last executing test programs: 14m40.660105819s ago: executing program 1 (id=1408): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(ecb-aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="11da3cf44b1a8c3d8a39ccbd630e8ef9170ccf07ef1800322de53ae3b183ee66", 0x20) r1 = accept4(r0, 0x0, 0x0, 0x80000) recvmsg$can_j1939(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/13, 0xd}, {&(0x7f0000000300)=""/157, 0x9d}], 0x2}, 0x40010103) sendmmsg$alg(r1, &(0x7f00000005c0)=[{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)="10b074492f61c684d1f6201bc0be32385577ecf3ca7d04e7c13b53c6265890a9", 0x20}], 0x1, &(0x7f0000000240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x4}], 0x1, 0x4000000) 14m39.754980443s ago: executing program 1 (id=1420): openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x8042, 0x85) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x2000000, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x2b, 0x0, 0xa0031718761814dc, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0xc0240, 0x40) 14m38.854491524s ago: executing program 1 (id=1428): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x4e21, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58"}, 0x28) sendmsg$inet(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000001140)=[{&(0x7f00000006c0)='n7', 0x2}, {&(0x7f0000000340)='_', 0x1}, {&(0x7f0000000940)="11", 0x1}, {&(0x7f0000000500)="0f", 0x1}, {&(0x7f0000000d40)='z', 0x1}, {&(0x7f0000001700)="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", 0x901}, {&(0x7f0000000a80)="e4", 0x1}, {&(0x7f0000000180)=';', 0x1}, {&(0x7f0000000040)='1', 0x1}, {&(0x7f0000000280)='>', 0x1}, {&(0x7f0000000480)="83", 0x1}, {&(0x7f0000000880)="91", 0x1}, {&(0x7f0000002680)="8883f88e4d805aa347a9cf67f65cede1656991ac53de0898e33d16376a6dc8458aee608861ea2aa73c995d4d83502b74e5a316e0d1d9cf71d7e239e5af65a7f512cdb858097fb5ffda46487b7a23a15f1c67f65cc002ddd9e37f0a9ddc68ffbe7bd995531d54919c8cc1e5bca4fba5c7b11d22633ab8284ba80563f5650d22806409e1ef4c445e9f6b9c895e6915f68dd26d2fb8e89a7c22b0cfdb904870368da6dc26276993956b2cf53015bf1a96dde70122ed85906398da10b3fee3b731eaa0f8dfa016edbaf730e501810449e5c36504c3939a3cf00ad912361b1e356b7beee3561f93aa39165526710d1c952579b4855c592cda90b5a022b639a1741033ba12b3763287b201cf9c845ebed9f5dee125e540cf3ca0dfb180e3366cff71f66984d21133f4d89a7dc9b9567a2bbd7781cf0d9309cd9a9866f51b818d5456a90f7d054d7a705a782fe62c16643add8220c68b132f5af75fcbf5310add50687484316bffe63857c77d5657be27415932d7a8775313d8af5fd59bd8a06e03e7070f7016402435adee1eff3e8cdce23ac1aae7a7fdc7d8873d73e50c602719dd85a1c1f99cba6b93c62dc3a51fec60b4f1fb3b25bee8f46b393cc67952bc5dab824b643dec8a3d372f1b59da2a6aeaca7ae01428b4c3047194f2967f27d0650c6d97499a44d1d03428a1b6acb68ebf858ed545b0961226e3ce2a955106ef982d6574565b202d17272ff4ee19819e4193868f23fa5aa4b311327b292917ac0eef6406f15a9452580432978161e9fac1602bad37da3ca33a8967413e3e3776864d2d924922a6a4bb3c60098c4fff52f1ff768d8f1a599fc3ea55d136bcdd66083266061855d9938afd3e089b5c2767ca32cddd15debfdeeed13b05938dc22cf086e3213831d83d3d7fecf932e85cf09a77cdaa2650e81af3a785d158e4eef284d74c8f633fb07d7dd76283bb608684c978f9ec981eb99e9745774637618288ec1e30ca908f43137991f7fa22831e4e62255d9f6ec877a5b289e0357e4f40388c6b2e84c10475f921a4dd317bf5e83dc6f3dfdac60182de4df3e4f87d47f426c54d2b6bfc6c1a2aa79210c45baa1121857615669743e1b090af013fa8edfc38d02b337e6fc410475eab42177caa2e6191d15568ca85f4d04363dd45ce9c7f1f653c4f0e04566ee6dd50df8eb34b5acc9bff01b3efa24f803470dc82c0c5f0746325ba8941064de151c4b9f255957bb75ce6148bec5824153469aebfecd2c827d8c09b52af2711b4b6894e04beea07ede96707b32ecc3aa6d8d5e5e114b475b14743864ab074cb59746bd66cfe6f4929cf07f8131b766f0a74dca358b5c63dd7ed3dfd2b589704f2f55fc2cd9ef689c3e11ef6d841e4a21bc2d96692d3c2f121356a35ceb6afecac53a1a8df730b2b22724e15162bbfcb4e815e18c23ddc1c021a4c94a0d363bcee721421a89e9c3355dab6486791ba540e95e1ced63eae676fcd07c279a483cd1fe8c0cb5b1ad357e7034a0c48a7238715b9f39dd996a47a936dfe699f020f56c5056b0494f1842b3fa5f41294bf9b6894c9ac7b74e0ba3af3fa0174580f0fd066a86365ca9c41643107e9b5dd839baa00f38340e21b6c4189a7c0ed05e580ab7d1a66012f20d6cc8a88036ed22debca4c3d1ecb8c43f5608e3b17fa50d5d571f6e238df7230140767b0bed116650a138e43ca3d0d29dbd5515b360d1068f40af908b2e53fb4dd2d0709bb1b13091775f3c33164565a60227a49c53f2f0a1a22e09baed2997b30b28b9903145c1f9fc9df53d87200c462fdaff9bedd7956dc3c4825e4e2d322c461e57b14392cbf8d015433e95a580920251f740a81d9f7d5cdcd9f8ddcf15a5cfcc9942aa731421b287fa8c8f54aaa5a0be35331cece4d1d1ca9b9962419ce7fe141864dd92fa185eda4b9e96381dbe6abf18cd15f0e00d9c51027da70d61ef1dbc06a0f680b9cf0bf6116a9a30db79879345d3b6824a294e309ac359abc8d49ced35bfd28b88bda51eee0f7accfcca0f632c6d71272299bd2a89d1dac7ed89dc1fc8d3ccae9f32456a567beba9f3821886a8c6b48121cb3eb6453fcbd92a3a49331386fc1fa698d0a3e63b671d1117d0505c8a50dcb3a1bcb2b7c11352341624e0ce250786efb45c0fab58190e74df0e1facf1f4ec5d0eaf83e4b2a4570700d8bcdb6f2d2f8efc6e7b025c93c9899609b4e23783f91c4c37ff7b3f5b7f94f93e3063e6ae3c3bd9af090a70620b0b34b7e3233c9f85ee12ec77c2150a86955d57d7d326848fa8e186b9e07d15962f6eb81fb8d1beead925d7360b8da91011e0e3c86a7d438f1c854e85bf2f6b0af848660a8c82d890c8f690fa821e104bde00e807d7e6a84104829a99cfc4a0e316108dd3cd2c49c2bc7e2a05659e58c9e54f7df9b26d86bd20d922f9b5418918c391291bcfd0295d9f9c38afe09cc8957e09c5290544249ccadc7b4dfe793dfd9ffe42e3bf12575a77a150b24a564e692a7de078d0836773ab70568094a479e7818a1f08923dca14e446c3ba23395f3c1fb555792b8a036b4d0e3793b0988386e4c465fe703c4033aedf9bfef630a09f076c768a5093f8b49a839b74328174c1159710d2dcc7e99eddddf7a8c3e79a09be166d71735482518fdab0e1b5493516ccb5385773c10e29ed6ca619182eaa57c2757d1fc10c647ad3a94b1a64a13339b21432eb09029ae30c6952288e9cee70a0c8150f4d36f5fcb27b8e9b870162baf18ebf2d3ae4d39d12d65d363322163ddb042496489abf43db0b486593fbd666784ffe86c6c86e76cabd3a35775c5efb07d14d3fbcc650d31cab925a0a8add940ef5ad1b0ccbc67eb6091d0601482506c23cdb88a381add0082cc03eb1c5134b2329d10ce641ba9a0d589ad0526f6c67616da9d7ec6eec694739b12a261ee342ce284bfe4fe00b35367bc47cd38c71bdb13e0779756c5be6dc8f73722a6d5dc1b6e7bcc314a170ac665746534555e3a8d74a87def7e44ec95329dda300dcf60ee8bc360a737840ef602f6e959459a04c27a57213c690e09d164be7b865abe833fdcc2a5f57550580b70ba8b659c010c822e054a6d1a74ed6bcab726c98e097f9a568bb384beccce40faef340a08197f81849568253cf748c7e99803da358b8459c8323ed77f7758879b23153e34d1be8576c0859041a577afc0932e954d26747436debd9b2955719d9bd9614682ad6bb94f70d7501a50cdaf150a2dccaa23b3b17400098a4fd545a5e322225dd1a8ef88aa123937a7d0edb6330525021eb783ff89a7969b805bc8bf58fe9a1c6eea4515c93515132647cc611a1b9b2f6017a01ac0421b69bdcb6c3982d31cdd878c6784f97508d567c151c2cbcd7daf7cf3d6532f6531a1cb1f9331016e400ec501905b43e35618476d38ded97c32f3e27e095008da3e24006c48f6", 0x981}, {&(0x7f0000000600)='|', 0x1}, {&(0x7f0000000f40)="7b8f3eb0b5cd8805920716b6f4cda3567d8e068da21aba415b63d35d290db746ae6cbdbb02d6cda016c4142aade798c37c6a54be61233a239da19980d2d1040e866fa3ac3537a9e9631f0f4aff57ceb3e865ae8556406b80d2c3bb4faa4ccca3c95d7bf9969b2aaf88d67e42e66c75307bbf06b771e323b3a888d7c578ddd78e88777ad1328c30f072a91727a22c7881ed5a41568710a51c688f05c107e22a8ea2d6fa619b91ad0f2286e015fd0e9ec91e4c22b4bb85a3f0c632bee12af9d9dfdc", 