last executing test programs: 11.324681843s ago: executing program 0 (id=745): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth1_virt_wifi\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@delneigh={0x28, 0x1d, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r2, 0x20, 0x96, 0x4}, [@NDA_LLADDR={0xa, 0x2, @remote}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x20000080) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xa006}, 0x4) syz_open_dev$evdev(&(0x7f0000019540), 0x5, 0x20140) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000000300)=""/102392, 0x18ff8) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000040)={0x2, 0x4e21, @broadcast}, 0x10) close(r4) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x22803) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x80d02, 0x0) ioctl$sock_ax25_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000240)={@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @bcast]}) r5 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000200), 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)={0x34, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}]}]}, 0x34}}, 0x0) 9.162102471s ago: executing program 1 (id=753): r0 = socket$igmp6(0xa, 0x3, 0x2) mq_open(0x0, 0x42, 0x197, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000005580)=""/102392, 0x18ff8) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000025000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x14, 0x11, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)}, 0x20000041) sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x4000000000001f2, 0x0) getsockopt(0xffffffffffffffff, 0x10117, 0xfbfffffe, 0x0, 0x0) bind$inet6(r0, &(0x7f0000004540)={0xa, 0x4e21, 0x3, @loopback, 0x80000001}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000000)='net/xfrm_stat\x00') 8.092066435s ago: executing program 3 (id=755): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000280)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000400)=[{0x1, 0x3, {0x2}, {0x0, 0xf0, 0x1}, 0xff, 0x2}], 0x20) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@newtfilter={0x24, 0x11, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0xb, 0xfff2}, {0xfff1, 0x9}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) 7.693829254s ago: executing program 1 (id=756): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x48) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000280)='\x00', 0x1}], 0x1, &(0x7f0000000040)=[@sndinfo={0x20, 0x84, 0x2, {0x4, 0x41, 0x0, 0x2000000}}, @prinfo={0x18, 0x84, 0x5, {0x0, 0x1}}], 0x38, 0x4048800}, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0x0, 0xffffffff}, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000003c0)={0x2, 0x1, 0x1}) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r3, 0x1, 0x70bd2d, 0x25dfdbfc}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x880) ioctl$vim2m_VIDIOC_DQBUF(r2, 0xc0585611, &(0x7f0000000040)=@overlay={0x0, 0x1, 0x4, 0x0, 0xd, {}, {0x4, 0x0, 0x0, 0x1, 0x0, 0x0, "12848098"}, 0x6}) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000140)=@multiplanar_mmap={0xffffffff, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x0, "a730b801"}, 0x0, 0x1, {0x0}}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000200)={0x6c, r5, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x13}, 0xf8}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @mcast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x40404}, 0x100) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x185802, 0x0) r8 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1044, 0x7a4d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x100, 0x0, 0x1, {0x22, 0x29}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0x81}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r8, 0x0, 0x0) syz_usb_control_io$hid(r8, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x2c8, 0x120, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1f8, 0xffffffff, 0xffffffff, 0x1f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'syzkaller0\x00', 'dvmrp1\x00', {}, {}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x100, 0x120, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x7, 0x4, 0x9}}, @inet=@rpfilter={{0x28}, {0x9}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x0, 0x0, 0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x328) sendfile(r7, r7, 0x0, 0x200000) 7.647606687s ago: executing program 0 (id=757): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x40006) r1 = socket$nl_rdma(0x10, 0x3, 0x14) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000005580)=""/102392, 0x18ff8) syz_open_dev$dvb_dvr(&(0x7f0000000240), 0x0, 0x13f) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r4, 0x6f2d, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000340)={0x0, 0x2, 0x201, 0x1d}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x100) keyctl$describe(0x6, 0x0, &(0x7f0000000480), 0x0) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(0xffffffffffffffff, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x0, 0x3, 0x13, 0x4}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e23, 0xf, @private0, 0x363}}, 0x36, 0x6, 0x33, 0x40, 0x72}, &(0x7f0000000040)=0x98) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, &(0x7f0000000240)={r5, 0x9fb}, 0x8) ioctl$DVB_DEMUX_DMX_START(0xffffffffffffffff, 0x6f29) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001b40), 0x20341, 0x0) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) io_setup(0x6, &(0x7f00000008c0)=0x0) io_submit(r7, 0x1, &(0x7f0000000740)=[&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0xfffa, r6, 0x0, 0x0, 0x1}]) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="380000000314010026bd7000fddbdf250900020073797a3000000000080041007369770014003300776731000000000000001b0000000000"], 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0xedbde134798091f0) 7.130259573s ago: executing program 3 (id=759): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) creat(0x0, 0x0) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f7}) syz_open_dev$dri(&(0x7f0000000000), 0x5, 0x444000) socket$pppoe(0x18, 0x1, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@gettaction={0x1c, 0x5a, 0xc6b747b6bf1c6b95, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8}]}, 0x1c}}, 0x0) 5.703873695s ago: executing program 3 (id=761): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000001000)={0x73622a85, 0x10b, 0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) prlimit64(0x0, 0x7, &(0x7f0000000ec0), 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1, 0x1000000000000, &(0x7f0000000340)="cb"}) 5.107815574s ago: executing program 2 (id=762): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x5, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xca, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0), 0x8, 0x34, 0x8, 0x8, &(0x7f0000000640)}}, 0x10) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001380)={&(0x7f0000001400)={0x50, 0x0, 0x200, 0x70bd28, 0x8, {}, [@HEADER={0x4}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x40448a0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000f80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[], 0x340}}, {{&(0x7f0000000300)={0xa, 0x4e20, 0x80000000, @empty, 0x7}, 0x1c, &(0x7f0000000f00)=[{&(0x7f0000000540)}, {&(0x7f0000000600)="58b327f21946add0e0c31b173119ac7b4ceda64bbfbc8159462a8686f4303aeee1d7c9b54c4bd660fe192582950eb09a8bae632fb4e7313e3828773c09fec9b010373ca7be0ccc91233fffcfe03f287a50f2b4a970278097aed06e61a0f2da47b0bd02fcb45bf35e78c15cc4c5d6d163a6eaf921d8afc7d8376e847f403535371a24ce2a19", 0x85}, {&(0x7f00000006c0)="138b9f8300af1d793c8e", 0xa}, {0x0}, {0x0}], 0x5}}], 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0xeeee8000, 0x4, 0x3, 0xf1, 0x5, 0xfa, 0xd4, 0xd4, 0x0, 0x4, 0x7, 0x4f}, {0x5000, 0x2, 0xd, 0x9, 0x8, 0x3, 0x6, 0xb, 0x5, 0xf, 0x3, 0xc0}, {0xffff1000, 0xeeef0000, 0xb, 0x1, 0x2, 0x7, 0x4, 0x1, 0x81, 0x0, 0x6, 0x5}, {0xeeee8000, 0x2000, 0x8, 0xf8, 0x3, 0x46, 0x2, 0xd, 0x6, 0x0, 0x8, 0x1}, {0x100000, 0x4000, 0x9, 0x9, 0x3, 0x9, 0xd, 0x6, 0x5, 0x9, 0xc, 0x4b}, {0x6000, 0x0, 0x4, 0x6, 0x3, 0x7d, 0x1, 0xff, 0x4, 0x90, 0x1, 0xfc}, {0x8000000, 0x4000, 0x0, 0x9d, 0x3, 0x0, 0x0, 0xb, 0x5, 0x7, 0x9, 0xf8}, {0xf7f63004, 0x8000000, 0xf, 0x5, 0x28, 0x3, 0xa, 0x9, 0x54, 0x1, 0x2, 0x7}, {0xdddd1000, 0x5}, {0x4, 0x9}, 0x40030000, 0x0, 0x80a0000, 0x300, 0x1, 0xa901, 0xe6e70c00, [0x3, 0x401, 0x7, 0xc5]}) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 5.107171914s ago: executing program 0 (id=763): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) memfd_create(0x0, 0x1) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0xfffffffe) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000280)={[0x60000000004, 0x1000000001, 0x20000000000, 0xacc, 0x2000000, 0x0, 0x2004cb, 0xffffffffeffffffe, 0xa19, 0x9, 0xd, 0x0, 0x3, 0x2, 0x2], 0x8000000, 0x202}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) mmap(&(0x7f00000c6000/0xf000)=nil, 0xf000, 0x1000005, 0x10, r0, 0x475fd000) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x45, 0x0) write$rfkill(r4, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) r5 = openat$snapshot(0xffffff9c, &(0x7f0000000100), 0x4000, 0x0) ioctl$SNAPSHOT_FREE(r5, 0x3305) pipe(&(0x7f00000000c0)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$FS_IOC_FSGETXATTR(r2, 0x801c581f, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_MPATH(r6, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="10002abd7000fedbdf251700000008000300", @ANYRES32=0x0, @ANYBLOB="0a001a000800000000000a001a00ffffffffffff00"/36], 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x800) syz_emit_ethernet(0xb6, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb86dd6000000000803afffe80000000000000000000000000001fff0200000000000000000000000000018700907800000000fe8000000000000000000000000000aaff0200000000000000e7000000000001010b909f50c218fa30165debb32c1997043f1c9ffeca5ab1225605024d58164e9cea3822ef2d41c58f08089a7f8687c5062f504a94e0dad5a7557dee3e4542e3d1342a4a735d0c9d276a7d7767714d09be6e294917c38356"], 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) 4.99419755s ago: executing program 2 (id=764): r0 = socket$igmp6(0xa, 0x3, 0x2) mq_open(0x0, 0x42, 0x197, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000005580)=""/102392, 0x18ff8) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000025000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x14, 0x11, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)}, 0x20000041) sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x4000000000001f2, 0x0) getsockopt(0xffffffffffffffff, 0x10117, 0xfbfffffe, 0x0, 0x0) bind$inet6(r0, &(0x7f0000004540)={0xa, 0x4e21, 0x3, @loopback, 0x80000001}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000000)='net/xfrm_stat\x00') 4.420706549s ago: executing program 3 (id=765): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth1_virt_wifi\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@delneigh={0x28, 0x1d, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r2, 0x20, 0x96, 0x4}, [@NDA_LLADDR={0xa, 0x2, @remote}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x20000080) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xa006}, 0x4) syz_open_dev$evdev(&(0x7f0000019540), 0x5, 0x20140) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000000300)=""/102392, 0x18ff8) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000040)={0x2, 0x4e21, @broadcast}, 0x10) close(r4) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f00000193c0)={{0x80}, 'port0\x00', 0xf3, 0x1b1c07, 0xfffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x80d02, 0x0) ioctl$sock_ax25_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000240)={@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @bcast]}) r5 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000200), 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)={0x34, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}]}]}, 0x34}}, 0x0) 4.299518305s ago: executing program 2 (id=766): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x101343) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x2, 0x4}}, 0x20) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000100000500010001"], 0x24}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000010401010000000000000000000004000500010001"], 0x1c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) 3.070283726s ago: executing program 3 (id=767): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000280)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000400)=[{0x3, 0x2, {0x1, 0x0, 0x2}, {0x2, 0xff}, 0x0, 0xfd}, {0x1, 0x3, {0x2}, {0x0, 0xf0, 0x1}, 0xff, 0x2}], 0x40) sendmsg$nl_route_sched(r0, 0x0, 0x20000050) 3.054765727s ago: executing program 2 (id=768): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth1_virt_wifi\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@delneigh={0x28, 0x1d, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r2, 0x20, 0x96, 0x4}, [@NDA_LLADDR={0xa, 0x2, @remote}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x20000080) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xa006}, 0x4) syz_open_dev$evdev(&(0x7f0000019540), 0x5, 0x20140) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000000300)=""/102392, 0x18ff8) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000040)={0x2, 0x4e21, @broadcast}, 0x10) close(r4) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x22803) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r5, 0xc0a85320, &(0x7f00000193c0)={{0x80}, 'port0\x00', 0xf3, 0x1b1c07, 0xfffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x80d02, 0x0) ioctl$sock_ax25_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000240)={@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @bcast]}) dup3(r5, r6, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000200), 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000019480)=ANY=[@ANYBLOB="940000000001010400000000000000000a00000a3c0001802c00018014000300fe80000000000000080000000000000014000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000001010c000280d1e2407d05000115000000000800074000000000"], 0x94}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)={0x34, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}]}]}, 0x34}}, 0x0) 2.889104145s ago: executing program 1 (id=769): syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0500000003f01f00040000009a00000001"], 0x48) syz_init_net_socket$rose(0xb, 0x5, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$dvb_frontend(&(0x7f00000003c0), 0x0, 0x44e02) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="0400010001100000"], 0x20}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) ioprio_set$uid(0x3, 0x0, 0x0) 2.236131778s ago: executing program 1 (id=770): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r4, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000900)=ANY=[@ANYBLOB="34000000000801010000000000c300000300000209000100730004800500030006000000"], 0x34}, 0x1, 0x0, 0x0, 0x20024810}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x40100, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x5) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000800)=ANY=[@ANYBLOB="340000001800010027bd050005fef50415000300030000200403000013f907000000000004000000"], 0x34}, 0x1, 0x0, 0x0, 0x805936d41ec618b7}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x8c200, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000005c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f200011800e000100636f6e6e6c696d69740000000c0002800800014000000000400000000c0a010200"], 0xe4}}, 0x0) io_uring_setup(0x243f, &(0x7f0000000200)={0x0, 0xfffffffb, 0x1000, 0x2, 0x2b}) sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x400c4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0xffffffb2) syz_emit_ethernet(0x70, &(0x7f0000000700)={@link_local, @empty, @void, {@ipv4={0x800, @dccp={{0x9, 0x4, 0x2, 0x5, 0x62, 0x67, 0x0, 0x2, 0x21, 0x0, @empty, @broadcast, {[@lsrr={0x83, 0xf, 0xfe, [@loopback, @remote, @multicast1]}]}}, {{0x4e20, 0x4e21, 0x4, 0x1, 0x3, 0x0, 0x0, 0x9, 0x1, "5e82e6", 0x2, ':]k'}, "4fbac72fac5bf3bbecdb3044df360ef32e9fb7ec5d5a399aee4fc3c61c438aeeb00f417d676b814280430ded1d68"}}}}}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) unshare(0x6a040000) 2.225473319s ago: executing program 2 (id=771): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc}) r1 = eventfd2(0x8, 0x0) ppoll(&(0x7f0000000500)=[{r1, 0x8000}], 0x1, 0x0, 0x0, 0x0) write$eventfd(r1, &(0x7f0000000140)=0xfffffffffffffffc, 0x8) 2.174250281s ago: executing program 3 (id=772): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x40006) r1 = socket$nl_rdma(0x10, 0x3, 0x14) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000005580)=""/102392, 0x18ff8) syz_open_dev$dvb_dvr(&(0x7f0000000240), 0x0, 0x13f) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r4, 0x6f2d, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000340)={0x0, 0x2, 0x201, 0x1d}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x100) keyctl$describe(0x6, 0x0, &(0x7f0000000480), 0x0) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(0xffffffffffffffff, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x0, 0x3, 0x13, 0x4}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e23, 0xf, @private0, 0x363}}, 0x36, 0x6, 0x33, 0x40, 0x72}, &(0x7f0000000040)=0x98) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, &(0x7f0000000240)={r5, 0x9fb}, 0x8) ioctl$DVB_DEMUX_DMX_START(0xffffffffffffffff, 0x6f29) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001b40), 0x20341, 0x0) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) io_setup(0x6, &(0x7f00000008c0)=0x0) io_submit(r7, 0x1, &(0x7f0000000740)=[&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0xfffa, r6, 0x0, 0x0, 0x1}]) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="380000000314010026bd7000fddbdf250900020073797a3000000000080041007369770014003300776731000000000000001b0000000000"], 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0xedbde134798091f0) 1.99922732s ago: executing program 0 (id=773): syz_io_uring_setup(0x889, 0x0, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x44800) syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x800, 0xffffffff, 0xbfe00000}, 0x0, &(0x7f0000000280)) socket$isdn(0x22, 0x2, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8) ptrace(0x10, 