last executing test programs: 2.984081417s ago: executing program 3 (id=4): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000005c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)={0x28, r2, 0x1, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x7}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004004}, 0x4000000) (async) r4 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x28bd, 0x935, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x20, 0x8, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0xfffd, 0x0, 0x1, {0x22, 0x45}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x0, 0xc, 0x3}}}}}]}}]}}, 0x0) (async) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r5, 0x4018aee3, 0x0) (async) syz_usb_control_io(r4, 0x0, 0x0) (async) syz_usb_control_io(r4, &(0x7f0000000340)={0x2c, &(0x7f0000000040)=ANY=[@ANYRES8], 0x0, 0x0, 0x0, 0x0}, 0x0) 2.871131866s ago: executing program 0 (id=1): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000140)={0x14, &(0x7f0000000040)={0x0, 0x5, 0xb7, {0xb7, 0x11, "bc8bef8db51cd53a58d9c3757db47d5fe0ad4b83d2980da18082c7b6b1eb75f662194ad107f6ccac77d7b7edc643bbf218b20550e3512aff35d7594b74fec80df3c2331e2eba857f98df71b7fd382341060d7295e6bb0347e8ac6c67bfc14751309708a9d562186d9b62ae4d041acaed9ffad4177332fe0f5f9b684d5a6c22060aa106f32d90e9c83eabe5b935d805777fda4bbc7dfc85177b4a74d0c7b25be1360c053b6207231e2cd0422275fe928ade26ad555a"}}, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000002c0)={0x1c, &(0x7f0000000180)={0x20, 0xa, 0xa0, "45312d8c6e88cc444a51fdcf3e1750c2589acef11a0130ad1ad6db441e59615a56e9aca86de8dba3f3dd55eba60c29c463ee2258a8077309f7f2bbd2d57078f5587649db6a530c129720072c34d3c55d15814bfd14881afc0e27ce9d5e1eda0970a50248437d4c35b16713fbcdb1c07d29675b9ff428274af5dd07f47e916c36d3ae7a46f8edbc224974ebcafdfd4b61017ad6a417ecb692158447c08214f698"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x7}}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.501729608s ago: executing program 2 (id=3): r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) setxattr$incfs_metadata(&(0x7f0000000480)='./cgroup\x00', &(0x7f0000000280), 0x0, 0x0, 0x0) r1 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$ARPT_SO_SET_REPLACE(r1, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3e8, 0x110, 0x0, 0x110, 0x300, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0x0, 0x8, 0x0, {@empty, {[0xff, 0xff]}}, {@mac=@local, {[0x0, 0x0, 0x0, 0x0, 0xff]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'netdevsim0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x3f}, @multicast2, @multicast2, 0x2, 0x1}}}, {{@arp={@rand_addr=0x64010102, @empty, 0x0, 0x0, 0x0, 0x0, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}}, {}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0x11d}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6572211f, 'syz0\x00', {0x6}}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000440)={0x80000001, 0x5, 0x2, 0x4b1, 0x4, "b78e3dddf7ccdfc8917232a3927a1c235429b5", 0x1, 0x4}) (async) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000440)={0x80000001, 0x5, 0x2, 0x4b1, 0x4, "b78e3dddf7ccdfc8917232a3927a1c235429b5", 0x1, 0x4}) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x109942, 0x0) (async) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x109942, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000580)) ioctl$PPPIOCSMRU1(r2, 0x40047452, &(0x7f0000000100)=0x4) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f00000000c0)={0x0, 0x6, 0xe0, 0x3, 0x2, 0x2, &(0x7f0000000000)='\r\n'}) (async) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f00000000c0)={0x0, 0x6, 0xe0, 0x3, 0x2, 0x2, &(0x7f0000000000)='\r\n'}) 2.361761688s ago: executing program 1 (id=2): timer_create(0x3, 0x0, &(0x7f0000000300)) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) syz_open_procfs(0x0, &(0x7f0000000000)='timers\x00') r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_hci(r0, 0x0, 0x1, &(0x7f0000000180)=""/4096, &(0x7f0000000000)=0x1000) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) socket$inet6_tcp(0xa, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, 0x0) syz_usb_connect(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100006325a640402000207265970000010902240001000000000904000002214c6a0009050702000000da000905898ae23b37dd89e17d098185eaf9a449b208aef6819507efb7fe796d8a786c"], 0x0) 2.137399936s ago: executing program 2 (id=5): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) getsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000200), &(0x7f0000000240)=0x4) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000040)={@val={0x3, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x1400, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @dest_unreach={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x11, 0x0, @local, @loopback}, "2e3778addb008b63"}}}, 0x46) sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x38, r1, 0x8, 0x70bd26, 0x25dfdbfe, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x12}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x4}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x9}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x4000084) r4 = socket(0x10, 0x2, 0x0) write(r4, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00000000fffffffffffffff0", 0x1c) r5 = syz_init_net_socket$ax25(0x3, 0x3, 0xcd) sendmsg$inet(r5, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x800) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'macvtap0\x00', 0x0}) sendto$packet(r6, &(0x7f00000002c0)="12042bfdd3fc03fc01004788031c09100628", 0xfd35, 0x4, &(0x7f0000000140)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) 1.797186006s ago: executing program 2 (id=6): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000000180)=""/73, 0x49) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14}, [], {0x14}}, 0x28}, 0x1, 0x0, 0x0, 0x40400d0}, 0x0) 1.48786836s ago: executing program 3 (id=7): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}, 0x800}}, 0xb8}}, 0x2c000010) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000007000000000000000005000000000000000000000000000a"], 0xb8}}, 0x0) 1.209017967s ago: executing program 3 (id=8): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) memfd_create(&(0x7f00000005c0)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10`\xee\xa9\x8b\x06%\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xa96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xd9Jx\xaa\x8f~\xb94a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xd6m\xf7@]iNP\xf1\x1d\xab\x13\xce\x152s\xb8\x85\x98\x84\xbf\x8c\x80{\x16\t\xd6\x17P3\xe9\xebGKL\xd3\x88\xd2\rLG\x8e\xd6\xa72\xf4\x92\xeb&\xa5\xcc\x14FZN\x98%[p\x989\xf6\xf5\xb6\xedk\xe6\xb0\xa1\x8f\x90\xdb\xd6h)\x0f6\x88\x03P\x8ak\xf9\xc9\x82`\xa7Ku\x99\xab\xd4\xb2\xaa1\x99O\x8b\x99-\xe3', 