last executing test programs: 4.517066602s ago: executing program 3 (id=61): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) close(0x3) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f00000004c0)="b0", 0x1, 0x80, &(0x7f0000000240)={0xa, 0x4e23, 0x7, @loopback, 0x4}, 0x1c) read(r0, &(0x7f0000000140)=""/211, 0xd3) 4.201265791s ago: executing program 3 (id=65): r0 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r1 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8923, &(0x7f0000000000)={'vlan0\x00', @local}) preadv(r0, &(0x7f0000001900)=[{&(0x7f0000000780)=""/4096, 0x1000}, {0x0}], 0x2, 0xfffffffa, 0x4) 2.841844029s ago: executing program 3 (id=77): r0 = syz_usb_connect$hid(0x3, 0x87, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x403, 0x6030, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x2}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x2, {[@main=@item_012={0x1, 0x0, 0x0, ')'}]}}, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x84, &(0x7f00000004c0)={0x0, 0x14, 0xd, "5e6424818327b2369deca65eb2"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\x00M'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.691868272s ago: executing program 0 (id=79): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0x82, &(0x7f0000000680)={0x2, 0x0, 0x4, 0x3}, &(0x7f0000000280)=0x20) 2.572003713s ago: executing program 0 (id=81): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4, 0x0, @dev={0xfe, 0x80, '\x00', 0x1d}, 0xf}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000340), 0x3) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000300)=@gcm_128={{0x303}, "fc674d000000f8f7", "c5991ee20139b401046a89606ffcf92e", "2c5be7c6", "a0ca05c0707e52f4"}, 0x28) 2.466183027s ago: executing program 0 (id=82): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x1}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r2, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, 0x0, 0x0) bind$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @mcast1, 0x5}, 0x1c) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000000480)={0xa, 0x4e20, 0x7f, @mcast1, 0x8}, 0x1c) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000000000)={0xa, 0xe20, 0x0, @empty}, 0x1c) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000080)=0x5, 0x4) bind$inet6(r7, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r8 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r8, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) r9 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r9, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x2}, 0x1c) r10 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r10, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r10, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r11 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r11, &(0x7f0000000040)={0xa, 0xe20, 0x108000, @empty, 0x6}, 0x1c) 2.354096807s ago: executing program 0 (id=83): syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f00000005c0)=ANY=[], 0x1e) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000000, 0x80010, 0xffffffffffffffff, 0x10000000) mq_open(0x0, 0x800, 0x1b4, &(0x7f0000000340)={0x7, 0x0, 0xffffffffffffffff, 0x7}) syz_80211_inject_frame(&(0x7f0000000080), &(0x7f0000000140)=@mgmt_frame=@beacon={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x4}, @device_a, @device_b, @random="f8de1bba6549", {0x4}, @value=@ver_80211n={0x0, 0x7, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1}}, 0x6, @default, 0xc125, @val={0x0, 0x17, @random="a3e0ca3aea8f852a3907fb5add237c8a0af466bf7af4c2"}, @val={0x1, 0x8, [{0x79}, {0x1b, 0x1}, {0x1}, {0x24, 0x1}, {0x1b}, {0x3f, 0x1}, {0x3e}, {0x60}]}, @val={0x3, 0x1, 0xa5}, @void, @val={0x6, 0x2}, @void, @void, @val={0x2a, 0x1, {0x1, 0x1}}, @val={0x3c, 0x4, {0x1, 0x5, 0x38}}, @val={0x2d, 0x1a, {0x800, 0x0, 0x4, 0x0, {0x3, 0xa, 0x0, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1}, 0x400, 0x806, 0xe5}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x0, 0xffffffffffffffff, 0x7, 0x60}}, @val={0x76, 0x6, {0x40, 0x1, 0x1d, 0x8}}, [{0xdd, 0x13, "9d66e3f567f953eb03f8574d32c271d70a3b46"}, {0xdd, 0x6, "3309fb14184d"}]}, 0xad) syz_80211_inject_frame(0x0, 0x0, 0x20) 2.13620381s ago: executing program 2 (id=85): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r0, &(0x7f00000000c0), 0x10) sendto$l2tp(r0, &(0x7f0000000040)="e5786a0d000000000000c83b", 0xc, 0x0, &(0x7f0000000100)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000000)=0x4f1b, 0x4) recvfrom$l2tp(r0, 0x0, 0x0, 0x10162, 0x0, 0x0) 2.050455905s ago: executing program 2 (id=86): capset(0x0, &(0x7f00000000c0)={0x200000, 0x200000, 0x7}) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r2, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x0) 1.957063306s ago: executing program 2 (id=87): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000) write$char_usb(r1, &(0x7f00000000c0)='V', 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 1.534551822s ago: executing program 0 (id=88): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0xf, {[@main=@item_4={0x3, 0x0, 0x8, '\t\x00'}, @local=@item_4={0x3, 0x2, 0x0, "112000"}, @main=@item_4={0x3, 0x0, 0xb, "7488dffc"}]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x4802, 0x0) 803.507835ms ago: executing program 1 (id=89): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x40, r1, 0x1, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x24, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="ad9d51d2136ea5b8a6be1e631253a989"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "7009938e03f1d20b"}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x8801}, 0x4814) 675.638843ms ago: executing program 1 (id=91): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000380)={@val={0x8, 0x800}, @val={0x2, 0x3, 0x9, 0x68, 0x8000, 0x8}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1b, 0x1c, 0x66, 0x0, 0x40, 0x11, 0x0, @remote, @multicast1}, {0x4e22, 0x4e22, 0x8}}}, 0x2a) 477.220632ms ago: executing program 3 (id=92): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x1}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r2, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, 0x0, 