0xc1}], 0xf}, 0x0) 14m38.789247033s ago: executing program 1 (id=1429): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f0000000100)='./file0\x00') syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00') 14m38.696428767s ago: executing program 1 (id=1430): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000005440)=[{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000300)="837648860a5dfc82a052fd9702397eb415d9308a77b2db7e4cb8f4b16328bed8c1ed41e265eec88a50f8d2d90ead2e7fd342ab7e3a6f99504e07253b99e9f99d1cf2f87b3d28ead88c16f413a611c68ff4f2ad5361e11fe9895620b71f245e3e9fd8656e12e71e3670dd47325dee837c2209aef83c8d36f057744441a087249e9a52c22a4c0433e26b45d00ba5d2a0f57d7ea5fbd4a9a2422051ddc763c3455822f936adf00a0a81e1ebc5edbceb3e31a86dd02326", 0xb5}, {&(0x7f0000000700)="6645139124ac07ae1d7233b07a8a1b413ed9d61d0c82f4fed3d2388c54f85578f8e29131888e18d19a7e6680df3f253b792abaa4fc10da1a42127f4e88e9970cda075cbf4fec73d93e189d6f6cedf3eabd0473be669d30c8958e4e0da3e0187f68562ddd285eef44408eba3234482d0fc4dc2e3a172a2497a5311a3875f182f05bf46ab3", 0x84}, {&(0x7f00000000c0)="236802208aba5b29a4ddcd925b0675f499e57e20a5bd56e99bd9240706e114b0", 0x20}], 0x3, &(0x7f00000003c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x4800}], 0x1, 0x4004000) recvmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000500)=""/217, 0xd9}, {&(0x7f0000000840)=""/127, 0x7f}, {&(0x7f0000000600)=""/134, 0x86}], 0x3}, 0x4}], 0x1, 0x60, 0x0) 14m38.383351113s ago: executing program 1 (id=1431): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000300), 0x40100001, 0x189002) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000002c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000580)={&(0x7f0000000380)=[0x0, 0x0, 0x0], 0x3, r3, r4, 0x3, 0x0, 0xffffffff, 0x801, {0xac7c, 0x1, 0x3, 0x67, 0xf4b, 0x1, 0x2, 0x5, 0x4932, 0xe154, 0x1000, 0x7f, 0x3, 0xffffffff, "fe1d00003413000000000020b42717e47f00"}}) 14m38.199763994s ago: executing program 32 (id=1431): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000300), 0x40100001, 0x189002) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000002c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000580)={&(0x7f0000000380)=[0x0, 0x0, 0x0], 0x3, r3, r4, 0x3, 0x0, 0xffffffff, 0x801, {0xac7c, 0x1, 0x3, 0x67, 0xf4b, 0x1, 0x2, 0x5, 0x4932, 0xe154, 0x1000, 0x7f, 0x3, 0xffffffff, "fe1d00003413000000000020b42717e47f00"}}) 5m7.375057332s ago: executing program 0 (id=9722): socket$inet_udp(0x2, 0x2, 0x0) socket(0x10, 0x2, 0x0) pipe(&(0x7f0000000080)) socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$l2tp6(0xa, 0x2, 0x73) socket$l2tp6(0xa, 0x2, 0x73) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x801, 0x84) socket$igmp(0x2, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x6) socket$inet6_udplite(0xa, 0x2, 0x88) pipe(&(0x7f0000000080)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) socket$pppoe(0x18, 0x1, 0x0) pipe(&(0x7f00000002c0)) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 5m7.272733154s ago: executing program 0 (id=9725): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x2c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) 5m7.175424783s ago: executing program 0 (id=9728): r0 = syz_usb_connect$uac1(0x2, 0xa5, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902930003010000000904000000010100000a240100000002010213240600000600000000000000dfff000000000924030000000000000924050000f8431cfd09240300000300040206240504"], 0x0) syz_usb_control_io$uac1(r0, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x402}}}, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000200)={0xffff, 0x401f, 0xffffffff}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000200)={0xffff, 0x401f, 0xffffffff}) syz_usb_control_io(r0, &(0x7f00000009c0)={0x2c, 0x0, &(0x7f0000000440)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="feeb874a0f96edb9590000002cd50dfa46d9dd0acac207f81cea5b237298eb547928d074c11751daefbb9100e431d7f8236077d70c42549f9730684eb3fbe1a5fd565f6f1165c5fbea2100319cb8163a91ca97a96af1ed94c23d350aefe1ba0fe781d663cecfa33f806970a9062c260e7ed0a4cbd32a514487dc37b205bec0c607000000802c8f85fbf7c00fe78473ebcb95f1094309e87d00"/162], 0x0, 0x0, 0x0}, 0x0) (async) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="feeb874a0f96edb9590000002cd50dfa46d9dd0acac207f81cea5b237298eb547928d074c11751daefbb9100e431d7f8236077d70c42549f9730684eb3fbe1a5fd565f6f1165c5fbea2100319cb8163a91ca97a96af1ed94c23d350aefe1ba0fe781d663cecfa33f806970a9062c260e7ed0a4cbd32a514487dc37b205bec0c607000000802c8f85fbf7c00fe78473ebcb95f1094309e87d00"/162], 0x0, 0x0, 0x0}, 0x0) 5m6.491320824s ago: executing program 0 (id=9745): r0 = syz_usb_connect$uac1(0x2, 0xa5, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902930003010000000904000000010100000a240100000002010213240600000600000000000000dfff000000000924030000000000000924050000f8431cfd09240300000300040206240504"], 0x0) syz_usb_control_io$uac1(r0, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x402}}}, 0x0) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)=0x10) (async) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) (async) syz_usb_control_io(r0, &(0x7f00000009c0)={0x2c, 0x0, &(0x7f0000000440)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) (async) syz_open_procfs$userns(0x0, &(0x7f0000000040)) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x800) splice(r3, &(0x7f0000000140)=0xfff, r3, 0x0, 0x81, 0x4) (async) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r2, &(0x7f0000002300)={0x0, 0x0, &(0x7f00000022c0)={&(0x7f0000000000)={0x30, 0x1410, 0x8, 0x70bd2d, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x3}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x24000000}, 0x24018010) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e23, 0x3, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x40000009}, 0x1c) (async) bind$inet6(r4, &(0x7f0000000200)={0xa, 0x4e22, 0x2, @empty, 0x8}, 0x1c) (async) listen(r4, 0x204) (async) r5 = socket$netlink(0x10, 0x3, 0x4) fcntl$getownex(r4, 0x10, &(0x7f0000000040)={0x0, 0x0}) sched_setattr(r6, &(0x7f0000000140)={0x38, 0x0, 0x20, 0x10001, 0x34, 0x0, 0x7, 0x9, 0xe, 0x126}, 0x0) (async) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a09000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) (async) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) 5m6.483910953s ago: executing program 0 (id=9746): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x2c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) 5m6.0035117s ago: executing program 0 (id=9748): socket$inet_udp(0x2, 0x2, 0x0) socket(0x10, 0x2, 0x0) pipe(&(0x7f0000000080)) socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$l2tp6(0xa, 0x2, 0x73) socket$l2tp6(0xa, 