0x1) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000040c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 877.968366ms ago: executing program 1 (id=774): r0 = socket$igmp6(0xa, 0x3, 0x2) mq_open(0x0, 0x42, 0x197, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000005580)=""/102392, 0x18ff8) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000025000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x14, 0x11, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)}, 0x20000041) sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x4000000000001f2, 0x0) getsockopt(0xffffffffffffffff, 0x10117, 0xfbfffffe, 0x0, 0x0) bind$inet6(r0, &(0x7f0000004540)={0xa, 0x4e21, 0x3, @loopback, 0x80000001}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000000)='net/xfrm_stat\x00') 722.282664ms ago: executing program 2 (id=775): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000001000)={0x73622a85, 0x10b, 0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) prlimit64(0x0, 0x7, &(0x7f0000000ec0), 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1, 0x1000000000000, &(0x7f0000000340)="cb"}) 707.197385ms ago: executing program 0 (id=776): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x101343) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x2, 0x4}}, 0x20) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000100000500010001"], 0x24}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000010401010000000000000000000004000500010001"], 0x1c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) 596.33152ms ago: executing program 1 (id=777): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x48) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000280)='\x00', 0x1}], 0x1, &(0x7f0000000040)=[@sndinfo={0x20, 0x84, 0x2, {0x4, 0x41, 0x0, 0x2000000}}, @prinfo={0x18, 0x84, 0x5, {0x0, 0x1}}], 0x38, 0x4048800}, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0x0, 0xffffffff}, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000003c0)={0x2, 0x1, 0x1}) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r3, 0x1, 0x70bd2d, 0x25dfdbfc}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x880) ioctl$vim2m_VIDIOC_DQBUF(r2, 0xc0585611, &(0x7f0000000040)=@overlay={0x0, 0x1, 0x4, 0x0, 0xd, {}, {0x4, 0x0, 0x0, 0x1, 0x0, 0x0, "12848098"}, 0x6}) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000140)=@multiplanar_mmap={0xffffffff, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x0, "a730b801"}, 0x0, 0x1, {0x0}}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000200)={0x6c, r5, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x13}, 0xf8}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @mcast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x40404}, 0x100) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x185802, 0x0) r8 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1044, 0x7a4d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x100, 0x0, 0x1, {0x22, 0x29}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0x81}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r8, 0x0, 0x0) syz_usb_control_io$hid(r8, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x2c8, 0x120, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1f8, 0xffffffff, 0xffffffff, 0x1f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'syzkaller0\x00', 'dvmrp1\x00', {}, {}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x100, 0x120, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x7, 0x4, 0x9}}, @inet=@rpfilter={{0x28}, {0x9}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x0, 0x0, 0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x328) sendfile(r7, r7, 0x0, 0x200000) 0s ago: executing program 0 (id=778): syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0500000003f01f00040000009a00000001"], 0x48) syz_init_net_socket$rose(0xb, 0x5, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$dvb_frontend(&(0x7f00000003c0), 0x0, 0x44e02) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="0400010001100000"], 0x20}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) ioprio_set$uid(0x3, 0x0, 0x0) kernel console output (not intermixed with test programs): to keep mac addresses unique to avoid problems! [ 124.263679][ T5767] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 124.311577][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 124.330928][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.347892][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 124.365576][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.383090][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 124.404084][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.423471][ T5767] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 124.465351][ T5767] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.478771][ T5767] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.492176][ T5767] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.504330][ T5767] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.543264][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.557554][ T5772] Bluetooth: hci0: command tx timeout [ 124.584531][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.633539][ T5772] Bluetooth: hci3: command tx timeout [ 124.633575][ T5780] Bluetooth: hci1: command tx timeout [ 124.655524][ T131] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.672157][ T131] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.711481][ T5780] Bluetooth: hci2: command tx timeout [ 124.744659][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.768108][ T1138] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.774440][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.779167][ T1138] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.911355][ T131] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.951411][ T131] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.096601][ T1023] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.182583][ T5848] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 125.215717][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 125.318463][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 125.351129][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 125.420581][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 125.523098][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 125.536222][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 125.591167][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 125.625144][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 125.637597][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 125.820342][ T1023] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.371110][ T5843] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 126.611371][ T5843] usb 4-1: Using ep0 maxpacket: 8 [ 126.632334][ T5780] Bluetooth: hci0: command tx timeout [ 126.753412][ T5843] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 126.788164][ T5843] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.831400][ T5843] usb 4-1: Product: syz [ 126.848529][ T5843] usb 4-1: Manufacturer: syz [ 126.870267][ T5843] usb 4-1: SerialNumber: syz [ 126.956696][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 128.163969][ T5843] usb 4-1: config 0 descriptor?? [ 128.240596][ T5843] usb 4-1: can't set config #0, error -71 [ 128.284280][ T5843] usb 4-1: USB disconnect, device number 2 [ 129.092386][ T5884] ======================================================= [ 129.092386][ T5884] WARNING: The mand mount option has been deprecated and [ 129.092386][ T5884] and is ignored by this kernel. Remove the mand [ 129.092386][ T5884] option from the mount to silence this warning. [ 129.092386][ T5884] ======================================================= [ 129.135332][ C0] vkms_vblank_simulate: vblank timer overrun [ 130.542802][ T5896] netlink: 165 bytes leftover after parsing attributes in process `syz.2.13'. [ 131.760917][ T5911] misc userio: Invalid payload size [ 132.864646][ T5910] Zero length message leads to an empty skb [ 134.204492][ T5923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 134.222254][ T5923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.290638][ T5923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 134.313666][ T5923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.344654][ T5923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 134.385997][ T5927] fuse: Bad value for 'fd' [ 134.406440][ T5923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.424742][ T5923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 134.467534][ T5923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.507356][ T5923] batman_adv: batadv0: Adding interface: ipvlan2 [ 134.517703][ T5923] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 134.553158][ T5923] batman_adv: batadv0: Not using interface ipvlan2 (retrying later): interface not active [ 135.784140][ T5929] Bluetooth: MGMT ver 1.22 [ 135.971965][ T5938] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 136.498602][ T5843] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 137.533805][ T5843] usb 1-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 137.748192][ T5843] usb 1-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 137.831050][ T5780] Bluetooth: hci0: command tx timeout [ 137.840740][ T5812] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 137.873777][ T5843] usb 1-1: Product: syz [ 137.905577][ T5843] usb 1-1: Manufacturer: syz [ 137.993942][ T5843] usb 1-1: SerialNumber: syz [ 138.070385][ T5812] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 138.085622][ T5812] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.123521][ T5812] usb 2-1: config 0 descriptor?? [ 138.154059][ T5812] cp210x 2-1:0.0: cp210x converter detected [ 138.156849][ T5843] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 138.576089][ T5812] cp210x 2-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 138.612724][ T5812] cp210x 2-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 138.670697][ T5812] cp210x 2-1:0.0: GPIO initialisation failed: -71 [ 138.707282][ T5812] usb 2-1: cp210x converter now attached to ttyUSB0 [ 138.743435][ T5812] usb 2-1: USB disconnect, device number 2 [ 138.773603][ T5812] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 138.816330][ T5812] cp210x 2-1:0.0: device disconnected [ 138.818151][ T5843] vp7045: USB control message 'in' went wrong. [ 138.849488][ T5843] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 138.895390][ T5843] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 138.930284][ T5967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 138.975904][ T5967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.989704][ T5843] usb 1-1: USB disconnect, device number 2 [ 139.026666][ T5967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 139.099103][ T5967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.155750][ T5967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 139.250633][ T5967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.340575][ T5967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 139.428593][ T5967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.502806][ T5972] netlink: 40 bytes leftover after parsing attributes in process `syz.1.33'. [ 139.588527][ T5967] batman_adv: batadv0: Adding interface: ipvlan2 [ 139.649257][ T5967] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 139.853596][ T5967] batman_adv: batadv0: Not using interface ipvlan2 (retrying later): interface not active [ 140.083530][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 140.092576][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 142.372885][ T5997] netlink: 4 bytes leftover after parsing attributes in process `syz.2.40'. [ 142.719200][ T6003] 9pnet_fd: Insufficient options for proto=fd [ 145.503443][ T6030] wg1 speed is unknown, defaulting to 1000 [ 145.545229][ T6030] wg1 speed is unknown, defaulting to 1000 [ 146.368558][ T6030] wg1 speed is unknown, defaulting to 1000 [ 146.468279][ T6038] 9pnet_fd: Insufficient options for proto=fd [ 146.493676][ T6030] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 146.838906][ T6030] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 147.285361][ T6047] netlink: 40 bytes leftover after parsing attributes in process `syz.2.54'. [ 148.099144][ T6030] wg1 speed is unknown, defaulting to 1000 [ 148.132666][ T6030] wg1 speed is unknown, defaulting to 1000 [ 148.176013][ T6030] wg1 speed is unknown, defaulting to 1000 [ 148.198600][ T6030] wg1 speed is unknown, defaulting to 1000 [ 150.129994][ T6065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 150.161874][ T6065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.204372][ T6065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 150.261840][ T6065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.289058][ T6065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 150.337683][ T6065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.388343][ T6065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 150.441513][ T6065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.462122][ T6065] batman_adv: batadv0: Adding interface: ipvlan3 [ 150.496560][ T6065] batman_adv: batadv0: The MTU of interface ipvlan3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 150.580709][ T6065] batman_adv: batadv0: Not using interface ipvlan3 (retrying later): interface not active [ 150.761709][ T5842] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 150.763446][ T6070] team0: entered allmulticast mode [ 150.791499][ T6070] team_slave_0: entered allmulticast mode [ 150.810579][ T6070] team_slave_1: entered allmulticast mode [ 150.839083][ T6070] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 151.002906][ T5842] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 151.033195][ T5842] usb 3-1: config 0 has no interface number 0 [ 151.042490][ T5842] usb 3-1: config 0 interface 41 has no altsetting 0 [ 151.067949][ T5842] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 151.091505][ T5842] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.106377][ T5842] usb 3-1: Product: syz [ 151.138497][ T5842] usb 3-1: Manufacturer: syz [ 151.148885][ T5842] usb 3-1: SerialNumber: syz [ 151.168874][ T5842] usb 3-1: config 0 descriptor?? [ 151.967006][ T5842] CoreChips: probe of 3-1:0.41 failed with error -71 [ 152.182234][ T5842] usb 3-1: USB disconnect, device number 2 [ 152.778634][ T6095] siw: device registration error -23 [ 153.056124][ T6100] netlink: 40 bytes leftover after parsing attributes in process `syz.2.69'. [ 154.429327][ T6111] netlink: 165 bytes leftover after parsing attributes in process `syz.1.72'. [ 155.341897][ T6116] rtc_cmos 00:00: Alarms can be up to one day in the future [ 155.485654][ T27] rtc_cmos 00:00: Alarms can be up to one day in the future [ 155.517979][ T27] rtc_cmos 00:00: Alarms can be up to one day in the future [ 155.540068][ T27] rtc_cmos 00:00: Alarms can be up to one day in the future [ 155.560857][ T27] rtc_cmos 00:00: Alarms can be up to one day in the future [ 155.580725][ T27] rtc rtc0: __rtc_set_alarm: err=-22 [ 155.650719][ T5854] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 155.731386][ T5842] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 155.760858][ T5843] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 155.842275][ T5854] usb 1-1: config 0 has an invalid interface number: 69 but max is 0 [ 155.867771][ T5854] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 155.890904][ T5854] usb 1-1: config 0 has no interface number 0 [ 155.898389][ T5854] usb 1-1: config 0 interface 69 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 155.921502][ T5854] usb 1-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 0 [ 155.947932][ T5842] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 155.962745][ T5854] usb 1-1: config 0 interface 69 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 155.991343][ T5842] usb 3-1: config 0 has no interface number 0 [ 155.998951][ T5842] usb 3-1: config 0 interface 41 has no altsetting 0 [ 156.026872][ T5843] usb 4-1: config 0 has an invalid interface number: 69 but max is 0 [ 156.047696][ T5843] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 156.077592][ T5842] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 156.094266][ T5854] usb 1-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 156.121294][ T5842] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.136190][ T5843] usb 4-1: config 0 has no interface number 0 [ 156.153720][ T5854] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.172839][ T5842] usb 3-1: Product: syz [ 156.181555][ T5843] usb 4-1: config 0 interface 69 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 156.200795][ T5842] usb 3-1: Manufacturer: syz [ 156.210692][ T5854] usb 1-1: Product: syz [ 156.220667][ T5842] usb 3-1: SerialNumber: syz [ 156.232475][ T5854] usb 1-1: Manufacturer: syz [ 156.240907][ T5843] usb 4-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 0 [ 156.263874][ T5842] usb 3-1: config 0 descriptor?? [ 156.276829][ T5854] usb 1-1: SerialNumber: syz [ 156.290710][ T5843] usb 4-1: config 0 interface 69 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 156.317846][ T5854] usb 1-1: config 0 descriptor?? [ 156.338700][ T5843] usb 4-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 156.361730][ T5843] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.377352][ T5843] usb 4-1: Product: syz [ 156.389858][ T5854] cyberjack 1-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 156.420059][ T5854] cyberjack ttyUSB0: usb_submit_urb(read int) failed [ 156.437167][ T5843] usb 4-1: Manufacturer: syz [ 156.443248][ T5843] usb 4-1: SerialNumber: syz [ 156.455219][ T5854] usb 1-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 156.485477][ T5843] usb 4-1: config 0 descriptor?? [ 156.501462][ T5843] cyberjack 4-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 156.557962][ T5843] cyberjack ttyUSB1: usb_submit_urb(read int) failed [ 157.340847][ T6131] xfrm0 speed is unknown, defaulting to 1000 [ 157.367979][ T6131] xfrm0 speed is unknown, defaulting to 1000 [ 157.479199][ T6131] xfrm0 speed is unknown, defaulting to 1000 [ 157.499648][ T5842] CoreChips: probe of 3-1:0.41 failed with error -71 [ 157.611942][ T5843] usb 