 102.743114][ T5916] udevd[5916]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 102.760930][ T3420] usb 5-1: Manufacturer: syz [ 102.765595][ T3420] usb 5-1: SerialNumber: syz [ 102.810979][ T3420] usb 5-1: config 0 descriptor?? [ 102.880948][ T6004] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 102.922413][ T6005] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15'. [ 103.049044][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 103.162051][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 103.278879][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 103.998440][ T5973] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 104.202158][ T5846] usb 5-1: USB disconnect, device number 2 [ 104.364390][ T5973] usb 4-1: config 8 has an invalid interface number: 95 but max is 0 [ 104.375217][ T5973] usb 4-1: config 8 has no interface number 0 [ 104.450280][ T5973] usb 4-1: New USB device found, idVendor=05ac, idProduct=024a, bcdDevice=29.78 [ 104.460006][ T5973] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.484186][ T5973] usb 4-1: Product: syz [ 104.508913][ T5973] usb 4-1: Manufacturer: syz [ 104.540521][ T5973] usb 4-1: SerialNumber: syz [ 104.675039][ T6029] netlink: 156 bytes leftover after parsing attributes in process `syz.4.23'. [ 104.688503][ T5939] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 104.880278][ T6018] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.967339][ T5939] usb 2-1: config 0 has no interfaces? [ 104.974097][ T6018] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.036375][ T5939] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 105.098647][ T5973] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:8.95/input/input6 [ 105.108499][ T5939] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.108528][ T5939] usb 2-1: Product: syz [ 105.108544][ T5939] usb 2-1: Manufacturer: syz [ 105.108560][ T5939] usb 2-1: SerialNumber: syz [ 105.146438][ T5939] usb 2-1: config 0 descriptor?? [ 105.197299][ T1334] team0: Failed to send port change of device team_slave_0 via netlink (err -105) [ 105.212804][ T5201] bcm5974 4-1:8.95: could not read from device [ 105.315164][ T5973] usb 4-1: USB disconnect, device number 6 [ 105.333369][ T5201] bcm5974 4-1:8.95: could not read from device [ 105.388245][ T5201] bcm5974 4-1:8.95: could not read from device [ 106.204256][ T6051] Invalid option length (0) for dns_resolver key [ 106.372523][ T6052] block device autoloading is deprecated and will be removed. [ 106.625975][ T6055] syz.0.29 uses obsolete (PF_INET,SOCK_PACKET) [ 107.262503][ T5930] usb 2-1: USB disconnect, device number 3 [ 107.299314][ T5940] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 107.406805][ T6063] netlink: 20 bytes leftover after parsing attributes in process `syz.4.31'. [ 107.471139][ T6063] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 107.477909][ T6063] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 107.504881][ T6063] vhci_hcd vhci_hcd.0: Device attached [ 107.525212][ T5940] usb 4-1: unable to get BOS descriptor or descriptor too short [ 107.546403][ T6066] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(8) [ 107.552996][ T6066] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 107.583171][ T5940] usb 4-1: config 6 has an invalid interface number: 200 but max is 0 [ 107.608553][ T5940] usb 4-1: config 6 has no interface number 0 [ 107.610293][ T6066] vhci_hcd vhci_hcd.0: Device attached [ 107.614920][ T5940] usb 4-1: config 6 interface 200 has no altsetting 0 [ 107.650343][ T5940] usb 4-1: New USB device found, idVendor=05d8, idProduct=810c, bcdDevice=18.5f [ 107.664845][ T6066] batadv_slave_0: mtu greater than device maximum [ 107.668739][ T5940] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.696184][ T5940] usb 4-1: Product: syz [ 107.700941][ T5940] usb 4-1: Manufacturer: syz [ 107.710026][ T5940] usb 4-1: SerialNumber: syz [ 107.782934][ T5846] usb 41-1: new low-speed USB device number 2 using vhci_hcd [ 108.108665][ T6067] vhci_hcd: connection closed [ 108.109575][ T6064] vhci_hcd: connection reset by peer [ 108.129270][ T1334] vhci_hcd: stop threads [ 108.157195][ T1334] vhci_hcd: release socket [ 108.169656][ T1334] vhci_hcd: disconnect device [ 108.198993][ T1334] vhci_hcd: stop threads [ 108.206545][ T1334] vhci_hcd: release socket [ 108.212901][ T1334] vhci_hcd: disconnect device [ 108.238270][ T5994] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 108.298493][ T6074] netlink: 88 bytes leftover after parsing attributes in process `syz.0.35'. [ 108.367959][ T5940] dvb-usb: found a 'Artec T14 - USB2.0 DVB-T' in warm state. [ 108.418287][ T5994] usb 2-1: Using ep0 maxpacket: 16 [ 108.432583][ T5994] usb 2-1: config 1 has an invalid interface number: 105 but max is 0 [ 108.459094][ T5994] usb 2-1: config 1 has no interface number 0 [ 108.472961][ T5994] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 108.483667][ T5994] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 108.496827][ T5994] usb 2-1: config 1 interface 105 has no altsetting 0 [ 108.505688][ T5994] usb 2-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 108.514825][ T5994] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.523006][ T5994] usb 2-1: Product: syz [ 108.527282][ T5994] usb 2-1: Manufacturer: syz [ 108.531983][ T5994] usb 2-1: SerialNumber: syz [ 108.540325][ T6072] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 108.547613][ T6072] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 108.582326][ T5940] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 108.597722][ T5940] dvbdev: DVB: registering new adapter (Artec T14 - USB2.0 DVB-T) [ 108.605839][ T5940] usb 4-1: media controller created [ 108.644077][ T5940] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 108.660434][ T5939] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 108.708468][ T5930] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 108.795518][ T5940] dvb-usb: bulk message failed: -71 (6/0) [ 108.824446][ T5940] dvb-usb: bulk message failed: -71 (6/0) [ 108.831690][ T5940] dvb-usb: no frontend was attached by 'Artec T14 - USB2.0 DVB-T' [ 108.840820][ T5939] usb 3-1: Using ep0 maxpacket: 32 [ 108.851371][ T5940] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input7 [ 108.870462][ T5939] usb 3-1: config 