0x2, 0x73) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x801, 0x84) socket$igmp(0x2, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x6) socket$inet6_udplite(0xa, 0x2, 0x88) pipe(&(0x7f0000000080)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) socket$pppoe(0x18, 0x1, 0x0) pipe(&(0x7f00000002c0)) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) (fail_nth: 1) 5m5.814347197s ago: executing program 33 (id=9748): socket$inet_udp(0x2, 0x2, 0x0) socket(0x10, 0x2, 0x0) pipe(&(0x7f0000000080)) socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$l2tp6(0xa, 0x2, 0x73) socket$l2tp6(0xa, 0x2, 0x73) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x801, 0x84) socket$igmp(0x2, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x6) socket$inet6_udplite(0xa, 0x2, 0x88) pipe(&(0x7f0000000080)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) socket$pppoe(0x18, 0x1, 0x0) pipe(&(0x7f00000002c0)) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) (fail_nth: 1) 8.921375655s ago: executing program 4 (id=11629): r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000001140)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x173b2a7e, @mcast2, 0x19}, 0x1c, 0x0, 0x0, &(0x7f00000020c0)=ANY=[@ANYBLOB="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"], 0x590}}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000040)="8857c5fc68d9", 0x6}], 0x1}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000002c0)="a0272bbf1f07f2", 0x7}], 0x1}}], 0x3, 0x28048005) 8.887820175s ago: executing program 4 (id=11630): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000300)={0x42, 0x0, 0x3, 0x3}, 0x10) getsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000080), &(0x7f0000000200)=0x4) close(0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x48}, 0x4800) socket$unix(0x1, 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8915, 0x0) socket$unix(0x1, 0x2, 0x0) close(r3) socket$unix(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r7, @ANYBLOB="1f003300d00000000802110000010802110000005050505050500000", @ANYRES8=r5], 0x3c}}, 0x10) 8.748881016s ago: executing program 4 (id=11631): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, &(0x7f00000003c0)={0x0, 0x17, 0x4, "abe763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000180)=ANY=[@ANYBLOB="601004000000cf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000300)={0x1c, &(0x7f0000001480)=ANY=[@ANYBLOB="200104"], 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000013c0)={0x44, &(0x7f00000011c0)={0x20, 0x14, 0x4, "0426fd98"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000fc0)={0x84, &(0x7f0000000c80)={0x20, 0x0, 0x4, "f670e000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 6.039310796s ago: executing program 5 (id=11680): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x4814) 5.97437004s ago: executing program 5 (id=11681): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000300)={0x42, 0x0, 0x3, 0x3}, 0x10) getsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000080), &(0x7f0000000200)=0x4) close(0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x68, 0xb, 0x6, 0x801, 0x0, 0x0, {0x2, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @dev={0xfe, 0x80, '\x00', 0x1f}}}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private1}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xcd}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x16}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x48}, 0x4800) socket$unix(0x1, 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8915, 0x0) socket$unix(0x1, 0x2, 0x0) close(r3) socket$unix(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r7, @ANYBLOB="1f003300d00000000802110000010802110000005050505050500000", @ANYRES8=r5], 0x3c}}, 0x10) 5.923607885s ago: executing program 5 (id=11682): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, 0x0, 0x40000) 5.843412527s ago: executing program 5 (id=11683): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2], 0x68}}, 0x0) 5.84076008s ago: executing program 5 (id=11684): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x38, r0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_PBSS={0x4}]}, 0x38}}, 0x0) 5.793814724s ago: executing program 5 (id=11685): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000cc0)=ANY=[@ANYBLOB="12010000773604202404019957c2010203010902240001000010"], 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000640)=ANY=[@ANYBLOB="401425"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000001300)={0x34, &(0x7f00000010c0)={0x40, 0x18, 0x4, "4e8b0db3"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000e00)={0x84, &(0x7f0000000940)={0x40, 0x3, 0x4, "e30318a2"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f00000001c0)={0x20, 0x6, 0x4, "d3e17934"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000780)={0x2c, &(0x7f0000000580)={0x40, 0xe, 0x4, "a1770b9a"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000680)={0x2c, &(0x7f00000003c0)={0x40, 0x10, 0x4, "3d486516"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 4.860008789s ago: executing program 4 (id=11695): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x38, r0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_PBSS={0x4}]}, 0x38}}, 0x0) 4.736196803s ago: executing program 4 (id=11696): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0x80000}, 0x1c) listen(r1, 0x0) getsockname$l2tp6(0xffffffffffffffff, 0x0, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f0000000400)={0x214, r2, 0x411, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_TX_RATES={0x200, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x94, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xa, 0x1, [0x4, 0x36, 0x5, 0x60, 0x6ff426e8f33e4564, 0x7]}, @NL80211_TXRATE_HT={0x51, 0x2, [{0x0, 0x3}, {0x2, 0x6}, {0x4, 0x2}, {0x5, 0x6}, {0x4, 0x2}, {0x7, 0x9}, {0x4, 0x3}, {0x1, 0x8}, {0x1, 0x6}, {0x4, 0x2}, {0x4, 0x1}, {0x6, 0x9}, {0x5, 0x1}, {0x2, 0xa}, {0x1, 0x7}, {0x2, 0x6}, {}, {0x0, 0x9}, {0x6, 0x7}, {0x3, 0x6}, {0x4, 0xa}, {0x4, 0x3}, {0x1, 0x4}, {0x7, 0x3}, {0x2, 0x6}, {}, {0x0, 0x8}, {}, {0x1, 0x2}, {0x7, 0x5}, {0x1, 0x8}, {0x4, 0x8}, {0x7, 0x3}, {}, {0x5, 0x9}, {0x3, 0x5}, {0x6, 0x1}, {0x2, 0xa}, {0x5, 0x8}, {0x7, 0x5}, {0x6, 0x5}, {0x5, 0x5}, {0x4}, {0x5, 0x4}, {0x3, 0x9}, {0x1, 0x2}, {0x2, 0x4}, {0x6, 0x4}, {0x3, 0xa}, {0x3, 0x5}, {0x7, 0x8}, {}, {0x3, 0x8}, {0x4, 0x4}, {0x7, 0x1}, {0x0, 0x9}, {0x7, 0x4}, {0x4, 0x1}, {0x2, 0x6}, {0x7}, {0x0, 0x9}, {0x4, 0xa}, {0x4, 0x3}, {0x5, 0x9}, {0x4, 0x6}, {0x5, 0x2}, {0x7, 0x7}, {0x0, 0x1}, {0x1}, {0x3, 0x6}, {0x3, 0x2}, {0x4, 0xa}, {0x2}, {}, {0x0, 0x4}, {0x1, 0x4}, {0x6, 0x9}]}, @NL80211_TXRATE_HT={0x2d, 0x2, [{0x7, 0x9}, {0x4, 0x8}, {0x6, 0x2}, {0x6}, {0x7, 0x9}, {0x5}, {0x2, 0x8}, {0x2, 0x1}, {0x5, 0xa}, {0x6, 0x3}, {0x7, 0x8}, {0x3}, {0x6, 0x8}, {0x3, 0x6}, {0x5, 0x5}, {0x7}, {0x1, 0x9}, {0x2, 