4-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB1 [ 157.658118][ T6131] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 157.711214][ T5842] usb 3-1: USB disconnect, device number 3 [ 157.868852][ T6131] xfrm0 speed is unknown, defaulting to 1000 [ 157.891611][ T6131] xfrm0 speed is unknown, defaulting to 1000 [ 157.913567][ T6131] xfrm0 speed is unknown, defaulting to 1000 [ 157.933726][ T6131] xfrm0 speed is unknown, defaulting to 1000 [ 157.944820][ T6118] siw: device registration error -23 [ 157.953447][ T5810] usb 1-1: USB disconnect, device number 3 [ 157.976903][ T5810] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 158.014198][ T5810] cyberjack 1-1:0.69: device disconnected [ 158.100456][ T5854] usb 4-1: USB disconnect, device number 3 [ 158.174349][ T5854] cyberjack ttyUSB1: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB1 [ 158.252975][ T5854] cyberjack 4-1:0.69: device disconnected [ 160.811552][ T6142] fuse: Bad value for 'fd' [ 160.904959][ T6143] comedi comedi3: rti800: I/O port conflict (0x3,16) [ 162.435495][ T6153] netlink: 8 bytes leftover after parsing attributes in process `syz.2.85'. [ 162.990797][ T5810] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 163.223532][ T5810] usb 2-1: config 0 has an invalid interface number: 69 but max is 0 [ 163.243801][ T5810] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 163.258171][ T5810] usb 2-1: config 0 has no interface number 0 [ 163.266762][ T5810] usb 2-1: config 0 interface 69 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 163.279423][ T5810] usb 2-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 0 [ 163.297823][ T5810] usb 2-1: config 0 interface 69 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 163.317930][ T5810] usb 2-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 163.329386][ T5810] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.338566][ T5810] usb 2-1: Product: syz [ 163.343763][ T5810] usb 2-1: Manufacturer: syz [ 163.348956][ T5810] usb 2-1: SerialNumber: syz [ 163.366837][ T5810] usb 2-1: config 0 descriptor?? [ 163.387938][ T5810] cyberjack 2-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 163.425958][ T5810] cyberjack ttyUSB0: usb_submit_urb(read int) failed [ 163.444202][ T5810] usb 2-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 163.550753][ T5842] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 163.795327][ T6172] siw: device registration error -23 [ 163.942984][ T5842] usb 3-1: config 0 has an invalid interface number: 69 but max is 0 [ 164.006977][ T5842] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 164.208368][ T5810] usb 2-1: USB disconnect, device number 3 [ 164.227794][ T5842] usb 3-1: config 0 has no interface number 0 [ 164.242504][ T5810] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 164.264368][ T6176] netlink: 40 bytes leftover after parsing attributes in process `syz.0.84'. [ 164.286797][ T5842] usb 3-1: config 0 interface 69 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 164.288625][ T5810] cyberjack 2-1:0.69: device disconnected [ 164.313078][ T5842] usb 3-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 0 [ 164.369332][ T5842] usb 3-1: config 0 interface 69 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 164.396234][ T5842] usb 3-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 164.416963][ T5842] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.427284][ T5842] usb 3-1: Product: syz [ 164.432704][ T5842] usb 3-1: Manufacturer: syz [ 164.438738][ T5842] usb 3-1: SerialNumber: syz [ 164.456680][ T5842] usb 3-1: config 0 descriptor?? [ 164.472642][ T5842] cyberjack 3-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 164.489325][ T5842] cyberjack ttyUSB0: usb_submit_urb(read int) failed [ 164.508459][ T5842] usb 3-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 164.767685][ T6178] siw: device registration error -23 [ 165.280669][ T5810] usb 3-1: USB disconnect, device number 4 [ 165.301165][ T5810] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 165.361390][ T5810] cyberjack 3-1:0.69: device disconnected [ 165.554839][ T6182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 165.571572][ T6182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.586151][ T6182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 165.598288][ T6182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.611125][ T6182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 165.633104][ T6182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.646878][ T6182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 165.659531][ T6182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.681163][ T6182] batman_adv: batadv0: Adding interface: ipvlan3 [ 165.689028][ T6182] batman_adv: batadv0: The MTU of interface ipvlan3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 165.720325][ T6182] batman_adv: batadv0: Not using interface ipvlan3 (retrying later): interface not active [ 165.790950][ T27] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 166.050639][ T27] usb 2-1: Using ep0 maxpacket: 8 [ 167.600498][ C0] sched: RT throttling activated [ 167.897837][ T6189] fuse: Bad value for 'fd' [ 169.564163][ T6197] 9pnet_fd: Insufficient options for proto=fd [ 169.710394][ T27] usb 2-1: unable to get BOS descriptor or descriptor too short [ 169.730953][ T27] usb 2-1: no configurations [ 169.736424][ T27] usb 2-1: can't read configurations, error -22 [ 171.418235][ T6209] netlink: 8 bytes leftover after parsing attributes in process `syz.1.101'. [ 171.629170][ T6212] sctp: [Deprecated]: syz.1.101 (pid 6212) Use of int in max_burst socket option deprecated. [ 171.629170][ T6212] Use struct sctp_assoc_value instead [ 173.623900][ T6223] netlink: 40 bytes leftover after parsing attributes in process `syz.3.105'. [ 173.695151][ T6225] comedi comedi3: rti800: I/O port conflict (0x3,16) [ 175.315955][ T6233] netlink: 'syz.0.100': attribute type 1 has an invalid length. [ 175.325553][ T6233] netlink: 'syz.0.100': attribute type 2 has an invalid length. [ 175.336102][ T6233] netlink: 20 bytes leftover after parsing attributes in process `syz.0.100'. [ 175.392759][ T6233] netlink: 'syz.0.100': attribute type 1 has an invalid length. [ 175.403130][ T6233] netlink: 'syz.0.100': attribute type 2 has an invalid length. [ 175.413746][ T6233] netlink: 20 bytes leftover after parsing attributes in process `syz.0.100'. [ 176.131583][ T6236] netlink: 8 bytes leftover after parsing attributes in process `syz.0.108'. [ 178.668969][ T6249] 9pnet_fd: Insufficient options for proto=fd [ 180.939267][ T6268] fuse: Bad value for 'fd' [ 181.073170][ T27] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 182.248495][ T27] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 182.270678][ T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.284115][ T27] usb 1-1: config 0 descriptor?? [ 182.302423][ T27] cp210x 1-1:0.0: cp210x converter detected [ 183.714867][ T27] cp210x 1-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 183.740823][ T27] cp210x 1-1:0.0: querying part number failed [ 183.789861][ T27] usb 1-1: cp210x converter now attached to ttyUSB0 [ 183.841041][ T27] usb 1-1: USB disconnect, device number 4 [ 183.873696][ T27] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 183.941572][ T27] cp210x 1-1:0.0: device disconnected [ 184.269981][ T6286] 9pnet_fd: Insufficient options for proto=fd [ 186.072289][ T6301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.134214][ T6301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.189425][ T6301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.244645][ T6301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.307093][ T6301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.839456][ T6301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.850998][ T6301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.865201][ T6301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.073297][ T5780] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 187.087843][ T5780] CPU: 1 PID: 5780 Comm: kworker/u5:6 Not tainted syzkaller #0 [ 187.098927][ T5780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 187.111028][ T5780] Workqueue: hci2 hci_rx_work [ 187.116699][ T5780] Call Trace: [ 187.120179][ T5780] [ 187.124336][ T5780] dump_stack_lvl+0x18c/0x250 [ 187.129446][ T5780] ? show_regs_print_info+0x20/0x20 [ 187.136055][ T5780] ? load_image+0x400/0x400 [ 187.140903][ T5780] sysfs_create_dir_ns+0x26e/0x2a0 [ 187.147172][ T5780] ? sysfs_warn_dup+0xa0/0xa0 [ 187.152880][ T5780] ? do_raw_spin_unlock+0x121/0x230 [ 187.159044][ T5780] kobject_add_internal+0x61c/0xcc0 [ 187.164822][ T5780] kobject_add+0x164/0x240 [ 187.169635][ T5780] ? __rwlock_init+0x150/0x150 [ 187.174948][ T5780] ? kobject_init+0x1e0/0x1e0 [ 187.179726][ T5780] ? _raw_spin_unlock+0x28/0x40 [ 187.184882][ T5780] ? get_device_parent+0x366/0x390 [ 187.190452][ T5780] device_add+0x408/0xc20 [ 187.195073][ T5780] hci_conn_add_sysfs+0xd5/0x1e0 [ 187.200449][ T5780] le_conn_complete_evt+0xf5d/0x1540 [ 187.206084][ T5780] ? hci_event_packet+0x4cb/0x1270 [ 187.211916][ T5780] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 187.218908][ T5780] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 187.225251][ T5780] ? skb_pull_data+0xfb/0x200 [ 187.230813][ T5780] hci_le_conn_complete_evt+0x187/0x440 [ 187.236820][ T5780] ? hci_remote_host_features_evt+0x150/0x150 [ 187.243264][ T5780] hci_event_packet+0x7ba/0x1270 [ 187.248996][ T5780] ? bis_list+0x290/0x290 [ 187.253603][ T5780] ? lockdep_hardirqs_on+0x98/0x150 [ 187.261446][ T5780] ? hci_send_to_monitor+0xd7/0x4f0 [ 187.269049][ T5780] hci_rx_work+0x43a/0xd60 [ 187.274451][ T5780] ? process_scheduled_works+0x96f/0x15d0 [ 187.281927][ T5780] process_scheduled_works+0xa5d/0x15d0 [ 187.288571][ T5780] ? worker_attach_to_pool+0x380/0x380 [ 187.294562][ T5780] ? assign_work+0x3d2/0x5d0 [ 187.299973][ T5780] worker_thread+0xa55/0xfc0 [ 187.305542][ T5780] kthread+0x2fa/0x390 [ 187.312513][ T5780] ? pr_cont_work+0x560/0x560 [ 187.321045][ T5780] ? kthread_blkcg+0xd0/0xd0 [ 187.327044][ T5780] ret_from_fork+0x48/0x80 [ 187.331834][ T5780] ? kthread_blkcg+0xd0/0xd0 [ 187.338217][ T5780] ret_from_fork_asm+0x11/0x20 [ 187.345207][ T5780] [ 187.352280][ T5780] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 187.368768][ T5780] Bluetooth: hci2: failed to register connection device [ 187.469622][ T6318] netlink: 4 bytes leftover after parsing attributes in process `syz.1.129'. [ 187.575779][ T6323] fuse: Bad value for 'fd' [ 187.586721][ T6318] nbd: socks must be embedded in a SOCK_ITEM attr [ 187.717100][ T5776] udevd[5776]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 188.756894][ T6339] siw: device registration error -23 [ 189.151389][ T6345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 189.169404][ T6345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.183949][ T6345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 189.198078][ T6345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.219776][ T6345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 189.233254][ T6345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.246270][ T6345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 189.265935][ T6345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.440552][ T5772] Bluetooth: hci2: command tx timeout [ 190.166377][ T6351] tipc: Started in network mode [ 190.174529][ T6351] tipc: Node identity fe2264a8b8fb, cluster identity 4711 [ 190.191022][ T6351] tipc: Enabled bearer , priority 0 [ 190.227525][ T6351] syzkaller0: entered promiscuous mode [ 190.238189][ T6351] syzkaller0: entered allmulticast mode [ 190.357773][ T6351] tipc: Resetting bearer [ 190.390038][ T6350] tipc: Resetting bearer [ 190.573958][ T6350] tipc: Disabling bearer [ 191.368523][ T6361] UHID_CREATE from different security context by process 133 (syz.0.144), this is not allowed. [ 192.480744][ T5854] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 192.688257][ T6382] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 192.716859][ T6382] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 192.844050][ T5854] usb 4-1: config 0 has an invalid interface number: 69 but max is 0 [ 192.854344][ T5854] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 192.898023][ T5854] usb 4-1: config 0 has no interface number 0 [ 192.940640][ T5854] usb 4-1: config 0 interface 69 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 192.966127][ T5854] usb 4-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 0 [ 193.094207][ T5854] usb 4-1: config 0 interface 69 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 193.120204][ T5854] usb 4-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 193.135027][ T5854] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.149239][ T5854] usb 4-1: Product: syz [ 193.157633][ T5854] usb 4-1: Manufacturer: syz [ 193.164169][ T5854] usb 4-1: SerialNumber: syz [ 193.889434][ T5854] usb 4-1: config 0 descriptor?? [ 193.942392][ T5854] cyberjack 4-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 193.965019][ T5854] cyberjack ttyUSB0: usb_submit_urb(read int) failed [ 194.012231][ T5854] usb 4-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 195.098853][ T23] usb 4-1: USB disconnect, device number 4 [ 195.172780][ T23] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 195.207688][ T23] cyberjack 4-1:0.69: device disconnected [ 199.393803][ T6414] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 199.441060][ T6414] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 199.471432][ T6416] netlink: 40 bytes leftover after parsing attributes in process `syz.1.160'. [ 200.298210][ T6430] siw: device registration error -23 [ 201.440593][ T5842] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 201.514147][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 201.524331][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 202.511998][ T5842] usb 1-1: config 0 has an invalid interface number: 69 but max is 0 [ 202.533736][ T6449] overlayfs: missing 'lowerdir' [ 202.542077][ T5842] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 202.556835][ T5842] usb 1-1: config 0 has no interface number 0 [ 202.566433][ T5842] usb 1-1: config 0 interface 69 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 202.590592][ T5842] usb 1-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 0 [ 202.651944][ T5842] usb 1-1: config 0 interface 69 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 202.658377][ T6451] netlink: 4 bytes leftover after parsing attributes in process `syz.3.174'. [ 202.683784][ T5842] usb 1-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 202.699887][ T5842] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.720329][ T5842] usb 1-1: Product: syz [ 202.735037][ T5842] usb 1-1: Manufacturer: syz [ 202.752264][ T5842] usb 1-1: SerialNumber: syz [ 202.770040][ T5842] usb 1-1: config 0 descriptor?? [ 202.786998][ T5842] cyberjack 1-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 202.833400][ T5842] cyberjack ttyUSB0: usb_submit_urb(read int) failed [ 202.845820][ T5842] usb 1-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 203.139670][ T6454] siw: device registration error -23 [ 203.769952][ T6457] netlink: 165 bytes leftover after parsing attributes in process `syz.1.176'. [ 204.311537][ T5842] usb 1-1: USB disconnect, device number 5 [ 204.339645][ T5842] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 204.383468][ T5842] cyberjack 1-1:0.69: device disconnected [ 204.547083][ T11] nci: nci_rx_work: unknown MT 0x7 [ 204.662152][ T6472] capability: warning: `syz.1.180' uses 32-bit capabilities (legacy support in use) [ 205.539494][ T6474] netlink: 40 bytes leftover after parsing attributes in process `syz.2.181'. [ 205.687916][ T6480] overlayfs: missing 'lowerdir' [ 207.002975][ T6494] sctp: [Deprecated]: syz.0.186 (pid 6494) Use of int in max_burst socket option deprecated. [ 207.002975][ T6494] Use struct sctp_assoc_value instead [ 207.384091][ T6461] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 207.731170][ T6502] netlink: 4 bytes leftover after parsing attributes in process `syz.3.188'. [ 208.858195][ T6512] overlayfs: missing 'lowerdir' [ 209.121852][ T5842] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 209.203674][ T6525] ptrace attach of "./syz-executor exec"[5769] was attempted by "./syz-executor exec"[6525] [ 209.720676][ T5842] usb 4-1: config 0 has an invalid interface number: 69 but max is 0 [ 209.747980][ T5842] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 209.782170][ T5842] usb 4-1: config 0 has no interface number 0 [ 209.788846][ T5842] usb 4-1: config 0 interface 69 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 209.840129][ T5842] usb 4-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 0 [ 209.870048][ T5842] usb 4-1: config 0 interface 69 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 209.927607][ T5842] usb 4-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 209.945447][ T5842] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.975661][ T5842] usb 4-1: Product: syz [ 209.980309][ T5842] usb 4-1: Manufacturer: syz [ 209.998604][ T5842] usb 4-1: SerialNumber: syz [ 210.018003][ T5842] usb 4-1: config 0 descriptor?? [ 210.057085][ T5842] cyberjack 4-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 210.112456][ T5842] cyberjack ttyUSB0: usb_submit_urb(read int) failed [ 210.128846][ T6531] netlink: 40 bytes leftover after parsing attributes in process `syz.2.197'. [ 210.175131][ T5842] usb 4-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 210.860430][ T8] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 211.291674][ T8] usb 2-1: Using ep0 maxpacket: 16 [ 211.412848][ T8] usb 2-1: New USB device found, idVendor=2b53, idProduct=0023, bcdDevice= 0.40 [ 211.463892][ T23] usb 4-1: USB disconnect, device number 5 [ 211.464684][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.510319][ T8] usb 2-1: Product: syz [ 211.514270][ T23] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 211.540095][ T8] usb 2-1: Manufacturer: syz [ 211.545897][ T23] cyberjack 4-1:0.69: device disconnected [ 211.549325][ T8] usb 2-1: SerialNumber: syz [ 211.692238][ T6542] block device autoloading is deprecated and will be removed. [ 212.199080][ T6548] netlink: 8 bytes leftover