last executing test programs: 4.627385792s ago: executing program 0 (id=324): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0xfc}}, 0x44014) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x6, 0x4) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) r2 = getpid() r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETS(r4, 0x5402, &(0x7f0000000140)={0x140, 0xd, 0x0, 0x6, 0x16, "737b27e90e2947801cf3a246ada40a9fd86000"}) ioctl$TIOCSTI(r3, 0x5412, &(0x7f00000000c0)=0xd) r5 = syz_pidfd_open(r2, 0x0) process_madvise(r5, 0x0, 0x0, 0x8, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) r7 = socket(0x40000000015, 0x5, 0x0) bind$inet(r7, &(0x7f00008a5ff0)={0x2, 0x0, @multicast1}, 0x10) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r10 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r10, 0xc0184800, &(0x7f0000000100)={0x4, r9, 0x1}) ioctl$DMA_BUF_IOCTL_SYNC(r11, 0xc0086202, &(0x7f0000000540)=0x4) preadv(r8, &(0x7f0000000740)=[{&(0x7f0000000180)=""/16, 0x10}, {&(0x7f0000000300)=""/142, 0x8e}], 0x2, 0xfff, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 4.43943459s ago: executing program 0 (id=327): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x8000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x400000000000000) 3.848696418s ago: executing program 3 (id=337): r0 = syz_usb_connect$lan78xx(0x3, 0x3f, &(0x7f00000003c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) r1 = syz_usb_connect$lan78xx(0x0, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r1, &(0x7f0000000140)={0x14, &(0x7f0000000040)={0x40, 0x6, 0xe3, {0xe3, 0x23, "c9c58f03c902f8f8f8f12195683bd88420d15b3c84e7bfbae0f85ec438fd76016ef071ffd6a26ec93076d5d52b39e4aef653739bf6f9f859d6299e3e119324f7588476e16a71b016fd7679776b7bab02f4efab478d84dd9ded2ca9e8ffa8ce978adb8c002c3de52febff599540ea89da80310ab6624a914d1f5d2e37ebe03573d19d3a102d9894f2775608274cd10e4a3afd07f6f5d066156a2f68a973ef98429b9273bd0578db80b94b631a7611c8102c60c2778c0a9061a8dd61d1bce0d5d355fea3b9788de388a1b277a64e805a7c3674ef38a0f15f603b18b114f755e7acbe"}}, &(0x7f00000001c0)={0x0, 0x3, 0x40, @string={0x40, 0x3, "1a601c8781eb7b94977e894186b33d2aa87ba48f586fceb3c92ac54cc64b7293e471c2c7b5a0021d23a8bdfbed4ec6ac6436f13aadd9a212b6af7b7c01a2"}}}, &(0x7f0000000440)={0x34, &(0x7f0000000240)={0x40, 0x6, 0xf, "36b46b67c0037005845dfa24e9f111"}, &(0x7f0000000280)={0x0, 0xa, 0x1}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000300)={0xc0, 0xa1, 0x4, 0x1}, &(0x7f0000000340)={0x40, 0xa0, 0x4, 0x2}, &(0x7f0000000400)={0xc0, 0xa2, 0x2f, "2170ed99491c12205999e2cc91887c7f4a4300c119f2b6788d7214066c6788b8a58762203fc4655920c94b10f4f674"}}) syz_usb_control_io(r0, 0x0, &(0x7f0000001700)={0x84, &(0x7f0000001300)={0x40, 0x14}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000380)={0x34, &(0x7f0000000180)={0x40, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.639907461s ago: executing program 2 (id=342): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="300200007d00000305bf000000000000000000000000000000000000000000000000000000000000000000000000000000001b00046e6f6465767b65766f6f7e0539c60005000037d93a8b920000003800704a86cec602007dfa673effeb09b5351f5bde05"], 0x230) 2.567776035s ago: executing program 2 (id=343): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000000500)=""/212, 0xd4}], 0x1, 0x1a, 0x0) ioctl$sock_SIOCGIFCONF(r1, 0x8912, &(0x7f0000000000)=@buf={0x60, &(0x7f0000000100)="e50f5208e87783c183e6a2a472d4de09b3ce6233d9943b4be550763418d9b04c64c7af70a9d00a001aa47e6142da19197f0e5483c513023f64e67905a8583f5799c30dce923108581680276df8f504c48af846fec10c9a5b4f459d7fe6b294f4"}) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x4140045e}, 0xc) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x2, 0x31, 0x7d, 0x55, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$uac1(r3, 0x0, 0x0) syz_usb_control_io$uac1(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000300)={0x40, 0x17, 0x4, "0300253f"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = socket(0x2, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x12, 0x0, 0x0, 0x2, 0x401, 0x1, 0x1}}) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001d00), r2) sendmsg$NL802154_CMD_SET_PAN_ID(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001d80)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="250227bd7000fddbdf270a0000000c000600030000000100000000800000004c539aa868869f687facf6dd87bf0d01610bfdb0cd976b03be2e4bb4f5d19b37985316b3b8cb"], 0x20}}, 0x80) 2.273217919s ago: executing program 0 (id=344): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001640)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a0b040000000000000000020000002400048020000180070001006374000014000280080002400000000f08000140000000020900010073797a30000000000900020073797a320000000014000000110001"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0) bind$inet6(r0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0xffffffff, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x38}}, 0x4000}, 0x1c) 2.211821693s ago: executing program 3 (id=345): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x2, 0x5}}, 0x20) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0884113, &(0x7f0000000440)={0x1, 0xfffffffd, 0x1, 0xfffffffffffffff9, 0x400000002, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffffd, 0xc, 0x2}) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r2, 0xc0984124, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x1}) 2.11174185s ago: executing program 3 (id=346): r0 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, r1, 0x1, 0x0, 0x6, @random="e2b03a0a83c5"}, 0x14) sendmmsg$unix(r0, &(0x7f0000002680)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}}], 0x1, 0x40004) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000000)={0x0, @aes128, 0x0, @desc1}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x85, 0x0, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x9}) syz_usb_connect$uac1(0x4, 0xea, &(0x7f0000000100)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0xbe0f4d3fd0e06bfd, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd8, 0x3, 0x1, 0x7f, 0xf0, 0x4, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x401, 0x6}, [@processing_unit={0xb, 0x24, 0x7, 0x2, 0x3, 0x9e, "4eee5789"}, @mixer_unit={0xa, 0x24, 0x4, 0x6, 0x7, "e4e80f5ef9"}, @input_terminal={0xc, 0x24, 0x2, 0x1, 0x685e8366eb094645, 0x3, 0x8, 0x5, 0x5, 0x10}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x2, 0x2, 0x8, 0x9, 'E', "6e0ede"}, @format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x3, 0x3, 0x4, 0x9, "33009edeb6d4e99a37"}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x0, 0x81, 0xc, "2a9587a6dd0eae"}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x7, 0x0, 0x9, "55cd472aa0"}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x2, 0x8, 0x4, {0x7, 0x25, 0x1, 0x82, 0xff, 0xb}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x2, 0x1, 0x1, 0x81, "d12298", '\f\n'}, @format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x0, 0x4, 0x1, 0x8, "3108359026e7d3ce"}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x4, 0x2, 0x0, {0x7, 0x25, 0x1, 0x0, 0x40, 0x7}}}}}}}]}}, &(0x7f0000000600)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x110, 0x1, 0x10, 0x7, 0xff, 0xff}, 0xdc, &(0x7f00000002c0)={0x5, 0xf, 0xdc, 0x6, [@generic={0xb5, 0x10, 0x2, "d86ab8202103b2256a364008e3e0c7913ad780468e7076777aaa6b4f0bc2865fe17cb5317c8573cc49176740faf7210dc8db447a49426ea448deca3522ee76015e441f8028e3c68375d015580bb1d9ef4f01d6cde5eb63da4ec61886b747b8b7f26ab2af72a7e1475b3190639163334c7c7449d32e8661d2d8001743a1b5d1b4e0e7e1ef07303d296c683f75d3ccc8bfb6ea28be7e399d479c3e7d8fcf13524b13cebd466daedaab829001b69e3c25e8b9f0"}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x7, 0x4, 0xca0e}, @generic={0xa, 0x10, 0x1, "955ee2f245fd51"}, @ext_cap={0x7, 0x10, 0x2, 0x14, 0x6, 0x6, 0x7}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x6, 0x2, 0x8}, @ptm_cap={0x3}]}, 0x7, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x140c}}, {0x2b, &(0x7f00000003c0)=@string={0x2b, 0x3, "bd667a3e9c98650727bae9039b6a78a2016e894e5d8c4ffadff4dd85f35bff4c923635b3ae7d0825e0"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0xc379038f1e5fecb9}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x3401}}, {0x3a, &(0x7f0000000480)=@string={0x3a, 0x3, "9bf7bedd62b84ebadfc3b8e237084d788f59782c1e63782c7dec6f517fd74cb751508be145961f663891a6319a0d5c57d07369b62c3fe187"}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x7036}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x2401}}]}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r6, @ANYBLOB="1f003300d0000000080211000001080211000300505050505050"], 0x3c}}, 0x10) r7 = openat$random(0xffffffffffffff9c, &(0x7f0000000940), 0x800, 0x0) ioctl$RNDADDTOENTCNT(r7, 0x40045201, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a300000000040000000030a01080000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d65746100000000140002800800014000000012080002400000000414000000110001"], 0xd8}}, 0x0) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_CONTEXT(r9, 0x84, 0x7d, 0x0, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000580)={{0x14, 0x10, 0x1, 0x0, 0x2000000, {0x7}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x11c}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000040)={0x0, 0xfffe, 0x2, [0x8001, 0x0]}, &(0x7f00000000c0)=0xc) 2.111524622s ago: executing program 0 (id=347): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000000)={0x0, 0xfffffffd, 0x5, 0xb, 0x200, &(0x7f00000005c0)="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"}) 1.980783341s ago: executing program 0 (id=348): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000002c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaabb86dd6d002000001311ff00000040000000000000000000000000ff0200000003000000000000e9ffff004f194e20"], 0x4b) 1.851264714s ago: executing program 0 (id=349): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000000010d80402f0000000000001090224000100000000090400000103000000092100000001220b0009058103"], 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) recvmmsg(r1, &(0x7f0000000380)=[{{0x0, 0x0, 0x0}, 0x716b}], 0x1, 0x40012000, 0x0) ioctl$AUTOFS_IOC_FAIL(r1, 0x9361, 0x8000000000000000) r2 = openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r3, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) sendmsg$rds(r3, &(0x7f0000000600)={&(0x7f0000000200)={0x2, 0x4e21, @rand_addr=0x64010100}, 0x10, &(0x7f0000000340)=[{&(0x7f00000016c0)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x20000040}, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r4, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r2) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="00658f0000000093"], 0x0, 0x0, 0x0, 0x0}, 0x0) 1.519490953s ago: executing program 3 (id=350): r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000016c0), 0x121040, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060", @ANYRESOCT], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300020000000000fedbdf25fc0000000000000000f1000000000000ac1414bb00000000000000ecffffffffffffff04000000000a0060"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8}, {0x0, 0x8}}}, 0xb8}}, 0x0) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000080)={'virt_wifi0\x00', 0x9}) ioctl$SOUND_MIXER_READ_VOLUME(r0, 0x40086603, &(0x7f0000000040)) 1.518794019s ago: executing program 3 (id=351): r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x7ffffffe, 0x24, 0x3}}], 0x18}, 0x0) 1.485043025s ago: executing program 3 (id=352): socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000000340)="4700020001003f", 0x7) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x30, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x8, 0x9, 0x0, 0x0, @uid}]}, @nested={0x4, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001be"], 0x7c}}, 0x0) futex(&(0x7f000000cffc), 0x5, 0x100000, 0x0, &(0x7f0000000000), 0x1000000) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x48, r5, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'veth0_to_bridge\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c00028005000302000000000800014000000001080002400000000c0900010073797a30000000000900020073797a320000000014000000110001"], 0x80}}, 0x0) close(0x4) prctl$PR_SET_THP_DISABLE(0x44, 0x4) syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000121ff3080d05220104b501020333f302120001000060000904f40000be3c2700"], 0x0) 680.742338ms ago: executing program 2 (id=353): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x511}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f0000000040)=0x4) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000240)={{0xddddc000, 0xf000, 0x10, 0xb0, 0x0, 0x2, 0x82, 0x7f, 0x1, 0x7, 0x4, 0xe8}, {0x8000000, 0x0, 0xf, 0x8, 0x0, 0x0, 0x3, 0x7f, 0x2f, 0xb6, 0x0, 0x5}, {0x8080000, 0x10d0000, 0x3, 0x7, 0xb, 0x9, 0xa6, 0x40, 