0x1}, {0x0, 0x1}, {0x2, 0x9}, {0x3, 0x1}, {0x0, 0x2}, {0x7, 0x5}, {0x5, 0xa}, {0x3, 0x1}, {0x0, 0xa}, {0x3, 0x5}, {0x2, 0x7}, {}, {0x4, 0x1}, {0x4, 0x2}, {0x1, 0x2}, {0x7, 0x1}, {0x1, 0xa}, {0x3, 0xa}, {0x2, 0x1}, {0x2, 0x6}, {0x5, 0x3}, {0x1, 0x9}, {0x1, 0x2}, {0x1, 0x7}]}]}, @NL80211_BAND_60GHZ={0x4c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x16, 0x2, [{0x4, 0x9}, {0x6, 0x5}, {0x5, 0x1}, {0x4, 0x4}, {0x0, 0x4}, {0x3, 0x1}, {0x7, 0x5}, {0x7, 0xa}, {0x1, 0x4}, {0x0, 0xa}, {0x3, 0xa}, {0x6, 0x8}, {0x4, 0x3}, {0x5, 0x6}, {0x0, 0x2}, {0x5, 0x2}, {0x1, 0x8}, {0x0, 0x3}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x800, 0x9000, 0x3, 0x1674, 0x7, 0xb95, 0x9, 0x4]}}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0x12, 0x2]}, @NL80211_TXRATE_LEGACY={0x4}]}, @NL80211_BAND_6GHZ={0x10, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0xa, 0x2, [{0x6, 0x4}, {0x4, 0x8}, {0x5, 0x1}, {0x1, 0x3}, {0x6, 0x3}, {0x2, 0x8}]}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x3a, 0x2, [{0x1, 0xa}, {0x6, 0x3}, {0x6, 0x9}, {0x6, 0x6}, {0x2, 0x6}, {0x2, 0x8}, {0x6, 0x5}, {0x6, 0x5}, {0x4, 0x3}, {0x7, 0x3}, {0x0, 0x6}, {0x5, 0xa}, {0x1, 0x2}, {0x1, 0x1}, {}, {0x0, 0x2}, {0x0, 0x2}, {0x2, 0x2}, {0x0, 0xa}, {0x3, 0x5}, {0x2, 0x5}, {0x5, 0xa}, {0x3, 0x3}, {0x3, 0x7}, {0x3, 0x9}, {0x5, 0x6}, {0x0, 0x2}, {0x3, 0x9}, {0x2, 0x5}, {0x0, 0xa}, {0x3, 0x4}, {0x1, 0x3}, {0x2, 0x5}, {0x7, 0xa}, {0x1}, {0x7, 0xa}, {0x4, 0x9}, {0x2, 0x7}, {0x4, 0x1}, {0x0, 0x4}, {0x0, 0x4}, {0x2, 0x2}, {0x5, 0x2}, {0x2, 0xa}, {0x0, 0xa}, {0x6, 0x2}, {0x0, 0x3}, {0x6, 0xa}, {0x0, 0x8}, {0x4, 0x1}, {0x5, 0x5}, {0x0, 0x1}, {0x4, 0x4}, {0x2, 0x4}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_60GHZ={0xb0, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xffff, 0x6, 0xe, 0xffff, 0xbf, 0x0, 0x9, 0x401]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xd, 0x200, 0x1, 0x4, 0xe5b, 0xe, 0x8, 0x8000]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x81, 0xd468, 0x1, 0x5, 0xffff, 0xffcb, 0x9, 0x1ff]}}, @NL80211_TXRATE_HT={0x30, 0x2, [{0x3, 0x3}, {0x0, 0x5}, {0x1, 0x8}, {0x0, 0x8}, {0x0, 0x9}, {0x5, 0x7}, {0x2, 0xa}, {0x5, 0x9}, {0x6, 0xa}, {0x1, 0x1}, {0x0, 0x8}, {0x0, 0x1}, {0x0, 0x1}, {0x1, 0x9}, {0x1, 0x3}, {0x1}, {0x1, 0x5}, {0x3}, {0x3, 0x4}, {0x6, 0x9}, {0x1, 0x4}, {0x5, 0x7}, {0x7, 0x4}, {0x5, 0x5}, {0x1, 0x9}, {0x7, 0x8}, {0x1}, {0x7, 0xa}, {0x6, 0x3}, {0x6}, {0x2, 0x1}, {0x2, 0x3}, {0x1, 0x7}, {0x5, 0x6}, {0x7, 0x2}, {0x5, 0xa}, {0x1, 0x8}, {0x3, 0x7}, {0x7, 0x8}, {0x3}, {0x4, 0x3}, {0x3, 0x4}, {0x6, 0x7}, {0x2, 0x6}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x9, 0x3, 0x18, 0x1, 0x3, 0x36, 0x60, 0x48, 0x9, 0x60, 0x9, 0x48, 0x18, 0x2, 0x4, 0x5894a80a639e00a8, 0x3]}, @NL80211_TXRATE_HE_LTF={0x5}]}]}]}, 0x214}}, 0x20000000) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x101000, 0x800, 0x3, 0x1}, 0x20) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000080)={0x300, 0x0, 0x300, 0x320, 0x0, 0x6, 0x0, 0x1, {0xa, 0xff, 0x1}, {0x8000, 0x4}, {0x200, 0x5, 0x1}, {0x9, 0xd, 0x1}, 0x1, 0x80, 0x6, 0xa8000000, 0x0, 0x8, 0xfffff87e, 0x4, 0xb63, 0x2, 0x7, 0x4, 0x36, 0x0, 0x3, 0xb}) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201050037057b082d0800014b702c02030109021200070100a0000904"], 0x0) syz_usb_control_io$uac1(r4, 0x0, &(0x7f0000000300)={0x44, &(0x7f0000000100)=ANY=[@ANYBLOB="400006"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r3, &(0x7f00000001c0)={0x2c, 0x8, r6}, 0x10) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000640)=0x100, 0x4) clock_gettime(0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r7, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000680)={0x14, r8, 0x1, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4000890) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="54000000090601080004000000000000050000000900020073797a310000000005000100070000002c0007801800018014000240fe8000000000000000000000000000bb060004404e200000060005404e230000"], 0x54}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) 2.279918441s ago: executing program 4 (id=11710): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, &(0x7f00000003c0)={0x0, 0x17, 0x4, "abe763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000180)=ANY=[@ANYBLOB="601004000000cf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000300)={0x1c, &(0x7f0000001480)=ANY=[@ANYBLOB="200104"], 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000013c0)={0x44, &(0x7f00000011c0)={0x20, 0x14, 0x4, "0426fd98"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000fc0)={0x84, &(0x7f0000000c80)={0x20, 0x0, 0x4, "f670e000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001200)={0x84, &(0x7f0000000f00)={0x0, 0x14, 0x4, "42467af9"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 2.115265703s ago: executing program 3 (id=11713): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x104}, 0x20000050) 2.028972385s ago: executing program 3 (id=11714): socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r1, @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x0) 1.907280236s ago: executing program 3 (id=11716): socket$inet_udplite(0x2, 0x2, 0x88) socket$igmp(0x2, 0x3, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000000000000000370000000800", @ANYRES32=r3, @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r7, @ANYBLOB="08002600ad1600004000330010000000080211000000080211000000080211000001000000000000010001002d1a40000b0000000000000000040003000b0000000600500000000304006c"], 0x68}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) 1.467398657s ago: executing program 2 (id=11720): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000e80)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24004084}, 0x40000) 1.428365163s ago: executing program 2 (id=11721): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x75, 0x1c, 0x1, 0x10, 0xfe6, 0x9800, 0xd19a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x29, 0x2, 0x2, 0xb4, 0x8c, 0xbb, 0x0, [], [{{0x9, 0x5, 0x4, 0x2, 0x10, 0x0, 0xfa}}, {{0x9, 0x5, 0x82, 0x2, 0x40}}]}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000003c0)={0x1c, &(0x7f00000002c0)={0x0, 0x1, 0x6, "cc17fc47a9ae"}, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) 795.705827ms ago: executing program 2 (id=11722): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x38, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_PBSS={0x4}]}, 0x38}}, 0x0) 366.073196ms ago: executing program 3 (id=11723): socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, 0x0, 0x0) 350.90776ms ago: executing program 2 (id=11724): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000540)="89e7ee0c7cdad9b4b47380c988cafbe863ca", 0x12}, {&(0x7f0000000100)="f15e327d935bdfebb8ea4d00", 0xc}], 0x2) 121.048652ms ago: executing program 3 (id=11725): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 120.772133ms ago: executing program 2 (id=11726): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f00000000c0)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x15, 0x3, 'wlc\x00', 0x1, 0x0, 0x4}, 0x2c) r1 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 10.471778ms ago: executing program 2 (id=11727): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000009c0)={{0x12, 0x1, 0x0, 0x3a, 0x98, 0x2a, 0x8, 0xccd, 0x10a3, 0x23a2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x57, 0x33, 0x19}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000400)={0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="851606"], 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300042e010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000680)={0x44, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000180)={0x14, 0x0, 0x0}, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000100)={0x4, 0xffffffffffffffff}) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f00000000c0)={0xa}) ioctl$KVM_HAS_DEVICE_ATTR(r3, 0x4018aee3, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f00000002c0)=0x7e) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 0s ago: executing program 3 (id=11728): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x5c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x5c}}, 0x0) kernel console output (not intermixed with test programs): CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 1002.891761][T15654] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 1002.925337][T15654] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 1002.948765][T15654] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 1002.982749][T15654] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 1003.024123][T32461] can0: slcan on ptm0. [ 1003.028830][T15654] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 1003.054133][T15654] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 1003.084879][T15654] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 1003.121052][T15654] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 1003.146738][T15654] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 1003.163266][T32461] can0 (unregistered): slcan off ptm0. [ 1003.168335][T15654] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 1003.190959][T15654] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 1003.216501][T15654] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 1003.241744][T15654] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 1003.268076][T15654] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 1003.336519][T15654] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 1003.362292][T15654] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 1003.405905][T15654] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 1003.447131][T15654] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 1003.481076][T15654] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 1003.507574][T15654] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 1003.530198][T15654] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 1003.574963][T15654] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 1003.606320][T15654] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 1003.653295][T15654] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 1003.684644][T15654] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 1003.749144][T15654] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 1003.791766][T15654] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 1003.833594][T15654] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 1003.856307][T15654] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 1003.888321][T15654] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 1003.915530][T15654] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 1003.961992][T15654] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 1003.976880][T32496] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10781'. [ 1004.001876][T15654] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 1004.026341][T15654] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 1004.046394][T15654] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 1004.081157][T15654] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 1004.103479][T15654] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 1004.136269][T15654] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 1004.164224][T15654] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 1004.205014][T15654] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 1004.235482][T15654] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 1004.295154][T15654] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 1004.349147][T15654] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 1004.383909][T15654] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 1004.446453][T15654] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 1004.491443][T15654] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 1004.509154][T32517] can0: slcan on ptm0. [ 1004.545591][T15654] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 1004.590541][T15654] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 1004.624120][T15654] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 1004.637385][T15654] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 1004.657267][T32517] can0 (unregistered): slcan off ptm0. [ 1004.690000][T15654] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 1004.722662][T15654] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 1004.756691][T15654] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 1004.789265][T15654] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 1004.807309][T15654] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 1004.833037][T15654] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 1004.853555][T15654] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 1004.882470][T15654] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 1004.935070][T15654] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 1004.954040][T15654] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 1004.997358][T15654] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 1005.053684][T15654] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 1005.088341][T15654] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 1005.115347][T15654] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 1005.140952][T15654] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 1005.182542][T15654] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 1005.191306][T32547] netlink: 12 bytes leftover after parsing attributes in process `syz.5.10793'. [ 1005.230253][T15654] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 1005.271481][T15654] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 1005.288807][T15654] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 