after parsing attributes in process `syz.3.202'. [ 212.218707][ T6548] sctp: [Deprecated]: syz.3.202 (pid 6548) Use of int in max_burst socket option deprecated. [ 212.218707][ T6548] Use struct sctp_assoc_value instead [ 213.305727][ T8] usb 2-1: USB disconnect, device number 6 [ 214.810576][ T8] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 214.829035][ T6581] netlink: 40 bytes leftover after parsing attributes in process `syz.0.211'. [ 215.033965][ T8] usb 3-1: config 0 has an invalid interface number: 69 but max is 0 [ 215.144842][ T8] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 215.782015][ T8] usb 3-1: config 0 has no interface number 0 [ 215.841181][ T8] usb 3-1: config 0 interface 69 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 215.870836][ T8] usb 3-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 0 [ 215.904347][ T8] usb 3-1: config 0 interface 69 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 215.937497][ T8] usb 3-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 215.949435][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.960436][ T8] usb 3-1: Product: syz [ 215.966314][ T8] usb 3-1: Manufacturer: syz [ 215.972206][ T8] usb 3-1: SerialNumber: syz [ 215.981492][ T8] usb 3-1: config 0 descriptor?? [ 215.991650][ T8] cyberjack 3-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 216.003598][ T8] cyberjack ttyUSB0: usb_submit_urb(read int) failed [ 216.016166][ T8] usb 3-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 216.814685][ T6594] siw: device registration error -23 [ 217.257424][ T787] usb 3-1: USB disconnect, device number 5 [ 217.320135][ T787] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 217.344899][ T787] cyberjack 3-1:0.69: device disconnected [ 221.118851][ T6628] netlink: 165 bytes leftover after parsing attributes in process `syz.2.225'. [ 221.774642][ T6635] netlink: 40 bytes leftover after parsing attributes in process `syz.1.226'. [ 224.310675][ T5842] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 224.530859][ T5842] usb 1-1: Using ep0 maxpacket: 8 [ 224.555931][ T5842] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 224.568083][ T5842] usb 1-1: config 179 has no interface number 0 [ 224.576694][ T5842] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 224.592368][ T5842] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 224.607144][ T5842] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 224.620326][ T5842] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 224.709546][ T5842] usb 1-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 224.735343][ T5842] usb 1-1: config 179 interface 65 has no altsetting 0 [ 224.744410][ T5842] usb 1-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 224.760349][ T5842] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.836729][ T5842] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input5 [ 225.163728][ T5810] usb 1-1: USB disconnect, device number 6 [ 225.164826][ C0] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 225.183971][ T5810] xpad 1-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 225.321102][ T6668] netlink: 4 bytes leftover after parsing attributes in process `syz.2.238'. [ 227.463834][ T6693] netlink: 165 bytes leftover after parsing attributes in process `syz.1.244'. [ 227.500111][ T6694] netlink: 40 bytes leftover after parsing attributes in process `syz.3.242'. [ 228.212335][ T6711] netlink: 4 bytes leftover after parsing attributes in process `syz.1.248'. [ 228.299536][ T6712] fuse: Bad value for 'fd' [ 228.403947][ T6714] netlink: 16 bytes leftover after parsing attributes in process `syz.1.251'. [ 229.909772][ T6722] netlink: 165 bytes leftover after parsing attributes in process `syz.3.254'. [ 231.004826][ T6735] netlink: 40 bytes leftover after parsing attributes in process `syz.3.257'. [ 231.149525][ T6741] netlink: 4 bytes leftover after parsing attributes in process `syz.2.259'. [ 232.840840][ T8] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 233.340593][ T8] usb 2-1: Using ep0 maxpacket: 16 [ 233.364922][ T8] usb 2-1: New USB device found, idVendor=2b53, idProduct=0023, bcdDevice= 0.40 [ 233.395878][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.434667][ T8] usb 2-1: Product: syz [ 233.452701][ T8] usb 2-1: Manufacturer: syz [ 233.468110][ T8] usb 2-1: SerialNumber: syz [ 233.590764][ T787] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 233.813480][ T787] usb 1-1: config 0 has an invalid interface number: 107 but max is 0 [ 233.858361][ T787] usb 1-1: config 0 has no interface number 0 [ 233.980633][ T787] usb 1-1: config 0 interface 107 altsetting 0 endpoint 0x88 has invalid maxpacket 65535, setting to 64 [ 234.019626][ T787] usb 1-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 234.048626][ T787] usb 1-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 234.080017][ T787] usb 1-1: Product: syz [ 234.082880][ T23] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 234.095908][ T787] usb 1-1: Manufacturer: syz [ 234.100884][ T787] usb 1-1: SerialNumber: syz [ 234.883599][ T787] usb 1-1: config 0 descriptor?? [ 234.894058][ T6756] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 234.906133][ T787] keyspan 1-1:0.107: Keyspan 4 port adapter converter detected [ 234.924744][ T787] keyspan 1-1:0.107: found no endpoint descriptor for endpoint 81 [ 234.946790][ T787] keyspan 1-1:0.107: found no endpoint descriptor for endpoint 1 [ 234.971130][ T787] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 234.983483][ T787] keyspan 1-1:0.107: found no endpoint descriptor for endpoint 2 [ 235.001402][ T787] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 235.021422][ T787] keyspan 1-1:0.107: found no endpoint descriptor for endpoint 4 [ 235.039864][ T787] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 235.058554][ T787] keyspan 1-1:0.107: found no endpoint descriptor for endpoint 6 [ 235.071724][ T6765] netlink: 165 bytes leftover after parsing attributes in process `syz.3.266'. [ 235.120846][ T23] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 235.152755][ T787] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 235.161766][ T23] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 235.202448][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.264762][ T23] usb 3-1: config 0 descriptor?? [ 235.358392][ T23] pwc: Askey VC010 type 2 USB webcam detected. [ 235.465036][ T8] usb 2-1: USB disconnect, device number 7 [ 235.944511][ T23] pwc: recv_control_msg error -32 req 02 val 2b00 [ 235.960934][ T23] pwc: recv_control_msg error -32 req 02 val 2700 [ 236.007742][ T23] pwc: recv_control_msg error -32 req 02 val 2c00 [ 236.008360][ T5784] udevd[5784]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 236.062906][ T23] pwc: recv_control_msg error -32 req 04 val 1000 [ 236.134392][ T23] pwc: recv_control_msg error -32 req 04 val 1300 [ 236.160060][ T23] pwc: recv_control_msg error -32 req 04 val 1400 [ 236.182095][ T23] pwc: recv_control_msg error -32 req 02 val 2000 [ 236.197026][ T23] pwc: recv_control_msg error -32 req 02 val 2100 [ 236.231656][ T23] pwc: recv_control_msg error -32 req 04 val 1500 [ 236.281560][ T23] pwc: recv_control_msg error -32 req 02 val 2500 [ 236.289726][ T23] pwc: recv_control_msg error -32 req 02 val 2400 [ 236.317185][ T23] pwc: recv_control_msg error -32 req 02 val 2600 [ 236.346304][ T23] pwc: recv_control_msg error -32 req 02 val 2900 [ 236.372779][ T23] pwc: recv_control_msg error -32 req 02 val 2800 [ 236.401945][ T23] pwc: recv_control_msg error -32 req 04 val 1100 [ 236.444911][ T23] pwc: Registered as video103. [ 236.454995][ T5843] usb 1-1: USB disconnect, device number 7 [ 236.457067][ T23] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input6 [ 236.491612][ T5843] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 236.562281][ T5843] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 236.614910][ T5843] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 236.646041][ T6779] netlink: 4 bytes leftover after parsing attributes in process `syz.3.270'. [ 236.655690][ T5843] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 236.727567][ T5843] keyspan 1-1:0.107: device disconnected [ 236.760675][ T5854] usb 3-1: USB disconnect, device number 6 [ 236.820971][ T8] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 237.023052][ T8] usb 2-1: config 0 has an invalid interface number: 69 but max is 0 [ 237.035775][ T8] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 237.064145][ T8] usb 2-1: config 0 has no interface number 0 [ 237.094186][ T8] usb 2-1: config 0 interface 69 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 237.102922][ T6788] netlink: 40 bytes leftover after parsing attributes in process `syz.0.273'. [ 237.130853][ T8] usb 2-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 0 [ 237.186182][ T8] usb 2-1: config 0 interface 69 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 237.223478][ T8] usb 2-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 237.236028][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.249988][ T8] usb 2-1: Product: syz [ 237.255626][ T8] usb 2-1: Manufacturer: syz [ 237.263524][ T8] usb 2-1: SerialNumber: syz [ 237.278189][ T8] usb 2-1: config 0 descriptor?? [ 237.354567][ T8] cyberjack 2-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 237.382374][ T8] cyberjack ttyUSB0: usb_submit_urb(read int) failed [ 237.401927][ T8] usb 2-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 238.153888][ T6776] siw: device registration error -23 [ 238.177373][ T8] usb 2-1: USB disconnect, device number 8 [ 238.224379][ T8] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 238.243177][ T8] cyberjack 2-1:0.69: device disconnected [ 239.430905][ T5781] Bluetooth: hci3: command 0x0406 tx timeout [ 239.440890][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 239.440932][ T5084] Bluetooth: hci1: command 0x0406 tx timeout [ 239.451299][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 239.968590][ T6807] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 240.002240][ T6807] netlink: 4 bytes leftover after parsing attributes in process `syz.2.279'. [ 240.014928][ T23] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 240.048235][ T6807] bridge_slave_1: left allmulticast mode [ 240.077269][ T6807] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.116988][ T6807] bridge_slave_0: left allmulticast mode [ 240.123722][ T6807] bridge_slave_0: left promiscuous mode [ 240.183682][ T6807] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.270595][ T23] usb 4-1: Using ep0 maxpacket: 32 [ 240.291788][ T23] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 240.311188][ T23] usb 4-1: config 0 has no interface number 0 [ 240.333347][ T23] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 240.357153][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.395016][ T23] usb 4-1: Product: syz [ 240.410558][ T27] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 240.421275][ T23] usb 4-1: Manufacturer: syz [ 240.427491][ T23] usb 4-1: SerialNumber: syz [ 240.454280][ T23] usb 4-1: config 0 descriptor?? [ 240.469499][ T6811] netlink: 4 bytes leftover after parsing attributes in process `syz.0.280'. [ 240.477670][ T23] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 240.640682][ T27] usb 2-1: Using ep0 maxpacket: 16 [ 240.691723][ T27] usb 2-1: New USB device found, idVendor=2b53, idProduct=0023, bcdDevice= 0.40 [ 240.713574][ T27] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.735038][ T27] usb 2-1: Product: syz [ 240.764653][ T27] usb 2-1: Manufacturer: syz [ 240.772530][ T23] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 240.794791][ T27] usb 2-1: SerialNumber: syz [ 240.834712][ T23] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 240.998755][ C1] quatech-serial ttyUSB0: qt2_process_read_urb - unsupported command 112 [ 241.199472][ C1] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 241.204907][ T5842] usb 4-1: USB disconnect, device number 6 [ 241.262873][ T5842] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 241.382754][ T5842] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 241.425675][ T5842] quatech2 4-1:0.51: device disconnected [ 244.232191][ T6823] siw: device registration error -23 [ 245.368773][ T27] usb 2-1: USB disconnect, device number 9 [ 245.697212][ T6837] netlink: 40 bytes leftover after parsing attributes in process `syz.2.288'. [ 247.561988][ T6850] netlink: 8 bytes leftover after parsing attributes in process `syz.1.292'. [ 247.853542][ T5842] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 247.881514][ T6851] team0: entered allmulticast mode [ 247.888167][ T6851] team_slave_0: entered allmulticast mode [ 247.925363][ T6851] team_slave_1: entered allmulticast mode [ 248.268476][ T5842] usb 4-1: config 0 has an invalid interface number: 69 but max is 0 [ 248.450312][ C1] vcan0: j1939_tp_rxtimer: 0xffff888024f30400: rx timeout, send abort [ 248.950419][ C1] vcan0: j1939_tp_rxtimer: 0xffff888024f30c00: rx timeout, send abort [ 248.962613][ C1] vcan0: j1939_tp_rxtimer: 0xffff888024f30400: abort rx timeout. Force session deactivation [ 249.461293][ C1] vcan0: j1939_tp_rxtimer: 0xffff888024f30c00: abort rx timeout. Force session deactivation [ 249.807879][ T5842] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 249.890711][ T5842] usb 4-1: config 0 has no interface number 0 [ 249.909529][ T5842] usb 4-1: config 0 interface 69 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 249.960783][ T5842] usb 4-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 0 [ 249.984523][ T5842] usb 4-1: config 0 interface 69 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 250.066073][ T5842] usb 4-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 250.088993][ T5842] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.114048][ T5842] usb 4-1: Product: syz [ 250.119160][ T5842] usb 4-1: Manufacturer: syz [ 250.160574][ T5842] usb 4-1: SerialNumber: syz [ 250.183287][ T5842] usb 4-1: config 0 descriptor?? [ 250.222951][ T5842] cyberjack 4-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 250.244128][ T5842] cyberjack ttyUSB0: usb_submit_urb(read int) failed [ 250.650906][ T5843] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 250.854736][ T5842] usb 4-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 251.531154][ T5842] usb 4-1: USB disconnect, device number 7 [ 251.580766][ T5842] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 251.601647][ T5842] cyberjack 4-1:0.69: device disconnected [ 251.700554][ T5843] usb 3-1: Using ep0 maxpacket: 16 [ 251.725563][ T5843] usb 3-1: New USB device found, idVendor=2b53, idProduct=0023, bcdDevice= 0.40 [ 251.748567][ T5843] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.780580][ T5843] usb 3-1: Product: syz [ 251.786533][ T5843] usb 3-1: Manufacturer: syz [ 251.810577][ T5843] usb 3-1: SerialNumber: syz [ 252.209444][ T6882] netlink: 8 bytes leftover after parsing attributes in process `syz.0.302'. [ 253.304333][ T5843] usb 3-1: USB disconnect, device number 7 [ 255.321207][ T6775] udevd[6775]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 255.479320][ T6898] netlink: 40 bytes leftover after parsing attributes in process `syz.0.305'. [ 257.702667][ T6914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 257.781553][ T6914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.815215][ T6914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 257.841795][ T6914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.866475][ T6914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 257.918527][ T6914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.940760][ T6914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 258.120603][ T6914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.684058][ T6918] netlink: 8 bytes leftover after parsing attributes in process `syz.3.313'. [ 262.234160][ T5842] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 262.566462][ T5842] usb 3-1: config 0 has an invalid interface number: 69 but max is 0 [ 262.596999][ T5842] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 262.638580][ T5842] usb 3-1: config 0 has no interface number 0 [ 262.676658][ T5842] usb 3-1: config 0 interface 69 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 262.694686][ C0] vcan0: j1939_tp_rxtimer: 0xffff888031009800: rx timeout, send abort [ 262.824664][ T5842] usb 3-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 0 [ 262.999905][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 263.016922][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 263.031144][ T5842] usb 3-1: config 0 interface 69 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 263.188927][ C0] vcan0: j1939_tp_rxtimer: 0xffff88803100a000: rx timeout, send abort [ 263.200537][ C0] vcan0: j1939_tp_rxtimer: 0xffff888031009800: abort rx timeout. Force session deactivation [ 263.235684][ T5842] usb 3-1: string descriptor 0 read error: -71 [ 263.314711][ T5842] usb 3-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 263.438928][ T5842] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.670110][ T5842] usb 3-1: config 0 descriptor?? [ 263.700013][ C0] vcan0: j1939_tp_rxtimer: 0xffff88803100a000: abort rx timeout. Force session deactivation [ 263.801179][ T5842] usb 3-1: can't set config #0, error -71 [ 263.925238][ T5842] usb 3-1: USB disconnect, device number 8 [ 264.693656][ T6942] netlink: 4 bytes leftover after parsing attributes in process `syz.0.321'. [ 264.722416][ T6942] bridge_slave_1: left allmulticast mode [ 264.736432][ T6942] bridge_slave_1: left promiscuous mode [ 264.753627][ T6950] netlink: 40 bytes leftover after parsing attributes in process `syz.2.322'. [ 264.803752][ T6942] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.884839][ T6942] bridge_slave_0: left allmulticast mode [ 264.934504][ T6942] bridge_slave_0: left promiscuous mode [ 264.950719][ T6942] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.523142][ T6955] netlink: 165 bytes leftover after parsing attributes in process `syz.1.316'. [ 268.574169][ T6969] siw: device registration error -23 [ 273.696129][ T7006] netlink: 40 bytes leftover after parsing attributes in process `syz.3.337'. [ 274.342883][ T7016] siw: device registration error -23 [ 274.509513][ T8] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 