last executing test programs: 6.262999081s ago: executing program 0 (id=93): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x3) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000140)={0x2, &(0x7f00000016c0)=[{0x48, 0xc0, 0x38, 0x9}, {0x6, 0xfc}]}) write$ppp(r0, &(0x7f0000000080)='I-', 0x2) 5.785086577s ago: executing program 0 (id=96): mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, 0xffffffffffffffff, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f0000002040)=ANY=[@ANYBLOB="12010000fe76181004160780a6af011703010902120001000000000904"], 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0xfffffffffffffffd, 0x183003) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r0, 0x80dc5521, &(0x7f00000011c0)=""/230) 4.406681619s ago: executing program 3 (id=101): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000080)=0x1, r1, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x2, @loopback, 0x8}, {0xa, 0x4e23, 0x7, @remote, 0x8}, r1, 0x10007}}, 0x48) 4.004326308s ago: executing program 3 (id=102): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000001000/0x3000)=nil, 0x30000, 0x0, 0x11, r0, 0x0) mremap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) 3.991358406s ago: executing program 0 (id=104): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmmsg(0xffffffffffffffff, &(0x7f00000018c0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000180)}, {0x0}, {&(0x7f0000000940)="0154cb3eb8695dcc7f253cb0f84f99ca40dada3fa997c3cdeaf5fba62ba9dca2592b2e1f1a3b323346857c2dc8a7feb60cabba8b2bae17b6adbf986484866d0995da61fdd7468d7a890840c77e27f020ceeaac9105570794647e71a0180a96c66f23d8bb7da1bb5d4862d206943bc4807d54daa921f15e47c4e1ef9e5453e90fa5a65dbad4f0e98312d6b50fe713144c7beff1daa197cb11a05d6aa9ed7288290f954371c4c9dfc1fd57608fd51e02eb51b584d991791f63de7c0cd140f4454c632bcd294397f135188640e6ffb3770ac4dc926ca179633fd5facb445ac6cbd89cfa08b6369bd75bcaa7b3f5413e397f09001487425dcefad05f495f6272349569b6d61af045b36268fd33ac21bff3e68ad67d870bd55a1d66f62b5a87f6ad529d2b0311de32f3af1279886415af8f1ceee3243855c903e619458cc6ef9399d453d3c7bf571fef041f3bd413446cc10203b239c55aa752085cf0efe2a5ef1e596895c20aba8ae469608b73f814d264e2f4c9a5c4a1184f", 0x177}], 0x3}}], 0x1, 0x8810) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 3.680320707s ago: executing program 0 (id=108): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)={0x50, r0, 0x801, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY={0x28, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "4abee339084eeef16f162471f4"}, @NL80211_KEY_IDX={0x5}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x11}, 0x0) 3.39669545s ago: executing program 4 (id=110): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/current\x00') writev(r0, &(0x7f0000000240)=[{&(0x7f0000000080)='y', 0x1}], 0x1) capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000040)) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffffd3) 3.203455554s ago: executing program 0 (id=111): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="120100002eab5a40401c3405cc6d010203010902120001000000000904"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000006c0)={0x34, &(0x7f0000000780)=ANY=[@ANYBLOB="0009da000000f78f1936"], 0x0, 0x0, 0x0, 0x0, 0x0}) 3.085610299s ago: executing program 4 (id=112): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMKSA(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x30, r0, 0x1, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "180922bfe1973504800000004adafe73"}]}, 0x30}, 0x1, 0x0, 0x0, 0x4004001}, 0x20004800) 3.015325402s ago: executing program 3 (id=113): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) recvmsg(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x2100) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)={0x24, r1, 0x65aebf9dafbebb59, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x72}, @val={0x8, 0x3, r2}, @void}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) 2.911611644s ago: executing program 2 (id=114): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b707000008000000850000006900000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000a00000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40) 2.723492953s ago: executing program 2 (id=115): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0xfff) syz_emit_ethernet(0x4a, &(0x7f0000000440)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000040)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x20, 0x6, 0xff, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x40, 0x0, 0x0, 0x0, {[@generic={0x1, 0x2}, @timestamp={0x8, 0xa, 0x5, 0xfffffc01}]}}}}}}}}, 0x0) 2.701578403s ago: executing program 4 (id=117): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x4}}}]}, @NFTA_RULE_COMPAT={0x4}]}], {0x14}}, 0x58}}, 0x0) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x28, 0x0, 0x0, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x28}}, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="140100001f000504000000000000000004"], 0x114}], 0x1}, 0x0) 2.651562744s ago: executing program 3 (id=118): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x2003, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000000000000000004000000000060000000000000001000040"]) 2.321556265s ago: executing program 2 (id=119): unshare(0x2a020400) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0x0) unshare(0x2000400) close(r0) 2.265150935s ago: executing program 4 (id=121): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@private0, 0x60, 0x0, 0xff, 0x2, 0xe, 0x1}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r0, 0x8b32, &(0x7f0000000040)) 1.977712628s ago: executing program 4 (id=122): pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) close_range(r0, 0xffffffffffffffff, 0x0) 1.940438292s ago: executing program 3 (id=123): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000000)="e6", 0x1, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) shutdown(r0, 0x1) recvfrom(r0, 0x0, 0x0, 0x103, 0x0, 0x0) 1.874778554s ago: executing program 2 (id=125): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x181040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000000000885000040"]) 1.721179429s ago: executing program 3 (id=126): r0 = syz_usb_connect(0x0, 0x3c, &(0x7f0000000380)=ANY=[@ANYBLOB="120101000814c910be0632a2f333010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000280)={&(0x7f00000001c0)=[{0x7, 0x211, 0x0, 0x0}, {0x50, 0x4000, 0x0, 0x0}], 0x2}) 1.50571117s ago: executing program 2 (id=127): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'nicvf0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}]}]]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1.465857558s ago: executing program 1 (id=128): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x2c, r2, 0x1, 0x70bd29, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x4}]}, 0x2c}}, 0x4000014) 1.291413112s ago: executing program 1 (id=129): r0 = socket(0x28, 