1005.305048][T15654] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 1005.349206][T15654] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 1005.383333][T15654] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 1005.407198][T15654] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 1005.409343][T32554] can0: slcan on ptm0. [ 1005.428739][T15654] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 1005.461531][T15654] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 1005.496580][T15654] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 1005.520085][T15654] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 1005.542478][T15654] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 1005.581717][T15654] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 1005.614464][T15654] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 1005.630411][T32554] can0 (unregistered): slcan off ptm0. [ 1005.638724][T15654] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 1005.674338][T15654] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 1005.693260][T15654] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 1005.726089][T15654] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 1005.752022][T15654] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 1005.785547][T15654] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 1005.816443][T15654] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 1005.836193][T32566] tipc: Enabled bearer , priority 0 [ 1005.855298][T15654] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 1005.891953][T15654] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 1005.905827][T15654] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 1005.919922][T15654] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 1005.939549][T32566] syzkaller0: entered promiscuous mode [ 1005.946140][T32566] syzkaller0: entered allmulticast mode [ 1005.946917][T15654] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 1005.963846][T32566] tipc: Resetting bearer [ 1005.978045][T32565] tipc: Resetting bearer [ 1005.978911][T15654] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 1006.001543][T15654] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 1006.013608][T15654] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 1006.046038][T15654] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 1006.078321][T15654] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 1006.120542][T15654] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 1006.161609][T15654] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 1006.185019][T15654] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 1006.212828][T15654] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 1006.238022][T15654] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 1006.256950][T15654] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 1006.278702][T15654] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 1006.290333][T15654] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 1006.302887][T32579] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10805'. [ 1006.312923][T15654] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 1006.335677][T15654] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 1006.357892][T15654] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 1006.369328][T15654] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 1006.383842][T15654] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 1006.396176][T15654] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 1006.409237][T15654] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 1006.422007][T15654] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 1006.437647][T15654] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 1006.452525][T15654] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 1006.467097][T15654] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 1006.479286][T15654] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 1006.491718][T15654] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 1006.504067][T15654] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 1006.516465][T15654] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 1006.528221][T15654] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 1006.542500][T15654] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 1006.555090][T15654] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 1006.568611][T15654] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 1006.581330][T15654] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 1006.594733][T15654] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 1006.606661][T15654] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 1006.618901][T15654] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 1006.632767][T15654] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 1006.645698][T15654] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 1006.657498][T15654] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 1006.669925][T15654] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 1006.681565][T15654] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 1006.693588][T15654] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 1006.706427][T15654] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 1006.719022][T15654] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 1006.730750][T15654] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 1006.743768][T15654] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 1006.757239][T15654] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 1006.769221][T15654] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 1006.789198][T15654] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 1006.801412][T15654] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 1006.813083][T15654] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 1006.825192][T15654] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 1006.836681][T15654] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 1006.849287][T15654] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 1006.861211][T15654] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 1006.874618][T15654] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 1006.886029][T15654] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 1006.897981][T15654] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 1006.909616][T15654] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 1006.921713][T15654] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 1006.934169][T15654] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 1006.953048][T15654] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 1006.964872][T15654] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 