274.748362][ T8] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 274.791293][ T8] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 274.811937][ T8] usb 2-1: config 0 has no interface number 0 [ 274.828956][ T8] usb 2-1: config 0 interface 41 altsetting 2 has an invalid endpoint with address 0x0, skipping [ 274.852180][ T8] usb 2-1: config 0 interface 41 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 274.873912][ T8] usb 2-1: config 0 interface 41 has no altsetting 0 [ 274.893458][ T8] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 274.924590][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.961475][ T8] usb 2-1: Product: syz [ 274.967876][ T8] usb 2-1: Manufacturer: syz [ 274.974139][ T8] usb 2-1: SerialNumber: syz [ 274.985063][ T8] usb 2-1: config 0 descriptor?? [ 274.995879][ T8] CoreChips: probe of 2-1:0.41 failed with error -22 [ 277.412588][ T5843] usb 2-1: USB disconnect, device number 10 [ 277.690972][ T5844] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 277.919607][ T5844] usb 4-1: config 0 has an invalid interface number: 69 but max is 0 [ 277.931078][ T5844] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 277.970753][ T5844] usb 4-1: config 0 has no interface number 0 [ 277.978745][ T5844] usb 4-1: config 0 interface 69 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 277.992931][ T5844] usb 4-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 0 [ 278.014839][ T5844] usb 4-1: config 0 interface 69 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 278.074500][ T5844] usb 4-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 278.092211][ T5844] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.106547][ T5844] usb 4-1: Product: syz [ 278.116155][ T5844] usb 4-1: Manufacturer: syz [ 278.160981][ T5844] usb 4-1: SerialNumber: syz [ 278.185087][ T5844] usb 4-1: config 0 descriptor?? [ 278.208775][ T5844] cyberjack 4-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 278.345310][ T5844] cyberjack ttyUSB0: usb_submit_urb(read int) failed [ 278.369487][ T5844] usb 4-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 278.949854][ T5843] usb 4-1: USB disconnect, device number 8 [ 279.051531][ T5843] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 279.092180][ T5843] cyberjack 4-1:0.69: device disconnected [ 279.529344][ T7047] netlink: 40 bytes leftover after parsing attributes in process `syz.0.349'. [ 282.271169][ T5843] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 282.537062][ T5843] usb 3-1: config 0 has an invalid interface number: 69 but max is 0 [ 282.590766][ T5843] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 282.620656][ T5843] usb 3-1: config 0 has no interface number 0 [ 282.629030][ T5843] usb 3-1: config 0 interface 69 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 282.668435][ T5843] usb 3-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 0 [ 282.691388][ T5843] usb 3-1: config 0 interface 69 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 282.733087][ T5843] usb 3-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 282.749841][ T5843] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.774883][ T5843] usb 3-1: Product: syz [ 282.781084][ T5843] usb 3-1: Manufacturer: syz [ 282.792744][ T5843] usb 3-1: SerialNumber: syz [ 282.813109][ T5843] usb 3-1: config 0 descriptor?? [ 282.827619][ T5843] cyberjack 3-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 282.855090][ T5843] cyberjack ttyUSB0: usb_submit_urb(read int) failed [ 282.873659][ T5843] usb 3-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 283.031224][ T5842] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 283.173644][ T7077] siw: device registration error -23 [ 283.236061][ T5842] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 283.402972][ T7055] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 283.758164][ T5842] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 283.812774][ T7078] siw: device registration error -23 [ 283.830299][ T5844] usb 3-1: USB disconnect, device number 9 [ 283.837979][ T5842] usb 1-1: config 0 has no interface number 0 [ 283.886768][ T5842] usb 1-1: config 0 interface 41 altsetting 2 has an invalid endpoint with address 0x0, skipping [ 283.931854][ T5844] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 283.979088][ T5842] usb 1-1: config 0 interface 41 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 283.993145][ T5844] cyberjack 3-1:0.69: device disconnected [ 284.078587][ T5842] usb 1-1: config 0 interface 41 has no altsetting 0 [ 284.126438][ T5842] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 284.154115][ T5842] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.199031][ T5842] usb 1-1: Product: syz [ 284.208982][ T5842] usb 1-1: Manufacturer: syz [ 284.218973][ T5842] usb 1-1: SerialNumber: syz [ 284.728416][ T5842] usb 1-1: config 0 descriptor?? [ 284.742440][ T5842] CoreChips: probe of 1-1:0.41 failed with error -22 [ 286.392085][ T27] usb 1-1: USB disconnect, device number 8 [ 287.198349][ T7094] veth1_virt_wifi: default FDB implementation only supports local addresses [ 287.781805][ T7102] netlink: 40 bytes leftover after parsing attributes in process `syz.2.363'. [ 287.958841][ T7094] netlink: 8 bytes leftover after parsing attributes in process `syz.3.362'. [ 287.968993][ T7094] netlink: 8 bytes leftover after parsing attributes in process `syz.3.362'. [ 291.850714][ T5844] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 292.074503][ T5844] usb 2-1: config 0 has an invalid interface number: 69 but max is 0 [ 292.086174][ T5844] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 292.099020][ T5844] usb 2-1: config 0 has no interface number 0 [ 292.107655][ T5844] usb 2-1: config 0 interface 69 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 292.123490][ T5844] usb 2-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 0 [ 292.139978][ T5844] usb 2-1: config 0 interface 69 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 292.183478][ T5844] usb 2-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 292.199481][ T5844] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.210929][ T5844] usb 2-1: Product: syz [ 292.219085][ T5844] usb 2-1: Manufacturer: syz [ 292.226864][ T5844] usb 2-1: SerialNumber: syz [ 292.279802][ T5844] usb 2-1: config 0 descriptor?? [ 292.369945][ T5844] cyberjack 2-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 292.404149][ T5844] cyberjack ttyUSB0: usb_submit_urb(read int) failed [ 292.440365][ T5844] usb 2-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 292.527636][ T7124] cgroup2: Unknown parameter 'memory_hugetlb_accounting' [ 294.301541][ T7134] siw: device registration error -23 [ 294.967502][ T23] usb 2-1: USB disconnect, device number 11 [ 295.234100][ T23] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 295.303906][ T23] cyberjack 2-1:0.69: device disconnected [ 295.858470][ T7137] siw: device registration error -23 [ 295.961942][ T7148] netlink: 4 bytes leftover after parsing attributes in process `syz.3.372'. [ 297.753106][ T7158] binder: 7154:7158 ioctl c0306201 0 returned -14 [ 298.163493][ T7160] netlink: 40 bytes leftover after parsing attributes in process `syz.1.376'. [ 299.000609][ T5844] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 299.220583][ T788] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 299.222468][ T5844] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 299.239207][ T5844] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 299.291660][ T5844] usb 4-1: config 0 has no interface number 0 [ 299.317643][ T5844] usb 4-1: config 0 interface 41 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 299.369400][ T5844] usb 4-1: config 0 interface 41 has no altsetting 0 [ 299.418067][ T5844] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 299.440567][ T5844] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.443481][ T788] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 299.461832][ T5844] usb 4-1: Product: syz [ 299.475842][ T788] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 299.477696][ T5844] usb 4-1: Manufacturer: syz [ 299.535855][ T788] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.557964][ T5844] usb 4-1: SerialNumber: syz [ 299.689048][ T5844] usb 4-1: config 0 descriptor?? [ 299.691246][ T788] usb 3-1: config 0 descriptor?? [ 299.741321][ T5844] CoreChips: probe of 4-1:0.41 failed with error -22 [ 300.007542][ T788] pwc: Askey VC010 type 2 USB webcam detected. [ 300.360573][ T788] pwc: recv_control_msg error -32 req 02 val 2b00 [ 300.432816][ T788] pwc: recv_control_msg error -32 req 02 val 2700 [ 300.498099][ T788] pwc: recv_control_msg error -32 req 02 val 2c00 [ 300.520651][ T788] pwc: recv_control_msg error -32 req 04 val 1000 [ 300.590150][ T788] pwc: recv_control_msg error -32 req 04 val 1300 [ 300.620294][ T788] pwc: recv_control_msg error -32 req 04 val 1400 [ 300.684450][ T788] pwc: recv_control_msg error -32 req 02 val 2000 [ 300.694388][ T788] pwc: recv_control_msg error -32 req 02 val 2100 [ 300.717201][ T788] pwc: recv_control_msg error -32 req 04 val 1500 [ 300.746299][ T788] pwc: recv_control_msg error -32 req 02 val 2500 [ 300.771596][ T788] pwc: recv_control_msg error -32 req 02 val 2400 [ 300.788253][ T788] pwc: recv_control_msg error -32 req 02 val 2600 [ 300.815978][ T788] pwc: recv_control_msg error -32 req 02 val 2900 [ 300.830264][ T788] pwc: recv_control_msg error -32 req 02 val 2800 [ 302.691985][ T788] pwc: recv_control_msg error -71 req 04 val 1200 [ 302.726124][ T788] pwc: Registered as video103. [ 302.749067][ T23] usb 4-1: USB disconnect, device number 9 [ 302.749275][ T788] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input7 [ 302.855515][ T788] usb 3-1: USB disconnect, device number 10 [ 303.020711][ T7191] netlink: 4 bytes leftover after parsing attributes in process `syz.2.384'. [ 305.061224][ T7204] netlink: 40 bytes leftover after parsing attributes in process `syz.2.388'. [ 310.510746][ T5843] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 310.580692][ T5844] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 310.690548][ T5843] usb 4-1: device descriptor read/64, error -71 [ 310.830641][ T5844] usb 2-1: Using ep0 maxpacket: 16 [ 310.950928][ T5844] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 310.970118][ T5844] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 311.007814][ T5844] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 311.038940][ T5843] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 311.072037][ T5844] usb 2-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 311.110537][ T5844] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.145256][ T5844] usb 2-1: config 0 descriptor?? [ 311.250555][ T5843] usb 4-1: device descriptor read/64, error -71 [ 311.411848][ T5843] usb usb4-port1: attempt power cycle [ 311.628193][ T5844] hid-generic 0003:1044:7A4D.0001: unknown main item tag 0x0 [ 311.706865][ T7251] veth1_virt_wifi: default FDB implementation only supports local addresses [ 311.717046][ T5844] hid-generic 0003:1044:7A4D.0001: unknown main item tag 0x0 [ 311.782018][ T5844] hid-generic 0003:1044:7A4D.0001: unknown main item tag 0x0 [ 311.810653][ T5844] hid-generic 0003:1044:7A4D.0001: unknown main item tag 0x0 [ 311.829564][ T5844] hid-generic 0003:1044:7A4D.0001: unknown main item tag 0x0 [ 311.838771][ T5844] hid-generic 0003:1044:7A4D.0001: unknown main item tag 0x0 [ 311.880780][ T5843] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 311.896901][ T5844] hid-generic 0003:1044:7A4D.0001: unknown main item tag 0x0 [ 311.936116][ T5844] hid-generic 0003:1044:7A4D.0001: unknown main item tag 0x4 [ 311.952880][ T5843] usb 4-1: device descriptor read/8, error -71 [ 311.959381][ T5844] hid-generic 0003:1044:7A4D.0001: unknown main item tag 0x0 [ 312.005944][ T5844] hid-generic 0003:1044:7A4D.0001: unknown main item tag 0x0 [ 312.040521][ T5844] hid-generic 0003:1044:7A4D.0001: unknown main item tag 0x2 [ 312.078627][ T5844] hid-generic 0003:1044:7A4D.0001: unknown main item tag 0x0 [ 312.105406][ T5844] hid-generic 0003:1044:7A4D.0001: unknown main item tag 0x0 [ 312.124494][ T5844] hid-generic 0003:1044:7A4D.0001: unknown main item tag 0x0 [ 312.149121][ T5844] hid-generic 0003:1044:7A4D.0001: unknown main item tag 0x0 [ 312.179111][ T5844] hid-generic 0003:1044:7A4D.0001: unknown main item tag 0x0 [ 313.550546][ T5844] hid-generic 0003:1044:7A4D.0001: unknown main item tag 0x0 [ 313.558722][ T5844] hid-generic 0003:1044:7A4D.0001: unknown main item tag 0x0 [ 313.732914][ T5844] hid-generic 0003:1044:7A4D.0001: unknown main item tag 0x0 [ 313.801058][ T5844] hid-generic 0003:1044:7A4D.0001: unknown main item tag 0x0 [ 313.837067][ T5844] hid-generic 0003:1044:7A4D.0001: unknown main item tag 0x4 [ 313.861831][ T5844] hid-generic 0003:1044:7A4D.0001: unknown main item tag 0x0 [ 313.917071][ T5844] hid-generic 0003:1044:7A4D.0001: unknown main item tag 0x0 [ 313.946189][ T5844] hid-generic 0003:1044:7A4D.0001: unknown main item tag 0x0 [ 313.970862][ T5844] hid-generic 0003:1044:7A4D.0001: unknown main item tag 0x0 [ 314.005138][ T5844] hid-generic 0003:1044:7A4D.0001: unknown main item tag 0x2 [ 314.035293][ T5844] hid-generic 0003:1044:7A4D.0001: unknown main item tag 0x0 [ 314.055644][ T5844] hid-generic 0003:1044:7A4D.0001: unknown main item tag 0x0 [ 314.132552][ T5844] hid-generic 0003:1044:7A4D.0001: unknown main item tag 0x0 [ 314.188256][ T5844] hid-generic 0003:1044:7A4D.0001: unknown main item tag 0x0 [ 314.233498][ T5844] hid-generic 0003:1044:7A4D.0001: unknown main item tag 0x0 [ 314.260833][ T5844] hid-generic 0003:1044:7A4D.0001: unknown main item tag 0x0 [ 314.336950][ T5844] hid-generic 0003:1044:7A4D.0001: unknown main item tag 0x0 [ 314.760268][ T5844] hid-generic 0003:1044:7A4D.0001: unknown main item tag 0x0 [ 314.806130][ T5844] hid-generic 0003:1044:7A4D.0001: hidraw0: USB HID v1.00 Device [HID 1044:7a4d] on usb-dummy_hcd.1-1/input0 [ 316.228466][ T5844] usb 2-1: USB disconnect, device number 12 [ 316.454445][ T7269] fido_id[7269]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 316.801630][ T7278] netlink: 40 bytes leftover after parsing attributes in process `syz.0.402'. [ 317.291156][ T5844] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 317.461094][ T5844] usb 3-1: device descriptor read/64, error -71 [ 317.840823][ T5844] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 318.000521][ T5844] usb 3-1: device descriptor read/64, error -71 [ 318.120687][ T5844] usb usb3-port1: attempt power cycle [ 319.690543][ T5844] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 319.771362][ T5844] usb 3-1: device descriptor read/8, error -71 [ 320.062062][ T5844] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 322.211358][ T5844] usb 3-1: device not accepting address 14, error -71 [ 322.221327][ T5844] usb usb3-port1: unable to enumerate USB device [ 324.393315][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 324.402131][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 324.657044][ T7329] netlink: 40 bytes leftover after parsing attributes in process `syz.0.421'. [ 325.170726][ T5812] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 325.353379][ T5812] usb 3-1: config 0 has an invalid interface number: 69 but max is 0 [ 325.370957][ T5812] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 325.808360][ T5812] usb 3-1: config 0 has no interface number 0 [ 325.817910][ T5812] usb 3-1: config 0 interface 69 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 325.829212][ T5812] usb 3-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 0 [ 325.840743][ T5812] usb 3-1: config 0 interface 69 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 325.861892][ T5812] usb 3-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 325.890504][ T5812] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.899951][ T5812] usb 3-1: Product: syz [ 325.935902][ T5812] usb 3-1: Manufacturer: syz [ 325.964139][ T5812] usb 3-1: SerialNumber: syz [ 326.004682][ T5812] usb 3-1: config 0 descriptor?? [ 326.014118][ T5812] cyberjack 3-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 326.039625][ T5812] cyberjack ttyUSB0: usb_submit_urb(read int) failed [ 326.072400][ T5812] usb 3-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 326.303473][ T7334] siw: device registration error -23 [ 328.112091][ T5844] usb 3-1: USB disconnect, device number 15 [ 328.120154][ T5844] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 328.165511][ T5844] cyberjack 3-1:0.69: device disconnected [ 328.320737][ T5812] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 328.631336][ T5812] usb 4-1: device descriptor read/64, error -71 [ 328.839034][ T7355] netlink: 4 bytes leftover after parsing attributes in process `syz.0.427'. [ 328.839148][ T7355] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 329.169277][ T5812] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 329.496576][ T7355] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 329.520689][ T5812] usb 4-1: device descriptor read/64, error -71 [ 329.654999][ T5812] usb usb4-port1: attempt power cycle [ 331.593847][ T7365] Can't find ip_set type hash:net,por [ 332.057432][ T7382] netlink: 40 bytes leftover after parsing attributes in process `syz.3.435'. [ 332.365581][ T7387] netlink: 4 bytes leftover after parsing attributes in process `syz.1.437'. [ 337.427389][ T7432] netlink: 4 bytes leftover after parsing attributes in process `syz.1.450'. [ 337.429053][ T7432] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 337.996674][ T7432] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 338.176997][ T7440] netlink: 40 bytes leftover after parsing attributes in process `syz.3.452'. [ 338.178103][ T7439] sctp: [Deprecated]: syz.0.453 (pid 7439) Use of int in max_burst socket option deprecated. [ 338.178103][ T7439] Use struct sctp_assoc_value instead [ 344.247277][ T7478] sctp: [Deprecated]: syz.1.466 (pid 7478) Use of int in max_burst socket option deprecated. [ 344.247277][ T7478] Use struct sctp_assoc_value instead [ 345.179637][ T7491] netlink: 40 bytes leftover after parsing attributes in process `syz.0.467'. [ 345.410797][ T5844] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 345.752949][ T5844] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 