0x0, 0x1, 0x5, 0x4}, {0x1, 0xf000, 0x9, 0x0, 0x4, 0x7, 0x6, 0x3, 0x5, 0x2, 0x5, 0x40}, {0x10000, 0xf000, 0x0, 0x4, 0x4c, 0x81, 0x10, 0xe, 0xc, 0xbb, 0x6, 0xf}, {0xdddd1000, 0x4000, 0xa, 0x4, 0xb7, 0x40, 0x2, 0x8, 0x6, 0x4, 0x81, 0x8}, {0x10000, 0xd000, 0x0, 0x2, 0x1, 0x5, 0x1, 0x9, 0x5, 0x81, 0x1, 0xf}, {0xeeee8000, 0x6000, 0x8, 0x5, 0x5, 0xc, 0x16, 0xbf, 0x5, 0x1, 0xe, 0x7f}, {0x2000, 0x7}, {0x1000, 0x2}, 0x8, 0x0, 0x50000, 0x200, 0x4, 0x8000, 0x1000, [0x0, 0x8001, 0x5e, 0xfffffffffffffffc]}) 577.371775ms ago: executing program 1 (id=355): r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000000)=ANY=[@ANYBLOB="00020401"], 0x18) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCGPKT(r1, 0x40045431, &(0x7f0000000000)) (async, rerun: 64) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x6e23, 0x2, @mcast1, 0x9}, 0x1c) (async, rerun: 64) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async, rerun: 32) sendmmsg$inet6(r0, &(0x7f0000001840), 0x3b, 0x0) (rerun: 32) 556.261112ms ago: executing program 2 (id=356): mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000680)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000000)='./file1\x00') mkdir(&(0x7f0000000000)='./file0\x00', 0x16a) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1a8) mount$overlay(0x3a00000000000000, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 435.486435ms ago: executing program 2 (id=357): sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=[{0x0, 0x18}], 0x1, 0x0, 0x0, 0x20000080}, 0x0) r0 = socket(0x10, 0x803, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(0xffffffffffffffff, 0x4068aea3, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000002040)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000a00)=""/178, 0xb2}], 0x1}, 0x2}], 0x1, 0x40000022, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4089, 0x197}, {&(0x7f0000000400)=""/106, 0x1c}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0xbe8}, {&(0x7f0000000540)=""/158, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x500000000000000, &(0x7f0000003700)={0x77359400}) 410.314248ms ago: executing program 2 (id=358): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001900)={0x20, 0x43, 0x107, 0xffffdffe, 0x25dfdbfc, {0x2, 0x7c}, [@nested={0x4, 0x145}, @nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x1c}]}]}, 0x20}}, 0xc000) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) modify_ldt$write(0x1, &(0x7f0000000000)={0x52a, 0xffffffffffffffff, 0x2000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x10) modify_ldt$write2(0x11, &(0x7f0000000380)={0x4, 0x20000800, 0x1000, 0x1, 0x1, 0x1}, 0x10) openat$mice(0xffffffffffffff9c, &(0x7f0000000380), 0x4000) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADD(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)={0xa8, r3, 0x0, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:groupadd_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x44}}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private1}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast1}]}, 0xa8}, 0x1, 0x0, 0x0, 0x40}, 0x24000810) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c00000000010104000000000000000002000000240002801400018008000100e000000108000200e00000010c0002800500010000000000080008400000000814000580080001"], 0x5c}}, 0x0) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r7 = socket$rxrpc(0x21, 0x2, 0x2) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r7, 0x84, 0x75, 0x0, 0x0) writev(r1, &(0x7f0000000500)=[{&(0x7f0000000080)="2e9b5b0007e03dd65193dfb6c575963f86dd6067", 0x14}, {&(0x7f0000000200)="b700000000000000000000d1dd0fccd5de059daf79f3", 0x16}, {&(0x7f0000000340)="37a88dc41ed443abea1e522800b6e02a2724fd355159d140ba8cc80e74f2d600eb117a5a6c08dd62e40e29b00eb7c7ac0c07940d04d4ca38b285433eb6fda99eb90f0decf9955266f63f794d1fd44ee189073167c81a6824ade4f92efc58fcd4e89f7361ac139d64187008a66e906d0be0df92b0112febc2265ff7231f5f08acc7c82081f42987c5b3430fac43cc63de3b900a385e7cbd47b94dfc7f31e3498de52465765b7d674eb657b141dbc38697809229ae26d127a2fdd9e9ee888aa776ff6097", 0xc3}, {&(0x7f00000029c0)="3de496b26cb156fc17de651bc2059979575c10b710b18f6a6eb3e0edacecac6e537e292fa84729d0f9307c991d2dcd08f489b6f01443bea0160d4611573a3da03d088a33db59ac98a334c635c5d036662c3b23e27854dbc6c163d718b4c7abbea840f975cceb9ace04893f367724b01266748ec2aa05aabb345fb3bdeec4b44af54866383c500e53f38217a45b37414a6d48adbb4e7dafc07e90b5596424efc201cff679e3b190cc2e0ff7cf943e65cb300f296e", 0xb4}], 0x4) syz_usb_connect(0x3, 0x24, &(0x7f0000000880)={{0x12, 0x1, 0x300, 0xe1, 0x5d, 0x84, 0x10, 0x644, 0x800f, 0xd2f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x81, 0x9, 0x30, 0x0, [{{0x9, 0x4, 0x91, 0xfa, 0x0, 0xc7, 0xc7, 0xcd, 0x2}}]}}]}}, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0}) 244.666067ms ago: executing program 1 (id=359): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r0, 0x29, 0xc8, 0x0, 0xc000000) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0xa4ff, @mcast2}, 0x0, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100]}}, 0x5c) 175.455581ms ago: executing program 1 (id=360): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006) 158.253888ms ago: executing program 1 (id=361): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001640)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a0b040000000000000000020000002400048020000180070001006374000014000280080002400000000f08000140000000020900010073797a30000000000900020073797a320000000014000000110001"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0xb, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x1000000, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) 108.582704ms ago: executing program 1 (id=362): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp256-generic\x00'}, 0x58) accept4$alg(r0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$l2tp6(0xa, 0x2, 0x73) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0xb) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) pipe(&(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c007fff", @ANYRES16=r3, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r1], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 0s ago: executing program 1 (id=363): r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x2, 0x300) close(0x3) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='net/vlan/vlan0\x00') preadv(r2, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/216, 0xd8}], 0x1, 0xa3, 0xd) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f00000002c0)='blkio.throttle.write_iops_device\x00', 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f00000000c0)=ANY=[], 0x6a) r5 = socket$kcm(0x10, 0x2, 0x4) close(r5) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000500)={'ip6tnl0\x00', 0x0, 0x2f, 0x81, 0x4, 0x40, 0x4, @ipv4={'\x00', '\xff\xff', @multicast2}, @mcast1, 0x20, 0x20, 0x80000000, 0x50c}}) setsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f0000000280)={@dev={0xac, 0x14, 0x14, 0x11}, @loopback, r6}, 0xc) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000140)="5c000000130025cc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514000cc00800250007000200060019000064bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000004700)=""/4093, 0xffd}, {&(0x7f0000000840)=""/4078, 0xfee}, {&(0x7f0000003540)=""/4130, 0x1022}, {&(0x7f0000000200)=""/115, 0x73}, {&(0x7f0000000780)=""/190, 0xbe}, {&(0x7f0000000340)=""/174, 0xae}, {&(0x7f0000000400)=""/193, 0xc1}], 0x7}, 0x102) socket(0x23, 0x800, 0x400) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1f}}}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.95' (ED25519) to the list of known hosts. [ 64.970288][ T5809] cgroup: Unknown subsys name 'net' [ 65.075657][ T5809] cgroup: Unknown subsys name 'cpuset' [ 65.084182][ T5809] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 66.459640][ T5809] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 68.521425][ T5826] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 68.530128][ T5826] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 68.538927][ T5826] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 68.547681][ T5826] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 68.549214][ T5833] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 68.563465][ T5833] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 68.570849][ T5832] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 68.578654][ T5833] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 68.579778][ T5826] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 68.593416][ T5832] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 68.601409][ T5832] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 68.608708][ T5826] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 68.609017][ T5833] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 68.623711][ T5835] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 68.624082][ T5832] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 68.631173][ T5835] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 68.646891][ T5835] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 68.651084][ T5146] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 68.654613][ T5835] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 68.664427][ T5832] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 69.188049][ T5819] chnl_net:caif_netlink_parms(): no params data found [ 69.300261][ T5820] chnl_net:caif_netlink_parms(): no params data found [ 69.348714][ T5821] chnl_net:caif_netlink_parms(): no params data found [ 69.416958][ T5818] chnl_net:caif_netlink_parms(): no params data found [ 69.440770][ T5819] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.448859][ T5819] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.456494][ T5819] bridge_slave_0: entered allmulticast mode [ 69.463893][ T5819] bridge_slave_0: entered promiscuous mode [ 69.509906][ T5819] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.517191][ T5819] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.524371][ T5819] bridge_slave_1: entered allmulticast mode [ 69.531335][ T5819] bridge_slave_1: entered promiscuous mode [ 69.634688][ T5820] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.642372][ T5820] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.650287][ T5820] bridge_slave_0: entered allmulticast mode [ 69.657587][ T5820] bridge_slave_0: entered promiscuous mode [ 69.667825][ T5819] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.681448][ T5821] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.689160][ T5821] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.696380][ T5821] bridge_slave_0: entered allmulticast mode [ 69.703678][ T5821] bridge_slave_0: entered promiscuous mode [ 69.711024][ T5820] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.718471][ T5820] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.726744][ T5820] bridge_slave_1: entered allmulticast mode [ 69.733968][ T5820] bridge_slave_1: entered promiscuous mode [ 69.742975][ T5819] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.757215][ T5821] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.764406][ T5821] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.771625][ T5821] bridge_slave_1: entered allmulticast mode [ 69.778688][ T5821] bridge_slave_1: entered promiscuous mode [ 69.874575][ T5820] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.885310][ T5819] team0: Port device team_slave_0 added [ 69.891067][ T5818] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.898973][ T5818] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.906219][ T5818] bridge_slave_0: entered allmulticast mode [ 69.914029][ T5818] bridge_slave_0: entered promiscuous mode [ 69.923808][ T5821] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.935190][ T5820] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.946187][ T5819] team0: Port device team_slave_1 added [ 69.951930][ T5818] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.959526][ T5818] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.966932][ T5818] bridge_slave_1: entered allmulticast mode [ 69.974103][ T5818] bridge_slave_1: entered promiscuous mode [ 69.983314][ T5821] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.073603][ T5820] team0: Port device team_slave_0 added [ 70.080314][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.087321][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.113559][ T5819] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.127565][ T5818] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.138752][ T5821] team0: Port device team_slave_0 added [ 70.151686][ T5820] team0: Port device team_slave_1 added [ 70.158358][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.165315][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.191381][ T5819] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.204798][ T5818] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.215528][ T5821] team0: Port device team_slave_1 added [ 70.271598][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.278834][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.304821][ T5820] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.320954][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.327950][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.353909][ T5820] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.388738][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.395927][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.422085][ T5821] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.443355][ T5818] team0: Port device team_slave_0 added [ 70.460440][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.467604][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.493527][ T5821] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.507997][ T5818] team0: Port device team_slave_1 added [ 70.559636][ T5819] hsr_slave_0: entered promiscuous mode [ 70.566050][ T5819] hsr_slave_1: entered promiscuous mode [ 70.603918][ T5820] hsr_slave_0: entered promiscuous mode [ 70.610157][ T5820] hsr_slave_1: entered promiscuous mode [ 70.616830][ T5820] debugfs: 'hsr0' already exists in 'hsr' [ 70.622814][ T5820] Cannot create hsr debugfs directory [ 70.629751][ T5818] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.636768][ T5818] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.662674][ T5818] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.710749][ T5818] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.713632][ T5835] Bluetooth: hci2: command tx timeout [ 70.717858][ T5833] Bluetooth: hci3: command tx timeout [ 70.728976][ T5832] Bluetooth: hci0: command tx timeout [ 70.734562][ T5818] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.734601][ T5818] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.771652][ T5830] Bluetooth: hci1: command tx timeout [ 70.783927][ T5821] hsr_slave_0: entered promiscuous mode [ 70.790196][ T5821] hsr_slave_1: entered promiscuous mode [ 70.796483][ T5821] debugfs: 'hsr0' already exists in 'hsr' [ 70.802211][ T5821] Cannot create hsr debugfs directory [ 70.955698][ T5818] hsr_slave_0: entered promiscuous mode [ 70.961947][ T5818] hsr_slave_1: entered promiscuous mode [ 70.968155][ T5818] debugfs: 'hsr0' already exists in 'hsr' [ 70.974342][ T5818] Cannot create hsr debugfs directory [ 71.282063][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.290945][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.351752][ T5819] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 71.363717][ T5819] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 71.374771][ T5819] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 71.400345][ T5819] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 71.470004][ T5820] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 71.487125][ T5820] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 71.497321][ T5820] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 71.509720][ T5820] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 71.620257][ T5818] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 71.635370][ T5818] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 71.646535][ T5818] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 71.665005][ T5818] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 71.788015][ T5821] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 71.798421][ T5821] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 71.817437][ T5821] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 71.827594][ T5821] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 71.864461][ T5819] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.919218][ T5819] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.935711][ T5820] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.956274][ T4390] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.963518][ T4390] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.985303][ T149] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.992390][ T149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.039416][ T5820] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.075757][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.082915][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.105173][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.112259][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.204941][ T5818] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.252241][ T5821] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.288714][ T5818] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.305524][ T5820] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.335146][ T135] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.342258][ T135] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.360777][ T5821] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.382523][ T135] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.389726][ T135] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.399864][ T135] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.406993][ T135] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.426983][ T135] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.434177][ T135] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.497511][ T5819] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.706225][ T5820] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.743869][ T5819] veth0_vlan: entered promiscuous mode [ 72.784455][ T5819] veth1_vlan: entered promiscuous mode [ 72.794819][ T5830] Bluetooth: hci1: command tx timeout [ 72.794843][ T5832] Bluetooth: hci2: command tx timeout [ 72.800594][ T5835] Bluetooth: hci0: command tx timeout [ 72.811297][ T5833] Bluetooth: hci3: command tx timeout [ 72.938471][ T5820] veth0_vlan: entered promiscuous mode [ 72.954910][ T5818] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.988167][ T5820] veth1_vlan: entered promiscuous mode [ 73.002421][ T5819] veth0_macvtap: entered promiscuous mode [ 73.023761][ T5819] veth1_macvtap: entered promiscuous mode [ 73.042545][ T5821] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.088170][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.103265][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.111270][ T5820] veth0_macvtap: entered promiscuous mode [ 73.128010][ T5818] veth0_vlan: entered promiscuous mode [ 73.144440][ T4390] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.158209][ T5820] veth1_macvtap: entered promiscuous mode [ 73.164814][ T4390] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.175820][ T4390] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.188780][ T4390] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.208810][ T5818] veth1_vlan: entered promiscuous mode [ 73.243277][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.281940][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.297398][ T5821] veth0_vlan: entered promiscuous mode [ 73.320374][ T4390] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.332278][ T4390] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.353687][ T4390] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.369406][ T5818] veth0_macvtap: entered promiscuous mode [ 73.385566][ T4390] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.408593][ T5818] veth1_macvtap: entered promiscuous mode [ 73.416619][ T5821] veth1_vlan: entered promiscuous mode [ 73.450066][ T135] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.459820][ T135] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.469282][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.514475][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.556853][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.572723][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.604869][ T135] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.615683][ T50] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.629617][ T4390] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.644109][ T4390] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.645183][ T5821] veth0_macvtap: entered promiscuous mode [ 73.665151][ T50] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.678823][ T50] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.684889][ T5819] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 73.778028][ T5821] veth1_macvtap: entered promiscuous mode [ 73.788668][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.802044][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.875453][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.930431][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.961121][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.983212][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.042534][ T1137] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.054117][ T1137] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.068834][ T1137] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.091542][ T1137] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.117978][ T135] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.130758][ T135] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.346202][ T5921] netlink: 64 bytes leftover after parsing attributes in process `syz.0.8'. [ 74.364007][ T5921] block nbd0: not configured, cannot reconfigure [ 74.371206][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.402330][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.410182][ T5923] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 74.454180][ T5905] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 74.515115][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.524795][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.593059][ T135] Bluetooth: hci4: Frame reassembly failed (-84) [ 74.635007][ T5905] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 74.652234][ T5905] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 74.677122][ T5905] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 74.700384][ T5905] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 74.710463][ T5905] usb 3-1: SerialNumber: syz [ 74.743195][ T5930] netlink: 'syz.3.4': attribute type 10 has an invalid length. [ 74.750920][ T5930] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4'. [ 74.874135][ T5830] Bluetooth: hci3: command tx timeout [ 74.874543][ T5832] Bluetooth: hci1: command tx timeout [ 74.879579][ T52] Bluetooth: hci2: command tx timeout [ 74.890430][ T5833] Bluetooth: hci0: command tx timeout [ 74.942908][ T5905] usb 3-1: 0:2 : does not exist [ 74.947977][ T5905] usb 3-1: unit 5 not found! [ 74.973205][ T5905] usb 3-1: USB disconnect, device number 2 [ 75.051481][ T5829] udevd[5829]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 75.053823][ T5938] netlink: 'syz.1.13': attribute type 11 has an invalid length. [ 75.076571][ T5938] netlink: 168 bytes leftover after parsing attributes in process `syz.1.13'. [ 75.250095][ T5945] netlink: 14 bytes leftover after parsing attributes in process `syz.1.15'. [ 75.263914][ T24] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 75.403458][ T24] usb 4-1: device descriptor read/64, error -71 [ 75.472000][ T5948] tmpfs: Bad value for 'mpol' [ 75.483261][ T5948] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 75.543619][ T5919] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 75.554370][ T5948] syz.2.16 uses obsolete (PF_INET,SOCK_PACKET) [ 75.652756][ T24] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 75.718613][ T5919] usb 2-1: not running at top speed; connect to a high speed hub [ 75.730247][ T5919] usb 2-1: config 254 has an invalid interface number: 228 but max is 3 [ 75.739543][ T5919] usb 2-1: config 254 has an invalid interface number: 215 but max is 3 [ 75.749813][ T5919] usb 2-1: config 254 has an invalid interface number: 128 but max is 3 [ 75.765531][ T5919] usb 2-1: config 254 contains an unexpected descriptor of type 0x2, skipping [ 75.775610][ T5919] usb 2-1: config 254 has an invalid interface number: 18 but max is 3 [ 75.784217][ T24] usb 4-1: device descriptor read/64, error -71 [ 75.790660][ T5919] usb 2-1: config 254 contains an unexpected descriptor of type 0x2, skipping [ 75.800541][ T5919] usb 2-1: config 254 has no interface number 0 [ 75.808361][ T5919] usb 2-1: config 254 has no interface number 1 [ 75.821702][ T5919] usb 2-1: config 254 has no interface number 2 [ 75.828199][ T5919] usb 2-1: config 254 has no interface number 3 [ 75.839992][ T5919] usb 2-1: config 254 interface 228 altsetting 3 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 75.851421][ T5919] usb 2-1: config 254 interface 228 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 75.864683][ T5919] usb 2-1: config 254 interface 228 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 75.876654][ T5919] usb 2-1: config 254 interface 228 altsetting 3 has a duplicate endpoint with address 0x3, skipping [ 75.888399][ T5919] usb 2-1: config 254 interface 228 altsetting 3 has a duplicate endpoint with address 0xD, skipping [ 75.899671][ T5919] usb 2-1: config 254 interface 228 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 75.911535][ T24] usb usb4-port1: attempt power cycle [ 75.928783][ T5919] usb 2-1: config 254 interface 228 altsetting 3 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 75.942721][ T5919] usb 2-1: config 254 interface 228 altsetting 3 endpoint 0x8 has invalid maxpacket 1024, setting to 64 [ 75.954411][ T5919] usb 2-1: config 254 interface 228 altsetting 3 endpoint 0xE has invalid maxpacket 512, setting to 64 [ 75.965723][ T5919] usb 2-1: config 254 interface 228 altsetting 3 has a duplicate endpoint with address 0x5, skipping [ 75.979012][ T5919] usb 2-1: too many endpoints for config 254 interface 215 altsetting 131: 83, using maximum allowed: 30 [ 75.990561][ T5919] usb 2-1: config 254 interface 215 altsetting 131 has 0 endpoint descriptors, different from the interface descriptor's value: 83 [ 76.013710][ T5919] usb 2-1: config 254 interface 128 altsetting 16 has a duplicate endpoint with address 0x5, skipping [ 76.027235][ T5919] usb 2-1: config 254 interface 128 altsetting 16 has an invalid descriptor for endpoint zero, skipping [ 76.040638][ T5919] usb 2-1: config 254 interface 128 altsetting 16 has a duplicate endpoint with address 0x8, skipping [ 76.053324][ T5919] usb 2-1: config 254 interface 18 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 76.067727][ T5919] usb 2-1: config 254 interface 18 altsetting 1 has 7 endpoint descriptors, different from the interface descriptor's value: 1 [ 76.084820][ T5919] usb 2-1: config 254 interface 228 has no altsetting 0 [ 76.091800][ T5919] usb 2-1: config 254 interface 215 has no altsetting 0 [ 76.100548][ T5919] usb 2-1: config 254 interface 128 has no altsetting 0 [ 76.108258][ T5919] usb 2-1: config 254 interface 18 has no altsetting 0 [ 76.282793][ T24] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 76.324026][ T24] usb 4-1: device descriptor read/8, error -71 [ 76.410603][ T5972] vxfs: WRONG superblock magic 00000000 at 1 [ 76.417213][ T5972] vxfs: WRONG superblock magic 00000000 at 8 [ 76.423760][ T5972] vxfs: can't find superblock. [ 76.471844][ T5974] faux_driver vgem: [drm] Unknown color mode 13; guessing buffer size. [ 76.583879][ T24] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 76.603477][ T24] usb 4-1: device descriptor read/8, error -71 [ 76.632839][ T52] Bluetooth: hci4: command 0x1003 tx timeout [ 76.639235][ T5835] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 76.717775][ T24] usb usb4-port1: unable to enumerate USB device [ 76.862721][ T24] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 76.953100][ T5835] Bluetooth: hci2: command tx timeout [ 76.953599][ T5833] Bluetooth: hci3: command tx timeout [ 76.963959][ T52] Bluetooth: hci0: command tx timeout [ 76.963974][ T5835] Bluetooth: hci1: command tx timeout [ 77.013196][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 77.025891][ T24] usb 3-1: config 0 has an invalid interface number: 60 but max is 0 [ 77.035855][ T24] usb 3-1: config 0 has no interface number 0 [ 77.048588][ T24] usb 3-1: New USB device found, idVendor=046d, idProduct=0100, bcdDevice=fa.5a [ 77.057684][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.065955][ T24] usb 3-1: Product: syz [ 77.070144][ T24] usb 3-1: Manufacturer: syz [ 77.079161][ T24] usb 3-1: SerialNumber: syz [ 77.088902][ T24] usb 3-1: config 0 descriptor?? [ 77.311132][ T5869] usb 3-1: USB disconnect, device number 3 [ 77.732681][ T5869] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 77.862719][ T5869] usb 1-1: device descriptor read/64, error -71 [ 78.068318][ T6003] netlink: 8 bytes leftover after parsing attributes in process `syz.3.35'. [ 78.102692][ T5869] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 78.242746][ T5869] usb 1-1: device descriptor read/64, error -71 [ 78.260582][ T5919] usb 2-1: string descriptor 0 read error: -71 [ 78.268474][ T5919] usb 2-1: New USB device found, idVendor=19d2, idProduct=1294, bcdDevice=fc.f4 [ 78.281779][ T982] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 78.291093][ T5919] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.320899][ T5919] usb 2-1: can't set config #254, error -71 [ 78.343433][ T5919] usb 2-1: USB disconnect, device number 2 [ 78.355382][ T5869] usb usb1-port1: attempt power cycle [ 78.445766][ T982] usb 3-1: Using ep0 maxpacket: 16 [ 78.454229][ T982] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 78.468872][ T982] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 78.483970][ T982] usb 3-1: New USB device found, idVendor=1532, idProduct=011b, bcdDevice= 0.00 [ 78.494410][ T982] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.507388][ T982] usb 3-1: config 0 descriptor?? [ 78.590789][ T6015] netlink: 24 bytes leftover after parsing attributes in process `syz.1.41'. [ 78.682744][ T48] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 78.722875][ T5869] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 78.753405][ T5869] usb 1-1: device descriptor read/8, error -71 [ 78.862899][ T48] usb 4-1: Using ep0 maxpacket: 8 [ 78.879682][ T48] usb 4-1: New USB device found, idVendor=0763, idProduct=2081, bcdDevice=d0.ab [ 78.894730][ T48] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 78.904229][ T48] usb 4-1: Product: syz [ 78.908780][ T48] usb 4-1: Manufacturer: syz [ 78.913439][ T48] usb 4-1: SerialNumber: syz [ 78.932647][ T48] usb 4-1: config 0 descriptor?? [ 78.945770][ T982] hid (null): unknown global tag 0xe [ 78.964032][ T982] razer 0003:1532:011B.0001: unknown global tag 0xe [ 78.970745][ T982] razer 0003:1532:011B.0001: item 0 0 1 14 parsing failed [ 78.983324][ T982] razer 0003:1532:011B.0001: probe with driver razer failed with error -22 [ 78.992958][ T5869] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 79.013292][ T5869] usb 1-1: device descriptor read/8, error -71 [ 79.133419][ T5869] usb usb1-port1: unable to enumerate USB device [ 79.157199][ T5869] usb 3-1: USB disconnect, device number 4 [ 79.164105][ T6009] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.174767][ T6009] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.245822][ T48] usb 4-1: USB disconnect, device number 6 [ 79.269683][ T5829] udevd[5829]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 79.382688][ T982] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 79.514921][ T982] usb 2-1: device descriptor read/64, error -71 [ 79.755878][ T982] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 79.896333][ T982] usb 2-1: device descriptor read/64, error -71 [ 80.016778][ T982] usb usb2-port1: attempt power cycle [ 80.218813][ T6054] !@ÿ: renamed from xfrm0 (while UP) [ 80.362678][ T982] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 80.383291][ T982] usb 2-1: device descriptor read/8, error -71 [ 80.552676][ T48] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 80.624719][ T982] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 80.654995][ T982] usb 2-1: device descriptor read/8, error -71 [ 80.713756][ T48] usb 4-1: Using ep0 maxpacket: 32 [ 80.722107][ T48] usb 4-1: config 0 has an invalid interface number: 188 but max is 0 [ 80.742956][ T48] usb 4-1: config 0 has no interface number 0 [ 80.749072][ T48] usb 4-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 80.774281][ T982] usb usb2-port1: unable to enumerate USB device [ 80.788880][ T48] usb 4-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 80.812690][ T48] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.820720][ T48] usb 4-1: Product: syz [ 80.825229][ T48] usb 4-1: Manufacturer: syz [ 80.829830][ T48] usb 4-1: SerialNumber: syz [ 80.848615][ T48] usb 4-1: config 0 descriptor?? [ 80.857268][ T6057] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 81.073690][ T6057] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 81.286513][ T48] asix 4-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 81.297506][ T48] asix 4-1:0.188: probe with driver asix failed with error -61 [ 81.306312][ T982] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 81.464324][ T982] usb 1-1: too many endpoints for config 0 interface 0 altsetting 221: 255, using maximum allowed: 30 [ 81.475693][ T982] usb 1-1: config 0 interface 0 altsetting 221 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 81.489198][ T982] usb 1-1: config 0 interface 0 has no altsetting 0 [ 81.501555][ T982] usb 1-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 81.511055][ T982] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.521343][ T982] usb 1-1: Product: syz [ 81.526064][ T982] usb 1-1: Manufacturer: syz [ 81.530668][ T982] usb 1-1: SerialNumber: syz [ 81.543236][ T982] usb 1-1: config 0 descriptor?? [ 81.959700][ T982] airspy 1-1:0.0: Board ID: 00 [ 81.979810][ T982] airspy 1-1:0.0: Firmware version: [ 82.095814][ T982] airspy 1-1:0.0: usb_control_msg() failed -71 request 11 [ 82.126167][ T982] airspy 1-1:0.0: Registered as swradio24 [ 82.132750][ T982] airspy 1-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 82.151453][ T982] usb 1-1: USB disconnect, device number 6 [ 82.155138][ T6115] process 'syz.1.80' launched './file2' with NULL argv: empty string added [ 82.223640][ T5838] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 82.350345][ T6123] netlink: 20 bytes leftover after parsing attributes in process `syz.0.83'. [ 82.373439][ T6123] netlink: 20 bytes leftover after parsing attributes in process `syz.0.83'. [ 82.387406][ T6123] netlink: 20 bytes leftover after parsing attributes in process `syz.0.83'. [ 82.397039][ T5838] usb 3-1: Using ep0 maxpacket: 16 [ 82.404946][ T6123] netlink: 20 bytes leftover after parsing attributes in process `syz.0.83'. [ 82.414195][ T5838] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 82.425520][ T6123] netlink: 20 bytes leftover after parsing attributes in process `syz.0.83'. [ 82.434592][ T5838] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 82.445777][ T6123] netlink: 20 bytes leftover after parsing attributes in process `syz.0.83'. [ 82.462917][ T5838] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 82.476393][ T6123] netlink: 20 bytes leftover after parsing attributes in process `syz.0.83'. [ 82.478005][ T5838] usb 3-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 82.495115][ T6123] netlink: 20 bytes leftover after parsing attributes in process `syz.0.83'. [ 82.500792][ T5838] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.512950][ T6123] netlink: 20 bytes leftover after parsing attributes in process `syz.0.83'. [ 82.520641][ T5838] usb 3-1: config 0 descriptor?? [ 82.530175][ T6123] netlink: 20 bytes leftover after parsing attributes in process `syz.0.83'. [ 82.961398][ T5838] input: HID 0955:7214 Haptics as /devices/virtual/input/input5 [ 82.992893][ T5869] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 83.006267][ T5838] shield 0003:0955:7214.0002: Registered Thunderstrike controller [ 83.016366][ T5838] shield 0003:0955:7214.0002: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.2-1/input0 [ 83.160211][ T5905] shield 0003:0955:7214.0002: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 83.160509][ T982] usb 3-1: USB disconnect, device number 5 [ 83.171901][ T5905] shield 0003:0955:7214.0002: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 83.190511][ T5869] usb 2-1: config index 0 descriptor too short (expected 45, got 44) [ 83.199434][ T5869] usb 2-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 83.210595][ T5905] shield 0003:0955:7214.0002: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 83.222019][ T5869] usb 2-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 83.233395][ T5905] shield 0003:0955:7214.0002: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 83.245315][ T5869] usb 2-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 83.257295][ T5869] usb 2-1: config 1 interface 0 altsetting 127 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 83.271522][ T5869] usb 2-1: config 1 interface 0 has no altsetting 0 [ 83.283370][ T5869] usb 2-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 83.294065][ T5869] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.302089][ T5869] usb 2-1: Product: syz [ 83.306707][ T5869] usb 2-1: Manufacturer: syz [ 83.311307][ T5869] usb 2-1: SerialNumber: syz [ 83.319139][ T6136] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 