1006.980672][T15654] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 1006.992288][T15654] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 1007.003267][T15654] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 1007.017842][T15654] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 1007.036125][T15654] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 1007.047519][T15654] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 1007.058146][ T5859] tipc: Node number set to 1688808731 [ 1007.058624][T15654] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to write Medium Mode mode to 0x0336:ffffffb9 [ 1007.085987][T15654] CoreChips 3-1:0.41: probe with driver CoreChips failed with error -71 [ 1007.102013][T15654] usb 3-1: USB disconnect, device number 81 [ 1008.413790][T32565] tipc: Disabling bearer [ 1008.541877][T32585] can0: slcan on ptm0. [ 1008.627168][T32585] can0 (unregistered): slcan off ptm0. [ 1008.967517][T32607] tipc: Enabled bearer , priority 0 [ 1009.070618][T32607] syzkaller0: entered promiscuous mode [ 1009.080871][T32607] syzkaller0: entered allmulticast mode [ 1009.091345][T32607] tipc: Resetting bearer [ 1009.133779][T32606] tipc: Resetting bearer [ 1011.146692][T32606] tipc: Disabling bearer [ 1011.165153][T32636] tipc: Enabled bearer , priority 0 [ 1011.254000][T32638] syzkaller0: entered promiscuous mode [ 1011.272117][T32638] syzkaller0: entered allmulticast mode [ 1011.286829][T32638] tipc: Resetting bearer [ 1011.386667][T32630] tipc: Resetting bearer [ 1013.437807][T32630] tipc: Disabling bearer [ 1014.009426][T32700] tipc: Enabled bearer , priority 0 [ 1014.117272][T32700] syzkaller0: entered promiscuous mode [ 1014.125921][T32700] syzkaller0: entered allmulticast mode [ 1014.146747][T32700] tipc: Resetting bearer [ 1014.162488][T32699] tipc: Resetting bearer [ 1016.172790][T32699] tipc: Disabling bearer [ 1016.191049][T32706] tipc: Enabling of bearer rejected, failed to enable media [ 1016.490203][T32737] netlink: 'syz.4.10858': attribute type 1 has an invalid length. [ 1016.801945][T32750] syzkaller0: entered promiscuous mode [ 1016.807852][T32750] syzkaller0: entered allmulticast mode [ 1016.985573][T32764] netlink: 36 bytes leftover after parsing attributes in process `syz.4.10868'. [ 1019.557650][ T344] netlink: 36 bytes leftover after parsing attributes in process `syz.5.10886'. [ 1019.879093][ T354] syzkaller0: entered promiscuous mode [ 1019.884758][ T354] syzkaller0: entered allmulticast mode [ 1022.155234][ T380] netlink: 36 bytes leftover after parsing attributes in process `syz.2.10897'. [ 1022.254591][ T387] fuse: Bad value for 'group_id' [ 1022.262326][ T387] fuse: Bad value for 'group_id' [ 1022.504065][ T401] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10905'. [ 1022.719543][ T405] syzkaller0: entered promiscuous mode [ 1022.728534][ T405] syzkaller0: entered allmulticast mode [ 1023.181551][ T5186] Bluetooth: hci4: command 0x0406 tx timeout [ 1024.762063][ T414] tipc: Enabling of bearer rejected, failed to enable media [ 1024.899404][ T425] fuse: Bad value for 'group_id' [ 1024.916785][ T425] fuse: Bad value for 'group_id' [ 1025.266839][T29521] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 1025.356737][ T450] tipc: Enabling of bearer rejected, failed to enable media [ 1025.400801][ T453] netlink: 28 bytes leftover after parsing attributes in process `syz.5.10921'. [ 1025.438026][T29521] usb 3-1: Using ep0 maxpacket: 32 [ 1025.455166][T29521] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 1025.483451][T29521] usb 3-1: config 0 has no interface number 0 [ 1025.513642][T29521] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1025.526876][T29521] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1025.548476][T29521] usb 3-1: Product: syz [ 1025.552707][T29521] usb 3-1: Manufacturer: syz [ 1025.566119][T29521] usb 3-1: SerialNumber: syz [ 1025.586058][T29521] usb 3-1: config 0 descriptor?? [ 1025.602271][T29521] smsc95xx v2.0.0 [ 1025.723800][ T463] fuse: Bad value for 'group_id' [ 1025.729748][ T463] fuse: Bad value for 'group_id' [ 1025.905899][ T475] netlink: 28 bytes leftover after parsing attributes in process `syz.4.10930'. [ 1026.004901][ T479] tipc: Enabled bearer , priority 0 [ 1026.024738][ T478] tipc: Disabling bearer [ 1026.044756][T29521] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1026.064784][T29521] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1026.769947][ T503] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1026.776555][ T503] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1026.946579][T29521] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 1026.971424][T29521] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -32 [ 1027.415472][ T530] tipc: Enabled bearer , priority 0 [ 1027.446039][ T528] tipc: Disabling bearer [ 1027.849445][ T551] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10960'. [ 1027.861584][ T551] netlink: 1 bytes leftover after parsing attributes in process `syz.5.10960'. [ 1028.221913][T15653] usb 3-1: USB disconnect, device number 82 [ 1028.660659][ T5876] Bluetooth: hci2: command 0x0406 tx timeout [ 1029.132512][ T5859] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 1029.176526][ T610] netlink: 24 bytes leftover after parsing attributes in process `syz.5.10981'. [ 1029.309511][ T5859] usb 3-1: Using ep0 maxpacket: 32 [ 1029.319757][ T5859] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 1029.328677][ T5859] usb 3-1: config 0 has no interface number 0 [ 1029.344197][ T5859] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1029.362886][ T5859] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1029.382296][ T5859] usb 3-1: Product: syz [ 1029.397526][ T5859] usb 3-1: Manufacturer: syz [ 1029.402190][ T5859] usb 3-1: SerialNumber: syz [ 1029.428369][ T5859] usb 3-1: config 0 descriptor?? [ 1029.449126][ T5859] smsc95xx v2.0.0 [ 1029.855030][ T637] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10992'. [ 1029.880941][ T5859] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1029.903371][ T5859] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1030.103228][T29521] usb 6-1: new full-speed USB device number 23 using dummy_hcd [ 1030.177566][ T648] syzkaller1: entered promiscuous mode [ 1030.183303][ T648] syzkaller1: entered allmulticast mode [ 1030.261402][T29521] usb 6-1: device descriptor read/64, error -71 [ 1030.518022][T29521] usb 6-1: new full-speed USB device number 24 using dummy_hcd [ 1030.670297][T29521] usb 6-1: device descriptor read/64, error -71 [ 1030.785545][ T5859] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 1030.796747][T29521] usb usb6-port1: attempt power cycle [ 1030.803544][ T5859] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -32 [ 1031.025129][ T676] syzkaller1: entered promiscuous mode [ 1031.031149][ T676] syzkaller1: entered