345.805034][ T5844] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 345.846538][ T5844] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 345.921031][ T5844] usb 3-1: config 0 descriptor?? [ 345.937010][ T5844] pwc: Askey VC010 type 2 USB webcam detected. [ 346.345786][ T5844] pwc: recv_control_msg error -32 req 02 val 2b00 [ 346.421705][ T5844] pwc: recv_control_msg error -32 req 02 val 2700 [ 346.551900][ T5844] pwc: recv_control_msg error -32 req 02 val 2c00 [ 346.584942][ T5844] pwc: recv_control_msg error -32 req 04 val 1000 [ 346.598251][ T5844] pwc: recv_control_msg error -32 req 04 val 1300 [ 347.921973][ T5844] pwc: recv_control_msg error -32 req 04 val 1400 [ 347.951725][ T5844] pwc: recv_control_msg error -32 req 02 val 2000 [ 347.976152][ T5844] pwc: recv_control_msg error -32 req 02 val 2100 [ 348.005739][ T5844] pwc: recv_control_msg error -32 req 04 val 1500 [ 348.040657][ T5844] pwc: recv_control_msg error -32 req 02 val 2500 [ 348.060982][ T5844] pwc: recv_control_msg error -32 req 02 val 2400 [ 348.069119][ T5844] pwc: recv_control_msg error -32 req 02 val 2600 [ 348.091320][ T5844] pwc: recv_control_msg error -32 req 02 val 2900 [ 348.099096][ T5844] pwc: recv_control_msg error -32 req 02 val 2800 [ 348.327013][ T5844] pwc: recv_control_msg error -71 req 04 val 1200 [ 348.352367][ T5844] pwc: Registered as video103. [ 348.382427][ T5844] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input8 [ 348.452807][ T5844] usb 3-1: USB disconnect, device number 16 [ 349.399543][ T7528] sctp: [Deprecated]: syz.2.478 (pid 7528) Use of int in max_burst socket option deprecated. [ 349.399543][ T7528] Use struct sctp_assoc_value instead [ 351.451269][ T7543] Bluetooth: hci0: unsupported parameter 255 [ 351.575930][ T7546] binder: 7544:7546 ioctl c0306201 0 returned -14 [ 351.651156][ T7543] Bluetooth: hci0: unsupported parameter 255 [ 354.050575][ T5843] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 354.295857][ T5843] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 354.328570][ T5843] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 354.341793][ T5843] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 354.367284][ T5843] usb 1-1: config 0 descriptor?? [ 354.388868][ T5843] pwc: Askey VC010 type 2 USB webcam detected. [ 354.799650][ T5843] pwc: recv_control_msg error -32 req 02 val 2b00 [ 354.824176][ T5843] pwc: recv_control_msg error -32 req 02 val 2700 [ 354.851718][ T5843] pwc: recv_control_msg error -32 req 02 val 2c00 [ 354.877692][ T5843] pwc: recv_control_msg error -32 req 04 val 1000 [ 354.887397][ T5843] pwc: recv_control_msg error -32 req 04 val 1300 [ 354.907757][ T5843] pwc: recv_control_msg error -32 req 04 val 1400 [ 354.928356][ T5843] pwc: recv_control_msg error -32 req 02 val 2000 [ 355.011303][ T5843] pwc: recv_control_msg error -32 req 02 val 2100 [ 355.170811][ T5843] pwc: recv_control_msg error -32 req 04 val 1500 [ 355.184257][ T5843] pwc: recv_control_msg error -32 req 02 val 2500 [ 355.192781][ T5843] pwc: recv_control_msg error -32 req 02 val 2400 [ 355.202701][ T7574] sctp: [Deprecated]: syz.2.492 (pid 7574) Use of int in max_burst socket option deprecated. [ 355.202701][ T7574] Use struct sctp_assoc_value instead [ 355.274220][ T5843] pwc: recv_control_msg error -32 req 02 val 2600 [ 355.294925][ T5843] pwc: recv_control_msg error -32 req 02 val 2900 [ 355.304508][ T5843] pwc: recv_control_msg error -32 req 02 val 2800 [ 355.518748][ T5843] pwc: recv_control_msg error -71 req 04 val 1200 [ 355.544608][ T5843] pwc: Registered as video103. [ 355.561031][ T5843] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input9 [ 355.622790][ T5843] usb 1-1: USB disconnect, device number 9 [ 357.511150][ T7596] binder: 7594:7596 ioctl c0306201 0 returned -14 [ 358.180526][ T788] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 358.343023][ T7605] sctp: [Deprecated]: syz.1.501 (pid 7605) Use of int in max_burst socket option deprecated. [ 358.343023][ T7605] Use struct sctp_assoc_value instead [ 358.397867][ T788] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 358.422981][ T788] usb 4-1: config 0 has no interfaces? [ 358.446181][ T788] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 358.491661][ T788] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.539472][ T788] usb 4-1: config 0 descriptor?? [ 358.886995][ T7608] Bluetooth: hci0: unsupported parameter 255 [ 358.898013][ T7608] Bluetooth: hci0: unsupported parameter 255 [ 361.001372][ T788] usb 4-1: USB disconnect, device number 17 [ 361.588676][ T7632] siw: device registration error -23 [ 362.170522][ T5844] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 362.365804][ T5844] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 362.378219][ T5844] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 362.392567][ T5844] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 362.432399][ T5844] usb 1-1: config 0 descriptor?? [ 362.458936][ T5844] pwc: Askey VC010 type 2 USB webcam detected. [ 362.888556][ T5844] pwc: recv_control_msg error -32 req 02 val 2b00 [ 363.174324][ T5844] pwc: recv_control_msg error -32 req 02 val 2700 [ 363.182573][ T5844] pwc: recv_control_msg error -32 req 02 val 2c00 [ 363.191111][ T5844] pwc: recv_control_msg error -32 req 04 val 1000 [ 363.201157][ T5844] pwc: recv_control_msg error -32 req 04 val 1300 [ 363.209016][ T5844] pwc: recv_control_msg error -32 req 04 val 1400 [ 363.219427][ T5844] pwc: recv_control_msg error -32 req 02 val 2000 [ 363.235280][ T5844] pwc: recv_control_msg error -32 req 02 val 2100 [ 363.245745][ T5844] pwc: recv_control_msg error -32 req 04 val 1500 [ 363.255229][ T5844] pwc: recv_control_msg error -32 req 02 val 2500 [ 363.267580][ T5844] pwc: recv_control_msg error -32 req 02 val 2400 [ 363.275270][ T5844] pwc: recv_control_msg error -32 req 02 val 2600 [ 363.288390][ T5844] pwc: recv_control_msg error -32 req 02 val 2900 [ 363.302500][ T5844] pwc: recv_control_msg error -32 req 02 val 2800 [ 363.309522][ T7651] sctp: [Deprecated]: syz.3.515 (pid 7651) Use of int in max_burst socket option deprecated. [ 363.309522][ T7651] Use struct sctp_assoc_value instead [ 363.529455][ T5844] pwc: recv_control_msg error -71 req 04 val 1200 [ 363.588018][ T5844] pwc: Registered as video103. [ 363.667081][ T5844] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input10 [ 363.746611][ T5844] usb 1-1: USB disconnect, device number 10 [ 368.453893][ T7695] sctp: [Deprecated]: syz.2.531 (pid 7695) Use of int in max_burst socket option deprecated. [ 368.453893][ T7695] Use struct sctp_assoc_value instead [ 369.574698][ T788] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 369.774664][ T788] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 369.796032][ T788] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 369.819029][ T788] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 369.859751][ T788] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 369.895339][ T788] usb 4-1: config 0 descriptor?? [ 369.968187][ T7721] IPVS: set_ctl: invalid protocol: 227 172.20.20.187:20000 [ 370.148686][ T7723] netlink: 4 bytes leftover after parsing attributes in process `syz.1.540'. [ 370.730546][ T788] IPVS: starting estimator thread 0... [ 371.121056][ T7722] IPVS: using max 17 ests per chain, 40800 per kthread [ 372.506240][ T27] usb 4-1: USB disconnect, device number 18 [ 372.594090][ T7737] sctp: [Deprecated]: syz.0.542 (pid 7737) Use of int in max_burst socket option deprecated. [ 372.594090][ T7737] Use struct sctp_assoc_value instead [ 375.568692][ T5843] IPVS: starting estimator thread 0... [ 375.575692][ T7768] IPVS: set_ctl: invalid protocol: 227 172.20.20.187:20000 [ 376.459727][ T7769] IPVS: using max 26 ests per chain, 62400 per kthread [ 378.025251][ T7782] sctp: [Deprecated]: syz.2.554 (pid 7782) Use of int in max_burst socket option deprecated. [ 378.025251][ T7782] Use struct sctp_assoc_value instead [ 378.683492][ T7789] binder: 7787:7789 ioctl c0306201 0 returned -14 [ 379.339474][ T7792] veth1_virt_wifi: default FDB implementation only supports local addresses [ 382.843258][ T7815] tipc: Started in network mode [ 382.863759][ T7815] tipc: Node identity fe800000000000000000000000000013, cluster identity 4711 [ 382.892230][ T7815] tipc: Enabled bearer , priority 10 [ 384.212192][ T5843] tipc: Node number set to 4269801491 [ 384.553912][ T7826] sctp: [Deprecated]: syz.0.566 (pid 7826) Use of int in max_burst socket option deprecated. [ 384.553912][ T7826] Use struct sctp_assoc_value instead [ 384.580688][ T5843] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 384.781444][ T5843] usb 2-1: Using ep0 maxpacket: 16 [ 384.813317][ T5843] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 384.842859][ T5843] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 384.875291][ T5843] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 384.916260][ T5843] usb 2-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 384.936573][ T788] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 384.947577][ T5843] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.988303][ T5843] usb 2-1: config 0 descriptor?? [ 385.211282][ T7834] binder: 7831:7834 ioctl c0306201 0 returned -14 [ 385.556758][ T788] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 385.598959][ T788] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 385.609701][ T788] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.643476][ T788] usb 1-1: config 0 descriptor?? [ 385.690364][ T788] pwc: Askey VC010 type 2 USB webcam detected. [ 385.839467][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 385.846539][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 386.065289][ T788] pwc: recv_control_msg error -32 req 02 val 2b00 [ 386.314221][ T788] pwc: recv_control_msg error -32 req 02 val 2700 [ 386.463185][ T788] pwc: recv_control_msg error -32 req 02 val 2c00 [ 386.499868][ T788] pwc: recv_control_msg error -32 req 04 val 1000 [ 386.508826][ T788] pwc: recv_control_msg error -32 req 04 val 1300 [ 386.518545][ T788] pwc: recv_control_msg error -32 req 04 val 1400 [ 386.528823][ T788] pwc: recv_control_msg error -32 req 02 val 2000 [ 386.553387][ T788] pwc: recv_control_msg error -32 req 02 val 2100 [ 388.057841][ T788] pwc: recv_control_msg error -71 req 04 val 1500 [ 388.103424][ T788] pwc: recv_control_msg error -71 req 02 val 2500 [ 388.121556][ T788] pwc: recv_control_msg error -71 req 02 val 2400 [ 388.129418][ T788] pwc: recv_control_msg error -71 req 02 val 2600 [ 388.140860][ T788] pwc: recv_control_msg error -71 req 02 val 2900 [ 388.151383][ T788] pwc: recv_control_msg error -71 req 02 val 2800 [ 388.190763][ T788] pwc: recv_control_msg error -71 req 04 val 1100 [ 388.220599][ T788] pwc: recv_control_msg error -71 req 04 val 1200 [ 388.242683][ T788] pwc: Registered as video103. [ 388.249959][ T788] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input11 [ 389.699981][ T788] usb 1-1: USB disconnect, device number 11 [ 390.078668][ T5843] usbhid 2-1:0.0: can't add hid device: -32 [ 390.106366][ T5843] usbhid: probe of 2-1:0.0 failed with error -32 [ 390.130662][ T5843] usb 2-1: USB disconnect, device number 13 [ 390.254701][ T7856] sctp: [Deprecated]: syz.2.578 (pid 7856) Use of int in max_burst socket option deprecated. [ 390.254701][ T7856] Use struct sctp_assoc_value instead [ 390.559641][ T7863] binder: 7861:7863 ioctl c0306201 0 returned -14 [ 391.630760][ T5843] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 391.829729][ T5843] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 391.857932][ T5843] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 391.990749][ T5843] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 392.030915][ T5843] usb 2-1: config 0 descriptor?? [ 392.044243][ T5843] pwc: Askey VC010 type 2 USB webcam detected. [ 393.713685][ T5843] pwc: recv_control_msg error -32 req 02 val 2b00 [ 393.751320][ T5843] pwc: recv_control_msg error -32 req 02 val 2700 [ 393.760359][ T5843] pwc: recv_control_msg error -32 req 02 val 2c00 [ 393.768126][ T5843] pwc: recv_control_msg error -32 req 04 val 1000 [ 393.778533][ T5843] pwc: recv_control_msg error -32 req 04 val 1300 [ 393.791921][ T5843] pwc: recv_control_msg error -32 req 04 val 1400 [ 393.820535][ T5843] pwc: recv_control_msg error -32 req 02 val 2000 [ 393.840922][ T5843] pwc: recv_control_msg error -32 req 02 val 2100 [ 393.858450][ T5843] pwc: recv_control_msg error -32 req 04 val 1500 [ 393.866607][ T5843] pwc: recv_control_msg error -32 req 02 val 2500 [ 393.891549][ T5843] pwc: recv_control_msg error -32 req 02 val 2400 [ 393.921894][ T5843] pwc: recv_control_msg error -32 req 02 val 2600 [ 393.930031][ T5843] pwc: recv_control_msg error -32 req 02 val 2900 [ 393.951325][ T5843] pwc: recv_control_msg error -32 req 02 val 2800 [ 394.162024][ T5843] pwc: recv_control_msg error -71 req 04 val 1200 [ 394.187755][ T5843] pwc: Registered as video103. [ 394.232495][ T5843] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input12 [ 394.284261][ T5843] usb 2-1: USB disconnect, device number 14 [ 394.499712][ T7891] sctp: [Deprecated]: syz.0.588 (pid 7891) Use of int in max_burst socket option deprecated. [ 394.499712][ T7891] Use struct sctp_assoc_value instead [ 395.192335][ T7900] binder: 7898:7900 ioctl c0306201 0 returned -14 [ 397.053435][ T7913] sctp: [Deprecated]: syz.3.597 (pid 7913) Use of int in max_burst socket option deprecated. [ 397.053435][ T7913] Use struct sctp_assoc_value instead [ 398.595484][ T5843] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 398.834776][ T5843] usb 1-1: config 0 has an invalid interface number: 69 but max is 0 [ 398.860474][ T5843] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 398.900583][ T5843] usb 1-1: config 0 has no interface number 0 [ 398.907529][ T5843] usb 1-1: config 0 interface 69 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 398.970722][ T5843] usb 1-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 0 [ 398.990638][ T5843] usb 1-1: config 0 interface 69 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 399.040088][ T5843] usb 1-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 399.070752][ T5843] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.079779][ T5843] usb 1-1: Product: syz [ 399.105586][ T5843] usb 1-1: Manufacturer: syz [ 399.115659][ T5843] usb 1-1: SerialNumber: syz [ 399.141908][ T5843] usb 1-1: config 0 descriptor?? [ 399.179374][ T5843] cyberjack 1-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 399.217418][ T5843] cyberjack ttyUSB0: usb_submit_urb(read int) failed [ 399.241311][ T5843] usb 1-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 400.613298][ T7924] tipc: Started in network mode [ 400.618493][ T7924] tipc: Node identity fe800000000000000000000000000013, cluster identity 4711 [ 400.672403][ T788] usb 1-1: USB disconnect, device number 12 [ 400.697476][ T788] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 400.739566][ T7924] tipc: Enabled bearer , priority 10 [ 400.747068][ T788] cyberjack 1-1:0.69: device disconnected [ 401.080729][ T5812] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 401.160804][ T788] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 401.282408][ T5812] usb 3-1: Using ep0 maxpacket: 16 [ 401.358707][ T5812] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 401.396188][ T5812] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 401.411118][ T788] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 401.420450][ T5812] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 401.452214][ T5812] usb 3-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 401.480711][ T5812] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 401.485766][ T788] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 401.496864][ T7939] netlink: 4 bytes leftover after parsing attributes in process `syz.1.600'. [ 401.534675][ T788] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 401.553694][ T5812] usb 3-1: config 0 descriptor?? [ 401.611303][ T788] usb 1-1: config 0 descriptor?? [ 401.848348][ T7942] netlink: 40 bytes leftover after parsing attributes in process `syz.3.603'. [ 403.180658][ T5843] tipc: Node number set to 4269801491 [ 403.198356][ T788] pwc: Askey VC010 type 2 USB webcam detected. [ 403.614984][ T788] pwc: recv_control_msg error -32 req 02 val 2b00 [ 403.631279][ T788] pwc: recv_control_msg error -32 req 02 val 2700 [ 403.651280][ T788] pwc: recv_control_msg error -32 req 02 val 2c00 [ 403.672725][ T788] pwc: recv_control_msg error -32 req 04 val 1000 [ 403.694960][ T788] pwc: recv_control_msg error -32 req 04 val 1300 [ 403.726432][ T788] pwc: recv_control_msg error -32 req 04 val 1400 [ 403.741377][ T788] pwc: recv_control_msg error -32 req 02 val 2000 [ 403.836737][ T788] pwc: recv_control_msg error -32 req 02 val 2100 [ 403.862739][ T788] pwc: recv_control_msg error -32 req 04 val 1500 [ 403.928381][ T788] pwc: recv_control_msg error -32 req 02 val 2500 [ 403.961001][ T788] pwc: recv_control_msg error -32 req 02 val 2400 [ 403.981244][ T788] pwc: recv_control_msg error -32 req 02 val 2600 [ 404.009925][ T788] pwc: recv_control_msg error -32 req 02 val 2900 [ 404.038876][ T788] pwc: recv_control_msg error -32 req 02 val 2800 [ 404.266117][ T788] pwc: recv_control_msg error -71 req 04 val 1200 [ 404.291317][ T788] pwc: Registered as video103. [ 404.299716][ T788] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input13 [ 404.383348][ T7957] binder: 7955:7957 ioctl c0306201 0 returned -14 [ 404.959022][ T788] usb 1-1: USB disconnect, device number 13 [ 407.121210][ T5812] usbhid 3-1:0.0: can't add hid device: -32 [ 407.128060][ T5812] usbhid: probe of 3-1:0.0 failed with error -32 [ 407.525545][ T5812] usb 3-1: USB disconnect, device number 17 [ 407.541546][ T7971] netlink: 4 bytes leftover after parsing attributes in process `syz.0.613'. [ 407.752770][ T7975] netlink: 165 bytes leftover after parsing attributes in process `syz.2.614'. [ 407.916770][ T7982] netlink: 4 bytes leftover after parsing attributes in process `syz.3.612'. [ 407.916877][ T7982] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 408.571238][ T7982] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 409.081480][ T5843] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 409.397535][ T5843] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 