0x5, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000002600), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f0000000300)={0x3c, r2, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x40d6}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}, {0xc, 0x1, 0x0, 0x1, {0x4, 0x1, r0}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) 1.136696893s ago: executing program 2 (id=130): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000001280)={{0x12, 0x1, 0x300, 0x0, 0x1f, 0x66, 0x8, 0x58f, 0x6610, 0x4805, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x4, 0x95, 0x70, 0x81, [{{0x9, 0x4, 0x0, 0x81, 0x0, 0xff, 0xff, 0xff, 0x2}}]}}]}}, &(0x7f0000001700)={0xffffffa0, 0x0, 0x0, 0x0, 0x23}) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000a40)={&(0x7f0000000380)=[{0x3, 0x6000, 0x1, &(0x7f00000003c0)='t'}, {0x1, 0x2a00, 0x0, 0x0}], 0x2}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000200)={0x1c, &(0x7f0000000000)=ANY=[], 0x0, 0x0}) 1.089083984s ago: executing program 0 (id=131): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) syz_usb_connect(0x3, 0x2d, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000061c2f20c81403006c050102030109021b00010000000009040000018ea44300090585da09"], 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x84000) 929.761069ms ago: executing program 1 (id=132): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffd51, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000040)='cpu.max\x00', 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f00000002c0)=ANY=[@ANYRESDEC=r0], 0x8) 748.183455ms ago: executing program 1 (id=133): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000002880), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd7000fbdbdf251000000008003b000300000008000600", @ANYRES32=r2, @ANYBLOB="08000300", @ANYRES32=r3], 0x2c}, 0x1, 0x0, 0x0, 0x4c000}, 0x4040000) 572.97286ms ago: executing program 1 (id=134): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r2 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r0, r1, 0x26, 0x0, @void}, 0x10) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r2, r0, 0x4, r0}, 0x6) 243.511755ms ago: executing program 4 (id=135): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002600)={0x34, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x148c}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x34}}, 0x0) 0s ago: executing program 1 (id=136): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x0) r2 = syz_open_dev$sndpcmc(&(0x7f0000000080), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r2, 0xc0844123, &(0x7f0000002fc0)) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.123' (ED25519) to the list of known hosts. [ 91.314151][ T5826] cgroup: Unknown subsys name 'net' [ 91.546228][ T5826] cgroup: Unknown subsys name 'cpuset' [ 91.601406][ T5826] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 92.065405][ T991] cfg80211: failed to load regulatory.db [ 93.577586][ T5826] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 97.639053][ T5841] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 97.655183][ T5841] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 97.662011][ T5841] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 97.680844][ T5841] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 97.689097][ T5841] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 97.758309][ T5157] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 97.785696][ T59] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 97.786526][ T59] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 97.788258][ T59] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 97.789159][ T59] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 97.790389][ T59] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 97.829030][ T5848] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 97.841548][ T5841] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 97.915730][ T5848] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 97.916705][ T5848] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 97.985446][ T59] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 97.995213][ T59] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 97.996405][ T59] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 98.002236][ T59] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 98.005230][ T59] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 98.066670][ T59] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 98.069347][ T59] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 98.088005][ T59] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 98.091834][ T59] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 98.108618][ T59] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 98.779170][ T5839] chnl_net:caif_netlink_parms(): no params data found [ 99.141576][ T5843] chnl_net:caif_netlink_parms(): no params data found [ 99.212372][ T5842] chnl_net:caif_netlink_parms(): no params data found [ 99.484576][ T5852] chnl_net:caif_netlink_parms(): no params data found [ 99.659873][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.662242][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.662912][ T5839] bridge_slave_0: entered allmulticast mode [ 99.666363][ T5839] bridge_slave_0: entered promiscuous mode [ 99.714197][ T5854] chnl_net:caif_netlink_parms(): no params data found [ 99.725428][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.725596][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.726279][ T5839] bridge_slave_1: entered allmulticast mode [ 99.729437][ T5839] bridge_slave_1: entered promiscuous mode [ 99.821988][ T59] Bluetooth: hci0: command tx timeout [ 99.901178][ T59] Bluetooth: hci1: command tx timeout [ 99.980925][ T59] Bluetooth: hci2: command tx timeout [ 100.060922][ T59] Bluetooth: hci3: command tx timeout [ 100.221803][ T59] Bluetooth: hci4: command tx timeout [ 100.381073][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.382498][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.382714][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.382910][ T5843] bridge_slave_0: entered allmulticast mode [ 100.385770][ T5843] bridge_slave_0: entered promiscuous mode [ 100.508203][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.508623][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.508791][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.508925][ T5843] bridge_slave_1: entered allmulticast mode [ 100.511913][ T5843] bridge_slave_1: entered promiscuous mode [ 100.516417][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.516585][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.516816][ T5842] bridge_slave_0: entered allmulticast mode [ 100.519998][ T5842] bridge_slave_0: entered promiscuous mode [ 100.722091][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.722317][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.722839][ T5842] bridge_slave_1: entered allmulticast mode [ 100.725775][ T5842] bridge_slave_1: entered promiscuous mode [ 101.123325][ T5852] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.123494][ T5852] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.123710][ T5852] bridge_slave_0: entered allmulticast mode [ 101.126461][ T5852] bridge_slave_0: entered promiscuous mode [ 101.224543][ T5839] team0: Port device team_slave_0 added [ 101.230178][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.313401][ T5852] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.313619][ T5852] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.313819][ T5852] bridge_slave_1: entered allmulticast mode [ 101.316739][ T5852] bridge_slave_1: entered promiscuous mode [ 101.405288][ T5839] team0: Port device team_slave_1 added [ 101.408789][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.415256][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.491755][ T5854] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.491885][ T5854] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.492042][ T5854] bridge_slave_0: entered allmulticast mode [ 101.493948][ T5854] bridge_slave_0: entered promiscuous mode [ 101.707012][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.771723][ T5854] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.771878][ T5854] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.772072][ T5854] bridge_slave_1: entered allmulticast mode [ 101.774206][ T5854] bridge_slave_1: entered promiscuous mode [ 101.900871][ T59] Bluetooth: hci0: command tx timeout [ 101.981029][ T59] Bluetooth: hci1: command tx timeout [ 102.009450][ T5852] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.061347][ T59] Bluetooth: hci2: command tx timeout [ 102.083631][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.083648][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.083677][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.088841][ T5843] team0: Port device team_slave_0 added [ 102.140830][ T59] Bluetooth: hci3: command tx timeout [ 102.210129][ T5852] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.301534][ T59] Bluetooth: hci4: command tx timeout [ 102.319523][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.319540][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.319567][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.330484][ T5843] team0: Port device team_slave_1 added [ 102.474864][ T5842] team0: Port device team_slave_0 added [ 102.545090][ T5854] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.634557][ T5842] team0: Port device team_slave_1 added [ 102.715077][ T5854] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.857035][ T5852] team0: Port device team_slave_0 added [ 102.926761][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.926774][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.926794][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.023998][ T5852] team0: Port device team_slave_1 added [ 103.183126][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.183144][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.183173][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.184948][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.184962][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.184990][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.317494][ T5854] team0: Port device team_slave_0 added [ 103.379998][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.380016][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.380043][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.485516][ T5854] team0: Port device team_slave_1 added [ 103.495492][ T5839] hsr_slave_0: entered promiscuous mode [ 103.497301][ T5839] hsr_slave_1: entered promiscuous mode [ 103.616157][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.616176][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.616202][ T5852] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.729174][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.729188][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.729207][ T5852] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.954688][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.954705][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.954734][ T5854] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.982069][ T59] Bluetooth: hci0: command tx timeout [ 104.061076][ T59] Bluetooth: hci1: command tx timeout [ 104.141003][ T59] Bluetooth: hci2: command tx timeout [ 104.221472][ T59] Bluetooth: hci3: command tx timeout [ 104.241154][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.241173][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.241201][ T5854] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.296304][ T5843] hsr_slave_0: entered promiscuous mode [ 104.298232][ T5843] hsr_slave_1: entered promiscuous mode [ 104.299422][ T5843] debugfs: 'hsr0' already exists in 'hsr' [ 104.299549][ T5843] Cannot create hsr debugfs directory [ 104.380895][ T5848] Bluetooth: hci4: command tx timeout [ 104.524320][ T5842] hsr_slave_0: entered promiscuous mode [ 104.525268][ T5842] hsr_slave_1: entered promiscuous mode [ 104.526071][ T5842] debugfs: 'hsr0' already exists in 'hsr' [ 104.526094][ T5842] Cannot create hsr debugfs directory [ 104.891956][ T5852] hsr_slave_0: entered promiscuous mode [ 104.893347][ T5852] hsr_slave_1: entered promiscuous mode [ 104.894478][ T5852] debugfs: 'hsr0' already exists in 'hsr' [ 104.894503][ T5852] Cannot create hsr debugfs directory [ 105.240550][ T5854] hsr_slave_0: entered promiscuous mode [ 105.247698][ T5854] hsr_slave_1: entered promiscuous mode [ 105.248421][ T5854] debugfs: 'hsr0' already exists in 'hsr' [ 105.248444][ T5854] Cannot create hsr debugfs directory [ 106.061130][ T5848] Bluetooth: hci0: command tx timeout [ 106.141468][ T5848] Bluetooth: hci1: command tx timeout [ 106.231552][ T5848] Bluetooth: hci2: command tx timeout [ 106.300945][ T5848] Bluetooth: hci3: command tx timeout [ 106.460832][ T5848] Bluetooth: hci4: command tx timeout [ 106.793938][ T5839] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 106.840510][ T5839] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 106.879716][ T5839] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 106.936631][ T5839] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 107.079196][ T5843] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 107.108423][ T5843] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 107.156147][ T5843] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 107.210424][ T5843] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 107.385948][ T5842] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 107.439713][ T5842] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 107.470162][ T5842] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 107.551422][ T5842] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 