0x1) (async) r2 = memfd_create(&(0x7f00000005c0)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10`\xee\xa9\x8b\x06%\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xa96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xd9Jx\xaa\x8f~\xb94a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xd6m\xf7@]iNP\xf1\x1d\xab\x13\xce\x152s\xb8\x85\x98\x84\xbf\x8c\x80{\x16\t\xd6\x17P3\xe9\xebGKL\xd3\x88\xd2\rLG\x8e\xd6\xa72\xf4\x92\xeb&\xa5\xcc\x14FZN\x98%[p\x989\xf6\xf5\xb6\xedk\xe6\xb0\xa1\x8f\x90\xdb\xd6h)\x0f6\x88\x03P\x8ak\xf9\xc9\x82`\xa7Ku\x99\xab\xd4\xb2\xaa1\x99O\x8b\x99-\xe3', 0x1) r3 = dup(r2) write$binfmt_elf64(r3, &(0x7f00000006c0)=ANY=[@ANYBLOB="7f454c4606ff78a33e0200000000000002003e00cd000000c9030000000000004000000000000000ea02000000000000000001000500380001000600b10600040300000081000000ff00000000000000f50f0000000000000500000000000000b8"], 0x134) (async) write$binfmt_elf64(r3, &(0x7f00000006c0)=ANY=[@ANYBLOB="7f454c4606ff78a33e0200000000000002003e00cd000000c9030000000000004000000000000000ea02000000000000000001000500380001000600b10600040300000081000000ff00000000000000f50f0000000000000500000000000000b8"], 0x134) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f0000001ac0)={r4, 0x0, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200"}}) (async) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f0000001ac0)={r4, 0x0, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200"}}) r6 = dup(r5) read$FUSE(r6, &(0x7f0000003c40)={0x2020}, 0xffffff0a) execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) close(r1) recvmmsg$unix(r0, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0xd2fc64283d314c74, 0x0) (async) recvmmsg$unix(r0, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0xd2fc64283d314c74, 0x0) 689.379154ms ago: executing program 3 (id=9): r0 = socket$netlink(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') chdir(&(0x7f00000000c0)='./bus\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x80, 0x141) getdents64(r1, &(0x7f0000000f80)=""/4096, 0x1000) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'wlan1\x00', &(0x7f0000000100)=@ethtool_stats}) r2 = socket$isdn(0x22, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000000)) 580.893917ms ago: executing program 1 (id=10): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(0x3) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000180)=@abs={0x1, 0x0, 0x4e20}, 0x6e) listen(r1, 0x8) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r2, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x21f) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000180)="10031400e0ff020002004788aa96a13bb100001100007fca1a00", 0x1a, 0x4000004, &(0x7f0000000140)={0x11, 0x0, r6}, 0x14) recvfrom$packet(r4, 0x0, 0x85, 0x0, 0x0, 0xffffffffffffffb3) io_setup(0x6, &(0x7f0000000140)=0x0) accept4$inet(r0, 0x0, 0x0, 0x80800) io_submit(r7, 0x1, &(0x7f00000004c0)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0xfffd, r0, 0x0}]) shutdown(r0, 0x0) 0s ago: executing program 3 (id=11): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000170900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x2000c450) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xe}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000f00)=ANY=[@ANYBLOB="000086dd0000110000080000000060ec970000382c00fe8000000011000000000000000400aaff02000000000000000000000000000111"], 0x6e) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.201' (ED25519) to the list of known hosts. [ 66.990861][ T5809] cgroup: Unknown subsys name 'net' [ 67.096135][ T5809] cgroup: Unknown subsys name 'cpuset' [ 67.104410][ T5809] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 68.523902][ T5809] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 71.287868][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.294395][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.805072][ T5833] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 71.805149][ T5831] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 71.812665][ T5833] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 71.820581][ T5831] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 71.829105][ T5833] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 71.834612][ T5831] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 71.849158][ T5831] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 71.851311][ T5832] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 71.857232][ T5831] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 71.863558][ T5833] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 71.870960][ T5831] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 71.877918][ T5832] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 71.892762][ T5831] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 71.892895][ T5832] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 71.904973][ T5831] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 71.908624][ T5832] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 71.921772][ T5832] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 71.923442][ T5831] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 71.929257][ T5832] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 71.943829][ T5832] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 72.409572][ T5820] chnl_net:caif_netlink_parms(): no params data found [ 72.566656][ T5818] chnl_net:caif_netlink_parms(): no params data found [ 72.672234][ T5826] chnl_net:caif_netlink_parms(): no params data found [ 72.682926][ T5820] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.690548][ T5820] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.697876][ T5820] bridge_slave_0: entered allmulticast mode [ 72.705224][ T5820] bridge_slave_0: entered promiscuous mode [ 72.717974][ T5820] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.725192][ T5820] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.732345][ T5820] bridge_slave_1: entered allmulticast mode [ 72.740028][ T5820] bridge_slave_1: entered promiscuous mode [ 72.756588][ T5819] chnl_net:caif_netlink_parms(): no params data found [ 72.857100][ T5820] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.897339][ T5820] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.922652][ T5818] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.930530][ T5818] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.938220][ T5818] bridge_slave_0: entered allmulticast mode [ 72.945708][ T5818] bridge_slave_0: entered promiscuous mode [ 72.974258][ T5818] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.981664][ T5818] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.989106][ T5818] bridge_slave_1: entered allmulticast mode [ 72.996594][ T5818] bridge_slave_1: entered promiscuous mode [ 73.017655][ T5820] team0: Port device team_slave_0 added [ 73.063707][ T5820] team0: Port device team_slave_1 added [ 73.090933][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.098469][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.105667][ T5826] bridge_slave_0: entered allmulticast mode [ 73.112584][ T5826] bridge_slave_0: entered promiscuous mode [ 73.131408][ T5819] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.138526][ T5819] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.145869][ T5819] bridge_slave_0: entered allmulticast mode [ 73.152809][ T5819] bridge_slave_0: entered promiscuous mode [ 73.163363][ T5818] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.172850][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.180106][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.187297][ T5826] bridge_slave_1: entered allmulticast mode [ 73.194519][ T5826] bridge_slave_1: entered promiscuous mode [ 73.224070][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.231005][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.256968][ T5820] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.268641][ T5819] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.275937][ T5819] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.283548][ T5819] bridge_slave_1: entered allmulticast mode [ 73.290479][ T5819] bridge_slave_1: entered promiscuous mode [ 73.300984][ T5818] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.338502][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.345608][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.371915][ T5820] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.408333][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.420169][ T5818] team0: Port device team_slave_0 added [ 73.450624][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.461593][ T5818] team0: Port device team_slave_1 added [ 73.482668][ T5819] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.494576][ T5819] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.572150][ T5826] team0: Port device team_slave_0 added [ 73.578763][ T5818] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.586021][ T5818] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.612474][ T5818] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.649505][ T5826] team0: Port device team_slave_1 added [ 73.656039][ T5818] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.663198][ T5818] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.689078][ T5818] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.702327][ T5819] team0: Port device team_slave_0 added [ 73.714817][ T5820] hsr_slave_0: entered promiscuous mode [ 73.721100][ T5820] hsr_slave_1: entered promiscuous mode [ 73.748253][ T5819] team0: Port device team_slave_1 added [ 73.795616][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.802551][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.829241][ T5819] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.841045][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.848146][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.874066][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.886933][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.893899][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.919959][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.931062][ T5825] Bluetooth: hci1: command tx timeout [ 73.944280][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.951211][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.977348][ T5819] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.003419][ T5825] Bluetooth: hci3: command tx timeout [ 74.003471][ T5829] Bluetooth: hci0: command tx timeout [ 74.023328][ T5832] Bluetooth: hci2: command tx timeout [ 74.068984][ T5818] hsr_slave_0: entered promiscuous mode [ 74.075385][ T5818] hsr_slave_1: entered promiscuous mode [ 74.081407][ T5818] debugfs: 'hsr0' already exists in 'hsr' [ 74.087342][ T5818] Cannot create hsr debugfs directory [ 74.152856][ T5826] hsr_slave_0: entered promiscuous mode [ 74.159246][ T5826] hsr_slave_1: entered promiscuous mode [ 74.166018][ T5826] debugfs: 'hsr0' already exists in 'hsr' [ 74.171740][ T5826] Cannot create hsr debugfs directory [ 74.274216][ T5819] hsr_slave_0: entered promiscuous mode [ 74.280480][ T5819] hsr_slave_1: entered promiscuous mode [ 74.286700][ T5819] debugfs: 'hsr0' already exists in 'hsr' [ 74.292418][ T5819] Cannot create hsr debugfs directory [ 74.610113][ T5820] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 74.642832][ T5820] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 74.653036][ T5820] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 74.673478][ T5820] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 74.729714][ T5818] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 74.746480][ T5818] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 74.757300][ T5818] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 74.767883][ T5818] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 74.857891][ T5826] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 74.867902][ T5826] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 74.878907][ T5826] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 74.889272][ T5826] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 74.990684][ T5819] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 75.001551][ T5819] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 75.015267][ T5819] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 75.025799][ T5819] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 75.096956][ T5820] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.129671][ T5820] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.150199][ T5818] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.182689][ T3012] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.189869][ T3012] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.229817][ T3012] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.236931][ T3012] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.280232][ T5818] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.299693][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.306813][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.325878][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.333009][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.376940][ T5819] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.398489][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.455477][ T5819] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.476641][ T5818] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 