0x0) bind$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @mcast1, 0x5}, 0x1c) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000000480)={0xa, 0x4e20, 0x7f, @mcast1, 0x8}, 0x1c) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000000000)={0xa, 0xe20, 0x0, @empty}, 0x1c) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000080)=0x5, 0x4) bind$inet6(r7, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r8 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r8, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) r9 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r9, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x2}, 0x1c) r10 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r10, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r10, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r11 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r11, &(0x7f0000000040)={0xa, 0xe20, 0x108000, @empty, 0x6}, 0x1c) 390.495649ms ago: executing program 1 (id=93): sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000040)={0x10, 0x1f, 0x1}, 0x10}], 0x1, 0x0, 0x0, 0x20000080}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000002040)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000a00)=""/178, 0xb2}], 0x1}, 0x2}], 0x1, 0x40000022, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4089, 0x197}, {&(0x7f0000000400)=""/106, 0x1c}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0xbe8}, {&(0x7f0000000540)=""/158, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 273.71807ms ago: executing program 1 (id=94): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000300)={0x0, 0x7}, &(0x7f0000000400)=0x8) 154.739258ms ago: executing program 1 (id=95): r0 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x180862) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/image_size', 0x82802, 0xcd) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={r1, 0x0, {0x0, 0x0, 0x0, 0x7, 0x4010000000000ffd, 0x0, 0x0, 0x19, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "a5b07dcc14180222d4ae002e43b761b7ad330000000000000000000600", [0xfffffffffffffce8, 0x3]}}) io_setup(0x1, &(0x7f00000016c0)=0x0) io_submit(r2, 0x16, &(0x7f0000001640)=[&(0x7f0000000000)={0x4000000, 0x0, 0x1f, 0x1, 0x4, r0, &(0x7f0000000280)='a', 0x1, 0x5}]) 153.952631ms ago: executing program 3 (id=96): r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x2, 0x822f01) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000003c0)={0x54, 0x0, 0x0, {0xffff, 0x1}, {0x4d, 0xffff}, @cond=[{0x7, 0x5388, 0x8, 0x800, 0xcb, 0xfff}, {0x0, 0x5, 0x201, 0x3, 0x6, 0x1}]}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000140)=[0x2, 0x9]) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) 1.499641ms ago: executing program 2 (id=97): syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f00000005c0)=ANY=[], 0x1e) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000000, 0x80010, 0xffffffffffffffff, 0x10000000) mq_open(0x0, 0x800, 0x1b4, &(0x7f0000000340)={0x7, 0x0, 0xffffffffffffffff, 0x7}) syz_80211_inject_frame(&(0x7f0000000080), &(0x7f0000000140)=@mgmt_frame=@beacon={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x4}, @device_a, @device_b, @random="f8de1bba6549", {0x4}, @value=@ver_80211n={0x0, 0x7, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1}}, 0x6, @default, 0xc125, @val={0x0, 0x17, @random="a3e0ca3aea8f852a3907fb5add237c8a0af466bf7af4c2"}, @val={0x1, 0x8, [{0x79}, {0x1b, 0x1}, {0x1}, {0x24, 0x1}, {0x1b}, {0x3f, 0x1}, {0x3e}, {0x60}]}, @val={0x3, 0x1, 0xa5}, @void, @val={0x6, 0x2}, @void, @void, @val={0x2a, 0x1, {0x1, 0x1}}, @val={0x3c, 0x4, {0x1, 0x5, 0x38}}, @val={0x2d, 0x1a, {0x800, 0x0, 0x4, 0x0, {0x3, 0xa, 0x0, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1}, 0x400, 0x806, 0xe5}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x0, 0xffffffffffffffff, 0x7, 0x60}}, @val={0x76, 0x6, {0x40, 0x1, 0x1d, 0x8}}, [{0xdd, 0x13, "9d66e3f567f953eb03f8574d32c271d70a3b46"}, {0xdd, 0x6, "3309fb14184d"}]}, 0xad) syz_80211_inject_frame(0x0, 0x0, 0x20) 0s ago: executing program 1 (id=105): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x1}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r2, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, 0x0, 0x0) bind$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @mcast1, 0x5}, 0x1c) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000000480)={0xa, 0x4e20, 0x7f, @mcast1, 0x8}, 0x1c) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000000000)={0xa, 0xe20, 0x0, @empty}, 0x1c) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000080)=0x5, 0x4) bind$inet6(r7, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r8 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r8, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) r9 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r9, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x2}, 0x1c) r10 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r10, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r10, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r11 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r11, &(0x7f0000000040)={0xa, 0xe20, 0x108000, @empty, 0x6}, 0x1c) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.116' (ED25519) to the list of known hosts. [ 83.932052][ T5822] cgroup: Unknown subsys name 'net' [ 84.003013][ T5822] cgroup: Unknown subsys name 'cpuset' [ 84.011701][ T5822] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 85.590653][ T5822] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 89.151703][ T5838] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 89.162467][ T5838] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 89.172951][ T5838] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 89.181380][ T5838] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 89.189317][ T5838] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 89.241639][ T5838] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 89.263344][ T5847] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 89.272099][ T5847] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 89.280709][ T5847] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 89.290509][ T5847] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 89.295051][ T5850] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 89.298571][ T5847] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 89.306565][ T5850] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 89.313439][ T5847] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 89.327541][ T5847] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 89.336833][ T5850] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 89.337326][ T5847] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 89.351396][ T5851] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 89.352384][ T5847] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 89.369199][ T5851] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 89.889892][ T5834] chnl_net:caif_netlink_parms(): no params data found [ 90.052438][ T5840] chnl_net:caif_netlink_parms(): no params data found [ 90.089129][ T5839] chnl_net:caif_netlink_parms(): no params data found [ 90.227508][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.234965][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.243703][ T5834] bridge_slave_0: entered allmulticast mode [ 90.251020][ T5834] bridge_slave_0: entered promiscuous mode [ 90.259644][ T5841] chnl_net:caif_netlink_parms(): no params data found [ 90.290845][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.298242][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.305613][ T5834] bridge_slave_1: entered allmulticast mode [ 90.313220][ T5834] bridge_slave_1: entered promiscuous mode [ 90.405908][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.414058][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.421960][ T5840] bridge_slave_0: entered allmulticast mode [ 90.429494][ T5840] bridge_slave_0: entered promiscuous mode [ 90.452012][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.474321][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.482731][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.490358][ T5840] bridge_slave_1: entered allmulticast mode [ 90.497961][ T5840] bridge_slave_1: entered promiscuous mode [ 90.505674][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.513157][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.520730][ T5839] bridge_slave_0: entered allmulticast mode [ 90.528691][ T5839] bridge_slave_0: entered promiscuous mode [ 90.539318][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.577822][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.585698][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.593505][ T5839] bridge_slave_1: entered allmulticast mode [ 90.601404][ T5839] bridge_slave_1: entered promiscuous mode [ 90.659274][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.671105][ T5834] team0: Port device team_slave_0 added [ 90.712670][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.725142][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.738879][ T5834] team0: Port device team_slave_1 added [ 90.744987][ T5841] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.752557][ T5841] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.759939][ T5841] bridge_slave_0: entered allmulticast mode [ 90.767500][ T5841] bridge_slave_0: entered promiscuous mode [ 90.778190][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.822045][ T5841] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.829749][ T5841] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.837422][ T5841] bridge_slave_1: entered allmulticast mode [ 90.844780][ T5841] bridge_slave_1: entered promiscuous mode [ 90.897234][ T5839] team0: Port device team_slave_0 added [ 90.905321][ T5840] team0: Port device team_slave_0 added [ 90.912458][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.920340][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.947646][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.973536][ T5839] team0: Port device team_slave_1 added [ 90.981781][ T5840] team0: Port device team_slave_1 added [ 90.988539][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.995505][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.022093][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.036472][ T5841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.079493][ T5841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.125792][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.133215][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.159660][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.183036][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.190472][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.216941][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.229823][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.237052][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.247361][ T5847] Bluetooth: hci0: command tx timeout [ 91.263738][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.265879][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.287988][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.314674][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.328473][ T5841] team0: Port device team_slave_0 added [ 91.375675][ T5841] team0: Port device team_slave_1 added [ 91.391115][ T5834] hsr_slave_0: entered promiscuous mode [ 91.397845][ T5834] hsr_slave_1: entered promiscuous mode [ 91.406381][ T5847] Bluetooth: hci1: command tx timeout [ 91.416715][ T5847] Bluetooth: hci2: command tx timeout [ 91.416765][ T5155] Bluetooth: hci3: command tx timeout [ 91.484463][ T5840] hsr_slave_0: entered promiscuous mode [ 91.491123][ T5840] hsr_slave_1: entered promiscuous mode [ 91.497720][ T5840] debugfs: 'hsr0' already exists in 'hsr' [ 91.503557][ T5840] Cannot create hsr debugfs directory [ 91.531896][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.539374][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.565670][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.578623][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.585590][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.612295][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.667409][ T5839] hsr_slave_0: entered