0 interface 0 has no altsetting 0 [ 108.883162][ T5940] dvb-usb: schedule remote query interval to 150 msecs. [ 108.892113][ T5940] dvb-usb: Artec T14 - USB2.0 DVB-T successfully initialized and connected. [ 108.902706][ T5930] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 108.902759][ T5930] usb 1-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 108.902786][ T5930] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.912222][ T5939] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 108.951244][ T5930] usb 1-1: config 0 descriptor?? [ 108.959531][ T5940] usb 4-1: USB disconnect, device number 7 [ 108.967596][ T6072] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 109.001428][ T6072] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 109.023938][ T5939] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.057704][ T5939] usb 3-1: Product: syz [ 109.084786][ T5939] usb 3-1: Manufacturer: syz [ 109.098752][ T5939] usb 3-1: SerialNumber: syz [ 109.115852][ T5939] usb 3-1: config 0 descriptor?? [ 109.131410][ T5940] dvb-usb: Artec T14 - USB2.0 DVB-T successfully deinitialized and disconnected. [ 109.196573][ T30] audit: type=1326 audit(1753140549.514:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6077 comm="syz.0.37" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f798fb8e9a9 code=0x0 [ 109.289008][ T5930] usbhid 1-1:0.0: can't add hid device: -71 [ 109.295626][ T5930] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 109.314575][ T3420] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 109.377519][ T5930] usb 1-1: USB disconnect, device number 3 [ 109.487055][ T5994] aqc111 2-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x20) reg index 0x0000: -71 [ 109.521138][ T3420] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 109.548436][ T5939] gs_usb 3-1:0.0: Configuring for 1 interfaces [ 109.551317][ T5994] aqc111 2-1:1.105: probe with driver aqc111 failed with error -71 [ 109.568675][ T3420] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 109.633291][ T3420] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 109.658284][ T5994] usb 2-1: USB disconnect, device number 4 [ 109.717331][ T3420] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 109.778174][ T3420] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 109.837563][ T3420] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.927313][ T3420] usb 5-1: config 0 descriptor?? [ 109.955081][ T6076] binder: 6075:6076 ioctl c018620c 200000000100 returned -22 [ 110.136597][ T5939] usb 3-1: USB disconnect, device number 3 [ 110.411793][ T3420] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 110.919285][ T5940] usb 5-1: USB disconnect, device number 3 [ 112.584461][ T6123] netlink: 40 bytes leftover after parsing attributes in process `syz.0.43'. [ 112.888442][ T5846] vhci_hcd: vhci_device speed not set [ 113.619596][ T6138] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 114.018269][ T5937] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 114.538336][ T5937] usb 2-1: Using ep0 maxpacket: 32 [ 114.550067][ T5937] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 114.558222][ T5937] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 114.651404][ T5937] usb 2-1: config 0 has no interface number 0 [ 114.672677][ T5937] usb 2-1: config 0 interface 8 altsetting 248 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 114.787316][ T6155] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.836457][ T6155] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.907707][ T6155] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.936174][ T6155] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.997695][ T6158] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.014490][ T6158] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.028309][ T5846] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 115.228345][ T5846] usb 4-1: Using ep0 maxpacket: 16 [ 115.258545][ T5994] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 115.270489][ T5846] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 115.290823][ T5846] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 115.314320][ T5846] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 115.360622][ T5846] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 115.370240][ T5846] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.378403][ T5846] usb 4-1: Product: syz [ 115.388054][ T5846] usb 4-1: Manufacturer: syz [ 115.400894][ T5846] usb 4-1: SerialNumber: syz [ 115.428276][ T5994] usb 1-1: device descriptor read/64, error -71 [ 115.663420][ T5846] usb 4-1: 0:2 : does not exist [ 115.722708][ T5846] usb 4-1: 1:0: cannot get min/max values for control 4 (id 1) [ 115.733275][ T5937] usb 2-1: config 0 interface 8 altsetting 248 has 3 endpoint descriptors, different from the interface descriptor's value: 10 [ 115.760648][ T5994] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 115.790552][ T5846] usb 4-1: USB disconnect, device number 8 [ 115.823947][ T5916] udevd[5916]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 115.905532][ T5937] usb 2-1: config 0 interface 8 has no altsetting 0 [ 115.940970][ T5937] usb 2-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=2d.bb [ 115.958154][ T5937] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.958623][ T5994] usb 1-1: device descriptor read/64, error -71 [ 116.006892][ T5937] usb 2-1: Product: syz [ 116.031582][ T5937] usb 2-1: Manufacturer: syz [ 116.054323][ T5937] usb 2-1: SerialNumber: syz [ 116.100896][ T5937] usb 2-1: config 0 descriptor?? [ 116.140493][ T5994] usb usb1-port1: attempt power cycle [ 116.327100][ T6138] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.338883][ T6138] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 116.354278][ T5939] hid-generic 0000:0003:0001.0002: item fetching failed at offset 0/2 [ 116.378334][ T5939] hid-generic 0000:0003:0001.0002: probe with driver hid-generic failed with error -22 [ 116.503223][ T5937] ath6kl: Failed to submit usb control message: -71 [ 116.568381][ T5994] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 116.588953][ T5994] usb 1-1: device descriptor read/8, error -71 [ 116.606815][ T5937] ath6kl: unable to send the bmi data to the device: -71 [ 116.677913][ T5937] ath6kl: Unable to send get target info: -71 [ 