107.726785][ T5852] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 107.789867][ T5852] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 107.840442][ T5852] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 107.911801][ T5852] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 107.975670][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.117603][ T5854] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 108.175538][ T5854] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 108.227029][ T5839] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.227434][ T5854] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 108.275259][ T5854] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 108.340302][ T3556] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.340901][ T3556] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.402241][ T3473] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.402370][ T3473] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.479822][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.635237][ T5843] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.662649][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.707776][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.707997][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.749247][ T3473] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.749402][ T3473] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.828669][ T5842] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.918742][ T5852] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.928748][ T3473] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.928972][ T3473] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.011311][ T3473] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.011429][ T3473] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.130395][ T5852] 8021q: adding VLAN 0 to HW filter on device team0 [ 109.167702][ T5854] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.218317][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.218579][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.272712][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.272869][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.334707][ T5854] 8021q: adding VLAN 0 to HW filter on device team0 [ 109.401372][ T3473] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.401534][ T3473] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.482852][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.488809][ T3473] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.488971][ T3473] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.963267][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.025053][ T5839] veth0_vlan: entered promiscuous mode [ 110.113426][ T5839] veth1_vlan: entered promiscuous mode [ 110.199857][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.388496][ T5839] veth0_macvtap: entered promiscuous mode [ 110.410434][ T5843] veth0_vlan: entered promiscuous mode [ 110.434349][ T5839] veth1_macvtap: entered promiscuous mode [ 110.478643][ T5852] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.500235][ T5843] veth1_vlan: entered promiscuous mode [ 110.571912][ T5842] veth0_vlan: entered promiscuous mode [ 110.578735][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.620476][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.657011][ T5842] veth1_vlan: entered promiscuous mode [ 110.682047][ T5854] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.684094][ T3473] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.717696][ T3473] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.752736][ T3473] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.782182][ T3473] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.805053][ T5843] veth0_macvtap: entered promiscuous mode [ 110.901907][ T5843] veth1_macvtap: entered promiscuous mode [ 110.988017][ T5852] veth0_vlan: entered promiscuous mode [ 111.170348][ T5852] veth1_vlan: entered promiscuous mode [ 111.190444][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.210525][ T5842] veth0_macvtap: entered promiscuous mode [ 111.274224][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.293146][ T5842] veth1_macvtap: entered promiscuous mode [ 111.315220][ T3645] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.315247][ T3645] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.347293][ T3473] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.374122][ T3473] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.420534][ T3473] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.446640][ T3473] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.467926][ T3473] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.467947][ T3473] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.525540][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.625837][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.662798][ T5852] veth0_macvtap: entered promiscuous mode [ 111.788872][ T67] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.789574][ T5852] veth1_macvtap: entered promiscuous mode [ 111.820919][ T67] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.827808][ T5854] veth0_vlan: entered promiscuous mode [ 111.828295][ T67] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.856340][ T67] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.019131][ T5954] vxcan1: tx address claim with dest, not broadcast [ 112.087135][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.087157][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.102864][ T5854] veth1_vlan: entered promiscuous mode [ 112.209528][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 112.381572][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 112.441166][ T3645] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.441188][ T3645] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.517665][ T57] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.562490][ T57] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.568299][ T57] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.569116][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.569132][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.597159][ T57] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.896178][ T5854] veth0_macvtap: entered promiscuous mode [ 112.912009][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.912032][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.981722][ T5854] veth1_macvtap: entered promiscuous mode [ 113.213836][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 113.229779][ T3556] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.229800][ T3556] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.438036][ T5967] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.515000][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 