75.489653][ T5818] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 75.506187][ T5826] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.561233][ T3012] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.568429][ T3012] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.591752][ T3012] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.598950][ T3012] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.644581][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.651732][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.685130][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.692290][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.799695][ T5826] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 75.848079][ T5820] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.931055][ T5818] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.004223][ T5832] Bluetooth: hci1: command tx timeout [ 76.029397][ T5820] veth0_vlan: entered promiscuous mode [ 76.082405][ T5820] veth1_vlan: entered promiscuous mode [ 76.089013][ T5832] Bluetooth: hci3: command tx timeout [ 76.096952][ T5829] Bluetooth: hci2: command tx timeout [ 76.096963][ T5825] Bluetooth: hci0: command tx timeout [ 76.126449][ T5818] veth0_vlan: entered promiscuous mode [ 76.162797][ T5818] veth1_vlan: entered promiscuous mode [ 76.193611][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.204530][ T5820] veth0_macvtap: entered promiscuous mode [ 76.225711][ T5820] veth1_macvtap: entered promiscuous mode [ 76.270206][ T5819] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.302398][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.318922][ T5818] veth0_macvtap: entered promiscuous mode [ 76.331512][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.348349][ T5818] veth1_macvtap: entered promiscuous mode [ 76.385771][ T3012] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.405141][ T5826] veth0_vlan: entered promiscuous mode [ 76.415222][ T3012] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.424611][ T3012] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.437490][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.450398][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.463935][ T2948] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.483693][ T5826] veth1_vlan: entered promiscuous mode [ 76.532616][ T2948] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.541578][ T2948] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.569310][ T50] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.578883][ T50] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.639832][ T5819] veth0_vlan: entered promiscuous mode [ 76.652574][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.662815][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.669416][ T5826] veth0_macvtap: entered promiscuous mode [ 76.711799][ T5819] veth1_vlan: entered promiscuous mode [ 76.727491][ T5826] veth1_macvtap: entered promiscuous mode [ 76.744111][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.751930][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.758760][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.807010][ T2948] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.814970][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.832750][ T1137] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.847164][ T2948] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.856895][ T1137] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.881478][ T5820] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 76.888537][ T1137] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.907645][ T1137] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.935142][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.943274][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.007057][ T5819] veth0_macvtap: entered promiscuous mode [ 77.026114][ T5819] veth1_macvtap: entered promiscuous mode [ 77.150141][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.186178][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.190377][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.201888][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.228285][ T36] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.246939][ T36] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.260048][ T36] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.275367][ T36] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.290699][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.301117][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.383693][ T5908] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 77.384541][ T43] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 77.394623][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.415790][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.486309][ T2948] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.504854][ T2948] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.576789][ T5908] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 77.588689][ T5908] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 77.593472][ T43] usb 1-1: Using ep0 maxpacket: 16 [ 77.606578][ T5908] usb 4-1: New USB device found, idVendor=28bd, idProduct=0935, bcdDevice= 0.00 [ 77.606612][ T5908] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.636317][ T5908] usb 4-1: config 0 descriptor?? [ 77.666040][ T43] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 77.680057][ T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 77.706779][ T43] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 77.716747][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.728407][ T43] usb 1-1: Product: syz [ 77.732581][ T43] usb 1-1: Manufacturer: syz [ 77.738439][ T43] usb 1-1: SerialNumber: syz [ 77.752538][ T43] usb 1-1: config 0 descriptor?? [ 77.777846][ T43] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 77.790422][ T43] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 77.831724][ T5925] syz.2.5 uses obsolete (PF_INET,SOCK_PACKET) [ 77.857997][ T5908] usbhid 4-1:0.0: can't add hid device: -71 [ 77.864235][ T5908] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 77.888261][ T5908] usb 4-1: USB disconnect, device number 2 [ 77.943426][ T5873] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 78.083512][ T5829] Bluetooth: hci1: command tx timeout [ 78.095113][ T5873] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 78.105203][ T5873] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 15330, setting to 64 [ 78.118968][ T5873] usb 2-1: New USB device found, idVendor=2040, idProduct=2000, bcdDevice=65.72 [ 78.129052][ T5873] usb 2-1: New USB device strings: Mfr=151, Product=0, SerialNumber=0 [ 