116.838175][ T5937] ath6kl: Failed to init ath6kl core: -71 [ 116.839261][ T5994] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 116.890664][ T5994] usb 1-1: device descriptor read/8, error -71 [ 116.927581][ T5937] ath6kl_usb 2-1:0.8: probe with driver ath6kl_usb failed with error -71 [ 116.958549][ T5940] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 116.998653][ T5994] usb usb1-port1: unable to enumerate USB device [ 117.081243][ T5937] usb 2-1: USB disconnect, device number 5 [ 117.225421][ T5940] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 117.256385][ T5940] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 117.289088][ T5940] usb 4-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 117.308232][ T5994] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 117.322805][ T5940] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.358995][ T5940] usb 4-1: config 0 descriptor?? [ 117.488323][ T5994] usb 5-1: Using ep0 maxpacket: 32 [ 117.537083][ T5994] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 117.549185][ T5994] usb 5-1: config 0 has no interface number 0 [ 117.570138][ T5994] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 117.735883][ T5994] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 118.012253][ T5994] usb 5-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 118.035562][ T5994] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.062263][ T5994] usb 5-1: config 0 descriptor?? [ 118.549525][ T6201] cifs: Unknown parameter 'f,' [ 118.765987][ T5994] uclogic 0003:28BD:0094.0003: pen parameters not found [ 118.773202][ T5994] uclogic 0003:28BD:0094.0003: interface is invalid, ignoring [ 119.027484][ T6210] netlink: 20 bytes leftover after parsing attributes in process `syz.4.53'. [ 119.983929][ T5994] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 120.151791][ T5994] usb 2-1: config 1 interface 0 altsetting 2 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 120.163304][ T5994] usb 2-1: config 1 interface 0 has no altsetting 0 [ 120.231542][ T5994] usb 2-1: New USB device found, idVendor=056a, idProduct=00da, bcdDevice= 0.40 [ 120.268377][ T5994] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.203724][ T5994] usb 2-1: Product: syz [ 121.209522][ T5994] usb 2-1: Manufacturer: 뭒린ቅ隂뻋榎ⓖ챳Პΐ舷烹뱽悊桱캬铜墫鄨쐳黏˸쌟慸腑짢嶅䥬怿ῥꮜ㏳ꁄ逰觎캙ς갋蔟 [ 121.209965][ T5930] usb 5-1: USB disconnect, device number 4 [ 121.239727][ T5994] usb 2-1: SerialNumber: syz [ 121.267258][ T5994] usb 2-1: rejected 1 configuration due to insufficient available bus power [ 121.288248][ T5994] usb 2-1: no configuration chosen from 1 choice [ 121.473734][ T5940] usbhid 4-1:0.0: can't add hid device: -71 [ 121.479957][ T5940] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 121.607461][ T5940] usb 4-1: USB disconnect, device number 9 [ 122.095348][ T30] audit: type=1326 audit(1753140562.414:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6243 comm="syz.4.65" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff18078e9a9 code=0x0 [ 122.574909][ T5994] usb 2-1: USB disconnect, device number 6 [ 123.400087][ T3420] IPVS: starting estimator thread 0... [ 123.437002][ T30] audit: type=1326 audit(1753140563.754:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6277 comm="syz.0.72" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f798fb8e9a9 code=0x7ffc0000 [ 123.528713][ T6281] IPVS: using max 26 ests per chain, 62400 per kthread [ 123.550023][ T30] audit: type=1326 audit(1753140563.754:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6277 comm="syz.0.72" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f798fb8e9a9 code=0x7ffc0000 [ 123.579488][ T6288] netlink: 8 bytes leftover after parsing attributes in process `syz.4.73'. [ 123.792467][ T6297] PKCS7: Unknown OID: [5] (bad) [ 123.822274][ T6297] PKCS7: Only support pkcs7_signedData type [ 123.927431][ T6300] gtp0: entered promiscuous mode [ 123.935575][ T6300] gtp0: entered allmulticast mode [ 125.240952][ T6323] fuse: Unknown parameter 'hfD\}#)m&+V(D_kTSt (fHK/eoYF"$sӱzvQ>ݢ~Tr׀]E~c-8o Y/$* KJ#c֎:_rW`ҋ[V%' [ 125.386912][ T6321] netlink: 4 bytes leftover after parsing attributes in process `syz.3.80'. [ 125.588410][ T5937] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 125.760230][ T5937] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 125.828599][ T5937] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 125.885444][ T5937] usb 1-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 125.913037][ T5937] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.955942][ T5937] usb 1-1: config 0 descriptor?? [ 126.098876][ T6349] capability: warning: `syz.2.87' uses 32-bit capabilities (legacy support in use) [ 126.178257][ T5914] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 126.391092][ T5937] elan 0003:04F3:0755.0004: bogus close delimiter [ 126.417069][ T5937] elan 0003:04F3:0755.0004: item 0 1 2 10 parsing failed [ 126.487943][ T5937] elan 0003:04F3:0755.0004: Hid Parse failed [ 126.500828][ T5914] usb 2-1: config 0 has no interfaces? [ 126.512413][ T5937] elan 0003:04F3:0755.0004: probe with driver elan failed with error -22 [ 126.674954][ T6323] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 126.711240][ T6323] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 126.723664][ T5914] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 126.857190][ T5937] usb 1-1: USB disconnect, device number 8 [ 126.869330][ T5914] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.943499][ T5914] usb 2-1: Product: syz [ 126.967262][ T5914] usb 2-1: Manufacturer: syz [ 126.992492][ T5914] usb 2-1: SerialNumber: syz [ 127.033643][ T5914] usb 2-1: config 0 descriptor?? [ 127.218208][ T5939] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 127.286694][ T6346] misc userio: No port type given on /dev/userio [ 127.295462][ T6346] misc userio: The device must be registered before sending interrupts [ 127.392556][ T5939] usb 4-1: Using ep0 maxpacket: 16 [ 127.414054][ T5939] usb 4-1: too many configurations: 248, using maximum allowed: 8 [ 127.492370][ T5939] usb 4-1: invalid descriptor for config index 0: type = 0x2, length = 162 [ 127.522187][ T5939] usb 4-1: can't read configurations, error -22 [ 127.668546][ T5939] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 127.798574][ T5937] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 127.831997][ T5939] usb 4-1: Using ep0 maxpacket: 16 [ 127.844587][ T5939] usb 4-1: too many configurations: 248, using maximum allowed: 8 [ 127.872874][ T5939] usb 4-1: invalid descriptor for config index 0: type = 0x2, length = 162 [ 127.900003][ T5939] usb 4-1: can't read configurations, error -22 [ 127.917056][ T5939] usb usb4-port1: attempt power cycle [ 127.948297][ T5937] usb 1-1: device descriptor read/64, error -71 [ 128.176471][ T6373] netlink: 8 bytes leftover after parsing attributes in process `syz.2.91'. [ 128.188365][ T5937] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 128.268244][ T5939] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 128.309184][ T5939] usb 4-1: Using ep0 maxpacket: 16 [ 128.322702][ T5939] usb 4-1: too many configurations: 248, using maximum allowed: 8 [ 128.336951][ T5939] usb 4-1: invalid descriptor for config index 0: type = 0x2, length = 162 [ 128.352102][ T5937] usb 1-1: device descriptor read/64, error -71 [ 128.358505][ T5939] usb 4-1: can't read configurations, error -22 [ 128.438433][ T5994] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 128.478484][ T5937] usb usb1-port1: attempt power cycle [ 128.498284][ T5939] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 128.528984][ T5939] usb 4-1: Using ep0 maxpacket: 16 [ 128.536878][ T5939] usb 4-1: too many configurations: 248, using maximum allowed: 8 [ 128.554821][ T5939] usb 4-1: invalid descriptor for config index 0: type = 0x2, length = 162 [ 128.576917][ T5939] usb 4-1: can't read configurations, error -22 [ 128.595041][ T5939] usb usb4-port1: unable to enumerate USB device [ 128.599226][ T5994] usb 3-1: Using ep0 maxpacket: 16 [ 128.611903][ T5994] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 128.627241][ T5994] usb 3-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 128.643504][ T5994] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.660339][ T5994] usb 3-1: config 0 descriptor?? [ 128.838237][ T5937] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 128.889227][ T5937] usb 1-1: device descriptor read/8, error -71 [ 128.964381][ T3420] usb 2-1: USB disconnect, device number 7 [ 129.112797][ T5994] apple 0003:05AC:024B.0005: unknown main item tag 0x6 [ 129.123390][ T5994] apple 0003:05AC:024B.0005: invalid report_size 24312 [ 129.131774][ T5994] apple 0003:05AC:024B.0005: item 0 2 1 7 parsing failed [ 129.144307][ T5994] apple 0003:05AC:024B.0005: parse failed [ 129.151437][ T5994] apple 0003:05AC:024B.0005: probe with driver apple failed with error -22 [ 129.162389][ T5937] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 129.232282][ T5937] usb 1-1: device descriptor read/8, error -71 [ 129.309956][ T3420] usb 3-1: USB disconnect, device number 4 [ 129.349869][ T5937] usb usb1-port1: unable to enumerate USB device [ 130.020114][ T6381] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 130.026711][ T6381] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 130.036694][ T6381] vhci_hcd vhci_hcd.0: Device attached [ 130.193450][ T6388] netlink: 14 bytes leftover after parsing attributes in process `syz.3.94'. [ 130.228284][ T5914] vhci_hcd: vhci_device speed not set [ 130.298214][ T5914] usb 39-1: new full-speed USB device number 2 using vhci_hcd [ 130.460303][ T6389] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.718311][ T5930] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 130.946134][ T6383] vhci_hcd: connection reset by peer [ 131.018535][ T12] vhci_hcd: stop threads [ 131.022869][ T12] vhci_hcd: release socket [ 131.028051][ T12] vhci_hcd: disconnect device [ 131.062215][ T5930] usb 3-1: Using ep0 maxpacket: 8 [ 131.086802][ T5930] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 131.095717][ T5930] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 131.105943][ T5930] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 131.119782][ T5930] usb 3-1: New USB device found, idVendor=1d6b, idProduct=1101, bcdDevice= 0.40 [ 131.129797][ T5930] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.137823][ T5930] usb 3-1: Product: syz [ 131.142514][ T5930] usb 3-1: Manufacturer: ࠊ [ 131.147143][ T5930] usb 3-1: SerialNumber: syz [ 131.288773][ T5939] IPVS: starting estimator thread 0... [ 132.376322][ T6398] IPVS: using max 25 ests per chain, 60000 per kthread [ 133.076086][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.082907][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.261955][ T5937] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 133.477874][ T5937] usb 1-1: config 0 has no interfaces? [ 133.503824][ T5937] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 133.515191][ T5937] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.525943][ T5937] usb 1-1: Product: syz [ 133.532905][ T5937] usb 1-1: Manufacturer: syz [ 133.537630][ T5937] usb 1-1: SerialNumber: syz [ 133.633597][ T5937] usb 1-1: config 0 descriptor?? [ 133.908452][ T5837] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 134.043879][ T5930] usb 3-1: 0:2 : does not exist [ 134.658608][ T5837] usb 2-1: Using ep0 maxpacket: 8 [ 134.665379][ T5930] usb 3-1: USB disconnect, device number 5 [ 134.673728][ T5837] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 134.682712][ T5837] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 134.707504][ T5837] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 134.777637][ T5837] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 134.803666][ T5916] udevd[5916]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 134.872384][ T5837] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 134.961922][ T5837] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 134.999983][ T5837] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.102790][ T6419] loop6: detected capacity change from 0 to 2560 [ 135.141971][ T6419] Buffer I/O error on dev loop6, logical block 0, async page read [ 135.249559][ T6419] Buffer I/O error on dev loop6, logical block 0, async page read [ 135.273380][ T6419] Buffer I/O error on dev loop6, logical block 0, async page read [ 135.299256][ T6419] Buffer I/O error on dev loop6, logical block 0, async page read [ 135.347180][ T6419] Buffer I/O error on dev loop6, logical block 0, async page read [ 135.364005][ T6419] Buffer I/O error on dev loop6, logical