113.586141][ T3645] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.591686][ T3645] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.611450][ T3645] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.611553][ T3645] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.611568][ T3645] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.613929][ T3645] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.834893][ T5967] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.147937][ T5967] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.591395][ T5967] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.115567][ T5991] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 115.146392][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.146416][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.402542][ T57] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.540116][ T67] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.567518][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.567541][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.694235][ T6000] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 115.738961][ T3500] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.856757][ T67] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.091428][ T6004] netlink: 28 bytes leftover after parsing attributes in process `syz.0.20'. [ 116.921835][ T5912] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 117.102901][ T5912] usb 4-1: Using ep0 maxpacket: 8 [ 117.125721][ T5912] usb 4-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 117.125751][ T5912] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.125771][ T5912] usb 4-1: Product: syz [ 117.125785][ T5912] usb 4-1: Manufacturer: syz [ 117.125799][ T5912] usb 4-1: SerialNumber: syz [ 117.186473][ T5912] usb 4-1: config 0 descriptor?? [ 117.260126][ T5912] radio-usb-si4713 4-1:0.0: Si4713 development board discovered: (10C4:8244) [ 117.641179][ T5822] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 117.803278][ T5822] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 117.803315][ T5822] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 117.803356][ T5822] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 117.803381][ T5822] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.873981][ T5822] usb 5-1: config 0 descriptor?? [ 118.066744][ T5912] radio-usb-si4713 4-1:0.0: probe with driver radio-usb-si4713 failed with error -71 [ 118.067311][ T5912] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 118.202039][ T5912] usb 4-1: USB disconnect, device number 2 [ 118.497357][ T5822] savu 0003:1E7D:2D5A.0001: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.4-1/input0 [ 118.656831][ T5822] usb 5-1: USB disconnect, device number 2 [ 118.793310][ T6047] fido_id[6047]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 119.123873][ T6057] loop9: detected capacity change from 0 to 8 [ 119.140452][ T6057] Dev loop9: unable to read RDB block 8 [ 119.140498][ T6057] loop9: unable to read partition table [ 119.155093][ T6060] syz.1.40 uses obsolete (PF_INET,SOCK_PACKET) [ 119.166607][ T6057] loop9: partition table beyond EOD, truncated [ 119.166646][ T6057] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 119.892508][ T5925] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 120.040758][ T5925] usb 3-1: Using ep0 maxpacket: 16 [ 120.047543][ T5925] usb 3-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 120.047573][ T5925] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.139183][ T5925] usb 3-1: config 0 descriptor?? [ 120.292902][ T5925] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 120.999744][ T6092] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 121.244593][ T5925] gspca_sonixj: reg_w1 err -71 [ 121.263823][ T5925] sonixj 3-1:0.0: probe with driver sonixj failed with error -71 [ 121.292211][ T6095] syz.0.56 (6095) used greatest stack depth: 18576 bytes left [ 121.299480][ T5925] usb 3-1: USB disconnect, device number 2 [ 121.689878][ T31] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 121.840731][ T45] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 121.850726][ T31] usb 5-1: Using ep0 maxpacket: 8 [ 121.864655][ T31] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 121.864723][ T31] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 121.864745][ T31] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 121.864786][ T31] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 121.864815][ T31] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 121.864863][ T31] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 121.864884][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.015403][ T45] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 122.015498][ T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.086088][ T45] usb 1-1: config 0 descriptor?? [ 122.122722][ T45] cp210x 1-1:0.0: cp210x converter detected [ 122.216272][ T31] usb 5-1: GET_CAPABILITIES returned 0 [ 122.216546][ T31] usbtmc 5-1:16.0: can't read capabilities [ 122.262007][ T5925] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 122.439860][ T5925] usb 2-1: Using ep0 maxpacket: 8 [ 122.459931][ T5925] usb 2-1: unable to get BOS descriptor or descriptor too short [ 122.480773][ T5925] usb 2-1: config 4 has an invalid interface number: 147 but max is 0 [ 122.480803][ T5925] usb 2-1: config 4 has an invalid descriptor of length 32, skipping remainder of the config [ 122.480823][ T5925] usb 2-1: config 4 has no interface number 0 [ 122.532475][ T5925] usb 2-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 122.532508][ T5925] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.532530][ T5925] usb 2-1: Product: syz [ 122.532545][ T5925] usb 2-1: Manufacturer: syz [ 122.532559][ T5925] usb 2-1: SerialNumber: syz [ 122.539572][ T45] cp210x 1-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 122.596795][ T31] usb 5-1: USB disconnect, device number 3 [ 122.616680][ T45] usb 1-1: cp210x converter now attached to ttyUSB0 [ 122.827975][ T5912] usb 1-1: USB disconnect, device number 2 [ 122.927174][ T5925] usb 2-1: Found UVC 0.02 device syz (04f2:b746) [ 122.927360][ T5925] usb 2-1: No valid video chain found. [ 122.995044][ T5925] usb 2-1: USB disconnect, device number 2 [ 123.014549][ T5912] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 123.139817][ T5912] cp210x 1-1:0.0: device disconnected [ 123.230807][ T31] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 123.380960][ T31] usb 3-1: Using ep0 maxpacket: 8 [ 123.394828][ T31] usb 3-1: config 0 has no interfaces? [ 123.403320][ T31] usb 3-1: New USB device found, idVendor=058f, idProduct=3820, bcdDevice=e0.0e [ 123.403351][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.403371][ T31] usb 3-1: Product: syz [ 123.403386][ T31] usb 3-1: Manufacturer: syz [ 123.403400][ T31] usb 3-1: SerialNumber: syz [ 123.473032][ T31] usb 3-1: config 0 