78.137339][ T5873] usb 2-1: Manufacturer: syz [ 78.155865][ T5873] usb 2-1: config 0 descriptor?? [ 78.161635][ T5923] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 78.165034][ T5829] Bluetooth: hci2: command tx timeout [ 78.170391][ T5832] Bluetooth: hci3: command tx timeout [ 78.174327][ T5829] Bluetooth: hci0: command tx timeout [ 78.206843][ T5873] smsusb:smsusb_probe: board id=9, interface number 0 [ 78.217398][ T5873] smsusb:siano_media_device_register: media controller created [ 78.227264][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 78.234606][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 78.241855][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 78.249086][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 78.256319][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 78.263548][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 78.271722][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 78.279892][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 78.287134][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 78.294346][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 78.301555][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 78.308761][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 78.317727][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 78.324975][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 78.332210][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 78.339422][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 78.346657][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 78.353885][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 78.362164][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 78.369452][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 78.376728][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 78.384002][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 78.391278][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 78.398556][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 78.408142][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 78.415417][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 78.422685][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 78.429950][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 78.437224][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 78.444466][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 78.452995][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 78.460270][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 78.467518][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 78.474750][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 78.481971][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 78.489199][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 78.500123][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 78.507404][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 78.514657][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 78.521892][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 78.529116][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 78.536337][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 78.544024][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 78.544121][ T5908] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 78.551285][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 78.566286][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 78.573557][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 78.580820][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 78.588080][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 78.597051][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 78.604314][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 78.611571][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 78.618827][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 78.626069][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 78.633291][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 78.641023][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 78.648290][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 78.655896][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 78.663166][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 78.670787][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 78.678038][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 78.686844][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 78.694105][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 78.701376][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 78.708636][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 78.715902][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 78.723147][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 78.732587][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 78.739859][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 78.747117][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 78.754363][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 78.761589][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 78.768803][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 78.782210][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 78.787707][ T5908] usb 3-1: Using ep0 maxpacket: 8 [ 78.789474][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 78.799142][ T5934] loop6: detected capacity change from 0 to 524287999 [ 78.801904][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 78.812022][ T5908] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 78.815929][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 78.833979][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 78.841239][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 78.850024][ T43] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 78.856350][ T5908] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 78.856461][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 78.872917][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 78.880176][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 78.887423][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 78.894664][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 78.901909][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 78.903250][ T5908] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.909914][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 78.924602][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 78.925576][ T5937] process 'syz.3.8' launched '/dev/fd/7' with NULL argv: empty string added [ 78.931845][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 78.948026][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 