block 0, async page read [ 135.431763][ T6419] Buffer I/O error on dev loop6, logical block 0, async page read [ 135.450191][ T5837] usb 2-1: usb_control_msg returned -32 [ 135.458595][ T5914] vhci_hcd: vhci_device speed not set [ 135.471804][ T5837] usbtmc 2-1:16.0: can't read capabilities [ 135.493013][ T6419] Buffer I/O error on dev loop6, logical block 0, async page read [ 135.514434][ T6419] ldm_validate_partition_table(): Disk read failed. [ 135.522080][ T6419] Buffer I/O error on dev loop6, logical block 0, async page read [ 135.544220][ T6419] Buffer I/O error on dev loop6, logical block 0, async page read [ 135.554427][ T6419] Dev loop6: unable to read RDB block 0 [ 135.562647][ T6419] loop6: unable to read partition table [ 135.569678][ T6419] loop_reread_partitions: partition scan of loop6 (3 ) failed (rc=-5) [ 135.806585][ T5937] usb 1-1: USB disconnect, device number 13 [ 135.953562][ T6438] loop6: detected capacity change from 0 to 63 [ 135.970076][ T6434] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 136.114491][ T6434] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 138.012986][ T6447] input: syz0 as /devices/virtual/input/input11 [ 138.081525][ T5937] IPVS: starting estimator thread 0... [ 138.178221][ T6449] IPVS: using max 25 ests per chain, 60000 per kthread [ 138.205642][ T6446] delete_channel: no stack [ 138.345697][ T5914] usb 2-1: USB disconnect, device number 8 [ 138.396265][ T6454] netlink: 28 bytes leftover after parsing attributes in process `syz.2.110'. [ 138.783170][ T6461] bridge0: entered promiscuous mode [ 138.829942][ T6461] bond0: entered promiscuous mode [ 138.855461][ T6461] bond_slave_0: entered promiscuous mode [ 138.886611][ T6461] bond_slave_1: entered promiscuous mode [ 138.900356][ T6461] hsr1: entered allmulticast mode [ 138.905479][ T6461] bridge0: entered allmulticast mode [ 138.910877][ T6461] bond0: entered allmulticast mode [ 138.916080][ T6461] bond_slave_0: entered allmulticast mode [ 138.921960][ T6461] bond_slave_1: entered allmulticast mode [ 139.098198][ T5940] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 139.118480][ T3420] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 139.348296][ T3420] usb 3-1: Using ep0 maxpacket: 8 [ 139.353907][ T5940] usb 4-1: no configurations [ 139.359132][ T5940] usb 4-1: can't read configurations, error -22 [ 139.366175][ T3420] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 139.375751][ T3420] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.399722][ T3420] usb 3-1: config 0 descriptor?? [ 139.502236][ T5940] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 139.609308][ T3420] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 139.639044][ T3420] asix 3-1:0.0: probe with driver asix failed with error -32 [ 139.700878][ T3420] usb 3-1: USB disconnect, device number 6 [ 139.708765][ T5940] usb 4-1: no configurations [ 139.713495][ T5940] usb 4-1: can't read configurations, error -22 [ 139.731594][ T5940] usb usb4-port1: attempt power cycle [ 140.088450][ T5940] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 140.122805][ T5940] usb 4-1: no configurations [ 140.129214][ T5940] usb 4-1: can't read configurations, error -22 [ 140.257112][ T6481] cgroup: fork rejected by pids controller in /syz1 [ 140.353476][ T5940] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 140.389905][ T5940] usb 4-1: no configurations [ 140.394569][ T5940] usb 4-1: can't read configurations, error -22 [ 140.423587][ T5940] usb usb4-port1: unable to enumerate USB device [ 140.740851][ T6589] batadv_slave_0: entered promiscuous mode [ 140.763296][ T6589] batadv_slave_0: left promiscuous mode [ 141.380265][ T6593] input: syz0 as /devices/virtual/input/input12 [ 141.431240][ T6592] delete_channel: no stack [ 141.505410][ T3420] IPVS: starting estimator thread 0... [ 141.631758][ T6596] IPVS: using max 24 ests per chain, 57600 per kthread [ 141.668815][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.881862][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.159852][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.342187][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.449762][ T6604] netlink: 28 bytes leftover after parsing attributes in process `syz.3.125'. [ 142.926211][ T12] bridge_slave_1: left allmulticast mode [ 143.008632][ T12] bridge_slave_1: left promiscuous mode [ 143.015473][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.158527][ T12] bridge_slave_0: left allmulticast mode [ 143.233085][ T12] bridge_slave_0: left promiscuous mode [ 143.253637][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.279296][ T5847] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 143.575605][ T5847] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 143.609232][ T5847] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 143.719899][ T5847] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 143.740123][ T5847] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 144.833040][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 144.887487][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 144.933397][ T12] bond0 (unregistering): Released all slaves [ 145.399033][ T3420] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 145.559545][ T3420] usb 4-1: Using ep0 maxpacket: 32 [ 145.581618][ T3420] usb 4-1: no configurations [ 145.599246][ T3420] usb 4-1: can't read configurations, error -22 [ 145.849624][ T5858] Bluetooth: hci2: command tx timeout [ 145.855680][ T3420] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 146.144042][ T12] hsr_slave_0: left promiscuous mode [ 146.154740][ T12] hsr_slave_1: left promiscuous mode [ 146.161592][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 146.188232][ T3420] usb 4-1: Using ep0 maxpacket: 32 [ 146.194744][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 146.204186][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 146.204549][ T3420] usb 4-1: no configurations [ 146.220640][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 146.229327][ T3420] usb 4-1: can't read configurations, error -22 [ 146.237053][ T3420] usb usb4-port1: attempt power cycle [ 146.265511][ T12] veth1_macvtap: left promiscuous mode [ 146.278299][ T5846] usb 1-1: new low-speed USB device number 14 using dummy_hcd [ 146.297644][ T12] veth0_macvtap: left promiscuous mode [ 146.346832][ T12] veth1_vlan: left promiscuous mode [ 146.364849][ T12] veth0_vlan: left promiscuous mode [ 146.456060][ T5846] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 146.471991][ T5846] usb 1-1: config 0 has no interface number 0 [ 146.501392][ T5846] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 146.529004][ T5846] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 146.555937][ T5846] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 146.555975][ T5846] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 146.556003][ T5846] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 146.556029][ T5846] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 146.556075][ T5846] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 146.556100][ T5846] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.563666][ T5846] usb 1-1: config 0 descriptor?? [ 146.564624][ T6656] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 146.564777][ T6656] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 146.598633][ T3420] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 146.624959][ T3420] usb 4-1: Using ep0 maxpacket: 32 [ 146.759461][ T5846] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 146.889848][ T3420] usb 4-1: no configurations [ 146.920773][ T3420] usb 4-1: can't read configurations, error -22 [ 147.062884][ T3420] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 147.102764][ T3420] usb 4-1: Using ep0 maxpacket: 32 [ 147.123868][ T3420] usb 4-1: no configurations [ 147.141736][ T3420] usb 4-1: can't read configurations, error -22 [ 147.162173][ T3420] usb usb4-port1: unable to enumerate USB device [ 147.523700][ T12] team0 (unregistering): Port device team_slave_1 removed [ 147.591986][ T12] team0 (unregistering): Port device team_slave_0 removed [ 147.929872][ T5858] Bluetooth: hci2: command tx timeout [ 148.235818][ T6686] input: syz0 as /devices/virtual/input/input14 [ 148.301800][ T6685] delete_channel: no stack [ 148.418131][ T5940] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 148.598986][ T6654] syz_tun: refused to change device tx_queue_len [ 148.605417][ T6654] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 148.646704][ T5940] usb 4-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 148.701707][ T5940] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.735428][ T5940] usb 4-1: config 0 descriptor?? [ 148.837596][ T5940] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 148.855657][ T3420] usb 1-1: USB disconnect, device number 14 [ 148.887991][ T3420] ldusb 1-1:0.55: LD USB Device #0 now disconnected [ 149.034812][ T6623] chnl_net:caif_netlink_parms(): no params data found [ 149.388607][ T6700] netlink: 8 bytes leftover after parsing attributes in process `syz.0.143'. [ 149.642562][ T12] IPVS: stop unused estimator thread 0... [ 149.746163][ T6623] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.791591][ T6623] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.828834][ T6623] bridge_slave_0: entered allmulticast mode [ 149.840681][ T6623] bridge_slave_0: entered promiscuous mode [ 149.889587][ T6623] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.896794][ T6623] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.908378][ T5846] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 149.913003][ T6709] netlink: 28 bytes leftover after parsing attributes in process `syz.4.145'. [ 149.943260][ T6623] bridge_slave_1: entered allmulticast mode [ 149.958998][ T6623] bridge_slave_1: entered promiscuous mode [ 150.008398][ T5858] Bluetooth: hci2: command tx timeout [ 150.088874][ T5846] usb 1-1: Using ep0 maxpacket: 32 [ 150.099403][ T5846] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 150.123587][ T5846] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 150.134670][ T5846] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 150.143903][ T5846] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.202962][ T5846] usb 1-1: config 0 descriptor?? [ 150.216582][ T6623] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 150.350470][ T6623] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 150.605853][ T6623] team0: Port device team_slave_0 added [ 150.626313][ T6623] team0: Port device team_slave_1 added [ 150.715216][ T5846] koneplus 0003:1E7D:2D51.0006: unknown main item tag 0x0 [ 150.726591][ T5846] koneplus 0003:1E7D:2D51.0006: unknown main item tag 0x0 [ 150.732696][ T6623] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 150.734667][ T5846] koneplus 0003:1E7D:2D51.0006: unknown main item tag 0x0 [ 150.749340][ T5846] koneplus 0003:1E7D:2D51.0006: unknown main item tag 0x0 [ 150.756554][ T5846] koneplus 0003:1E7D:2D51.0006: unknown main item tag 0x0 [ 150.766735][ T6623] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 150.788656][ T5846] koneplus 0003:1E7D:2D51.0006: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.0-1/input0 [ 150.818207][ T5914] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 150.836231][ T6623] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 150.853831][ T6623] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 150.861242][ T6623] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 150.912045][ T5837] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 150.917160][ T5940] usb 4-1: USB disconnect, device number 22 [ 150.929590][ T5846] koneplus 0003:1E7D:2D51.0006: couldn't init struct koneplus_device [ 150.937778][ T5846] koneplus 0003:1E7D:2D51.0006: couldn't install mouse [ 150.946485][ T6623] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 150.992335][ T5846] koneplus 0003:1E7D:2D51.0006: probe with driver koneplus failed with error -71 [ 150.998997][ T5914] usb 5-1: Using ep0 maxpacket: 32 [ 151.022727][ T5914] usb 5-1: config 0 interface 0 has no altsetting 0 [ 151.039298][ T5914] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 151.048553][ T5846] usb 1-1: USB disconnect, device number 15 [ 151.065191][ T5914] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.073540][ T5914] usb 5-1: Product: syz [ 151.078272][ T5914] usb 5-1: Manufacturer: syz [ 151.082982][ T5914] usb 5-1: SerialNumber: syz [ 151.093185][ T5837] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 151.115145][ T5837] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 