promiscuous mode [ 91.673929][ T5839] hsr_slave_1: entered promiscuous mode [ 91.680409][ T5839] debugfs: 'hsr0' already exists in 'hsr' [ 91.686178][ T5839] Cannot create hsr debugfs directory [ 91.835849][ T5841] hsr_slave_0: entered promiscuous mode [ 91.842691][ T5841] hsr_slave_1: entered promiscuous mode [ 91.849662][ T5841] debugfs: 'hsr0' already exists in 'hsr' [ 91.855505][ T5841] Cannot create hsr debugfs directory [ 92.135796][ T29] cfg80211: failed to load regulatory.db [ 92.254742][ T5834] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 92.291391][ T5834] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 92.304427][ T5834] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 92.329715][ T5834] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 92.410434][ T5841] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 92.423512][ T5841] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 92.461256][ T5841] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 92.472358][ T5841] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 92.565390][ T5840] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 92.579804][ T5840] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 92.591924][ T5840] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 92.608049][ T5840] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 92.760873][ T5839] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 92.784100][ T5839] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 92.803160][ T5839] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 92.818793][ T5839] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 92.840868][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.884156][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.926168][ T3512] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.934117][ T3512] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.944954][ T3512] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.952119][ T3512] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.000895][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.065416][ T5841] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.095812][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.103230][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.122963][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.155308][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.162655][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.183289][ T5840] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.223705][ T3512] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.231083][ T3512] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.312995][ T3512] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.320231][ T3512] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.326653][ T5155] Bluetooth: hci0: command tx timeout [ 93.361499][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.401054][ T5841] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 93.413553][ T5841] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 93.459546][ T5839] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.487330][ T5155] Bluetooth: hci2: command tx timeout [ 93.492945][ T5155] Bluetooth: hci1: command tx timeout [ 93.498840][ T5847] Bluetooth: hci3: command tx timeout [ 93.515098][ T151] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.522577][ T151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.570428][ T151] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.577892][ T151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.614209][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.854222][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.873429][ T5834] veth0_vlan: entered promiscuous mode [ 93.933141][ T5834] veth1_vlan: entered promiscuous mode [ 94.054158][ T5841] veth0_vlan: entered promiscuous mode [ 94.072674][ T5834] veth0_macvtap: entered promiscuous mode [ 94.094961][ T5841] veth1_vlan: entered promiscuous mode [ 94.112651][ T5834] veth1_macvtap: entered promiscuous mode [ 94.143852][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.187932][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.218738][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.250858][ T5841] veth0_macvtap: entered promiscuous mode [ 94.271358][ T3512] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.290700][ T3512] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.300425][ T3512] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.325386][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.333216][ T3512] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.344094][ T5841] veth1_macvtap: entered promiscuous mode [ 94.398561][ T5840] veth0_vlan: entered promiscuous mode [ 94.431129][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.463593][ T5840] veth1_vlan: entered promiscuous mode [ 94.490337][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.503416][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.528337][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.539423][ T2960] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.566028][ T2960] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.575919][ T2960] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.601190][ T2960] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.641312][ T2960] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.652288][ T2960] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.682011][ T5839] veth0_vlan: entered promiscuous mode [ 94.737861][ T5840] veth0_macvtap: entered promiscuous mode [ 94.753518][ T5834] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 94.769153][ T5839] veth1_vlan: entered promiscuous mode [ 94.774065][ T5840] veth1_macvtap: entered promiscuous mode [ 94.831386][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.867579][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.942000][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.984370][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.993485][ T3512] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.029072][ T3512] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.050797][ T5839] veth0_macvtap: entered promiscuous mode [ 95.063713][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.088495][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.124211][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.138350][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.158475][ T5839] veth1_macvtap: entered promiscuous mode [ 95.294446][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.342922][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.382565][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.407292][ T5155] Bluetooth: hci0: command tx timeout [ 95.422898][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.434053][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.463252][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.478223][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.491011][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.568388][ T5155] Bluetooth: hci2: command tx timeout [ 95.573943][ T5155] Bluetooth: hci1: command tx timeout [ 95.581256][ T5847] Bluetooth: hci3: command tx timeout [ 95.618987][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.641235][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.723723][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.790532][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.936392][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.944639][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.956589][ T5940] syz.2.10 uses obsolete (PF_INET,SOCK_PACKET) [ 96.516100][ T5959] syzkaller1: entered promiscuous mode [ 96.526911][ T5938] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 96.549701][ T5959] syzkaller1: entered allmulticast mode [ 96.671812][ T5967] loop6: detected capacity change from 0 to 2896 [ 96.714742][ T5938] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 96.754901][ T5938] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.799250][ T5938] usb 2-1: Product: syz [ 96.803497][ T5938] usb 2-1: Manufacturer: syz [ 96.823957][ T5938] usb 2-1: SerialNumber: syz [ 97.046365][ T10] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 97.089918][ T5978] capability: warning: `syz.3.24' uses deprecated v2 capabilities in a way that may be insecure [ 97.206416][ T5835] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 97.207038][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 97.239347][ T10] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 97.254760][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.269521][ T10] usb 3-1: Product: syz [ 97.273779][ T10] usb 3-1: Manufacturer: syz [ 97.279008][ T10] usb 3-1: SerialNumber: syz [ 97.288629][ T10] usb 3-1: config 0 descriptor?? [ 97.296504][ T5938] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 97.310037][ T5938] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 97.392529][ T5835] usb 1-1: Using ep0 maxpacket: 32 [ 97.401241][ T5835] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 97.413291][ T5835] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 97.425788][ T5835] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 97.437744][ T5835] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 97.476586][ T5835] usb 1-1: config 0 interface 0 has no altsetting 0 [ 97.487652][ T5155] Bluetooth: hci0: command tx timeout [ 97.494791][ T5835] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 97.513009][ T5835] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 97.522406][ T5835] usb 1-1: Product: syz [ 97.523264][ T10] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 97.526802][ T5835] usb 1-1: Manufacturer: syz [ 97.541806][ T5835] usb 1-1: SerialNumber: syz [ 97.558004][ T5835] usb 1-1: config 0 descriptor?? [ 97.570983][ T5835] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 97.603321][ T5835] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 97.646400][ T5155] Bluetooth: hci1: command tx timeout [ 97.652060][ T5155] Bluetooth: hci3: command tx timeout [ 97.657738][ T5847] Bluetooth: hci2: command tx timeout [ 97.751185][ T5938] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 97.776374][ T5938] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 97.799926][ T5938] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 97.824085][ T5938] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 97.828436][ C0] ldusb 1-1:0.0: usb_submit_urb failed (-19) [ 97.841023][ T5938] usb 2-1: USB disconnect, device number 2 [ 97.867097][ T9] usb 1-1: USB disconnect, device number 2 [ 97.903123][ T9] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 98.127757][ T10] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 98.147363][ T10] usb 3-1: USB disconnect, device number 2 [ 98.316312][ T5938] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 98.478431][ T6002] netlink: 16 bytes leftover after parsing attributes in process `syz.1.35'. [ 98.499973][ T5938] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 98.524551][ T5938] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 98.536803][ T5938] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.557388][ T5938] usb 4-1: config 0 descriptor?? [ 98.564481][ T5996] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 98.784172][ T6012] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 99.034178][ T5938] elan 0003:04F3:0755.0001: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.3-1/input0 [ 99.119059][ T5835] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 99.208472][ T800] usb 4-1: USB disconnect, device number 2 [ 99.287861][ T5835] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 99.299230][ T5835] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 99.310713][ T5835] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 99.324437][ T5835] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 99.334902][ T5835] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.346298][ T5835] usb 2-1: config 0 descriptor?? [ 99.366366][ T10] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 99.387595][ T9] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 99.516556][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 99.523563][ T10] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 99.531936][ T10] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 99.543809][ T10] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 99.555015][ T10] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 99.571365][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 99.579905][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 99.590511][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 99.598663][ T10] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 99.608159][ T10] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 99.618428][ T10] usb 3-1: Product: syz [ 99.622710][ T10] usb 3-1: Manufacturer: syz [ 99.628036][ T10] usb 3-1: SerialNumber: syz [ 99.633022][ T9] usb 1-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 99.642212][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.654969][ T9] usb 1-1: Product: syz [ 99.660515][ T10] usb 3-1: config 0 descriptor?? [ 99.667555][ T9] usb 1-1: Manufacturer: syz [ 99.674559][ T10] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 99.684421][ T9] usb 1-1: SerialNumber: syz [ 99.692508][ T9] usb 1-1: config 0 descriptor?? [ 99.700595][ T10] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 99.714560][ T9] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 99.735684][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 99.746466][ T9] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 99.756077][ T9] usb 1-1: media controller created [ 99.785473][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 99.830130][ T5835] plantronics 0003:047F:FFFF.0002: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 99.919018][ T10] usb 3-1: USB disconnect, device number 3 [ 99.947195][ T10] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 99.955627][ T9] DVB: Unable to find symbol tda10046_attach() [ 99.965259][ T9] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 99.984234][ T9] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 100.014122][ T5835] usb 2-1: USB disconnect, device number 3 [ 100.756348][ T5835] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 100.803824][ T9] dvb_usb_m920x 1-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 100.820306][ T9] usb 1-1: USB disconnect, device number 3 [ 100.834159][ T5938] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 100.906470][ T5835] usb 3-1: Using ep0 maxpacket: 32 [ 100.914470][ T5835] usb 3-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 100.925507][ T5835] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.939054][ T5835] usb 3-1: config 0 descriptor?? [ 100.951086][ T5835] gspca_main: sunplus-2.14.0 probing 041e:400b [ 100.999144][ T5938] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 101.012018][ T5938] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 101.025229][ T5938] usb 2-1: New USB device found, idVendor=06cb, idProduct=73f6, bcdDevice= 0.00 [ 101.034425][ T5844] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 101.042192][ T5938] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.055384][ T5938] usb 2-1: config 0 descriptor?? [ 101.196432][ T5844] usb 4-1: Using ep0 maxpacket: 16 [ 101.206097][ T5844] usb 4-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 101.215679][ T5844] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.223958][ T5844] usb 4-1: Product: syz [ 101.228273][ T5844] usb 4-1: Manufacturer: syz [ 101.232965][ T5844] usb 4-1: SerialNumber: syz [ 101.240409][ T5844] usb 4-1: config 0 descriptor?? [ 101.503859][ T5938] itetech 0003:06CB:73F6.0003: hidraw0: USB HID v0.00 Device [HID 06cb:73f6] on usb-dummy_hcd.1-1/input0 [ 101.666299][ T5844] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 101.690736][ T5844] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 101.692615][ T9] usb 2-1: USB disconnect, device number 4 [ 101.716377][ T5844] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 101.724792][ T5844] usb 4-1: media controller created [ 101.792816][ T5844] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 101.874684][ T6048] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 101.878138][ T5844] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 101.912456][ T5844] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 101.962645][ T5835] gspca_sunplus: reg_w_riv err -71 [ 101.968330][ T5835] sunplus 3-1:0.0: probe with driver sunplus failed with error -71 [ 101.982386][ T5835] usb 3-1: USB disconnect, device number 4 [ 102.102148][ T800] usb 4-1: USB disconnect, device number 3 [ 102.134078][ T800] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 102.157500][ T9] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 102.306447][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 102.319911][ T9] usb 1-1: config 0 has an invalid interface number: 31 but max is 0 [ 102.333732][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 102.345203][ T9] usb 1-1: config 0 has no interface number 0 [ 102.354847][ T9] usb 1-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 102.364055][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.372668][ T9] usb 1-1: Product: syz [ 102.377088][ T9] usb 1-1: Manufacturer: syz [ 102.382469][ T9] usb 1-1: SerialNumber: syz [ 102.389547][ T9] usb 1-1: config 0 descriptor?? [ 102.397605][ T9] uvcvideo 1-1:0.31: probe with driver uvcvideo failed with error -22 [ 102.566350][ T5835] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 102.604910][ T800] usb 1-1: USB disconnect, device number 4 [ 102.726407][ T5835] usb 2-1: Using ep0 maxpacket: 8 [ 102.743998][ T5835] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 102.776450][ T5835] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 102.796397][ T5835] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 102.816357][ T5835] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 102.846389][ T5835] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 102.869087][ T5835] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.110783][ T5835] usb 2-1: usb_control_msg returned -32 [ 103.132799][ T5835] usbtmc 2-1:16.0: can't read capabilities [ 103.186612][ T5835] usb 2-1: USB disconnect, device number 5 [ 103.238590][ T6069] loop7: detected