78.951382][ T5908] usb 3-1: config 0 descriptor?? [ 78.955269][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 78.967568][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 78.976512][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 78.983802][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 78.991054][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 78.998306][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 79.005558][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 79.012806][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 79.020132][ T43] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 79.028082][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 79.035335][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 79.042558][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 79.049777][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 79.056991][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 79.064207][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 79.072045][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 79.079310][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 79.086577][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 79.093833][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 79.101089][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 79.108347][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 79.116470][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 79.123739][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 79.130983][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 79.138234][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 79.145488][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 79.152745][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 79.161573][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 79.168815][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 79.176039][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 79.183262][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 79.190483][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 79.197702][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 79.206521][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 79.213787][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 79.221047][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 79.228304][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 79.235560][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 79.242817][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 79.250725][ T43] em28xx 1-1:0.0: AC97 command still being executed: not handled properly! [ 79.260011][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 79.260106][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 79.260202][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 79.260291][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 79.260375][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 79.260460][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 79.306355][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 79.311338][ T5928] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.313613][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 79.313672][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 79.336778][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 79.344052][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 79.351332][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 79.360149][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 79.367421][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 79.368191][ T5928] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.374678][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 79.389900][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 79.397176][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 79.404441][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 79.413490][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 79.420761][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 79.428023][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 79.435288][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 79.442545][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 79.449811][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 79.457812][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 79.465094][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 79.472358][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 79.479629][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 79.486892][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 79.494154][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 79.502462][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 79.509736][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 79.517006][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 79.524271][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 79.525289][ T5908] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 79.531629][ T5873] smsmdtv:smscore_sendrequest_and_wait: sendrequest returned error -22 [ 79.546529][ T5940] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 79.551855][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 79.568932][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 79.576168][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 79.583395][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 79.590610][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 79.597814][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 79.605026][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 79.612250][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 79.626291][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 79.634084][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 79.641337][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 79.648579][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 79.655814][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 79.663054][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 79.670301][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 79.677542][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 79.684770][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 79.693857][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 79.701743][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 79.708973][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 79.716184][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 79.723386][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 79.730585][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 