151.132743][ T5837] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.143621][ T5914] usb 5-1: config 0 descriptor?? [ 151.153860][ T5837] usb 3-1: Product: syz [ 151.162507][ T5837] usb 3-1: Manufacturer: syz [ 151.171237][ T5837] usb 3-1: SerialNumber: syz [ 151.177291][ T5914] gs_usb 5-1:0.0: Required endpoints not found [ 151.187718][ T5837] usb 3-1: config 0 descriptor?? [ 151.223282][ T6623] hsr_slave_0: entered promiscuous mode [ 151.231317][ T6623] hsr_slave_1: entered promiscuous mode [ 151.237705][ T6623] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 151.246036][ T6623] Cannot create hsr debugfs directory [ 151.371384][ T6719] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 151.395422][ T6719] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 151.412255][ T6722] netlink: 4 bytes leftover after parsing attributes in process `syz.2.148'. [ 151.445499][ T5846] usb 5-1: USB disconnect, device number 5 [ 151.693306][ T5837] usb 3-1: USB disconnect, device number 7 [ 151.880831][ T6741] input: syz0 as /devices/virtual/input/input15 [ 151.944857][ T6739] delete_channel: no stack [ 152.089044][ T5858] Bluetooth: hci2: command tx timeout [ 152.131943][ T6751] loop6: detected capacity change from 0 to 7 [ 152.156679][ T6751] Dev loop6: unable to read RDB block 7 [ 152.183247][ T6751] loop6: unable to read partition table [ 152.210585][ T6751] loop6: partition table beyond EOD, truncated [ 152.246140][ T6751] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 153.566011][ T6791] input: syz0 as /devices/virtual/input/input16 [ 153.617626][ T6788] delete_channel: no stack [ 153.791872][ T6623] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 153.833540][ T6623] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 153.879527][ T5846] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 153.957434][ T6623] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 154.069309][ T6623] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 154.070266][ T5846] usb 3-1: config 0 has no interfaces? [ 154.086074][ T5846] usb 3-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 154.102536][ T5846] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.120099][ T5846] usb 3-1: Product: syz [ 154.132209][ T5846] usb 3-1: Manufacturer: syz [ 154.142836][ T5846] usb 3-1: SerialNumber: syz [ 154.217481][ T5846] usb 3-1: config 0 descriptor?? [ 154.962312][ T6623] 8021q: adding VLAN 0 to HW filter on device bond0 [ 155.081673][ T6623] 8021q: adding VLAN 0 to HW filter on device team0 [ 155.111580][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.118766][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 155.195502][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.201951][ T6815] netlink: 48 bytes leftover after parsing attributes in process `syz.4.167'. [ 155.203666][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 155.703991][ T6623] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 156.276346][ T6623] veth0_vlan: entered promiscuous mode [ 156.377336][ T6623] veth1_vlan: entered promiscuous mode [ 156.507059][ T6837] warning: `syz.3.172' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 156.533518][ T6839] netlink: 40 bytes leftover after parsing attributes in process `syz.4.171'. [ 156.611897][ T6623] veth0_macvtap: entered promiscuous mode [ 156.617376][ T5846] usb 3-1: USB disconnect, device number 8 [ 156.743976][ T6843] input: syz0 as /devices/virtual/input/input17 [ 156.833299][ T6842] delete_channel: no stack [ 156.982481][ T6623] veth1_macvtap: entered promiscuous mode [ 157.235884][ T6623] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 157.273596][ T6623] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 157.285786][ T6865] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 157.350601][ T6623] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.360420][ T5914] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 157.393089][ T6623] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.412714][ T6623] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.425121][ T6623] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.479125][ T5846] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 157.528457][ T5914] usb 1-1: Using ep0 maxpacket: 32 [ 157.535721][ T5914] usb 1-1: New USB device found, idVendor=2040, idProduct=c602, bcdDevice= 1.8e [ 157.561478][ T5914] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.648228][ T5846] usb 5-1: Using ep0 maxpacket: 8 [ 157.662542][ T5846] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 157.692603][ T5846] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.701981][ T5846] usb 5-1: Product: syz [ 157.706375][ T5846] usb 5-1: Manufacturer: syz [ 157.719627][ T5914] usb 1-1: config 0 descriptor?? [ 157.731212][ T5846] usb 5-1: SerialNumber: syz [ 157.762269][ T5846] usb 5-1: config 0 descriptor?? [ 157.778965][ T5914] usb 1-1: dvb_usb_v2: found a 'HCW 126xxx' in warm state [ 157.780143][ T5846] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 157.807173][ T5846] usb 5-1: setting power ON [ 157.813325][ T5846] dvb-usb: bulk message failed: -22 (2/0) [ 157.824229][ T5846] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 157.841141][ T5846] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 157.863780][ T5914] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 157.878057][ T5846] usb 5-1: media controller created [ 157.902710][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 157.919047][ T5914] dvbdev: DVB: registering new adapter (HCW 126xxx) [ 157.937313][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 157.942102][ T5914] usb 1-1: media controller created [ 157.975449][ T6863] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 158.017989][ T6863] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 158.022642][ T5846] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 158.084918][ T6863] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000019: 0000 [#1] SMP KASAN PTI [ 158.096877][ T6863] KASAN: null-ptr-deref in range [0x00000000000000c8-0x00000000000000cf] [ 158.105325][ T6863] CPU: 0 UID: 0 PID: 6863 Comm: syz.4.179 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 158.115485][ T6863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 158.125553][ T6863] RIP: 