descriptor?? [ 123.780828][ T6024] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 123.940850][ T6024] usb 2-1: config 0 has an invalid interface number: 128 but max is 0 [ 123.940880][ T6024] usb 2-1: config 0 has no interface number 0 [ 123.946323][ T6024] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 123.946356][ T6024] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.946375][ T6024] usb 2-1: Product: syz [ 123.946389][ T6024] usb 2-1: Manufacturer: syz [ 123.946403][ T6024] usb 2-1: SerialNumber: syz [ 124.014555][ T6024] usb 2-1: config 0 descriptor?? [ 124.217052][ T5925] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 124.354752][ T31] usb 3-1: USB disconnect, device number 3 [ 124.370914][ T5925] usb 5-1: Using ep0 maxpacket: 16 [ 124.383857][ T5925] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 124.383973][ T5925] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 124.384003][ T5925] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 124.384125][ T5925] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 124.384153][ T5925] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.442114][ T6024] usb 2-1: Firmware: major: 225, minor: 107, hardware type: RZUSB (3) [ 124.564038][ T5925] usb 5-1: config 0 descriptor?? [ 124.650127][ T6024] usb 2-1: failed to fetch extended address, random address set [ 124.666326][ T45] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 124.831083][ T45] usb 1-1: Using ep0 maxpacket: 32 [ 124.836638][ T45] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 124.836668][ T45] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 124.836710][ T45] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 124.836734][ T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.905975][ T45] usb 1-1: config 0 descriptor?? [ 124.938600][ T45] hub 1-1:0.0: USB hub found [ 125.055287][ T6024] usb 2-1: USB disconnect, device number 3 [ 125.068566][ T5925] microsoft 0003:045E:07DA.0002: unknown main item tag 0x2 [ 125.069241][ T5925] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 125.069272][ T5925] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 125.069300][ T5925] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 125.069328][ T5925] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 125.069356][ T5925] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 125.069383][ T5925] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 125.069410][ T5925] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 125.069436][ T5925] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 125.110334][ T5925] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0002/input/input5 [ 125.222614][ T45] hub 1-1:0.0: 9 ports detected [ 125.223202][ T45] hub 1-1:0.0: insufficient power available to use all downstream ports [ 125.288189][ T5925] microsoft 0003:045E:07DA.0002: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 125.288448][ T6158] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 125.288470][ T6158] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 125.302866][ T6158] vhci_hcd vhci_hcd.0: Device attached [ 125.358147][ T5925] usb 5-1: USB disconnect, device number 4 [ 125.486545][ T45] hub 1-1:0.0: hub_hub_status failed (err = -71) [ 125.486570][ T45] hub 1-1:0.0: config failed, can't get hub status (err -71) [ 125.528748][ T45] usbhid 1-1:0.0: can't add hid device: -71 [ 125.528881][ T45] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 125.605014][ T10] usb 39-1: new low-speed USB device number 2 using vhci_hcd [ 125.664306][ T6161] fido_id[6161]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 125.745305][ T45] usb 1-1: USB disconnect, device number 3 [ 126.100994][ T5912] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 126.262826][ T5912] usb 4-1: Using ep0 maxpacket: 16 [ 126.265685][ T5912] usb 4-1: config 0 has no interfaces? [ 126.265723][ T5912] usb 4-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 126.265747][ T5912] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.302268][ T5912] usb 4-1: config 0 descriptor?? [ 126.518421][ T6159] usb 39-1: recv xbuf, 0 [ 126.526059][ T5925] usb 4-1: USB disconnect, device number 3 [ 126.569146][ T57] vhci_hcd: stop threads [ 126.578433][ T57] vhci_hcd: release socket [ 126.592031][ T57] vhci_hcd: disconnect device [ 126.610837][ T10] vhci_hcd: vhci_device speed not set [ 126.630792][ T5912] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 126.793958][ T5912] usb 2-1: Using ep0 maxpacket: 32 [ 126.796646][ T5912] usb 2-1: config 0 has an invalid interface number: 85 but max is 0 [ 126.796674][ T5912] usb 2-1: config 0 has no interface number 0 [ 126.796723][ T5912] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 126.796789][ T5912] usb 2-1: config 0 interface 85 has no altsetting 0 [ 126.803542][ T5912] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 126.803577][ T5912] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.803601][ T5912] usb 2-1: Product: syz [ 126.803618][ T5912] usb 2-1: Manufacturer: syz [ 126.803634][ T5912] usb 2-1: SerialNumber: syz [ 126.835694][ T5912] usb 2-1: config 0 descriptor?? [ 127.081272][ T5925] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 127.230795][ T5925] usb 3-1: Using ep0 maxpacket: 32 [ 127.236894][ T5925] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 127.236923][ T5925] usb 3-1: config 0 has no interface number 0 [ 127.247278][ T5925] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 127.247639][ T5925] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.247731][ T5925] usb 3-1: Product: syz [ 127.247750][ T5925] usb 3-1: Manufacturer: syz [ 127.247767][ T5925] usb 3-1: SerialNumber: syz [ 127.301100][ T31] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 127.342373][ T5925] usb 3-1: config 0 descriptor?? [ 127.381415][ T5925] smsc95xx v2.0.0 [ 127.470870][ T31] usb 5-1: Using ep0 maxpacket: 32 [ 127.474551][ T31] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 127.474578][ T31] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 127.474598][ T31] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 127.474620][ T31] usb 5-1: config 1 has no interface number 0 [ 127.474670][ T31] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 127.474698][ T31] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 127.474758][ T31] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 127.474783][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.520052][ T5912] appletouch 2-1:0.85: Geyser mode initialized. [ 127.630927][ T5912] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.85/input/input6 [ 127.696380][ T31] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 127.731025][ T45] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 127.867020][ T31] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now attached [ 127.877044][ T5912] usb 2-1: USB disconnect, device number 4 [ 127.890860][ T45] usb 1-1: Using