83.326555][ T6136] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 83.362678][ T48] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 83.513633][ T48] usb 1-1: Using ep0 maxpacket: 32 [ 83.520205][ T48] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 83.532757][ T48] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0099, bcdDevice=58.d6 [ 83.541824][ T48] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.550071][ T48] usb 1-1: Product: syz [ 83.559893][ T48] usb 1-1: Manufacturer: syz [ 83.565534][ T48] usb 1-1: SerialNumber: syz [ 83.575212][ T48] usb 1-1: config 0 descriptor?? [ 83.674351][ T5869] rtl8150 2-1:1.0: couldn't find required endpoints [ 83.681371][ T5869] rtl8150 2-1:1.0: probe with driver rtl8150 failed with error -5 [ 83.701926][ T5869] usb 2-1: USB disconnect, device number 7 [ 83.786144][ T48] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 83.794370][ T48] dvb_usb_af9015 1-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 83.806863][ T48] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 83.813633][ T48] dvb_usb_af9035 1-1:0.0: probe with driver dvb_usb_af9035 failed with error -22 [ 83.831615][ T48] usb 1-1: USB disconnect, device number 7 [ 84.247320][ T6166] can0: slcan on ttyS3. [ 84.326772][ T6166] can0 (unregistered): slcan off ttyS3. [ 84.340790][ T5919] usb 4-1: USB disconnect, device number 7 [ 84.554758][ T6174] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 85.892736][ T5905] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 86.066102][ T5905] usb 1-1: config 0 has an invalid interface number: 128 but max is 0 [ 86.081772][ T5905] usb 1-1: config 0 has no interface number 0 [ 86.094678][ T5905] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 86.104229][ T5905] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.131891][ T5905] usb 1-1: Product: syz [ 86.140634][ T6236] Zero length message leads to an empty skb [ 86.148282][ T5905] usb 1-1: Manufacturer: syz [ 86.158563][ T5905] usb 1-1: SerialNumber: syz [ 86.191868][ T5905] usb 1-1: config 0 descriptor?? [ 86.640108][ T10] cfg80211: failed to load regulatory.db [ 86.712855][ T48] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 86.812678][ T10] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 86.864383][ T48] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 86.874598][ T48] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.887702][ T48] usb 2-1: config 0 descriptor?? [ 86.896180][ T48] cp210x 2-1:0.0: cp210x converter detected [ 86.962680][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 86.969575][ T10] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 86.981231][ T10] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 86.991096][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 86.997862][ T10] usb 4-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 87.007040][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.018054][ T10] usb 4-1: config 0 descriptor?? [ 87.216228][ T5905] usb 1-1: non-Atmel transceiver xxxx0600 [ 87.299466][ T48] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 87.352759][ T5833] Bluetooth: hci4: command 0x1003 tx timeout [ 87.353806][ T5835] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 87.417802][ T5905] usb 1-1: Firmware version (0.0) predates our first public release. [ 87.429694][ T5905] usb 1-1: Please update to version 0.2 or newer [ 87.438899][ T5905] usb 1-1: atusb_probe: initialization failed, error = -19 [ 87.466860][ T5905] usb 1-1: USB disconnect, device number 8 [ 87.475445][ T10] cougar 0003:060B:500A.0003: unexpected long global item [ 87.483397][ T10] cougar 0003:060B:500A.0003: parse failed [ 87.489306][ T10] cougar 0003:060B:500A.0003: probe with driver cougar failed with error -22 [ 87.590684][ T6247] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.603623][ T6247] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.619941][ T48] usb 2-1: cp210x converter now attached to ttyUSB0 [ 87.732139][ T48] usb 4-1: USB disconnect, device number 8 [ 87.877567][ T10] usb 2-1: USB disconnect, device number 8 [ 87.902139][ T10] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 87.967429][ T10] cp210x 2-1:0.0: device disconnected [ 88.068122][ T6271] netlink: 'syz.2.119': attribute type 10 has an invalid length. [ 88.150045][ T6277] netlink: 'syz.2.121': attribute type 6 has an invalid length. [ 88.322929][ T982] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 88.494605][ T982] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 88.510851][ T982] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.520628][ T6294] sp0: Synchronizing with TNC [ 88.530701][ T982] usb 1-1: config 0 descriptor?? [ 88.546007][ T982] cp210x 1-1:0.0: cp210x converter detected [ 88.718855][ T6302] block device autoloading is deprecated and will be removed. [ 88.793682][ T6308] random: crng reseeded on system resumption [ 88.835406][ T6308] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 88.842117][ T6308] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 88.849753][ T6308] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 88.857733][ T6308] comedi comedi3: 8255: I/O port conflict (0xc9,4) [ 88.867207][ T6308] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 88.874651][ T6308] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 88.952446][ T982] cp210x 1-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 88.992820][ T982] usb 1-1: cp210x converter now attached to ttyUSB0 [ 89.412728][ T982] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 89.492655][ T5905] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 89.574318][ T982] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 89.584631][ T982] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 89.595729][ T982] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 89.605501][ T982] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 89.618327][ T982] usb 2-1: New USB device found, idVendor=10c4, idProduct=8acf, bcdDevice= 0.00 [ 89.627390][ T982] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.637232][ T982] usb 2-1: config 0 descriptor?? [ 89.645707][ T5905] usb 3-1: Using ep0 maxpacket: 16 [ 89.660472][ T5905] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 36, changing to 9 [ 89.671756][ T5905] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 89.682194][ T5905] usb 3-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 89.691580][ T5905] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.702328][ T5905] usb 3-1: config 0 descriptor?? [ 90.054608][ T982] hid-u2fzero 0003:10C4:8ACF.0004: item fetching failed at offset 1/5 [ 90.063470][ T982] hid-u2fzero 0003:10C4:8ACF.0004: probe with driver hid-u2fzero failed with error -22 [ 90.119213][ T5905] mcp2200 0003:04D8:00DF.0005: unknown main item tag 0x0 [ 90.126482][ T5905] mcp2200 0003:04D8:00DF.0005: unknown main item tag 0x0 [ 90.133818][ T5905] mcp2200 0003:04D8:00DF.0005: unknown main item tag 0x0 [ 90.140867][ T5905] mcp2200 0003:04D8:00DF.0005: unknown main item tag 0x0 [ 90.148770][ T5905] mcp2200 0003:04D8:00DF.0005: USB HID v0.05 Device [HID 04d8:00df] on usb-dummy_hcd.2-1/input0 [ 90.324075][ T982] usb 3-1: USB disconnect, device number 6 [ 91.102781][ T982] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 91.193173][ T5833] Bluetooth: hci4: command 0x1003 tx timeout [ 91.200194][ T5835] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 91.224622][ T5905] usb 1-1: USB disconnect, device number 9 [ 91.256686][ T5905] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 91.296019][ T5905] cp210x 1-1:0.0: device disconnected [ 91.318468][ T982] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 91.341031][ T982] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.361306][ T982] usb 3-1: Product: syz [ 91.372904][ T982] usb 3-1: Manufacturer: syz [ 91.377637][ T982] usb 3-1: SerialNumber: syz [ 91.406830][ T982] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 91.443977][ T24] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 91.846471][ T6332] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 91.855541][ T6332] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 91.893216][ T982] usb 3-1: USB disconnect, device number 7 [ 91.936658][ T6360] capability: warning: `syz.3.149' uses deprecated v2 capabilities in a way that may be insecure [ 91.948519][ T6360] program syz.3.149 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 92.043645][ T5905] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 92.189613][ T6023] usb 2-1: USB disconnect, device number 9 [ 92.217044][ T5905] usb 1-1: Using ep0 maxpacket: 16 [ 92.232042][ T6372] __nla_validate_parse: 31 callbacks suppressed [ 92.232058][ T6372] netlink: 8 bytes leftover after parsing attributes in process `syz.3.154'. [ 92.248466][ T6372] netlink: 8 bytes leftover after parsing attributes in process `syz.3.154'. [ 92.252228][ T5905] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 92.276967][ T5905] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 92.291558][ T5905] usb 1-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 92.300708][ T5905] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.312340][ T5905] usb 1-1: config 0 descriptor?? [ 92.552750][ T24] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 92.553180][ T24] ath9k_htc: Failed to initialize the device [ 92.554816][ T982] usb 3-1: ath9k_htc: USB layer deinitialized [ 92.633357][ T6023] usb 2-1: new low-speed USB device number 10 using dummy_hcd [ 92.737144][ T6384] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 92.805515][ T6023] usb 2-1: Invalid ep0 maxpacket: 64 [ 92.943117][ T6023] usb 2-1: new low-speed USB device number 11 using dummy_hcd [ 92.998127][ T5905] usbhid 1-1:0.0: can't add hid device: -71 [ 93.014000][ T5905] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 93.019138][ T982] IPVS: starting estimator thread 0... [ 93.034991][ T6398] IPVS: ovf: FWM 3 0x00000003 - no destination available [ 93.078212][ T5905] usb 1-1: USB disconnect, device number 10 [ 93.102980][ T6023] usb 2-1: Invalid ep0 maxpacket: 64 [ 93.111600][ T6023] usb usb2-port1: attempt power cycle [ 93.133747][ T6399] IPVS: using max 40 ests per chain, 96000 per kthread [ 93.493316][ T6023] usb 2-1: new low-speed USB device number 12 using dummy_hcd [ 93.525950][ T6023] usb 2-1: Invalid ep0 maxpacket: 64 [ 93.665137][ T6023] usb 2-1: new low-speed USB device number 13 using dummy_hcd [ 93.691304][ T6421] netlink: 'syz.2.172': attribute type 15 has an invalid length. [ 93.699530][ T6421] netlink: 168 bytes leftover after parsing attributes in process `syz.2.172'. [ 93.708934][ T6023] usb 2-1: Invalid ep0 maxpacket: 64 [ 93.715420][ T6023] usb usb2-port1: unable to enumerate USB device [ 93.763604][ T6422] netlink: 'syz.0.173': attribute type 12 has an invalid length. [ 93.771405][ T6422] netlink: 14585 bytes leftover after parsing attributes in process `syz.0.173'. [ 93.799010][ T6422] netlink: 'syz.0.173': attribute type 8 has an invalid length. [ 94.303070][ T6023] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 94.311519][ T5833] Bluetooth: hci4: sending frame failed (-49) [ 94.318759][ T5835] Bluetooth: hci4: Opcode 0x1003 failed: -49 [ 94.474486][ T6023] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 94.486085][ T5905] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 94.493630][ T6023] usb 1-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 94.506623][ T6023] usb 1-1: config 0 interface 0 has no altsetting 0 [ 94.514798][ T6023] usb 1-1: New USB device found, idVendor=0b05, idProduct=1822, bcdDevice= 0.00 [ 94.524375][ T6023] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.541146][ T6023] usb 1-1: config 0 descriptor?? [ 94.643003][ T5905] usb 4-1: device descriptor read/64, error -71 [ 94.751447][ T6023] usb 1-1: string descriptor 0 read error: -71 [ 94.766078][ T6023] usbhid 1-1:0.0: can't add hid device: -71 [ 94.772121][ T6023] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 94.784923][ T6023] usb 1-1: USB disconnect, device number 11 [ 94.882654][ T5905] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 94.972656][ T5869] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 95.012682][ T5905] usb 4-1: device descriptor read/64, error -71 [ 95.102669][ T5869] usb 3-1: device descriptor read/64, error -71 [ 95.123436][ T5905] usb usb4-port1: attempt power cycle [ 95.342754][ T5869] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 95.417692][ T6466] sctp: [Deprecated]: syz.0.191 (pid 6466) Use of int in max_burst socket option deprecated. [ 95.417692][ T6466] Use struct sctp_assoc_value instead [ 95.462715][ T5905] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 95.483489][ T5905] usb 4-1: device descriptor read/8, error -71 [ 95.494194][ T5869] usb 3-1: device descriptor read/64, error -71 [ 95.603650][ T5869] usb usb3-port1: attempt power cycle [ 95.728797][ T5905] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 95.773155][ T5905] usb 4-1: device descriptor read/8, error -71 [ 95.889302][ T5905] usb usb4-port1: unable to enumerate USB device [ 95.942687][ T5869] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 95.971058][ T5869] usb 3-1: device descriptor read/8, error -71 [ 96.222814][ T5869] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 96.243533][ T5869] usb 3-1: device descriptor read/8, error -71 [ 96.369377][ T5869] usb usb3-port1: unable to enumerate USB device [ 97.832453][ T6543] netlink: 60 bytes leftover after parsing attributes in process `syz.1.212'. [ 97.877056][ T6543] netlink: 60 bytes leftover after parsing attributes in process `syz.1.212'. [ 98.132255][ T6555] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 98.144143][ T6555] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 98.157532][ T982] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 98.166045][ T6555] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 98.271999][ T30] audit: type=1326 audit(1764099190.699:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6556 comm="syz.3.217" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0d20b8f749 code=0x0 [ 98.302921][ T982] usb 3-1: device descriptor read/64, error -71 [ 98.542682][ T982] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 98.572722][ T5905] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 98.674876][ T982] usb 3-1: device descriptor read/64, error -71 [ 98.693293][ T5869] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 98.744239][ T5905] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 98.761041][ T5905] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 98.770148][ T5905] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.781771][ T5905] usb 4-1: config 0 descriptor?? [ 98.783950][ T982] usb usb3-port1: attempt power cycle [ 98.862695][ T5869] usb 1-1: Using ep0 maxpacket: 32 [ 98.869820][ T5869] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 98.881822][ T5869] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 98.893514][ T5869] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 98.906877][ T5869] usb 1-1: New USB device found, idVendor=28bd, idProduct=0909, bcdDevice= 0.00 [ 98.916325][ T5869] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.929281][ T5869] usb 1-1: config 0 descriptor?? [ 99.054680][ T6579] ptrace attach of "./syz-executor exec"[5818] was attempted by "./syz-executor exec"[6579] [ 99.066615][ T6579] ptrace attach of "./syz-executor exec"[5818] was attempted by "./syz-executor exec"[6579] [ 99.132826][ T982] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 99.165105][ T982] usb 3-1: device descriptor read/8, error -71 [ 99.368118][ T5869] input: HID 28bd:0909 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:28BD:0909.0006/input/input7 [ 99.403075][ T982] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 99.443477][ T982] usb 3-1: device descriptor read/8, error -71 [ 99.465947][ T5869] uclogic 0003:28BD:0909.0006: input,hidraw0: USB HID v20.00 Mouse [HID 28bd:0909] on usb-dummy_hcd.0-1/input0 [ 99.542728][ T10] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 99.553236][ T982] usb usb3-port1: unable to enumerate USB device [ 99.584575][ T982] usb 1-1: USB disconnect, device number 12 [ 99.714325][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 99.725331][ T10] usb 2-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 99.734453][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.745606][ T10] usb 2-1: config 0 descriptor?? [ 100.165402][ T10] steelseries 0003:1038:12B6.0007: unknown main item tag 0x1 [ 100.185515][ T10] steelseries 0003:1038:12B6.0007: unknown main item tag 0x1 [ 100.194518][ T10] steelseries 0003:1038:12B6.0007: unknown main item tag 0x7 [ 100.212126][ T10] steelseries 0003:1038:12B6.0007: hidraw0: USB HID v0.00 Device [HID 1038:12b6] on usb-dummy_hcd.1-1/input0 [ 100.225270][ T6596] netlink: 16386 bytes leftover after parsing attributes in process `syz.0.232'. [ 100.371599][ T6590] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.383849][ T6590] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.421575][ T10] steelseries 0003:1038:12B6.0007: hid_hw_raw_request() failed with -71 [ 100.437927][ T10] usb 2-1: USB disconnect, device number 14 [ 100.730480][ T6609] 9p: Bad value for 'source' [ 101.222650][ T24] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 101.242649][ T5919] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 101.264359][ T5905] usbhid 4-1:0.0: can't add hid device: -71 [ 101.271799][ T5905] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 101.282243][ T5905] usb 4-1: USB disconnect, device number 13 [ 101.323292][ T982] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 101.355684][ T24] usb 2-1: device descriptor read/64, error -71 [ 101.422697][ T5919] usb 3-1: Using ep0 maxpacket: 16 [ 101.429433][ T5919] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 101.444822][ T5919] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 101.454721][ T5919] usb 3-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 101.464051][ T5919] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.476662][ T5919] usb 3-1: config 0 descriptor?? [ 101.482664][ T982] usb 1-1: Using ep0 maxpacket: 32 [ 101.489569][ T982] usb 1-1: config 0 has an invalid interface number: 188 but max is 0 [ 101.500155][ T982] usb 1-1: config 0 has no interface number 0 [ 101.506393][ T982] usb 1-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 101.522259][ T982] usb 1-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 101.531684][ T982] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.539828][ T982] usb 1-1: Product: syz [ 101.544686][ T982] usb 1-1: Manufacturer: syz [ 101.549303][ T982] usb 1-1: SerialNumber: syz [ 101.559549][ T982] usb 1-1: config 0 descriptor?? [ 101.565591][ T6623] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 101.602699][ T24] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 101.641268][ T6629] can0: slcan on ttyS3. [ 101.704918][ T6629] can0 (unregistered): slcan off ttyS3. [ 101.752726][ T24] usb 2-1: device descriptor read/64, error -71 [ 101.782892][ T6623] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 101.872903][ T24] usb usb2-port1: attempt power cycle [ 101.893949][ T5919] mcp2200 0003:04D8:00DF.0008: USB HID v0.05 Device [HID 04d8:00df] on usb-dummy_hcd.2-1/input0 [ 101.957990][ T6636] netlink: 'syz.3.244': attribute type 3 has an invalid length. [ 101.967173][ T6636] netlink: 'syz.3.244': attribute type 3 has an invalid length. [ 102.163350][ T6637] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 102.173328][ T6637] block device autoloading is deprecated and will be removed. [ 102.212883][ T24] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 102.231790][ T108] usb 3-1: USB disconnect, device number 16 [ 102.244783][ T24] usb 2-1: device descriptor read/8, error -71 [ 102.399615][ T6623] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.408328][ T6623] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.417244][ T982] asix 1-1:0.188 (unnamed net_device) (uninitialized): invalid hw address, using random [ 102.482668][ T24] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 102.503755][ T24] usb 2-1: device descriptor read/8, error -71 [ 102.623948][ T24] usb usb2-port1: unable to enumerate USB device [ 102.889117][ T982] asix 1-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 102.926297][ T982] asix 1-1:0.188: probe with driver asix failed with error -71 [ 102.948985][ T982] usb 1-1: USB disconnect, device number 13 [ 103.032771][ T24] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 103.092208][ T6655] netlink: 16 bytes leftover after parsing attributes in process `syz.2.250'. [ 103.208367][ T24] usb 4-1: config 111 has an invalid interface number: 145 but max is 0 [ 103.222807][ T24] usb 4-1: config 111 has no interface number 0 [ 103.229884][ T24] usb 4-1: config 111 interface 145 has no altsetting 0 [ 103.240787][ T24] usb 4-1: New USB device found, idVendor=07c9, idProduct=0012, bcdDevice=de.d0 [ 103.250253][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.258727][ T24] usb 4-1: Product: syz [ 103.264729][ T24] usb 4-1: Manufacturer: syz [ 103.269334][ T24] usb 4-1: SerialNumber: syz [ 103.521466][ T24] usb 4-1: USB disconnect, device number 14 [ 103.924360][ T24] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 103.942675][ T982] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 104.082628][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 104.093692][ T982] usb 1-1: Using ep0 maxpacket: 16 [ 104.102533][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 104.123990][ T982] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 104.135580][ T982] usb 1-1: config 0 interface 0 has no altsetting 0 [ 104.144215][ T24] usb 3-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 104.153551][ T982] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 104.162873][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.170883][ T24] usb 3-1: Product: syz [ 104.182452][ T982] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.192661][ T24] usb 3-1: Manufacturer: syz [ 104.198041][ T24] usb 3-1: SerialNumber: syz [ 104.207416][ T982] usb 1-1: config 0 descriptor?? [ 104.215778][ T24] usb 3-1: config 0 descriptor?? [ 104.235996][ T24] usb 3-1: no audio or video endpoints found [ 104.370174][ T6681] netlink: 'syz.1.260': attribute type 3 has an invalid length. [ 104.377948][ T6681] netlink: 'syz.1.260': attribute type 1 has an invalid length. [ 104.385653][ T6681] netlink: 224 bytes leftover after parsing attributes in process `syz.1.260'. [ 104.496799][ T6684] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.505755][ T6684] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.630897][ T982] nzxt-smart2 0003:1E71:2009.0009: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.0-1/input0 [ 104.673056][ T10] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 104.824970][ T10] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 104.834212][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.845107][ T10] usb 2-1: config 0 descriptor?? [ 104.852414][ T10] cp210x 2-1:0.0: cp210x converter detected [ 105.037734][ T6673] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.046617][ T6673] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.056184][ T982] usb 1-1: USB disconnect, device number 14 [ 105.256229][ T10] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 105.470926][ T10] usb 2-1: cp210x converter now attached to ttyUSB0 [ 105.667617][ T24] usb 2-1: USB disconnect, device number 19 [ 105.681242][ T24] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 105.704688][ T24] cp210x 2-1:0.0: device disconnected [ 106.036604][ T30] audit: type=1326 audit(1764099198.469:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6701 comm="syz.0.269" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbd6d78f749 code=0x0 [ 106.152771][ T5833] Bluetooth: hci4: command 0x1003 tx timeout [ 106.159641][ T5835] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 106.198090][ T6705] tipc: Started in network mode [ 106.204105][ T6705] tipc: Node identity 000000002e2f62758, cluster identity 4711 [ 106.362999][ T6714] f2fs: Unknown parameter 'barrierÿÿÿÿÿÿø' [ 106.369789][ T6714] netlink: 'syz.0.274': attribute type 10 has an invalid length. [ 106.379556][ T6714] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.387541][ T6714] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.404414][ T6714] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.411566][ T6714] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.419368][ T6714] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.426569][ T6714] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.447853][ T6714] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 106.473948][ T9] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 106.650793][ T9] usb 2-1: config 1 has an invalid interface number: 7 but max is 0 [ 106.669461][ T9] usb 2-1: config 1 has no interface number 0 [ 106.676465][ T9] usb 2-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 106.689853][ T9] usb 2-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 106.722992][ T9] usb 2-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 106.746488][ T9] usb 2-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 106.762228][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.772514][ T9] usb 2-1: Product: syz [ 106.781516][ T9] usb 2-1: Manufacturer: syz [ 106.782211][ T24] usb 3-1: USB disconnect, device number 17 [ 106.793023][ T9] usb 2-1: SerialNumber: syz [ 106.817131][ T6708] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 106.885418][ T6728] use of bytesused == 0 is deprecated and will be removed in the future, [ 106.894439][ T6728] use the actual size instead. [ 106.912694][ T10] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 107.034479][ T6708] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 107.065691][ T10] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 107.074799][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.082840][ T10] usb 1-1: Product: syz [ 107.087006][ T10] usb 1-1: Manufacturer: syz [ 107.091595][ T10] usb 1-1: SerialNumber: syz [ 107.099246][ T10] usb 1-1: config 0 descriptor?? [ 107.246681][ T6708] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.256015][ T6708] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.265512][ T6708] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.274577][ T6708] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.285875][ T9] usb 2-1: Incompatible driver and firmware versions [ 107.301322][ T9] usb 2-1: USB disconnect, device number 20 [ 107.317900][ T10] hso 1-1:0.0: Failed to find BULK IN ep [ 107.331655][ T10] usb-storage 1-1:0.0: USB Mass Storage device detected [ 107.514383][ T9] usb 1-1: USB disconnect, device number 15 [ 108.102737][ T9] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 108.254573][ T9] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 108.263239][ T9] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 108.274043][ T9] usb 2-1: config 220 has no interface number 2 [ 108.282320][ T9] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 108.296254][ T9] usb 2-1: config 220 interface 0 has no altsetting 0 [ 108.304295][ T9] usb 2-1: config 220 interface 76 has no altsetting 0 [ 108.314675][ T9] usb 2-1: config 220 interface 1 has no altsetting 0 [ 108.325014][ T9] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 108.335466][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.343831][ T9] usb 2-1: Product: syz [ 108.348202][ T9] usb 2-1: Manufacturer: syz [ 108.354585][ T9] usb 2-1: SerialNumber: syz [ 108.371441][ T6750] infiniband syz1: set active [ 108.376310][ T6750] infiniband syz1: added veth1_to_bridge [ 108.387148][ T6750] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 108.391247][ T6750] infiniband syz1: Couldn't open port 1 [ 108.431958][ T6750] RDS/IB: syz1: added [ 108.436575][ T6750] smc: adding ib device syz1 with port count 1 [ 108.444100][ T6750] smc: ib device syz1 port 1 has pnetid SYZ0 (user defined) [ 108.581302][ T9] usb 2-1: selecting invalid altsetting 0 [ 108.594002][ T9] uvcvideo 2-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 108.601519][ T9] uvcvideo 2-1:220.0: No valid video chain found. [ 108.615645][ T9] usb 2-1: selecting invalid altsetting 0 [ 108.621921][ T9] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 108.636008][ T9] usb 2-1: USB disconnect, device number 21 [ 108.962812][ T5833] Bluetooth: hci4: command 0x1003 tx timeout [ 108.969026][ T5835] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 109.472694][ T9] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 109.497025][ T6775] netlink: 8 bytes leftover after parsing attributes in process `syz.0.294'. [ 109.507996][ T6775] netlink: 8 bytes leftover after parsing attributes in process `syz.0.294'. [ 109.612680][ T9] usb 2-1: device descriptor read/64, error -71 [ 109.802645][ T5905] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 109.852792][ T9] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 109.944131][ T5905] usb 3-1: device descriptor read/64, error -71 [ 109.984676][ T9] usb 2-1: device descriptor read/64, error -71 [ 110.109105][ T9] usb usb2-port1: attempt power cycle [ 110.192694][ T5905] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 110.203407][ T6793] netlink: 2 bytes leftover after parsing attributes in process `syz.3.301'. [ 110.362671][ T5905] usb 3-1: device descriptor read/64, error -71 [ 110.442690][ T9] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 110.463531][ T9] usb 2-1: device descriptor read/8, error -71 [ 110.483021][ T5905] usb usb3-port1: attempt power cycle [ 110.511334][ T5869] IPVS: starting estimator thread 0... [ 110.512319][ T6803] IPVS: ovf: FWM 3 0x00000003 - no destination available [ 110.516968][ T10] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 110.614080][ T6804] IPVS: using max 29 ests per chain, 69600 per kthread [ 110.664444][ T10] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 110.672528][ T10] usb 4-1: config 0 has no interface number 0 [ 110.679196][ T10] usb 4-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 110.688479][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.702654][ T9] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 110.711146][ T10] usb 4-1: config 0 descriptor?? [ 110.729865][ T10] usb 4-1: selecting invalid altsetting 1 [ 110.738878][ T9] usb 2-1: device descriptor read/8, error -71 [ 110.745777][ T10] dvb_ttusb_budget: ttusb_init_controller: error [ 110.752271][ T10] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 110.781716][ T6811] netlink: 24 bytes leftover after parsing attributes in process `syz.0.307'. [ 110.822887][ T5905] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 110.849106][ T10] DVB: Unable to find symbol cx22700_attach() [ 110.856734][ T9] usb usb2-port1: unable to enumerate USB device [ 110.863852][ T5905] usb 3-1: device descriptor read/8, error -71 [ 110.916188][ T10] DVB: Unable to find symbol tda10046_attach() [ 110.929292][ T10] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 110.947828][ T10] usb 4-1: USB disconnect, device number 15 [ 111.112710][ T5905] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 111.133401][ T5905] usb 3-1: device descriptor read/8, error -71 [ 111.243116][ T5905] usb usb3-port1: unable to enumerate USB device [ 111.722712][ T982] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 111.883855][ T982] usb 4-1: config 0 has an invalid interface number: 151 but max is 1 [ 111.892088][ T982] usb 4-1: config 0 has no interface number 1 [ 111.898282][ T982] usb 4-1: config 0 interface 151 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 111.909264][ T982] usb 4-1: config 0 interface 151 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83 [ 111.921225][ T982] usb 4-1: config 0 interface 151 altsetting 0 endpoint 0x83 has invalid maxpacket 64466, setting to 64 [ 111.932655][ T982] usb 4-1: config 0 interface 151 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 111.945802][ T982] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC9, changing to 0x89 [ 111.957295][ T982] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 111.970836][ T982] usb 4-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7 [ 111.979921][ T982] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.988147][ T982] usb 4-1: Product: syz [ 111.992293][ T982] usb 4-1: Manufacturer: syz [ 111.997038][ T982] usb 4-1: SerialNumber: syz [ 112.004061][ T982] usb 4-1: config 0 descriptor?? [ 112.009866][ T6815] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 112.019419][ T982] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 112.029287][ T982] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 112.056002][ T982] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -12 [ 112.257184][ T5905] usb 4-1: USB disconnect, device number 16 [ 112.592689][ T10] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 112.670586][ T6829] trusted_key: syz.2.313 sent an empty control message without MSG_MORE. [ 112.744528][ T10] usb 2-1: config 0 has an invalid interface number: 252 but max is 0 [ 112.752938][ T10] usb 2-1: config 0 has no interface number 0 [ 112.761217][ T10] usb 2-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=7d.08 [ 112.770630][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.778732][ T10] usb 2-1: Product: syz [ 112.783615][ T10] usb 2-1: Manufacturer: syz [ 112.788249][ T10] usb 2-1: SerialNumber: syz [ 112.809898][ T10] usb 2-1: config 0 descriptor?? [ 112.817708][ T10] usb-storage 2-1:0.252: USB Mass Storage device detected [ 112.837643][ T10] usb-storage 2-1:0.252: device ignored [ 112.945222][ T6836] netlink: 168 bytes leftover after parsing attributes in process `syz.3.315'. [ 113.017317][ T982] usb 2-1: USB disconnect, device number 26 [ 113.222676][ T5919] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 113.384173][ T5919] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 113.393514][ T5919] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.405354][ T5919] usb 4-1: config 0 descriptor?? [ 113.617122][ T5919] udl 4-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 113.643660][ T5919] [drm:udl_init] *ERROR* Selecting channel failed [ 113.707842][ T5919] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 2 [ 113.726153][ T5919] [drm] Initialized udl on minor 2 [ 113.746169][ T5919] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 113.777987][ T5919] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 113.821323][ T982] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 113.845244][ T5919] usb 4-1: USB disconnect, device number 17 [ 113.863498][ T982] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 114.639712][ T6872] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 88 [ 114.798676][ T6876] netlink: 60 bytes leftover after parsing attributes in process `syz.2.332'. [ 114.809844][ T6876] netlink: 60 bytes leftover after parsing attributes in process `syz.2.332'. [ 114.823834][ T6879] ======================================================= [ 114.823834][ T6879] WARNING: The mand mount option has been deprecated and [ 114.823834][ T6879] and is ignored by this kernel. Remove the mand [ 114.823834][ T6879] option from the mount to silence this warning. [ 114.823834][ T6879] ======================================================= [ 114.863309][ T6881] overlay: filesystem on ./file0 not supported as upperdir [ 114.870869][ T6879] overlay: filesystem on ./file0 not supported as upperdir [ 114.887294][ T6881] loop4: detected capacity change from 0 to 524287936 [ 115.092969][ T10] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 115.264572][ T10] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 115.273785][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.284075][ T10] usb 3-1: config 0 descriptor?? [ 115.372675][ T5905] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 115.452657][ T5919] usb 2-1: new full-speed USB device number 27 using dummy_hcd [ 115.525726][ T5905] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 115.534884][ T5905] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.542972][ T5905] usb 4-1: Product: syz [ 115.547308][ T5905] usb 4-1: Manufacturer: syz [ 115.552421][ T5905] usb 4-1: SerialNumber: syz [ 115.582733][ T5919] usb 2-1: device descriptor read/64, error -71 [ 115.697496][ T10] ath6kl: Failed to submit usb control message: -71 [ 115.704415][ T10] ath6kl: unable to send the bmi data to the device: -71 [ 115.712903][ T10] ath6kl: Unable to send get target info: -71 [ 115.719503][ T10] ath6kl: Failed to init ath6kl core: -71 [ 115.726319][ T10] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 115.742213][ T10] usb 3-1: USB disconnect, device number 22 [ 115.766223][ T6891] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.774937][ T6891] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.822752][ T5919] usb 2-1: new full-speed USB device number 28 using dummy_hcd [ 115.952663][ T5919] usb 2-1: device descriptor read/64, error -71 [ 116.063648][ T5919] usb usb2-port1: attempt power cycle [ 116.188131][ T5905] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 116.200268][ T5905] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 116.211360][ T5905] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 116.223414][ T5905] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 116.244797][ T5905] usb 4-1: USB disconnect, device number 18 [ 116.402670][ T5919] usb 2-1: new full-speed USB device number 29 using dummy_hcd [ 116.433397][ T5919] usb 2-1: device descriptor read/8, error -71 [ 116.582677][ T982] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 116.632712][ T5835] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 116.632725][ T5833] Bluetooth: hci4: command 0x1003 tx timeout [ 116.672655][ T5919] usb 2-1: new full-speed USB device number 30 using dummy_hcd [ 116.713816][ T5919] usb 2-1: device descriptor read/8, error -71 [ 116.732769][ T982] usb 3-1: Using ep0 maxpacket: 32 [ 116.744436][ T982] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 116.754527][ T982] usb 3-1: config 0 has no interface number 0 [ 116.774245][ T982] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 116.792125][ T982] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.810332][ T982] usb 3-1: Product: syz [ 116.820437][ T982] usb 3-1: Manufacturer: syz [ 116.836728][ T5919] usb usb2-port1: unable to enumerate USB device [ 116.847251][ T982] usb 3-1: SerialNumber: syz [ 116.857119][ T982] usb 3-1: config 0 descriptor?? [ 116.865426][ T982] smsc95xx v2.0.0 [ 117.268580][ T982] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 117.279595][ T982] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 117.352739][ T5905] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 117.475388][ T6924] Bluetooth: MGMT ver 1.23 [ 117.481441][ T6924] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 117.512964][ T5905] usb 1-1: Using ep0 maxpacket: 16 [ 117.520221][ T5905] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 117.531863][ T5905] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 117.542082][ T5905] usb 1-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 117.551188][ T5905] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.561397][ T5905] usb 1-1: config 0 descriptor?? [ 117.699833][ T982] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000108: -71 [ 117.712325][ T982] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71 [ 117.725637][ T982] usb 3-1: USB disconnect, device number 23 [ 117.732808][ T9] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 117.885547][ T5905] usbhid 1-1:0.0: can't add hid device: -71 [ 117.893389][ T5905] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 117.902642][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 117.910029][ T9] usb 4-1: too many configurations: 51, using maximum allowed: 8 [ 117.917942][ T5905] usb 1-1: USB disconnect, device number 16 [ 117.925692][ T9] usb 4-1: invalid descriptor for config index 0: type = 0x2, length = 243 [ 117.936097][ T9] usb 4-1: can't read configurations, error -22 [ 118.072664][ T9] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 118.222687][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 118.229668][ T9] usb 4-1: too many configurations: 51, using maximum allowed: 8 [ 118.239521][ T9] usb 4-1: invalid descriptor for config index 0: type = 0x2, length = 243 [ 118.248490][ T9] usb 4-1: can't read configurations, error -22 [ 118.265779][ T9] usb usb4-port1: attempt power cycle [ 118.562054][ T6940] netlink: del zone limit has 4 unknown bytes [ 118.591260][ T6940] netlink: 8 bytes leftover after parsing attributes in process `syz.2.358'. [ 118.600349][ T6940] netlink: 8 bytes leftover after parsing attributes in process `syz.2.358'. [ 118.610503][ T9] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 118.643344][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 118.649234][ T9] usb 4-1: too many configurations: 51, using maximum allowed: 8 [ 118.658832][ T9] usb 4-1: invalid descriptor for config index 0: type = 0x2, length = 243 [ 118.667772][ T9] usb 4-1: can't read configurations, error -22 [ 118.802715][ T9] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 118.833288][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 118.842722][ T9] usb 4-1: too many configurations: 51, using maximum allowed: 8 [ 118.858715][ T9] usb 4-1: invalid descriptor for config index 0: type = 0x2, length = 243 [ 118.868471][ T9] usb 4-1: can't read configurations, error -22 [ 118.875348][ T9] usb usb4-port1: unable to enumerate USB device [ 118.882817][ T5919] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 118.943195][ T6950] [ 118.945524][ T6950] ====================================================== [ 118.952515][ T6950] WARNING: possible circular locking dependency detected [ 118.959511][ T6950] syzkaller #0 Not tainted [ 118.963900][ T6950] ------------------------------------------------------ [ 118.970889][ T6950] syz.1.363/6950 is trying to acquire lock: [ 118.973014][ T6951] netlink: 'syz.1.363': attribute type 25 has an invalid length. [ 118.976756][ T6950] ffff888025af9718 (set->srcu){.+.+}-{0:0}, at: __synchronize_srcu+0x82/0x390 [ 118.993343][ T6950] [ 118.993343][ T6950] but task is already holding lock: [ 119.000965][ T6950] ffff888025c09e18 (&q->q_usage_counter(io)#17){++++}-{0:0}, at: blk_throtl_init+0x27a/0x410 [ 119.011171][ T6950] [ 119.011171][ T6950] which lock already depends on the new lock. [ 119.011171][ T6950] [ 119.021564][ T6950] [ 119.021564][ T6950] the existing dependency chain (in reverse order) is: [ 119.030561][ T6950] [ 119.030561][ T6950] -> #2 (&q->q_usage_counter(io)#17){++++}-{0:0}: [ 119.039173][ T6950] blk_alloc_queue+0x538/0x620 [ 119.044445][ T6950] __blk_mq_alloc_disk+0x15c/0x340 [ 119.050057][ T6950] loop_add+0x411/0xad0 [ 119.054717][ T6950] loop_init+0xd9/0x170 [ 119.059373][ T6950] do_one_initcall+0x1fb/0x820 [ 119.064638][ T6950] do_initcall_level+0x104/0x190 [ 119.070076][ T6950] do_initcalls+0x59/0xa0 [ 119.074912][ T6950] kernel_init_freeable+0x334/0x4b0 [ 119.080610][ T6950] kernel_init+0x1d/0x1d0 [ 119.085442][ T6950] ret_from_fork+0x599/0xb30 [ 119.090546][ T6950] ret_from_fork_asm+0x1a/0x30 [ 119.095816][ T6950] [ 119.095816][ T6950] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 119.103004][ T6950] fs_reclaim_acquire+0x72/0x100 [ 119.108445][ T6950] mempool_alloc_noprof+0xab/0x2f0 [ 119.114057][ T6950] bio_alloc_bioset+0x241/0x12a0 [ 119.119496][ T6950] blkdev_direct_IO+0x9c0/0x17e0 [ 119.124929][ T6950] blkdev_read_iter+0x23d/0x440 [ 119.130275][ T6950] lo_submit_rw_aio+0x488/0x620 [ 119.135628][ T6950] loop_queue_rq+0x6c5/0x8d0 [ 119.140723][ T6950] blk_mq_request_issue_directly+0x3c1/0x710 [ 119.144461][ T5919] usb 3-1: Using ep0 maxpacket: 16 [ 119.147203][ T6950] blk_mq_issue_direct+0x2a0/0x660 [ 119.147227][ T6950] blk_mq_dispatch_queue_requests+0x621/0x800 [ 119.154569][ T5919] usb 3-1: unable to get BOS descriptor or descriptor too short [ 119.157927][ T6950] blk_mq_flush_plug_list+0x432/0x550 [ 119.167383][ T5919] usb 3-1: config 129 has an invalid interface number: 145 but max is 0 [ 119.172098][ T6950] __blk_flush_plug+0x3d3/0x4b0 [ 119.172118][ T6950] __submit_bio+0x2d3/0x5a0 [ 119.172135][ T6950] submit_bio_noacct_nocheck+0x2eb/0xa30 [ 119.178455][ T5919] usb 3-1: config 129 has no interface number 0 [ 119.186296][ T6950] block_read_full_folio+0x7b7/0x830 [ 119.186319][ T6950] filemap_read_folio+0x117/0x380 [ 119.186338][ T6950] do_read_cache_folio+0x358/0x590 [ 119.192047][ T5919] usb 3-1: config 129 interface 145 has no altsetting 0 [ 119.196691][ T6950] read_part_sector+0xb6/0x2b0 [ 119.196718][ T6950] adfspart_check_ICS+0xa4/0xa50 [ 119.196733][ T6950] bdev_disk_changed+0x75f/0x14b0 [ 119.196756][ T6950] blkdev_get_whole+0x380/0x510 [ 119.196772][ T6950] bdev_open+0x31e/0xd30 [ 119.196787][ T6950] blkdev_open+0x457/0x600 [ 119.196804][ T6950] do_dentry_open+0x7ce/0x1420 [ 119.196826][ T6950] vfs_open+0x3b/0x340 [ 119.196847][ T6950] path_openat+0x33ce/0x3d90 [ 119.196862][ T6950] do_filp_open+0x1fa/0x410 [ 119.196877][ T6950] do_sys_openat2+0x121/0x200 [ 119.206500][ T5919] usb 3-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice= d.2f [ 119.209212][ T6950] __x64_sys_openat+0x138/0x170 [ 119.215347][ T5919] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.220527][ T6950] do_syscall_64+0xfa/0xf80 [ 119.220555][ T6950] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.226450][ T5919] usb 3-1: Product: syz [ 119.233063][ T6950] [ 119.233063][ T6950] -> #0 (set->srcu){.+.+}-{0:0}: [ 119.240067][ T5919] usb 3-1: Manufacturer: syz [ 119.243777][ T6950] __lock_acquire+0x15a6/0x2cf0 [ 119.243798][ T6950] lock_sync+0xba/0x160 [ 119.243815][ T6950] __synchronize_srcu+0x96/0x390 [ 119.243835][ T6950] blk_throtl_init+0x298/0x410 [ 119.243854][ T6950] tg_set_conf+0x1c6/0x4b0 [ 119.249841][ T5919] usb 3-1: SerialNumber: syz [ 119.254710][ T6950] cgroup_file_write+0x3a1/0x740 [ 119.254735][ T6950] kernfs_fop_write_iter+0x3af/0x540 [ 119.380259][ T6950] vfs_write+0x5c9/0xb30 [ 119.385005][ T6950] ksys_write+0x145/0x250 [ 119.389834][ T6950] do_syscall_64+0xfa/0xf80 [ 119.394865][ T6950] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.401617][ T6950] [ 119.401617][ T6950] other info that might help us debug this: [ 119.401617][ T6950] [ 119.411829][ T6950] Chain exists of: [ 119.411829][ T6950] set->srcu --> fs_reclaim --> &q->q_usage_counter(io)#17 [ 119.411829][ T6950] [ 119.424861][ T6950] Possible unsafe locking scenario: [ 119.424861][ T6950] [ 119.432292][ T6950] CPU0 CPU1 [ 119.437641][ T6950] ---- ---- [ 119.442992][ T6950] lock(&q->q_usage_counter(io)#17); [ 119.448369][ T6950] lock(fs_reclaim); [ 119.454856][ T6950] lock(&q->q_usage_counter(io)#17); [ 119.462742][ T6950] sync(set->srcu); [ 119.466623][ T6950] [ 119.466623][ T6950] *** DEADLOCK *** [ 119.466623][ T6950] [ 119.474749][ T6950] 7 locks held by syz.1.363/6950: [ 119.479752][ T6950] #0: ffff888026886d38 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x247/0x320 [ 119.488800][ T6950] #1: ffff888032faa420 (sb_writers#10){.+.+}-{0:0}, at: vfs_write+0x211/0xb30 [ 119.497766][ T6950] #2: ffff888058a94888 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1de/0x540 [ 119.507509][ T6950] #3: ffff88805a2b3788 (kn->active#68){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x231/0x540 [ 119.517519][ T6950] #4: ffff888025c0a020 (&q->rq_qos_mutex){+.+.}-{4:4}, at: blkg_conf_open_bdev+0x2a2/0x3d0 [ 119.527608][ T6950] #5: ffff888025c09e18 (&q->q_usage_counter(io)#17){++++}-{0:0}, at: blk_throtl_init+0x27a/0x410 [ 119.538221][ T6950] #6: ffff888025c09e50 (&q->q_usage_counter(queue)){+.+.}-{0:0}, at: blk_throtl_init+0x27a/0x410 [ 119.548830][ T6950] [ 119.548830][ T6950] stack backtrace: [ 119.554718][ T6950] CPU: 0 UID: 0 PID: 6950 Comm: syz.1.363 Not tainted syzkaller #0 PREEMPT(full) [ 119.554738][ T6950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 119.554755][ T6950] Call Trace: [ 119.554767][ T6950] [ 119.554773][ T6950] dump_stack_lvl+0x189/0x250 [ 119.554796][ T6950] ? __pfx_dump_stack_lvl+0x10/0x10 [ 119.554815][ T6950] ? __pfx__printk+0x10/0x10 [ 119.554837][ T6950] print_circular_bug+0x2e2/0x300 [ 119.554862][ T6950] check_noncircular+0x12e/0x150 [ 119.554884][ T6950] __lock_acquire+0x15a6/0x2cf0 [ 119.554907][ T6950] ? __synchronize_srcu+0x82/0x390 [ 119.554924][ T6950] lock_sync+0xba/0x160 [ 119.554939][ T6950] ? __synchronize_srcu+0x82/0x390 [ 119.554958][ T6950] __synchronize_srcu+0x96/0x390 [ 119.554975][ T6950] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 119.554998][ T6950] ? __pfx___synchronize_srcu+0x10/0x10 [ 119.555015][ T6950] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 119.555034][ T6950] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 119.555059][ T6950] ? __pfx_autoremove_wake_function+0x10/0x10 [ 119.555082][ T6950] ? read_tsc+0x9/0x20 [ 119.555103][ T6950] ? ktime_get_mono_fast_ns+0x2af/0x2d0 [ 119.555131][ T6950] ? synchronize_srcu+0x295/0x2c0 [ 119.555149][ T6950] blk_throtl_init+0x298/0x410 [ 119.555169][ T6950] tg_set_conf+0x1c6/0x4b0 [ 119.555188][ T6950] ? __pfx_tg_set_conf+0x10/0x10 [ 119.555208][ T6950] ? kernfs_root+0x1c/0x230 [ 119.555224][ T6950] ? kernfs_root+0x1c/0x230 [ 119.555239][ T6950] ? kernfs_root+0x1c/0x230 [ 119.555256][ T6950] ? kernfs_root+0x1ea/0x230 [ 119.555273][ T6950] ? __pfx_tg_set_conf_uint+0x10/0x10 [ 119.555292][ T6950] cgroup_file_write+0x3a1/0x740 [ 119.555315][ T6950] ? __pfx_cgroup_file_write+0x10/0x10 [ 119.555334][ T6950] ? rcu_is_watching+0x15/0xb0 [ 119.555356][ T6950] ? __pfx_cgroup_file_write+0x10/0x10 [ 119.555375][ T6950] kernfs_fop_write_iter+0x3af/0x540 [ 119.555401][ T6950] vfs_write+0x5c9/0xb30 [ 119.555418][ T6950] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 119.555439][ T6950] ? __pfx_vfs_write+0x10/0x10 [ 119.555457][ T6950] ? __fget_files+0x2a/0x420 [ 119.555479][ T6950] ksys_write+0x145/0x250 [ 119.555494][ T6950] ? __pfx_ksys_write+0x10/0x10 [ 119.555510][ T6950] ? do_syscall_64+0xbe/0xf80 [ 119.555535][ T6950] do_syscall_64+0xfa/0xf80 [ 119.555557][ T6950] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.555572][ T6950] ? clear_bhb_loop+0x60/0xb0 [ 119.555589][ T6950] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.555604][ T6950] RIP: 0033:0x7f0bb678f749 [ 119.555622][ T6950] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 119.555635][ T6950] RSP: 002b:00007f0bb49f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 119.555651][ T6950] RAX: ffffffffffffffda RBX: 00007f0bb69e5fa0 RCX: 00007f0bb678f749 [ 119.555665][ T6950] RDX: 000000000000006a RSI: 00002000000000c0 RDI: 0000000000000008 [ 119.555676][ T6950] RBP: 00007f0bb6813f91 R08: 0000000000000000 R09: 0000000000000000 [ 119.555686][ T6950] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 119.555695][ T6950] R13: 00007f0bb69e6038 R14: 00007f0bb69e5fa0 R15: 00007ffe46e25468 [ 119.555712][ T6950] [ 119.885190][ T5919] usb 3-1: disable ehci-hcd to run US-144 [ 119.893863][ T5919] usb 3-1: USB disconnect, device number 24