0010:__mutex_lock+0x138/0xe80 [ 158.130881][ T6863] Code: e0 12 ab 99 48 c1 e8 03 42 0f b6 04 28 84 c0 0f 85 0d 0c 00 00 83 3d c6 0d 3c 0e 00 75 23 49 8d 7c 24 60 48 89 f8 48 c1 e8 03 <42> 80 3c 28 00 74 05 e8 9c 33 b3 f6 4d 39 64 24 60 0f 85 7b 0b 00 [ 158.135448][ T5846] usb 5-1: selecting invalid altsetting 6 [ 158.150515][ T6863] RSP: 0018:ffffc9000bd67360 EFLAGS: 00010202 [ 158.150543][ T6863] RAX: 0000000000000019 RBX: 0000000000000000 RCX: ffffffff99ab1203 [ 158.150557][ T6863] RDX: ffff888021753c00 RSI: ffffffff8db8406b RDI: 00000000000000c8 [ 158.150571][ T6863] RBP: ffffc9000bd674f8 R08: ffffc9000bd67467 R09: 0000000000000000 [ 158.150585][ T6863] R10: ffffc9000bd67440 R11: fffff520017ace8d R12: 0000000000000068 [ 158.150600][ T6863] R13: dffffc0000000000 R14: ffff888048d7f958 R15: 0000000000000000 [ 158.150614][ T6863] FS: 00007ff1816546c0(0000) GS:ffff888125c23000(0000) knlGS:0000000000000000 [ 158.150630][ T6863] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 158.150644][ T6863] CR2: 00007fa91ad0a368 CR3: 0000000028e0a000 CR4: 00000000003526f0 [ 158.150661][ T6863] Call Trace: [ 158.150670][ T6863] [ 158.150681][ T6863] ? __mutex_lock+0x330/0xe80 [ 158.150713][ T6863] ? dvb_usbv2_generic_write+0x26/0x60 [ 158.150743][ T6863] ? __pfx___mutex_lock+0x10/0x10 [ 158.150766][ T6863] ? __pfx___mutex_lock+0x10/0x10 [ 158.150792][ T6863] ? __mutex_lock+0x330/0xe80 [ 158.150818][ T6863] dvb_usbv2_generic_write+0x26/0x60 [ 158.150845][ T6863] mxl111sf_ctrl_msg+0x16a/0x2e0 [ 158.150880][ T6863] mxl111sf_write_reg+0xa0/0x180 [ 158.150909][ T6863] ? __pfx_mxl111sf_write_reg+0x10/0x10 [ 158.150944][ T6863] mxl111sf_i2c_xfer+0x461/0x4f00 [ 158.150973][ T6863] ? __lock_acquire+0xab9/0xd20 [ 158.151001][ T6863] ? __pfx_mxl111sf_i2c_xfer+0x10/0x10 [ 158.293466][ T6863] ? __lock_acquire+0xab9/0xd20 [ 158.298777][ T6863] ? __bfs+0x154/0x2a0 [ 158.302865][ T6863] ? __pfx_hlock_conflict+0x10/0x10 [ 158.308090][ T6863] ? check_path+0x21/0x40 [ 158.312472][ T6863] ? check_noncircular+0xe0/0x160 [ 158.317519][ T6863] ? lockdep_unlock+0x89/0x120 [ 158.322296][ T6863] ? validate_chain+0x897/0x2140 [ 158.327263][ T6863] ? __lock_acquire+0xab9/0xd20 [ 158.332130][ T6863] ? do_raw_spin_lock+0x121/0x290 [ 158.337175][ T6863] __i2c_transfer+0x874/0x2170 [ 158.341953][ T6863] ? lockdep_hardirqs_on+0x9c/0x150 [ 158.347164][ T6863] ? __pfx___i2c_transfer+0x10/0x10 [ 158.352371][ T6863] ? rt_mutex_lock_nested+0x15e/0x1e0 [ 158.357769][ T6863] ? i2c_transfer+0x11d/0x3a0 [ 158.362461][ T6863] i2c_transfer+0x25b/0x3a0 [ 158.366982][ T6863] ? __pfx_i2c_transfer+0x10/0x10 [ 158.372028][ T6863] ? _copy_from_user+0x94/0xb0 [ 158.376813][ T6863] i2cdev_ioctl_rdwr+0x460/0x740 [ 158.381769][ T6863] i2cdev_ioctl+0x64b/0x7f0 [ 158.386284][ T6863] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 158.391322][ T6863] ? __fget_files+0x3a0/0x420 [ 158.396012][ T6863] ? __fget_files+0x2a/0x420 [ 158.400614][ T6863] ? bpf_lsm_file_ioctl+0x9/0x20 [ 158.405738][ T6863] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 158.410773][ T6863] __se_sys_ioctl+0xfc/0x170 [ 158.415383][ T6863] do_syscall_64+0xfa/0x3b0 [ 158.419907][ T6863] ? lockdep_hardirqs_on+0x9c/0x150 [ 158.425113][ T6863] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.431190][ T6863] ? clear_bhb_loop+0x60/0xb0 [ 158.435882][ T6863] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.441784][ T6863] RIP: 0033:0x7ff18078e9a9 [ 158.446222][ T6863] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 158.465839][ T6863] RSP: 002b:00007ff181654038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 158.474266][ T6863] RAX: ffffffffffffffda RBX: 00007ff1809b5fa0 RCX: 00007ff18078e9a9 [ 158.482251][ T6863] RDX: 0000200000000040 RSI: 0000000000000707 RDI: 0000000000000005 [ 158.490233][ T6863] RBP: 00007ff180810d69 R08: 0000000000000000 R09: 0000000000000000 [ 158.498214][ T6863] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 158.506197][ T6863] R13: 0000000000000000 R14: 00007ff1809b5fa0 R15: 00007ff180adfa28 [ 158.514185][ T6863] [ 158.517215][ T6863] Modules linked in: [ 158.521232][ C0] vkms_vblank_simulate: vblank timer overrun [ 158.527792][ T6863] ---[ end trace 0000000000000000 ]--- [ 158.532153][ T5846] usb 5-1: digital interface selection failed (-22) [ 158.539944][ T5846] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 158.561662][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 158.583248][ T5914] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 158.587210][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 158.628692][ T5846] usb 5-1: setting power OFF [ 158.638537][ T5846] dvb-usb: bulk message failed: -22 (2/0) [ 158.645553][ T5846] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 158.664653][ T5846] (NULL device *): no alternate interface [ 158.708630][ T6871] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 158.813803][ T5914] usb 1-1: selecting invalid altsetting 1 [ 158.868438][ T5846] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 158.878267][ T5914] set interface failed [ 158.898123][ T6863] RIP: 0010:__mutex_lock+0x138/0xe80 [ 158.938330][ T6863] Code: e0 12 ab 99 48 c1 e8 03 42 0f b6 04 28 84 c0 0f 85 0d 0c 00 00 83 3d c6 0d 3c 0e 00 75 23 49 8d 7c 24 60 48 89 f8 48 c1 e8 03 <42> 80 3c 28 00 74 05 e8 9c 33 b3 f6 4d 39 64 24 60 0f 85 7b 0b 00 [ 159.079974][ T6871] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 159.088212][ T6863] RSP: 0018:ffffc9000bd67360 EFLAGS: 00010202 [ 159.094343][ T6863] RAX: 0000000000000019 RBX: 0000000000000000 RCX: ffffffff99ab1203 [ 159.104324][ T6863] RDX: ffff888021753c00 RSI: ffffffff8db8406b RDI: 00000000000000c8 [ 159.131315][ T6863] RBP: ffffc9000bd674f8 R08: ffffc9000bd67467 R09: 0000000000000000 [ 159.148155][ T6863] R10: ffffc9000bd67440 R11: fffff520017ace8d R12: 0000000000000068 [ 159.156194][ T6863] R13: dffffc0000000000 R14: ffff888048d7f958 R15: 0000000000000000 [ 159.189729][ T6863] FS: 00007ff1816546c0(0000) GS:ffff888125d23000(0000) knlGS:0000000000000000 [ 159.216468][ T6863] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 159.224725][ T6863] CR2: 0000200000404030 CR3: 0000000028e0a000 CR4: 00000000003526f0 [ 159.233420][ T6863] Kernel panic - not syncing: Fatal exception [ 159.239830][ T6863] Kernel Offset: disabled [ 159.244163][ T6863] Rebooting in 86400 seconds..