ep0 maxpacket: 16 [ 127.944804][ T45] usb 1-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 127.945282][ T45] usb 1-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 127.945306][ T45] usb 1-1: Product: syz [ 127.945320][ T45] usb 1-1: Manufacturer: syz [ 127.945774][ T45] usb 1-1: SerialNumber: syz [ 128.039299][ T45] usb 1-1: config 0 descriptor?? [ 128.167710][ T6194] Bluetooth: MGMT ver 1.23 [ 128.216276][ T5912] appletouch 2-1:0.85: input: appletouch disconnected [ 128.340291][ T31] usb 5-1: USB disconnect, device number 5 [ 128.473873][ T6196] warning: `syz.3.99' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 128.507812][ T5925] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000034: -71 [ 128.507843][ T5925] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_DATA [ 128.510808][ T5925] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 128.514449][ T5925] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71 [ 128.654496][ T31] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 128.666513][ T5925] usb 3-1: USB disconnect, device number 4 [ 128.684044][ T45] usb 1-1: USB disconnect, device number 4 [ 129.729037][ T6223] capability: warning: `syz.4.110' uses deprecated v2 capabilities in a way that may be insecure [ 129.754921][ T38] audit: type=1400 audit(1756178599.423:2): lsm=SMACK fn=smack_inode_setattr action=denied subject="y" object="_" requested=w pid=6221 comm="syz.4.110" name="16" dev="tmpfs" ino=94 [ 130.159287][ T6232] netlink: 'syz.2.114': attribute type 10 has an invalid length. [ 130.195327][ T6232] team0: Device dummy0 is up. Set it down before adding it as a team port [ 130.220819][ T5925] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 130.413636][ T5925] usb 1-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 130.413670][ T5925] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.413692][ T5925] usb 1-1: Product: syz [ 130.413707][ T5925] usb 1-1: Manufacturer: syz [ 130.413728][ T5925] usb 1-1: SerialNumber: syz [ 130.487004][ T5925] usb 1-1: config 0 descriptor?? [ 130.509874][ T5925] i2c-tiny-usb 1-1:0.0: version 6d.cc found at bus 001 address 005 [ 130.566404][ T6239] netlink: 'syz.4.117': attribute type 1 has an invalid length. [ 130.566425][ T6239] netlink: 'syz.4.117': attribute type 4 has an invalid length. [ 130.566439][ T6239] netlink: 188 bytes leftover after parsing attributes in process `syz.4.117'. [ 130.566480][ T6239] NCSI netlink: No device for ifindex 458760 [ 130.935304][ T5925] (null): failure reading functionality [ 130.991244][ T5925] i2c i2c-1: connected i2c-tiny-usb device [ 131.172818][ T5911] usb 1-1: USB disconnect, device number 5 [ 131.272560][ T6256] kvm: kvm [6254]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x40000085) = 0x0 [ 131.320891][ T6024] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 131.473202][ T6024] usb 5-1: Using ep0 maxpacket: 32 [ 131.478995][ T6024] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 131.502914][ T6024] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 131.502945][ T6024] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 131.502967][ T6024] usb 5-1: Product: syz [ 131.502982][ T6024] usb 5-1: Manufacturer: syz [ 131.502996][ T6024] usb 5-1: SerialNumber: syz [ 131.551662][ T6024] usb 5-1: config 0 descriptor?? [ 131.558392][ T6251] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 131.651596][ T45] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 131.789368][ T31] usb 5-1: USB disconnect, device number 6 [ 131.810779][ T45] usb 4-1: Using ep0 maxpacket: 16 [ 131.828705][ T45] usb 4-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 131.828734][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.828753][ T45] usb 4-1: Product: syz [ 131.828767][ T45] usb 4-1: Manufacturer: syz [ 131.828781][ T45] usb 4-1: SerialNumber: syz [ 131.873549][ T6265] netlink: 'syz.1.129': attribute type 1 has an invalid length. [ 131.873576][ T6265] nbd: error processing sock list [ 131.875541][ T6265] block nbd0: shutting down sockets [ 132.015709][ T45] usb 4-1: config 0 descriptor?? [ 132.294798][ T5947] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 132.350940][ T6024] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 132.479863][ T45] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 132.483645][ T5947] usb 3-1: Using ep0 maxpacket: 8 [ 132.494862][ T5947] usb 3-1: unable to get BOS descriptor or descriptor too short [ 132.507274][ T5947] usb 3-1: config 4 interface 0 has no altsetting 0 [ 132.510973][ T6024] usb 1-1: Using ep0 maxpacket: 32 [ 132.532295][ T6024] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 9 [ 132.536385][ T45] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 132.581758][ T6024] usb 1-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 132.581790][ T6024] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.581811][ T6024] usb 1-1: Product: syz [ 132.581825][ T6024] usb 1-1: Manufacturer: syz [ 132.581839][ T6024] usb 1-1: SerialNumber: syz [ 132.611194][ T45] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 132.611320][ T45] usb 4-1: media controller created [ 132.640524][ T6024] usb 1-1: config 0 descriptor?? [ 132.661610][ T6271] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 132.682426][ T6259] dtv5100: wlen = 0, aborting. [ 132.702889][ T6024] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input7 [ 132.706247][ T5947] usb 3-1: string descriptor 0 read error: -22 [ 132.706411][ T5947] usb 3-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 132.706435][ T5947] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.834005][ T5947] usb 3-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 132.865710][ T5947] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 132.894184][ T45] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 132.943268][ T5947] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 132.943361][ T5947] usb 3-1: media controller created [ 133.131649][ T6269] ------------[ cut here ]------------ [ 133.131666][ T6269] usb 4-1: BOGUS control dir, pipe 80000480 doesn't match bRequestType c0 [ 133.132537][ T6269] WARNING: CPU: 1 PID: 6269 at drivers/usb/core/urb.c:413 usb_submit_urb+0x112b/0x1830 [ 133.132590][ T6269] Modules linked in: [ 133.132635][ T6269] CPU: 1 UID: 0 PID: 6269 Comm: syz.2.130 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 133.132661][ T6269] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 133.132680][ T6269] RIP: 0010:usb_submit_urb+0x112b/0x1830 [ 133.132714][ T6269] Code: 0f b6 44 05 00 84 c0 0f 85 e8 05 00 00 45 0f b6 45 00 48 c7 c7 00 c3 a4 8b 48 8b 74 24 10 4c 89 fa 44 89 f1 e8 46 cc d9 fa 90 <0f> 0b 90 90 49 bc 00 00 00 00 00 fc ff df e9 17 f4 ff ff 89 e9 80 [ 133.132733][ T6269] RSP: 0018:ffffc90008b47830 EFLAGS: 00010246 [ 133.132753][ T6269] RAX: fb95308785f9da00 RBX: ffff88801ff98300 RCX: 0000000000080000 [ 133.132769][ T6269] RDX: ffffc9000df83000 RSI: 