79.737783][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 79.744982][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 79.752181][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 79.763615][ T5873] smsmdtv:smscore_set_device_mode: mode detect failed -22 [ 79.770731][ T5873] smsmdtv:smscore_start_device: set device mode failed , rc -22 [ 79.779930][ T5873] smsusb:smsusb_init_device: smscore_start_device(...) failed [ 79.783194][ T5940] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 79.788804][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 79.802530][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 79.810550][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 79.818714][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 79.826379][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 79.833886][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 79.841328][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 79.848963][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 79.861978][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 79.869706][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 79.877210][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 79.881043][ T5945] syzkaller1: entered promiscuous mode [ 79.884693][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 79.884829][ T43] em28xx 1-1:0.0: AC97 chip type couldn't be determined [ 79.890241][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 79.897161][ T5945] syzkaller1: entered allmulticast mode [ 79.897870][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 79.925256][ T43] em28xx 1-1:0.0: No AC97 audio processor [ 79.932378][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 79.943429][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 79.953061][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 79.960820][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 79.968163][ T43] usb 1-1: USB disconnect, device number 2 [ 79.975863][ T43] em28xx 1-1:0.0: Disconnecting em28xx [ 79.983363][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 79.991026][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 79.998307][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 80.006118][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 80.013370][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 80.021173][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 80.028418][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 80.035747][ T5873] ------------[ cut here ]------------ [ 80.041206][ T5873] workqueue: work disable count underflowed [ 80.047160][ T5873] WARNING: kernel/workqueue.c:4359 at enable_work+0x2b1/0x2c0, CPU#1: kworker/1:4/5873 [ 80.056788][ T5873] Modules linked in: [ 80.060755][ T5873] CPU: 1 UID: 0 PID: 5873 Comm: kworker/1:4 Not tainted syzkaller #0 PREEMPT(full) [ 80.070107][ T5873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 80.080147][ T5873] Workqueue: usb_hub_wq hub_event [ 80.085177][ T5873] RIP: 0010:enable_work+0x2b1/0x2c0 [ 80.090365][ T5873] Code: 41 5e 41 5f 5d e9 cf 01 dd 09 cc e8 19 14 da 09 e8 84 92 36 00 c6 05 e5 f5 1d 0e 01 90 48 c7 c7 80 f0 89 8b e8 20 d3 f8 ff 90 <0f> 0b 90 90 e9 69 ff ff ff 66 0f 1f 44 00 00 90 90 90 90 90 90 90 [ 80.109962][ T5873] RSP: 0018:ffffc9000438ea80 EFLAGS: 00010046 [ 80.116026][ T5873] RAX: ba1e3ef5e3d92000 RBX: ffff8880253663b8 RCX: 0000000000100000 [ 80.123993][ T5873] RDX: ffffc90016428000 RSI: 000000000008bb4f RDI: 000000000008bb50 [ 80.131953][ T5873] RBP: ffffc9000438eb30 R08: ffff8880b8724293 R09: 1ffff110170e4852 [ 80.139910][ T5873] R10: dffffc0000000000 R11: ffffed10170e4853 R12: 1ffff92000871d54 [ 80.147866][ T5873] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000001800001 [ 80.155827][ T5873] FS: 0000000000000000(0000) GS:ffff888125b7c000(0000) knlGS:0000000000000000 [ 80.164742][ T5873] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 80.171314][ T5873] CR2: 0000564b8abe0ac8 CR3: 000000007e80c000 CR4: 00000000003526f0 [ 80.179280][ T5873] Call Trace: [ 80.182559][ T5873] [ 80.185492][ T5873] ? __pfx_enable_work+0x10/0x10 [ 80.190417][ T5873] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 80.196294][ T5873] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 80.202623][ T5873] __cancel_work_sync+0xf7/0x110 [ 80.207550][ T5873] smsusb_term_device+0xe2/0x3e0 [ 80.212482][ T5873] smsusb_probe+0x1a20/0x21f0 [ 80.217161][ T5873] ? __pfx_smsusb_probe+0x10/0x10 [ 80.222183][ T5873] ? __pfx_smsusb_sendrequest+0x10/0x10 [ 80.227723][ T5873] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 80.233615][ T5873] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 80.239949][ T5873] ? __pm_runtime_set_status+0x785/0xa50 [ 80.245588][ T5873] usb_probe_interface+0x668/0xc90 [ 80.250699][ T5873] ? __pfx_usb_probe_interface+0x10/0x10 [ 80.256312][ T5873] really_probe+0x26d/0xad0 [ 80.260814][ T5873] __driver_probe_device+0x18c/0x320 [ 80.266091][ T5873] driver_probe_device+0x4f/0x240 [ 80.271109][ T5873] __device_attach_driver+0x279/0x430 [ 80.276471][ T5873] bus_for_each_drv+0x251/0x2e0 [ 80.281311][ T5873] ? __pfx___device_attach_driver+0x10/0x10 [ 80.287193][ T5873] ? __pfx_bus_for_each_drv+0x10/0x10 [ 80.292560][ T5873] __device_attach+0x2b8/0x430 [ 80.297314][ T5873] ? __pfx___device_attach+0x10/0x10 [ 80.302590][ T5873] ? do_raw_spin_unlock+0x122/0x240 [ 80.307784][ T5873] bus_probe_device+0x185/0x260 [ 80.312623][ T5873] device_add+0x7b6/0xb80 [ 80.316947][ T5873] usb_set_configuration+0x1a87/0x2110 [ 80.322431][ T5873] usb_generic_driver_probe+0x8d/0x150 [ 80.327883][ T5873] usb_probe_device+0x1c4/0x3c0 [ 80.332723][ T5873] ? __pfx_usb_probe_device+0x10/0x10 [ 80.338080][ T5873] really_probe+0x26d/0xad0 [ 80.342586][ T5873] __driver_probe_device+0x18c/0x320 [ 80.347871][ T5873] driver_probe_device+0x4f/0x240 [ 80.352919][ T5873] __device_attach_driver+0x279/0x430 [ 80.358285][ T5873] bus_for_each_drv+0x251/0x2e0 [ 80.363125][ T5873] ? __pfx___device_attach_driver+0x10/0x10 [ 80.369007][ T5873] ? __pfx_bus_for_each_drv+0x10/0x10 [ 80.374376][ T5873] __device_attach+0x2b8/0x430 [ 80.379129][ T5873] ? __pfx___device_attach+0x10/0x10 [ 80.384404][ T5873] ? do_raw_spin_unlock+0x122/0x240 [ 80.389596][ T5873] bus_probe_device+0x185/0x260 [ 80.394438][ T5873] device_add+0x7b6/0xb80 [ 80.398764][ T5873] usb_new_device+0xa39/0x1720 [ 80.403527][ T5873] ? __pfx_usb_new_device+0x10/0x10 [ 80.408716][ T5873] ? _raw_spin_unlock_irq+0x23/0x50 [ 80.413901][ T5873] ? lockdep_hardirqs_on+0x9c/0x150 [ 80.419096][ T5873] hub_event+0x29b1/0x4ef0 [ 80.423506][ T5873] ? __set_next_task_fair+0x135/0x390 [ 80.428925][ T5873] ? __pfx_hub_event+0x10/0x10 [ 80.433692][ T5873] ? process_one_work+0x868/0x15d0 [ 80.438799][ T5873] ? _raw_spin_unlock_irq+0x23/0x50 [ 80.443991][ T5873] ? process_one_work+0x868/0x15d0 [ 80.449087][ T5873] process_one_work+0x94a/0x15d0 [ 80.454010][ T5873] ? __lock_acquire+0xab9/0xd20 [ 80.458862][ T5873] ? __pfx_process_one_work+0x10/0x10 [ 80.464232][ T5873] ? assign_work+0x3a1/0x410 [ 80.468812][ T5873] worker_thread+0x9b0/0xee0 [ 80.473412][ T5873] kthread+0x711/0x8a0 [ 80.477471][ T5873] ? __pfx_worker_thread+0x10/0x10 [ 80.482567][ T5873] ? __pfx_kthread+0x10/0x10 [ 80.487146][ T5873] ? _raw_spin_unlock_irq+0x23/0x50 [ 80.492333][ T5873] ? lockdep_hardirqs_on+0x9c/0x150 [ 80.497519][ T5873] ? __pfx_kthread+0x10/0x10 [ 80.502102][ T5873] ret_from_fork+0x599/0xb30 [ 80.506679][ T5873] ? __pfx_ret_from_fork+0x10/0x10 [ 80.511783][ T5873] ? __switch_to_asm+0x39/0x70 [ 80.516532][ T5873] ? __switch_to_asm+0x33/0x70 [ 80.521281][ T5873] ? __pfx_kthread+0x10/0x10 [ 80.525861][ T5873] ret_from_fork_asm+0x1a/0x30 [ 80.530625][ T5873] [ 80.533633][ T5873] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 80.540904][ T5873] CPU: 1 UID: 0 PID: 5873 Comm: kworker/1:4 Not tainted syzkaller #0 PREEMPT(full) [ 80.550256][ T5873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 80.560298][ T5873] Workqueue: usb_hub_wq hub_event [ 80.565323][ T5873] Call Trace: [ 80.568584][ T5873] [ 80.571500][ T5873] dump_stack_lvl+0x99/0x250 [ 80.576079][ T5873] ? __asan_memcpy+0x40/0x70 [ 80.580655][ T5873] ? __pfx_dump_stack_lvl+0x10/0x10 [ 80.585840][ T5873] ? __pfx__printk+0x10/0x10 [ 80.590428][ T5873] vpanic+0x237/0x6d0 [ 80.594395][ T5873] ? __pfx_vpanic+0x10/0x10 [ 80.598883][ T5873] ? is_bpf_text_address+0x292/0x2b0 [ 80.604155][ T5873] ? is_bpf_text_address+0x26/0x2b0 [ 80.609351][ T5873] panic+0xb9/0xc0 [ 80.613053][ T5873] ? __pfx_panic+0x10/0x10 [ 80.617460][ T5873] ? ret_from_fork_asm+0x1a/0x30 [ 80.622388][ T5873] __warn+0x334/0x4c0 [ 80.626351][ T5873] ? enable_work+0x2b1/0x2c0 [ 80.630931][ T5873] ? enable_work+0x2b1/0x2c0 [ 80.635508][ T5873] report_bug+0x2be/0x4f0 [ 80.639825][ T5873] ? enable_work+0x2b1/0x2c0 [ 80.644403][ T5873] ? enable_work+0x2b1/0x2c0 [ 80.648986][ T5873] ? enable_work+0x2b3/0x2c0 [ 80.653565][ T5873] handle_bug+0x84/0x160 [ 80.657800][ T5873] exc_invalid_op+0x1a/0x50 [ 80.662292][ T5873] asm_exc_invalid_op+0x1a/0x20 [ 80.667125][ T5873] RIP: 0010:enable_work+0x2b1/0x2c0 [ 80.672306][ T5873] Code: 41 5e 41 5f 5d e9 cf 01 dd 09 cc e8 19 14 da 09 e8 84 92 36 00 c6 05 e5 f5 1d 0e 01 90 48 c7 c7 80 f0 89 8b e8 20 d3 f8 ff 90 <0f> 0b 90 90 e9 69 ff ff ff 66 0f 1f 44 00 00 90 90 90 90 90 90 90 [ 80.691892][ T5873] RSP: 0018:ffffc9000438ea80 EFLAGS: 00010046 [ 80.697949][ T5873] RAX: ba1e3ef5e3d92000 RBX: ffff8880253663b8 RCX: 0000000000100000 [ 80.705903][ T5873] RDX: ffffc90016428000 RSI: 000000000008bb4f RDI: 000000000008bb50 [ 80.713858][ T5873] RBP: ffffc9000438eb30 R08: ffff8880b8724293 R09: 1ffff110170e4852 [ 80.721815][ T5873] R10: dffffc0000000000 R11: ffffed10170e4853 R12: 1ffff92000871d54 [ 80.729773][ T5873] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000001800001 [ 80.737746][ T5873] ? __pfx_enable_work+0x10/0x10 [ 80.742671][ T5873] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 80.748550][ T5873] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 80.754872][ T5873] __cancel_work_sync+0xf7/0x110 [ 80.759796][ T5873] smsusb_term_device+0xe2/0x3e0 [ 80.764730][ T5873] smsusb_probe+0x1a20/0x21f0 [ 80.769414][ T5873] ? __pfx_smsusb_probe+0x10/0x10 [ 80.774432][ T5873] ? __pfx_smsusb_sendrequest+0x10/0x10 [ 80.779970][ T5873] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 80.785848][ T5873] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 80.792166][ T5873] ? __pm_runtime_set_status+0x785/0xa50 [ 80.797791][ T5873] usb_probe_interface+0x668/0xc90 [ 80.802899][ T5873] ? __pfx_usb_probe_interface+0x10/0x10 [ 80.808513][ T5873] really_probe+0x26d/0xad0 [ 80.813011][ T5873] __driver_probe_device+0x18c/0x320 [ 80.818285][ T5873] driver_probe_device+0x4f/0x240 [ 80.823301][ T5873] __device_attach_driver+0x279/0x430 [ 80.828667][ T5873] bus_for_each_drv+0x251/0x2e0 [ 80.833503][ T5873] ? __pfx___device_attach_driver+0x10/0x10 [ 80.839382][ T5873] ? __pfx_bus_for_each_drv+0x10/0x10 [ 80.844752][ T5873] __device_attach+0x2b8/0x430 [ 80.849513][ T5873] ? __pfx___device_attach+0x10/0x10 [ 80.854789][ T5873] ? do_raw_spin_unlock+0x122/0x240 [ 80.859978][ T5873] bus_probe_device+0x185/0x260 [ 80.864815][ T5873] device_add+0x7b6/0xb80 [ 80.869140][ T5873] usb_set_configuration+0x1a87/0x2110 [ 80.874613][ T5873] usb_generic_driver_probe+0x8d/0x150 [ 80.880065][ T5873] usb_probe_device+0x1c4/0x3c0 [ 80.884906][ T5873] ? __pfx_usb_probe_device+0x10/0x10 [ 80.890262][ T5873] really_probe+0x26d/0xad0 [ 80.894769][ T5873] __driver_probe_device+0x18c/0x320 [ 80.900059][ T5873] driver_probe_device+0x4f/0x240 [ 80.905077][ T5873] __device_attach_driver+0x279/0x430 [ 80.910446][ T5873] bus_for_each_drv+0x251/0x2e0 [ 80.915278][ T5873] ? __pfx___device_attach_driver+0x10/0x10 [ 80.921158][ T5873] ? __pfx_bus_for_each_drv+0x10/0x10 [ 80.926526][ T5873] __device_attach+0x2b8/0x430 [ 80.931280][ T5873] ? __pfx___device_attach+0x10/0x10 [ 80.936560][ T5873] ? do_raw_spin_unlock+0x122/0x240 [ 80.941751][ T5873] bus_probe_device+0x185/0x260 [ 80.946589][ T5873] device_add+0x7b6/0xb80 [ 80.950912][ T5873] usb_new_device+0xa39/0x1720 [ 80.955682][ T5873] ? __pfx_usb_new_device+0x10/0x10 [ 80.960875][ T5873] ? _raw_spin_unlock_irq+0x23/0x50 [ 80.966062][ T5873] ? lockdep_hardirqs_on+0x9c/0x150 [ 80.971253][ T5873] hub_event+0x29b1/0x4ef0 [ 80.975661][ T5873] ? __set_next_task_fair+0x135/0x390 [ 80.981064][ T5873] ? __pfx_hub_event+0x10/0x10 [ 80.985814][ T5873] ? process_one_work+0x868/0x15d0 [ 80.990913][ T5873] ? _raw_spin_unlock_irq+0x23/0x50 [ 80.996103][ T5873] ? process_one_work+0x868/0x15d0 [ 81.001209][ T5873] process_one_work+0x94a/0x15d0 [ 81.006133][ T5873] ? __lock_acquire+0xab9/0xd20 [ 81.010985][ T5873] ? __pfx_process_one_work+0x10/0x10 [ 81.016349][ T5873] ? assign_work+0x3a1/0x410 [ 81.020928][ T5873] worker_thread+0x9b0/0xee0 [ 81.025527][ T5873] kthread+0x711/0x8a0 [ 81.029586][ T5873] ? __pfx_worker_thread+0x10/0x10 [ 81.034686][ T5873] ? __pfx_kthread+0x10/0x10 [ 81.039262][ T5873] ? _raw_spin_unlock_irq+0x23/0x50 [ 81.044443][ T5873] ? lockdep_hardirqs_on+0x9c/0x150 [ 81.049626][ T5873] ? __pfx_kthread+0x10/0x10 [ 81.054219][ T5873] ret_from_fork+0x599/0xb30 [ 81.058812][ T5873] ? __pfx_ret_from_fork+0x10/0x10 [ 81.063924][ T5873] ? __switch_to_asm+0x39/0x70 [ 81.068679][ T5873] ? __switch_to_asm+0x33/0x70 [ 81.073427][ T5873] ? __pfx_kthread+0x10/0x10 [ 81.078008][ T5873] ret_from_fork_asm+0x1a/0x30 [ 81.082772][ T5873] [ 81.086027][ T5873] Kernel Offset: disabled [ 81.090331][ T5873] Rebooting in 86400 seconds..