409.499499][ T5843] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 409.597546][ T5843] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 409.624203][ T5843] usb 4-1: config 0 descriptor?? [ 409.666127][ T5843] pwc: Askey VC010 type 2 USB webcam detected. [ 410.048474][ T8001] netlink: 4 bytes leftover after parsing attributes in process `syz.1.610'. [ 411.120645][ T5843] pwc: recv_control_msg error -32 req 02 val 2b00 [ 411.128845][ T5843] pwc: recv_control_msg error -32 req 02 val 2700 [ 411.174940][ T5843] pwc: recv_control_msg error -32 req 02 val 2c00 [ 411.196018][ T5843] pwc: recv_control_msg error -32 req 04 val 1000 [ 411.221245][ T5843] pwc: recv_control_msg error -32 req 04 val 1300 [ 411.249013][ T5843] pwc: recv_control_msg error -32 req 04 val 1400 [ 411.258492][ T5843] pwc: recv_control_msg error -32 req 02 val 2000 [ 411.271154][ T5843] pwc: recv_control_msg error -32 req 02 val 2100 [ 411.284014][ T5843] pwc: recv_control_msg error -32 req 04 val 1500 [ 411.296403][ T5843] pwc: recv_control_msg error -32 req 02 val 2500 [ 411.335643][ T5843] pwc: recv_control_msg error -32 req 02 val 2400 [ 411.353680][ T5843] pwc: recv_control_msg error -32 req 02 val 2600 [ 411.368886][ T5843] pwc: recv_control_msg error -32 req 02 val 2900 [ 411.427902][ T5843] pwc: recv_control_msg error -32 req 02 val 2800 [ 412.912119][ T5843] pwc: recv_control_msg error -71 req 04 val 1200 [ 412.983880][ T5843] pwc: Registered as video103. [ 413.024742][ T5843] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input14 [ 413.081106][ T5843] usb 4-1: USB disconnect, device number 19 [ 413.107062][ T8028] netlink: 4 bytes leftover after parsing attributes in process `syz.2.624'. [ 413.346270][ T8030] tipc: Enabling of bearer rejected, already enabled [ 413.632538][ T23] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 413.890689][ T23] usb 2-1: Using ep0 maxpacket: 16 [ 413.899375][ T23] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 414.708497][ T23] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 414.750634][ T23] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 414.767815][ T23] usb 2-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 414.777759][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 414.805853][ T23] usb 2-1: config 0 descriptor?? [ 415.321551][ T8052] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.854875][ T23] hid-generic 0003:1044:7A4D.0002: unknown main item tag 0x0 [ 415.864184][ T23] hid-generic 0003:1044:7A4D.0002: unknown main item tag 0x0 [ 415.880496][ T23] hid-generic 0003:1044:7A4D.0002: unknown main item tag 0x0 [ 415.907025][ T23] hid-generic 0003:1044:7A4D.0002: unknown main item tag 0x0 [ 415.963859][ T8052] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.981586][ T23] hid-generic 0003:1044:7A4D.0002: unknown main item tag 0x0 [ 416.027943][ T23] hid-generic 0003:1044:7A4D.0002: unknown main item tag 0x0 [ 416.294846][ T23] hid-generic 0003:1044:7A4D.0002: unknown main item tag 0x0 [ 416.333641][ T23] hid-generic 0003:1044:7A4D.0002: unknown main item tag 0x4 [ 416.378580][ T23] hid-generic 0003:1044:7A4D.0002: unknown main item tag 0x0 [ 416.387109][ T23] hid-generic 0003:1044:7A4D.0002: unknown main item tag 0x0 [ 416.405002][ T23] hid-generic 0003:1044:7A4D.0002: unknown main item tag 0x2 [ 416.415864][ T23] hid-generic 0003:1044:7A4D.0002: unknown main item tag 0x0 [ 416.438546][ T23] hid-generic 0003:1044:7A4D.0002: unknown main item tag 0x0 [ 416.452841][ T8052] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.461350][ T23] hid-generic 0003:1044:7A4D.0002: unknown main item tag 0x0 [ 416.477182][ T23] hid-generic 0003:1044:7A4D.0002: unknown main item tag 0x0 [ 416.486892][ T23] hid-generic 0003:1044:7A4D.0002: unknown main item tag 0x0 [ 416.499859][ T23] hid-generic 0003:1044:7A4D.0002: unknown main item tag 0x0 [ 417.851006][ T23] hid-generic 0003:1044:7A4D.0002: unknown main item tag 0x0 [ 417.884443][ T23] hid-generic 0003:1044:7A4D.0002: unknown main item tag 0x0 [ 417.940544][ T23] hid-generic 0003:1044:7A4D.0002: unknown main item tag 0x0 [ 417.948411][ T23] hid-generic 0003:1044:7A4D.0002: unknown main item tag 0x4 [ 417.968909][ T8052] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.036288][ T23] hid-generic 0003:1044:7A4D.0002: unknown main item tag 0x0 [ 418.085181][ T23] hid-generic 0003:1044:7A4D.0002: unknown main item tag 0x0 [ 418.129727][ T23] hid-generic 0003:1044:7A4D.0002: unknown main item tag 0x0 [ 418.170513][ T23] hid-generic 0003:1044:7A4D.0002: unknown main item tag 0x0 [ 418.210742][ T5843] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 418.220346][ T23] hid-generic 0003:1044:7A4D.0002: unknown main item tag 0x2 [ 418.221781][ T8052] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.257517][ T23] hid-generic 0003:1044:7A4D.0002: unknown main item tag 0x0 [ 418.303894][ T8052] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.314210][ T23] hid-generic 0003:1044:7A4D.0002: unknown main item tag 0x0 [ 418.354829][ T23] hid-generic 0003:1044:7A4D.0002: unknown main item tag 0x0 [ 418.379870][ T8052] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.400468][ T23] hid-generic 0003:1044:7A4D.0002: unknown main item tag 0x0 [ 418.429179][ T8052] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.438433][ T23] hid-generic 0003:1044:7A4D.0002: unknown main item tag 0x0 [ 418.438463][ T23] hid-generic 0003:1044:7A4D.0002: unknown main item tag 0x0 [ 418.438487][ T23] hid-generic 0003:1044:7A4D.0002: unknown main item tag 0x0 [ 418.438509][ T23] hid-generic 0003:1044:7A4D.0002: unknown main item tag 0x0 [ 418.461207][ T23] hid-generic 0003:1044:7A4D.0002: hidraw0: USB HID v1.00 Device [HID 1044:7a4d] on usb-dummy_hcd.1-1/input0 [ 418.492397][ T5843] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 418.523315][ T5843] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 418.539317][ T5843] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 418.585973][ T23] usb 2-1: USB disconnect, device number 15 [ 418.594141][ T5843] usb 1-1: config 0 descriptor?? [ 418.615496][ T5843] pwc: Askey VC010 type 2 USB webcam detected. [ 418.727364][ T8073] fido_id[8073]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 418.770197][ T8077] binder: 8076:8077 ioctl c0306201 200000000680 returned -14 [ 420.444509][ T5843] pwc: recv_control_msg error -32 req 02 val 2b00 [ 420.463943][ T5843] pwc: recv_control_msg error -32 req 02 val 2700 [ 420.488919][ T5843] pwc: recv_control_msg error -32 req 02 val 2c00 [ 420.519339][ T5843] pwc: recv_control_msg error -32 req 04 val 1000 [ 420.528086][ T5843] pwc: recv_control_msg error -32 req 04 val 1300 [ 420.571528][ T5843] pwc: recv_control_msg error -32 req 04 val 1400 [ 420.610573][ T5843] pwc: recv_control_msg error -32 req 02 val 2000 [ 420.630508][ T5843] pwc: recv_control_msg error -32 req 02 val 2100 [ 420.649687][ T5843] pwc: recv_control_msg error -32 req 04 val 1500 [ 420.681423][ T5843] pwc: recv_control_msg error -32 req 02 val 2500 [ 420.689309][ T5843] pwc: recv_control_msg error -32 req 02 val 2400 [ 420.735386][ T5843] pwc: recv_control_msg error -32 req 02 val 2600 [ 420.750963][ T5843] pwc: recv_control_msg error -32 req 02 val 2900 [ 420.759216][ T5843] pwc: recv_control_msg error -32 req 02 val 2800 [ 420.898528][ T8091] netlink: 4 bytes leftover after parsing attributes in process `syz.2.633'. [ 420.973328][ T5843] pwc: recv_control_msg error -71 req 04 val 1200 [ 421.007370][ T5843] pwc: Registered as video103. [ 421.040224][ T5843] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input15 [ 421.093590][ T5843] usb 1-1: USB disconnect, device number 14 [ 422.635434][ T8111] netlink: 12 bytes leftover after parsing attributes in process `syz.2.641'. [ 422.712541][ T8112] netlink: 44 bytes leftover after parsing attributes in process `syz.2.641'. [ 422.773614][ T8113] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 422.812197][ T8113] wg1 speed is unknown, defaulting to 1000 [ 422.821885][ T8113] xfrm0 speed is unknown, defaulting to 1000 [ 424.884775][ T8133] netlink: 20 bytes leftover after parsing attributes in process `syz.2.644'. [ 425.184197][ T8132] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 425.191242][ T5773] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 425.214745][ T5773] CPU: 1 PID: 5773 Comm: kworker/u5:3 Not tainted syzkaller #0 [ 425.222835][ T5773] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 425.234141][ T5773] Workqueue: hci3 hci_rx_work [ 425.239419][ T5773] Call Trace: [ 425.243442][ T5773] [ 425.246576][ T5773] dump_stack_lvl+0x18c/0x250 [ 425.251908][ T5773] ? show_regs_print_info+0x20/0x20 [ 425.257336][ T5773] ? load_image+0x400/0x400 [ 425.262916][ T5773] sysfs_create_dir_ns+0x26e/0x2a0 [ 425.265501][ T8133] workqueue: Failed to create a rescuer kthread for wq "nbd64-recv": -EINTR [ 425.268258][ T5773] ? sysfs_warn_dup+0xa0/0xa0 [ 425.283051][ T5773] ? do_raw_spin_unlock+0x121/0x230 [ 425.288556][ T5773] kobject_add_internal+0x61c/0xcc0 [ 425.294373][ T5773] kobject_add+0x164/0x240 [ 425.299876][ T5773] ? __rwlock_init+0x150/0x150 [ 425.304982][ T5773] ? kobject_init+0x1e0/0x1e0 [ 425.309978][ T5773] ? _raw_spin_unlock+0x28/0x40 [ 425.315130][ T5773] ? get_device_parent+0x366/0x390 [ 425.320542][ T5773] device_add+0x408/0xc20 [ 425.325537][ T5773] hci_conn_add_sysfs+0xd5/0x1e0 [ 425.331211][ T5773] le_conn_complete_evt+0xf5d/0x1540 [ 425.337213][ T5773] ? hci_event_packet+0x4cb/0x1270 [ 425.342955][ T5773] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 425.349926][ T5773] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 425.357444][ T5773] ? skb_pull_data+0xfb/0x200 [ 425.362943][ T5773] hci_le_conn_complete_evt+0x187/0x440 [ 425.369419][ T5773] ? hci_remote_host_features_evt+0x150/0x150 [ 425.376484][ T5773] hci_event_packet+0x7ba/0x1270 [ 425.383391][ T5773] ? bis_list+0x290/0x290 [ 425.389656][ T5773] ? lockdep_hardirqs_on+0x98/0x150 [ 425.395421][ T5773] ? hci_send_to_monitor+0xd7/0x4f0 [ 425.402439][ T5773] hci_rx_work+0x43a/0xd60 [ 425.407691][ T5773] ? process_scheduled_works+0x96f/0x15d0 [ 425.414780][ T5773] process_scheduled_works+0xa5d/0x15d0 [ 425.421086][ T5773] ? worker_attach_to_pool+0x380/0x380 [ 425.427465][ T5773] ? assign_work+0x3d2/0x5d0 [ 425.433429][ T5773] worker_thread+0xa55/0xfc0 [ 425.440229][ T5773] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 425.448165][ T5773] ? _raw_spin_unlock+0x40/0x40 [ 425.454543][ T5773] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 425.463671][ T5773] kthread+0x2fa/0x390 [ 425.468689][ T5773] ? pr_cont_work+0x560/0x560 [ 425.474105][ T5773] ? kthread_blkcg+0xd0/0xd0 [ 425.479947][ T5773] ret_from_fork+0x48/0x80 [ 425.486684][ T5773] ? kthread_blkcg+0xd0/0xd0 [ 425.492969][ T5773] ret_from_fork_asm+0x11/0x20 [ 425.499200][ T5773] [ 425.509151][ T5773] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 425.528160][ T5773] Bluetooth: hci3: failed to register connection device [ 425.551847][ T8133] block (null): Could not allocate knbd recv work queue. [ 425.601364][ T8133] nbd: failed to add new device [ 425.761548][ T8142] netlink: 4 bytes leftover after parsing attributes in process `syz.1.647'. [ 426.070664][ T23] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 426.077530][ T8148] binder: 8146:8148 ioctl c0306201 0 returned -14 [ 426.284997][ T23] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 426.301128][ T23] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 426.316028][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 426.526236][ T23] usb 3-1: config 0 descriptor?? [ 426.611371][ T23] pwc: Askey VC010 type 2 USB webcam detected. [ 427.489021][ T23] pwc: recv_control_msg error -32 req 02 val 2b00 [ 427.512504][ T23] pwc: recv_control_msg error -32 req 02 val 2700 [ 427.594087][ T23] pwc: recv_control_msg error -32 req 02 val 2c00 [ 427.626783][ T23] pwc: recv_control_msg error -32 req 04 val 1000 [ 427.644600][ T23] pwc: recv_control_msg error -32 req 04 val 1300 [ 427.663407][ T23] pwc: recv_control_msg error -32 req 04 val 1400 [ 427.671540][ T23] pwc: recv_control_msg error -32 req 02 val 2000 [ 427.707671][ T23] pwc: recv_control_msg error -32 req 02 val 2100 [ 427.731780][ T23] pwc: recv_control_msg error -32 req 04 val 1500 [ 427.758751][ T23] pwc: recv_control_msg error -32 req 02 val 2500 [ 427.767855][ T23] pwc: recv_control_msg error -32 req 02 val 2400 [ 427.775907][ T23] pwc: recv_control_msg error -32 req 02 val 2600 [ 427.785026][ T23] pwc: recv_control_msg error -32 req 02 val 2900 [ 427.809364][ T23] pwc: recv_control_msg error -32 req 02 val 2800 [ 428.042097][ T23] pwc: recv_control_msg error -71 req 04 val 1200 [ 428.066511][ T23] pwc: Registered as video103. [ 428.096012][ T23] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input16 [ 428.127284][ T23] usb 3-1: USB disconnect, device number 18 [ 429.432296][ T8178] netlink: 4 bytes leftover after parsing attributes in process `syz.0.657'. [ 429.795509][ T8180] netlink: 4 bytes leftover after parsing attributes in process `syz.2.656'. [ 429.805871][ T8180] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 430.319596][ T8180] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 431.670870][ T8195] netlink: 12 bytes leftover after parsing attributes in process `syz.2.661'. [ 432.326054][ T8200] syz.2.662 uses obsolete (PF_INET,SOCK_PACKET) [ 432.899697][ T8205] overlayfs: failed to clone upperpath [ 433.773699][ T8216] netlink: 4 bytes leftover after parsing attributes in process `syz.1.667'. [ 435.383086][ T8225] netlink: 40 bytes leftover after parsing attributes in process `syz.3.670'. [ 435.506884][ T27] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 435.788140][ T27] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 435.841234][ T27] usb 1-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 435.887805][ T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 436.032990][ T27] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 436.750488][ T8236] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 437.413468][ T27] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -32 [ 437.453239][ T27] stv0680 1-1:4.0: STV(e): camera ping failed!! [ 437.481563][ T27] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 437.510647][ T27] stv0680 1-1:4.0: last error: 0, command = 0x0 [ 437.600491][ T27] usb 1-1: USB disconnect, device number 15 [ 440.892713][ T8262] netlink: 4 bytes leftover after parsing attributes in process `syz.2.680'. [ 440.982311][ T8265] binder: 8263:8265 ioctl c0306201 0 returned -14 [ 441.399786][ T8266] veth1_virt_wifi: default FDB implementation only supports local addresses [ 442.255206][ T8279] netlink: 4 bytes leftover after parsing attributes in process `syz.2.684'. [ 443.749591][ T8286] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 443.805223][ T8266] netlink: 8 bytes leftover after parsing attributes in process `syz.3.679'. [ 443.814935][ T8266] netlink: 8 bytes leftover after parsing attributes in process `syz.3.679'. [ 444.059949][ T8293] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 447.273011][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 447.279710][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 447.568668][ T8317] netlink: 4 bytes leftover after parsing attributes in process `syz.3.692'. [ 448.020716][ T8321] binder: 8309:8321 ioctl c0306201 0 returned -14 [ 448.191593][ T8325] siw: device registration error -23 [ 448.330262][ T8333] netlink: 165 bytes leftover after parsing attributes in process `syz.2.696'. [ 448.764651][ T8334] process 'syz.1.694' launched '/dev/fd/-1/./file2' with NULL argv: empty string added [ 449.217423][ T8337] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 449.500508][ T23] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 449.760474][ T23] usb 2-1: Using ep0 maxpacket: 32 [ 449.788706][ T23] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 449.800743][ T5842] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 449.859037][ T23] usb 2-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=bf.99 [ 449.889502][ T23] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 449.920502][ T23] usb 2-1: Product: syz [ 449.937810][ T23] usb 2-1: SerialNumber: syz [ 449.958124][ T23] usb 2-1: config 0 descriptor?? [ 450.000766][ T5842] usb 4-1: Using ep0 maxpacket: 16 [ 450.058943][ T5842] usb 4-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 450.071483][ T5842] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 450.081548][ T5842] usb 4-1: Product: syz [ 450.086650][ T5842] usb 4-1: Manufacturer: syz [ 450.093060][ T5842] usb 4-1: SerialNumber: syz [ 450.116229][ T5842] usb 4-1: config 0 descriptor?? [ 450.609474][ T5842] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 450.631013][ T5842] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 450.651572][ T5842] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 450.671669][ T5842] usb 4-1: media controller created [ 451.216934][ T5842] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 451.652345][ T5842] zl10353_read_register: readreg error (reg=127, ret==0) [ 452.247132][ T23] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 452.340561][ T5842] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 452.349361][ T5842] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 452.384967][ T5842] usb 4-1: USB disconnect, device number 20 [ 452.540702][ T23] usb 1-1: Using ep0 maxpacket: 16 [ 452.559811][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 452.584959][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 452.637219][ T23] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 452.771008][ T23] usb 1-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 452.951473][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 452.995905][ T23] usb 1-1: config 0 descriptor?? [ 453.062362][ T5842] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 453.140931][ T8366] netlink: 4 bytes leftover after parsing attributes in process `syz.2.703'. [ 453.307750][ T8] usb 2-1: USB disconnect, device number 16 [ 455.240653][ T8380] siw: device registration error -23 [ 456.042614][ T23] usbhid 1-1:0.0: can't add hid device: -71 [ 456.072312][ T23] usbhid: probe of 1-1:0.0 failed with error -71 [ 456.118825][ T23] usb 1-1: USB disconnect, device number 16 [ 457.967513][ T8392] veth1_virt_wifi: default FDB implementation only supports local addresses [ 458.192796][ T8393] netlink: 8 bytes leftover after parsing attributes in process `syz.0.711'. [ 458.203959][ T8393] netlink: 8 bytes leftover after parsing attributes in process `syz.0.711'. [ 458.825109][ T8404] netlink: 4 bytes leftover after parsing attributes in process `syz.0.713'. [ 458.883866][ T8405] netlink: 4 bytes leftover after parsing attributes in process `syz.3.712'. [ 458.904391][ T8405] bridge_slave_1: left allmulticast mode [ 458.915571][ T8405] bridge_slave_1: left promiscuous mode [ 458.929150][ T8405] bridge0: port 2(bridge_slave_1) entered disabled state [ 458.951724][ T8407] IPVS: set_ctl: invalid protocol: 227 172.20.20.187:20000 [ 458.959537][ T788] IPVS: starting estimator thread 0... [ 459.060504][ T8409] IPVS: using max 22 ests per chain, 52800 per kthread [ 459.113352][ T8405] bridge_slave_0: left allmulticast mode [ 459.822066][ T8405] bridge_slave_0: left promiscuous mode [ 459.860288][ T8405] bridge0: port 1(bridge_slave_0) entered disabled state [ 464.340174][ T8435] veth1_virt_wifi: default FDB implementation only supports local addresses [ 464.505771][ T8435] netlink: 8 bytes leftover after parsing attributes in process `syz.1.722'. [ 464.734637][ T8444] netlink: 4 bytes leftover after parsing attributes in process `syz.3.723'. [ 465.327144][ T8435] netlink: 8 bytes leftover after parsing attributes in process `syz.1.722'. [ 466.342893][ T8459] netlink: 4 bytes leftover after parsing attributes in process `syz.3.724'. [ 466.359646][ T8441] siw: device registration error -23 [ 466.752750][ T8460] tipc: Started in network mode [ 466.773451][ T8460] tipc: Node identity fe800000000000000000000000000013, cluster identity 4711 [ 466.789274][ T8460] tipc: Enabled bearer , priority 10 [ 466.980540][ T23] usb 4-1: new full-speed USB device number 21 using dummy_hcd [ 467.100680][ T5842] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 467.173048][ T23] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 467.196199][ T23] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xBE, skipping [ 467.251290][ T23] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 467.400615][ T5842] usb 1-1: Using ep0 maxpacket: 16 [ 467.419545][ T23] usb 4-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 467.432336][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 467.456144][ T23] usb 4-1: Product: syz [ 467.487838][ T23] usb 4-1: Manufacturer: syz [ 467.492059][ T5842] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 467.537282][ T5842] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 467.569395][ T5842] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 467.587087][ T23] usb 4-1: SerialNumber: syz [ 467.623478][ T5842] usb 1-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 467.624501][ T23] usb 4-1: config 0 descriptor?? [ 467.650596][ T5842] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 467.665443][ T8463] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 467.677871][ T23] radio-si470x 4-1:0.0: could not find interrupt in endpoint [ 467.700243][ T23] radio-si470x: probe of 4-1:0.0 failed with error -5 [ 467.722397][ T5842] usb 1-1: config 0 descriptor?? [ 467.764138][ T23] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 468.699143][ T27] tipc: Node number set to 4269801491 [ 469.504087][ T5842] usbhid 1-1:0.0: can't add hid device: -71 [ 469.525998][ T5842] usbhid: probe of 1-1:0.0 failed with error -71 [ 469.566235][ T5842] usb 1-1: USB disconnect, device number 17 [ 469.823410][ T5842] usb 4-1: USB disconnect, device number 21 [ 470.845271][ T8483] binder: 8479:8483 ioctl c0306201 0 returned -14 [ 472.314937][ T8488] netlink: 4 bytes leftover after parsing attributes in process `syz.0.732'. [ 472.585943][ T8490] veth1_virt_wifi: default FDB implementation only supports local addresses [ 472.656779][ T8493] siw: device registration error -23 [ 474.101280][ T8504] netlink: 4 bytes leftover after parsing attributes in process `syz.2.735'. [ 474.346589][ T8507] netlink: 8 bytes leftover after parsing attributes in process `syz.3.733'. [ 474.361567][ T8507] netlink: 8 bytes leftover after parsing attributes in process `syz.3.733'. [ 474.586958][ T8515] binder: 8514:8515 ioctl c0306201 200000000680 returned -14 [ 474.602244][ T8513] tipc: Enabling of bearer rejected, already enabled [ 474.948748][ T8520] siw: device registration error -23 [ 476.004968][ T8528] IPVS: set_ctl: invalid protocol: 227 172.20.20.187:20000 [ 477.003249][ T8533] netlink: 8 bytes leftover after parsing attributes in process `syz.0.736'. [ 477.663780][ T8538] binder: 8536:8538 ioctl c0306201 0 returned -14 [ 479.631376][ T8546] netlink: 4 bytes leftover after parsing attributes in process `syz.3.746'. [ 480.138917][ T8551] binder: BINDER_SET_CONTEXT_MGR already set [ 480.159054][ T8551] binder: 8550:8551 ioctl 4018620d 200000001000 returned -16 [ 480.203245][ T8553] veth1_virt_wifi: default FDB implementation only supports local addresses [ 480.244481][ T8553] netlink: 8 bytes leftover after parsing attributes in process `syz.1.748'. [ 480.254180][ T8553] netlink: 8 bytes leftover after parsing attributes in process `syz.1.748'. [ 480.678214][ T8561] netlink: 4 bytes leftover after parsing attributes in process `syz.1.750'. [ 481.327413][ T8566] veth1_virt_wifi: default FDB implementation only supports local addresses [ 481.530776][ T8569] IPVS: set_ctl: invalid protocol: 227 172.20.20.187:20000 [ 482.972200][ T8584] netlink: 4 bytes leftover after parsing attributes in process `syz.3.755'. [ 483.291482][ T8590] tipc: Enabling of bearer rejected, already enabled [ 483.406145][ T8591] siw: device registration error -23 [ 483.453436][ T8593] veth1_virt_wifi: default FDB implementation only supports local addresses [ 483.680748][ T8594] netlink: 8 bytes leftover after parsing attributes in process `syz.2.758'. [ 483.690147][ T8594] netlink: 8 bytes leftover after parsing attributes in process `syz.2.758'. [ 485.538831][ T8608] syz.0.763[8608]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 486.254992][ T8621] veth1_virt_wifi: default FDB implementation only supports local addresses [ 486.821045][ T8611] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 486.832529][ T8611] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 486.909738][ T8611] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 486.914030][ T8627] binder: 8624:8627 ioctl c0306201 0 returned -14 [ 486.935604][ T8611] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 487.022840][ T8611] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 487.231806][ T8611] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 487.403240][ T8611] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 487.522734][ T8611] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 487.558456][ T8631] veth1_virt_wifi: default FDB implementation only supports local addresses [ 488.160129][ T8631] netlink: 8 bytes leftover after parsing attributes in process `syz.2.768'. [ 488.169663][ T8631] netlink: 8 bytes leftover after parsing attributes in process `syz.2.768'. [ 488.700513][ T8655] netlink: 12 bytes leftover after parsing attributes in process `syz.1.770'. [ 488.758032][ T8655] netlink: 44 bytes leftover after parsing attributes in process `syz.1.770'. [ 488.799540][ T8656] wg1 speed is unknown, defaulting to 1000 [ 488.807256][ T8656] xfrm0 speed is unknown, defaulting to 1000 [ 489.210194][ T8661] ptrace attach of "./syz-executor exec"[5768] was attempted by "./syz-executor exec"[8661] [ 489.746204][ T8658] siw: device registration error -23 [ 490.147373][ T8676] binder: 8669:8676 ioctl c0306201 0 returned -14 [ 490.576397][ T8677] tipc: Enabling of bearer rejected, already enabled [ 490.665542][ T8681] ================================================================== [ 490.675317][ T8681] BUG: KASAN: slab-use-after-free in dvb_device_open+0xca/0x370 [ 490.683746][ T8681] Read of size 8 at addr ffff888141667218 by task syz.0.778/8681 [ 490.691979][ T8681] [ 490.694408][ T8681] CPU: 0 PID: 8681 Comm: syz.0.778 Not tainted syzkaller #0 [ 490.702375][ T8681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 490.713128][ T8681] Call Trace: [ 490.716535][ T8681] [ 490.719918][ T8681] dump_stack_lvl+0x18c/0x250 [ 490.725567][ T8681] ? __lock_acquire+0x7d40/0x7d40 [ 490.731916][ T8681] ? show_regs_print_info+0x20/0x20 [ 490.737235][ T8681] ? load_image+0x400/0x400 [ 490.742267][ T8681] ? _raw_spin_lock_irqsave+0xc0/0x100 [ 490.748161][ T8681] ? __virt_addr_valid+0x18c/0x540 [ 490.753620][ T8681] ? __virt_addr_valid+0x469/0x540 [ 490.759449][ T8681] print_report+0xa8/0x210 [ 490.764143][ T8681] ? dvb_device_open+0xca/0x370 [ 490.769947][ T8681] kasan_report+0x117/0x150 [ 490.775198][ T8681] ? chrdev_open+0x3e3/0x6a0 [ 490.779804][ T8681] ? dvb_device_open+0xca/0x370 [ 490.785443][ T8681] dvb_device_open+0xca/0x370 [ 490.790380][ T8681] ? do_raw_spin_unlock+0x121/0x230 [ 490.795959][ T8681] chrdev_open+0x5cc/0x6a0 [ 490.801168][ T8681] ? cd_forget+0x160/0x160 [ 490.806025][ T8681] ? fsnotify_perm+0x3ed/0x5e0 [ 490.811145][ T8681] ? cd_forget+0x160/0x160 [ 490.816094][ T8681] do_dentry_open+0x8c6/0x1500 [ 490.820960][ T8681] path_openat+0x27f1/0x3230 [ 490.826211][ T8681] ? do_sys_openat2+0xda/0x1d0 [ 490.831146][ T8681] ? verify_lock_unused+0x140/0x140 [ 490.836818][ T8681] ? do_filp_open+0x430/0x430 [ 490.841664][ T8681] ? __virt_addr_valid+0x18c/0x540 [ 490.847087][ T8681] do_filp_open+0x1f5/0x430 [ 490.851977][ T8681] ? vfs_tmpfile+0x490/0x490 [ 490.856761][ T8681] ? _raw_spin_unlock+0x28/0x40 [ 490.861789][ T8681] ? alloc_fd+0x58f/0x630 [ 490.866296][ T8681] do_sys_openat2+0x134/0x1d0 [ 490.871416][ T8681] ? do_sys_open+0xe0/0xe0 [ 490.876093][ T8681] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 490.882638][ T8681] ? lock_chain_count+0x20/0x20 [ 490.887730][ T8681] __x64_sys_openat+0x139/0x160 [ 490.893029][ T8681] do_syscall_64+0x55/0xa0 [ 490.897944][ T8681] ? clear_bhb_loop+0x40/0x90 [ 490.902815][ T8681] ? clear_bhb_loop+0x40/0x90 [ 490.908277][ T8681] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 490.914692][ T8681] RIP: 0033:0x7f0e2635cfce [ 490.919553][ T8681] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 490.940129][ T8681] RSP: 002b:00007f0e271c0b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 490.948904][ T8681] RAX: ffffffffffffffda RBX: 00007f0e271c16c0 RCX: 00007f0e2635cfce [ 490.957650][ T8681] RDX: 0000000000044e02 RSI: 00007f0e271c0c00 RDI: ffffffffffffff9c [ 490.966926][ T8681] RBP: 00007f0e271c0c00 R08: 0000000000000000 R09: 0000000000000000 [ 490.975782][ T8681] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 490.984096][ T8681] R13: 00007f0e26616038 R14: 00007f0e26615fa0 R15: 00007ffcb0bc0d38 [ 490.992508][ T8681] [ 490.995811][ T8681] [ 490.998218][ T8681] Allocated by task 8656: [ 491.002913][ T8681] kasan_set_track+0x4e/0x70 [ 491.008055][ T8681] __kasan_kmalloc+0x8f/0xa0 [ 491.012830][ T8681] __kmalloc+0xb4/0x230 [ 491.017322][ T8681] __list_lru_init+0xa6/0x5f0 [ 491.022514][ T8681] alloc_super+0x74a/0x920 [ 491.027364][ T8681] sget_fc+0x322/0x8d0 [ 491.031598][ T8681] get_tree_nodev+0x2a/0x140 [ 491.036648][ T8681] vfs_get_tree+0x8c/0x280 [ 491.041582][ T8681] fc_mount+0x1c/0xb0 [ 491.045595][ T8681] mq_init_ns+0x3a1/0x510 [ 491.050088][ T8681] copy_ipcs+0x309/0x500 [ 491.054833][ T8681] create_new_namespaces+0x212/0x6f0 [ 491.061598][ T8681] unshare_nsproxy_namespaces+0x11a/0x160 [ 491.067992][ T8681] ksys_unshare+0x4ce/0x8b0 [ 491.072768][ T8681] __x64_sys_unshare+0x38/0x40 [ 491.078214][ T8681] do_syscall_64+0x55/0xa0 [ 491.083554][ T8681] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 491.090029][ T8681] [ 491.092440][ T8681] Freed by task 788: [ 491.096404][ T8681] kasan_set_track+0x4e/0x70 [ 491.101609][ T8681] kasan_save_free_info+0x2e/0x50 [ 491.107989][ T8681] ____kasan_slab_free+0x126/0x1e0 [ 491.114016][ T8681] slab_free_freelist_hook+0x130/0x1a0 [ 491.120260][ T8681] __kmem_cache_free+0xba/0x1e0 [ 491.125832][ T8681] list_lru_destroy+0x55c/0x630 [ 491.131323][ T8681] deactivate_locked_super+0xab/0x100 [ 491.137311][ T8681] cleanup_mnt+0x43b/0x4d0 [ 491.141722][ T8681] mntput_no_expire+0x7cf/0x870 [ 491.146949][ T8681] free_ipc+0x107/0x270 [ 491.151916][ T8681] process_scheduled_works+0xa5d/0x15d0 [ 491.158367][ T8681] worker_thread+0xa55/0xfc0 [ 491.164149][ T8681] kthread+0x2fa/0x390 [ 491.168389][ T8681] ret_from_fork+0x48/0x80 [ 491.173522][ T8681] ret_from_fork_asm+0x11/0x20 [ 491.178448][ T8681] [ 491.181097][ T8681] The buggy address belongs to the object at ffff888141667200 [ 491.181097][ T8681] which belongs to the cache kmalloc-256 of size 256 [ 491.197602][ T8681] The buggy address is located 24 bytes inside of [ 491.197602][ T8681] freed 256-byte region [ffff888141667200, ffff888141667300) [ 491.212464][ T8681] [ 491.215039][ T8681] The buggy address belongs to the physical page: [ 491.221999][ T8681] page:ffffea0005059980 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x141666 [ 491.233648][ T8681] head:ffffea0005059980 order:1 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 491.243677][ T8681] ksm flags: 0x57ff00000000840(slab|head|node=1|zone=2|lastcpupid=0x7ff) [ 491.253168][ T8681] page_type: 0xffffffff() [ 491.257863][ T8681] raw: 057ff00000000840 ffff888017c41b40 ffffea0000b77680 0000000000000003 [ 491.267703][ T8681] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 491.276810][ T8681] page dumped because: kasan: bad access detected [ 491.283594][ T8681] page_owner tracks the page as allocated [ 491.289672][ T8681] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 36365971324, free_ts 0 [ 491.311183][ T8681] post_alloc_hook+0x1c1/0x200 [ 491.316209][ T8681] get_page_from_freelist+0x1951/0x19e0 [ 491.322183][ T8681] __alloc_pages+0x1f0/0x460 [ 491.326936][ T8681] alloc_page_interleave+0x24/0x1e0 [ 491.332495][ T8681] alloc_slab_page+0x5d/0x160 [ 491.337981][ T8681] new_slab+0x87/0x2d0 [ 491.342418][ T8681] ___slab_alloc+0xc5d/0x12f0 [ 491.347495][ T8681] __kmem_cache_alloc_node+0x19e/0x250 [ 491.354451][ T8681] kmalloc_trace+0x2a/0xe0 [ 491.359583][ T8681] bus_add_driver+0x162/0x630 [ 491.364466][ T8681] driver_register+0x23a/0x310 [ 491.370040][ T8681] usb_register_driver+0x206/0x3d0 [ 491.375676][ T8681] do_one_initcall+0x242/0x790 [ 491.381345][ T8681] do_initcall_level+0x137/0x1f0 [ 491.386765][ T8681] do_initcalls+0x69/0xd0 [ 491.391976][ T8681] kernel_init_freeable+0x3ed/0x580 [ 491.397984][ T8681] page_owner free stack trace missing [ 491.403782][ T8681] [ 491.406266][ T8681] Memory state around the buggy address: [ 491.412786][ T8681] ffff888141667100: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 491.425013][ T8681] ffff888141667180: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 491.434005][ T8681] >ffff888141667200: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 491.442497][ T8681] ^ [ 491.447958][ T8681] ffff888141667280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 491.456469][ T8681] ffff888141667300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 491.465058][ T8681] ================================================================== [ 491.475418][ T8681] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 491.483385][ T8681] CPU: 0 PID: 8681 Comm: syz.0.778 Not tainted syzkaller #0 [ 491.492087][ T8681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 491.505069][ T8681] Call Trace: [ 491.508647][ T8681] [ 491.511580][ T8681] dump_stack_lvl+0x18c/0x250 [ 491.516776][ T8681] ? show_regs_print_info+0x20/0x20 [ 491.522249][ T8681] ? load_image+0x400/0x400 [ 491.526971][ T8681] panic+0x2dc/0x730 [ 491.531345][ T8681] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 491.538903][ T8681] ? bpf_jit_dump+0xd0/0xd0 [ 491.544106][ T8681] ? _raw_spin_unlock_irqrestore+0xc0/0x120 [ 491.550089][ T8681] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 491.556959][ T8681] ? _raw_spin_unlock+0x40/0x40 [ 491.562113][ T8681] ? dvb_device_open+0xca/0x370 [ 491.567055][ T8681] check_panic_on_warn+0x84/0xa0 [ 491.572151][ T8681] ? dvb_device_open+0xca/0x370 [ 491.577551][ T8681] end_report+0x6f/0x130 [ 491.583407][ T8681] kasan_report+0x128/0x150 [ 491.587997][ T8681] ? chrdev_open+0x3e3/0x6a0 [ 491.593062][ T8681] ? dvb_device_open+0xca/0x370 [ 491.598603][ T8681] dvb_device_open+0xca/0x370 [ 491.604286][ T8681] ? do_raw_spin_unlock+0x121/0x230 [ 491.609842][ T8681] chrdev_open+0x5cc/0x6a0 [ 491.615048][ T8681] ? cd_forget+0x160/0x160 [ 491.620422][ T8681] ? fsnotify_perm+0x3ed/0x5e0 [ 491.625795][ T8681] ? cd_forget+0x160/0x160 [ 491.630492][ T8681] do_dentry_open+0x8c6/0x1500 [ 491.637365][ T8681] path_openat+0x27f1/0x3230 [ 491.642128][ T8681] ? do_sys_openat2+0xda/0x1d0 [ 491.647487][ T8681] ? verify_lock_unused+0x140/0x140 [ 491.653282][ T8681] ? do_filp_open+0x430/0x430 [ 491.658384][ T8681] ? __virt_addr_valid+0x18c/0x540 [ 491.663841][ T8681] do_filp_open+0x1f5/0x430 [ 491.668857][ T8681] ? vfs_tmpfile+0x490/0x490 [ 491.673619][ T8681] ? _raw_spin_unlock+0x28/0x40 [ 491.679139][ T8681] ? alloc_fd+0x58f/0x630 [ 491.683990][ T8681] do_sys_openat2+0x134/0x1d0 [ 491.688841][ T8681] ? do_sys_open+0xe0/0xe0 [ 491.693268][ T8681] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 491.699762][ T8681] ? lock_chain_count+0x20/0x20 [ 491.704782][ T8681] __x64_sys_openat+0x139/0x160 [ 491.710256][ T8681] do_syscall_64+0x55/0xa0 [ 491.714870][ T8681] ? clear_bhb_loop+0x40/0x90 [ 491.720073][ T8681] ? clear_bhb_loop+0x40/0x90 [ 491.725194][ T8681] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 491.731294][ T8681] RIP: 0033:0x7f0e2635cfce [ 491.736133][ T8681] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 491.759002][ T8681] RSP: 002b:00007f0e271c0b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 491.768057][ T8681] RAX: ffffffffffffffda RBX: 00007f0e271c16c0 RCX: 00007f0e2635cfce [ 491.776475][ T8681] RDX: 0000000000044e02 RSI: 00007f0e271c0c00 RDI: ffffffffffffff9c [ 491.784884][ T8681] RBP: 00007f0e271c0c00 R08: 0000000000000000 R09: 0000000000000000 [ 491.793298][ T8681] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 491.801802][ T8681] R13: 00007f0e26616038 R14: 00007f0e26615fa0 R15: 00007ffcb0bc0d38 [ 491.810971][ T8681] [ 491.817793][ T8681] Kernel Offset: disabled [ 491.822208][ T8681] Rebooting in 86400 seconds..