0000000000000ad6 RDI: 0000000000000ad7 [ 133.132784][ T6269] RBP: 1ffff1102951e48c R08: 0000000000000000 R09: 0000000000000000 [ 133.132798][ T6269] R10: dffffc0000000000 R11: ffffed1017124863 R12: dffffc0000000000 [ 133.132815][ T6269] R13: ffff88814a8f2460 R14: 0000000080000480 R15: ffff888030e3efc0 [ 133.132832][ T6269] FS: 00007fa716dce6c0(0000) GS:ffff8881269c2000(0000) knlGS:0000000000000000 [ 133.132849][ T6269] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 133.132864][ T6269] CR2: 0000001b31c19ffc CR3: 0000000029cbe000 CR4: 00000000003526f0 [ 133.132882][ T6269] Call Trace: [ 133.132890][ T6269] [ 133.132914][ T6269] usb_start_wait_urb+0x114/0x4c0 [ 133.132964][ T6269] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 133.133020][ T6269] usb_control_msg+0x232/0x3e0 [ 133.133061][ T6269] dtv5100_i2c_msg+0x250/0x330 [ 133.133108][ T6269] dtv5100_i2c_xfer+0x1a4/0x3c0 [ 133.133160][ T6269] __i2c_transfer+0x874/0x2170 [ 133.133192][ T6269] ? lockdep_hardirqs_on+0x9c/0x150 [ 133.133234][ T6269] ? __pfx___i2c_transfer+0x10/0x10 [ 133.133320][ T6269] ? rt_mutex_lock_nested+0x15e/0x1e0 [ 133.133352][ T6269] ? i2c_transfer+0x11d/0x3a0 [ 133.133385][ T6269] i2c_transfer+0x25b/0x3a0 [ 133.133420][ T6269] ? __pfx_i2c_transfer+0x10/0x10 [ 133.133452][ T6269] ? _copy_from_user+0x94/0xb0 [ 133.133479][ T6269] i2cdev_ioctl_rdwr+0x460/0x740 [ 133.133523][ T6269] i2cdev_ioctl+0x64e/0x800 [ 133.133554][ T6269] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 133.133587][ T6269] ? __fget_files+0x3a6/0x420 [ 133.133616][ T6269] ? __fget_files+0x2a/0x420 [ 133.133648][ T6269] ? bpf_lsm_file_ioctl+0x9/0x20 [ 133.133674][ T6269] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 133.133705][ T6269] __se_sys_ioctl+0xfc/0x170 [ 133.133732][ T6269] do_syscall_64+0xfa/0x3b0 [ 133.133761][ T6269] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.133783][ T6269] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 133.133807][ T6269] ? clear_bhb_loop+0x60/0xb0 [ 133.133835][ T6269] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.133857][ T6269] RIP: 0033:0x7fa718b6ebe9 [ 133.133886][ T6269] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 133.133904][ T6269] RSP: 002b:00007fa716dce038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 133.133927][ T6269] RAX: ffffffffffffffda RBX: 00007fa718d95fa0 RCX: 00007fa718b6ebe9 [ 133.133943][ T6269] RDX: 0000200000000a40 RSI: 0000000000000707 RDI: 0000000000000004 [ 133.133956][ T6269] RBP: 00007fa718bf1e19 R08: 0000000000000000 R09: 0000000000000000 [ 133.133971][ T6269] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 133.133984][ T6269] R13: 00007fa718d96038 R14: 00007fa718d95fa0 R15: 00007ffee86309d8 [ 133.134019][ T6269] [ 133.134030][ T6269] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 133.134045][ T6269] CPU: 1 UID: 0 PID: 6269 Comm: syz.2.130 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 133.134070][ T6269] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 133.134083][ T6269] Call Trace: [ 133.134091][ T6269] [ 133.134101][ T6269] dump_stack_lvl+0x99/0x250 [ 133.134136][ T6269] ? __asan_memcpy+0x40/0x70 [ 133.134162][ T6269] ? __pfx_dump_stack_lvl+0x10/0x10 [ 133.134193][ T6269] ? __pfx__printk+0x10/0x10 [ 133.134230][ T6269] vpanic+0x281/0x750 [ 133.134276][ T6269] ? __pfx__printk+0x10/0x10 [ 133.134299][ T6269] ? __pfx_vpanic+0x10/0x10 [ 133.134330][ T6269] ? is_bpf_text_address+0x292/0x2b0 [ 133.134373][ T6269] panic+0xb9/0xc0 [ 133.134405][ T6269] ? __pfx_panic+0x10/0x10 [ 133.134456][ T6269] __warn+0x31b/0x4b0 [ 133.134488][ T6269] ? usb_submit_urb+0x112b/0x1830 [ 133.134523][ T6269] ? usb_submit_urb+0x112b/0x1830 [ 133.134553][ T6269] report_bug+0x2be/0x4f0 [ 133.134578][ T6269] ? usb_submit_urb+0x112b/0x1830 [ 133.134612][ T6269] ? usb_submit_urb+0x112b/0x1830 [ 133.134641][ T6269] ? usb_submit_urb+0x112d/0x1830 [ 133.134670][ T6269] handle_bug+0x84/0x160 [ 133.134703][ T6269] exc_invalid_op+0x1a/0x50 [ 133.134735][ T6269] asm_exc_invalid_op+0x1a/0x20 [ 133.134756][ T6269] RIP: 0010:usb_submit_urb+0x112b/0x1830 [ 133.134788][ T6269] Code: 0f b6 44 05 00 84 c0 0f 85 e8 05 00 00 45 0f b6 45 00 48 c7 c7 00 c3 a4 8b 48 8b 74 24 10 4c 89 fa 44 89 f1 e8 46 cc d9 fa 90 <0f> 0b 90 90 49 bc 00 00 00 00 00 fc ff df e9 17 f4 ff ff 89 e9 80 [ 133.134805][ T6269] RSP: 0018:ffffc90008b47830 EFLAGS: 00010246 [ 133.134824][ T6269] RAX: fb95308785f9da00 RBX: ffff88801ff98300 RCX: 0000000000080000 [ 133.134839][ T6269] RDX: ffffc9000df83000 RSI: 0000000000000ad6 RDI: 0000000000000ad7 [ 133.134853][ T6269] RBP: 1ffff1102951e48c R08: 0000000000000000 R09: 0000000000000000 [ 133.134868][ T6269] R10: dffffc0000000000 R11: ffffed1017124863 R12: dffffc0000000000 [ 133.134885][ T6269] R13: ffff88814a8f2460 R14: 0000000080000480 R15: ffff888030e3efc0 [ 133.134938][ T6269] usb_start_wait_urb+0x114/0x4c0 [ 133.134965][ T6269] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 133.135012][ T6269] usb_control_msg+0x232/0x3e0 [ 133.135055][ T6269] dtv5100_i2c_msg+0x250/0x330 [ 133.135100][ T6269] dtv5100_i2c_xfer+0x1a4/0x3c0 [ 133.135144][ T6269] __i2c_transfer+0x874/0x2170 [ 133.135178][ T6269] ? lockdep_hardirqs_on+0x9c/0x150 [ 133.135216][ T6269] ? __pfx___i2c_transfer+0x10/0x10 [ 133.135247][ T6269] ? rt_mutex_lock_nested+0x15e/0x1e0 [ 133.135287][ T6269] ? i2c_transfer+0x11d/0x3a0 [ 133.135320][ T6269] i2c_transfer+0x25b/0x3a0 [ 133.135355][ T6269] ? __pfx_i2c_transfer+0x10/0x10 [ 133.135389][ T6269] ? _copy_from_user+0x94/0xb0 [ 133.135416][ T6269] i2cdev_ioctl_rdwr+0x460/0x740 [ 133.135459][ T6269] i2cdev_ioctl+0x64e/0x800 [ 133.135489][ T6269] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 133.135520][ T6269] ? __fget_files+0x3a6/0x420 [ 133.135549][ T6269] ? __fget_files+0x2a/0x420 [ 133.135584][ T6269] ? bpf_lsm_file_ioctl+0x9/0x20 [ 133.135610][ T6269] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 133.135640][ T6269] __se_sys_ioctl+0xfc/0x170 [ 133.135669][ T6269] do_syscall_64+0xfa/0x3b0 [ 133.135698][ T6269] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.135717][ T6269] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 133.135739][ T6269] ? clear_bhb_loop+0x60/0xb0 [ 133.135765][ T6269] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.135786][ T6269] RIP: 0033:0x7fa718b6ebe9 [ 133.135804][ T6269] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 133.135821][ T6269] RSP: 002b:00007fa716dce038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 133.135842][ T6269] RAX: ffffffffffffffda RBX: 00007fa718d95fa0 RCX: 00007fa718b6ebe9 [ 133.135858][ T6269] RDX: 0000200000000a40 RSI: 0000000000000707 RDI: 0000000000000004 [ 133.135872][ T6269] RBP: 00007fa718bf1e19 R08: 0000000000000000 R09: 0000000000000000 [ 133.135887][ T6269] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 133.135900][ T6269] R13: 00007fa718d96038 R14: 00007fa718d95fa0 R15: 00007ffee86309d8 [ 133.135936][ T6269] [ 133.136381][ T6269] Kernel Offset: disabled