capacity change from 0 to 16384 [ 103.926362][ T5835] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 104.097383][ T5835] usb 3-1: Using ep0 maxpacket: 8 [ 104.116866][ T5835] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 104.126187][ T5835] usb 3-1: config 0 has no interface number 0 [ 104.153755][ T5835] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 104.194133][ T5835] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 104.226516][ T5835] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 104.253030][ T5835] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 104.287276][ T5835] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 104.306330][ T5835] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.331087][ T5835] usb 3-1: config 0 descriptor?? [ 104.364098][ T5835] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 104.480406][ T6096] ªªªªªª: renamed from vlan0 (while UP) [ 104.615284][ T800] usb 3-1: USB disconnect, device number 5 [ 104.643263][ T800] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 104.816699][ T5835] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 104.986555][ T5835] usb 4-1: Using ep0 maxpacket: 32 [ 104.995733][ T5835] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 105.027100][ T5835] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 105.054975][ T5835] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 105.074900][ T5835] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.097340][ T6112] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 105.098715][ T5835] usb 4-1: config 0 descriptor?? [ 105.119317][ T6114] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 105.200352][ T6111] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 105.376343][ T9] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 105.574251][ T5835] ft260 0003:0403:6030.0004: unknown main item tag 0x0 [ 105.584332][ T9] usb 2-1: config 0 has an invalid interface number: 120 but max is 0 [ 105.592834][ T9] usb 2-1: config 0 has no interface number 0 [ 105.607372][ T9] usb 2-1: config 0 interface 120 altsetting 0 endpoint 0x8A has an invalid bInterval 255, changing to 7 [ 105.619565][ T9] usb 2-1: config 0 interface 120 altsetting 0 endpoint 0x8A has invalid maxpacket 59391, setting to 1024 [ 105.631618][ T9] usb 2-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 105.641163][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.657163][ T9] usb 2-1: config 0 descriptor?? [ 105.666354][ T5844] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 105.687393][ T9] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.120/input/input5 [ 105.807358][ T5835] ft260 0003:0403:6030.0004: chip code: 6424 8183 [ 105.860126][ T5844] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 105.876554][ T5844] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 105.885856][ T5844] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 105.897801][ T5844] usb 3-1: config 0 interface 0 has no altsetting 0 [ 105.907161][ T5844] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 105.926524][ T5844] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 105.932188][ T10] usb 2-1: USB disconnect, device number 6 [ 105.937674][ T5844] usb 3-1: config 0 interface 0 has no altsetting 0 [ 105.938804][ T5844] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 105.983630][ T5844] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 106.001596][ T5835] ft260 0003:0403:6030.0004: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.3-1/input0 [ 106.027866][ T5844] usb 3-1: config 0 interface 0 has no altsetting 0 [ 106.049697][ T5844] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 106.058719][ T5844] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 106.071006][ T5844] usb 3-1: config 0 interface 0 has no altsetting 0 [ 106.079755][ T5844] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 106.088885][ T5938] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 106.100974][ T5844] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 106.112745][ T5844] usb 3-1: config 0 interface 0 has no altsetting 0 [ 106.120885][ T5844] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 106.130419][ T5844] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 106.143960][ T5844] usb 3-1: config 0 interface 0 has no altsetting 0 [ 106.152515][ T5844] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 106.161903][ T5844] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 106.176097][ T5844] usb 3-1: config 0 interface 0 has no altsetting 0 [ 106.185194][ T5844] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 106.194907][ T5844] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 106.212264][ T5835] ft260 0003:0403:6030.0004: failed to retrieve status: -71, no wakeup [ 106.220875][ T5844] usb 3-1: config 0 interface 0 has no altsetting 0 [ 106.228223][ T5835] ft260 0003:0403:6030.0004: failed to retrieve status: -71 [ 106.237235][ T5835] ft260 0003:0403:6030.0004: failed to reset I2C controller: -71 [ 106.247736][ T5844] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 106.260220][ T5938] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 106.275583][ T5844] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 106.285458][ T5938] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 106.300462][ T5844] usb 3-1: Product: syz [ 106.304703][ T5844] usb 3-1: Manufacturer: syz [ 106.312665][ T5835] usb 4-1: USB disconnect, device number 4 [ 106.320911][ T5938] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 106.334121][ T5844] usb 3-1: SerialNumber: syz [ 106.339404][ T5938] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 106.355965][ T5844] usb 3-1: config 0 descriptor?? [ 106.367056][ T5938] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.394891][ T5938] usb 1-1: config 0 descriptor?? [ 106.410858][ T5844] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0 [ 106.705839][ C1] usb 3-1: yurex_control_callback - control failed: -71 [ 106.716136][ T5835] usb 3-1: USB disconnect, device number 6 [ 106.731645][ T5835] yurex 3-1:0.0: USB YUREX #0 now disconnected [ 106.749258][ T6127] syzkaller1: entered promiscuous mode [ 106.767807][ T6127] syzkaller1: entered allmulticast mode [ 106.860025][ T5938] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 107.129107][ T10] usb 1-1: USB disconnect, device number 5 [ 107.322869][ T6139] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000038: 0000 [#1] SMP KASAN PTI [ 107.335016][ T6139] KASAN: null-ptr-deref in range [0x00000000000001c0-0x00000000000001c7] [ 107.343473][ T6139] CPU: 1 UID: 0 PID: 6139 Comm: syz.3.96 Not tainted syzkaller #0 PREEMPT(full) [ 107.352615][ T6139] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 107.362775][ T6139] RIP: 0010:__queue_work+0xa2/0xf90 [ 107.367995][ T6139] Code: 11 31 ff 89 ee e8 4e f4 37 00 85 ed 0f 85 ef 0c 00 00 e8 01 f0 37 00 4d 8d b7 c0 01 00 00 4c 89 f0 48 c1 e8 03 48 89 44 24 28 <42> 0f b6 04 20 84 c0 0f 85 22 0d 00 00 4c 89 34 24 41 8b 2e 89 ee [ 107.387632][ T6139] RSP: 0018:ffffc9000af2f438 EFLAGS: 00010002 [ 107.393820][ T6139] RAX: 0000000000000038 RBX: 0000000000000008 RCX: 0000000000080000 [ 107.401817][ T6139] RDX: ffffc9000cd45000 RSI: 00000000000004bb RDI: 00000000000004bc [ 107.409897][ T6139] RBP: 0000000000000000 R08: ffff88813fe32017 R09: 1ffff11027fc6402 [ 107.417970][ T6139] R10: dffffc0000000000 R11: ffffed1027fc6403 R12: dffffc0000000000 [ 107.426139][ T6139] R13: ffff88813fe32010 R14: 00000000000001c0 R15: 0000000000000000 [ 107.434353][ T6139] FS: 00007f7ac72346c0(0000) GS:ffff888125163000(0000) knlGS:0000000000000000 [ 107.443478][ T6139] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 107.450167][ T6139] CR2: 00007f8b50379000 CR3: 0000000033a5a000 CR4: 00000000003526f0 [ 107.458324][ T6139] Call Trace: [ 107.461607][ T6139] [ 107.464649][ T6139] ? __asan_memcpy+0x40/0x70 [ 107.469351][ T6139] ? __tty_insert_flip_string_flags+0x3e9/0x430 [ 107.475607][ T6139] queue_work_on+0x106/0x1d0 [ 107.480215][ T6139] puts_queue+0xa3/0xe0 [ 107.484559][ T6139] ? __pfx_puts_queue+0x10/0x10 [ 107.489595][ T6139] k_pad+0x781/0xa90 [ 107.493496][ T6139] ? lock_acquire+0x106/0x330 [ 107.498177][ T6139] ? atomic_notifier_call_chain+0x26/0x180 [ 107.504092][ T6139] ? __pfx_k_pad+0x10/0x10 [ 107.508525][ T6139] ? atomic_notifier_call_chain+0x26/0x180 [ 107.514510][ T6139] ? atomic_notifier_call_chain+0x26/0x180 [ 107.520321][ T6139] kbd_event+0x2ec1/0x40d0 [ 107.524741][ T6139] ? __pfx_kbd_event+0x10/0x10 [ 107.529726][ T6139] ? add_lock_to_list+0xc7/0x100 [ 107.534686][ T6139] ? lockdep_unlock+0x5d/0xd0 [ 107.539456][ T6139] ? __lock_acquire+0x146e/0x2cf0 [ 107.544495][ T6139] ? __lock_acquire+0x6b5/0x2cf0 [ 107.549439][ T6139] ? __lock_acquire+0x6b5/0x2cf0 [ 107.554478][ T6139] ? __lock_acquire+0x6b5/0x2cf0 [ 107.559592][ T6139] ? input_pass_values+0x8d/0x890 [ 107.564684][ T6139] ? lock_acquire+0x106/0x330 [ 107.569389][ T6139] ? input_pass_values+0x8d/0x890 [ 107.574530][ T6139] input_handle_events_default+0xd4/0x1a0 [ 107.580369][ T6139] ? input_pass_values+0x8d/0x890 [ 107.585412][ T6139] input_pass_values+0x288/0x890 [ 107.590356][ T6139] ? input_handle_event+0x70c/0xf30 [ 107.595563][ T6139] input_event_dispose+0x330/0x6b0 [ 107.600772][ T6139] input_inject_event+0x1dd/0x340 [ 107.605822][ T6139] ? input_inject_event+0xb6/0x340 [ 107.611297][ T6139] evdev_write+0x325/0x4c0 [ 107.615813][ T6139] ? __lock_acquire+0x6b5/0x2cf0 [ 107.620846][ T6139] ? __pfx_evdev_write+0x10/0x10 [ 107.625791][ T6139] ? bpf_lsm_file_permission+0x9/0x20 [ 107.631170][ T6139] ? security_file_permission+0x75/0x260 [ 107.636983][ T6139] ? rw_verify_area+0x255/0x4d0 [ 107.641871][ T6139] ? __pfx_evdev_write+0x10/0x10 [ 107.646903][ T6139] vfs_write+0x29a/0xb90 [ 107.651167][ T6139] ? __pfx_vfs_write+0x10/0x10 [ 107.655947][ T6139] ? __fget_files+0x2a/0x420 [ 107.660574][ T6139] ? __fget_files+0x2a/0x420 [ 107.665199][ T6139] ? __fget_files+0x3a0/0x420 [ 107.669878][ T6139] ? __fget_files+0x2a/0x420 [ 107.674739][ T6139] ksys_write+0x150/0x270 [ 107.679078][ T6139] ? __pfx_ksys_write+0x10/0x10 [ 107.683948][ T6139] do_syscall_64+0xe2/0xf80 [ 107.688465][ T6139] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.694544][ T6139] ? trace_irq_disable+0x37/0x100 [ 107.699660][ T6139] ? clear_bhb_loop+0x40/0x90 [ 107.704378][ T6139] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.710294][ T6139] RIP: 0033:0x7f7ac639aeb9 [ 107.714729][ T6139] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 107.735222][ T6139] RSP: 002b:00007f7ac7234028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 107.743753][ T6139] RAX: ffffffffffffffda RBX: 00007f7ac6615fa0 RCX: 00007f7ac639aeb9 [ 107.751907][ T6139] RDX: 0000000000002250 RSI: 0000200000000040 RDI: 0000000000000003 [ 107.760003][ T6139] RBP: 00007f7ac6408c1f R08: 0000000000000000 R09: 0000000000000000 [ 107.768152][ T6139] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 107.776394][ T6139] R13: 00007f7ac6616038 R14: 00007f7ac6615fa0 R15: 00007ffd26c11b48 [ 107.784375][ T6139] [ 107.787395][ T6139] Modules linked in: [ 107.791299][ T6139] ---[ end trace 0000000000000000 ]--- [ 107.797016][ T6139] RIP: 0010:__queue_work+0xa2/0xf90 [ 107.802230][ T6139] Code: 11 31 ff 89 ee e8 4e f4 37 00 85 ed 0f 85 ef 0c 00 00 e8 01 f0 37 00 4d 8d b7 c0 01 00 00 4c 89 f0 48 c1 e8 03 48 89 44 24 28 <42> 0f b6 04 20 84 c0 0f 85 22 0d 00 00 4c 89 34 24 41 8b 2e 89 ee [ 107.822459][ T6139] RSP: 0018:ffffc9000af2f438 EFLAGS: 00010002 [ 107.828612][ T6139] RAX: 0000000000000038 RBX: 0000000000000008 RCX: 0000000000080000 [ 107.836677][ T6139] RDX: ffffc9000cd45000 RSI: 00000000000004bb RDI: 00000000000004bc [ 107.844825][ T6139] RBP: 0000000000000000 R08: ffff88813fe32017 R09: 1ffff11027fc6402 [ 107.852801][ T6139] R10: dffffc0000000000 R11: ffffed1027fc6403 R12: dffffc0000000000 [ 107.861300][ T6139] R13: ffff88813fe32010 R14: 00000000000001c0 R15: 0000000000000000 [ 107.869370][ T6139] FS: 00007f7ac72346c0(0000) GS:ffff888125163000(0000) knlGS:0000000000000000 [ 107.878412][ T6139] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 107.885170][ T6139] CR2: 00007f8b50379000 CR3: 0000000033a5a000 CR4: 00000000003526f0 [ 107.893162][ T6139] Kernel panic - not syncing: Fatal exception [ 107.900111][ T6139] Kernel Offset: disabled [ 107.904451][ T6139] Rebooting in 86400 seconds..