allmulticast mode [ 1031.177985][ T680] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11007'. [ 1031.192290][T29521] usb 6-1: new full-speed USB device number 25 using dummy_hcd [ 1031.227106][T29521] usb 6-1: device descriptor read/8, error -71 [ 1031.265896][ T686] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11010'. [ 1031.372429][ T692] netlink: 44 bytes leftover after parsing attributes in process `syz.3.11013'. [ 1031.491257][T29521] usb 6-1: new full-speed USB device number 26 using dummy_hcd [ 1031.525176][T29521] usb 6-1: device descriptor read/8, error -71 [ 1031.672406][T29521] usb usb6-port1: unable to enumerate USB device [ 1032.124172][T15656] usb 3-1: USB disconnect, device number 83 [ 1032.455304][ T739] fuse: Unknown parameter 'group_i00000000000000000000' [ 1032.880028][ T767] fuse: Unknown parameter 'group_i00000000000000000000' [ 1032.893495][T29521] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 1033.063407][T29521] usb 5-1: Using ep0 maxpacket: 32 [ 1033.086291][T29521] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 1033.094432][T29521] usb 5-1: config 0 has no interface number 0 [ 1033.106862][T29521] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1033.134967][T29521] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1033.143744][T29521] usb 5-1: Product: syz [ 1033.149627][T29521] usb 5-1: Manufacturer: syz [ 1033.154366][T29521] usb 5-1: SerialNumber: syz [ 1033.176776][T29521] usb 5-1: config 0 descriptor?? [ 1033.203816][T29521] smsc95xx v2.0.0 [ 1033.642502][T29521] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1033.653831][T29521] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1034.051866][ T803] netlink: 256 bytes leftover after parsing attributes in process `syz.5.11051'. [ 1034.549816][T29521] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 1034.563576][T29521] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -32 [ 1035.538947][ T832] netlink: 48 bytes leftover after parsing attributes in process `syz.5.11060'. [ 1035.861733][T15653] usb 5-1: USB disconnect, device number 56 [ 1036.241249][T15653] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 1036.423123][T15653] usb 5-1: Using ep0 maxpacket: 32 [ 1036.434451][T15653] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 1036.448895][T15653] usb 5-1: config 0 has no interface number 0 [ 1036.464634][T15653] usb 5-1: config 0 interface 184 has no altsetting 0 [ 1036.485333][T15653] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1036.507291][T15653] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1036.515453][T15653] usb 5-1: Product: syz [ 1036.535315][T15653] usb 5-1: Manufacturer: syz [ 1036.540577][T15653] usb 5-1: SerialNumber: syz [ 1036.555749][T15653] usb 5-1: config 0 descriptor?? [ 1036.564246][T15653] smsc75xx v1.0.0 [ 1036.661069][ T871] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11072'. [ 1037.232314][T15653] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 1037.235885][ T888] syzkaller0: entered promiscuous mode [ 1037.247013][T15653] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1037.252765][ T888] syzkaller0: entered allmulticast mode [ 1037.402102][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1037.414439][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1038.132272][T15653] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -32 [ 1038.144892][T15653] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -32 [ 1038.158755][T15653] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 1038.169875][T15653] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -32 [ 1039.256977][T29521] usb 5-1: USB disconnect, device number 57 [ 1039.561981][ T919] syzkaller0: entered promiscuous mode [ 1039.576846][ T919] syzkaller0: entered allmulticast mode [ 1039.659575][ T928] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11089'. [ 1042.194600][ T960] syzkaller0: entered promiscuous mode [ 1042.200269][ T960] syzkaller0: entered allmulticast mode [ 1042.200833][ T967] fuse: Unknown parameter 'group_id00000000000000000000' [ 1042.462613][ T30] audit: type=1326 audit(1758929183.643:782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=978 comm="syz.3.11105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91f118eec9 code=0x7ffc0000 [ 1042.494540][ T30] audit: type=1326 audit(1758929183.653:783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=978 comm="syz.3.11105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91f118eec9 code=0x7ffc0000 [ 1042.517210][ T30] audit: type=1326 audit(1758929183.653:784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=978 comm="syz.3.11105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f91f118eec9 code=0x7ffc0000 [ 1042.540957][ T30] audit: type=1326 audit(1758929183.718:785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=980 comm="syz.3.11105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f91f11c1785 code=0x7ffc0000 [ 1042.567403][ T30] audit: type=1326 audit(1758929183.718:786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=978 comm="syz.3.11105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91f118eec9 code=0x7ffc0000 [ 1042.591957][ T30] audit: type=1326 audit(1758929183.718:787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=978 comm="syz.3.11105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91f118eec9 code=0x7ffc0000 [ 1042.619794][ T30] audit: type=1326 audit(1758929183.755:788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=978 comm="syz.3.11105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f91f118eec9 code=0x7ffc0000 [ 1042.643410][ T30] audit: type=1326 audit(1758929183.755:789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=978 comm="syz.3.11105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91f118eec9 code=0x7ffc0000 [ 1042.667322][ T30] audit: type=1326 audit(1758929183.755:790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=978 comm="syz.3.11105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91f118eec9 code=0x7ffc0000 [ 1045.213160][T29521] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 1045.385240][T29521] usb 5-1: Using ep0 maxpacket: 16 [ 1045.393218][T29521] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 1045.401952][T29521] usb 5-1: config 0 has no interface number 0 [ 1045.409689][T29521] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 1045.420728][T29521] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 1045.431214][T29521] usb 5-1: config 0 interface 41 has no altsetting 0 [ 1045.441911][T29521] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1045.451204][T29521] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1045.461302][T29521] usb 5-1: Product: syz [ 1045.465592][T29521] usb 5-1: Manufacturer: syz [ 1045.470465][T29521] usb 5-1: SerialNumber: syz [ 1045.485658][T29521] usb 5-1: config 0 descriptor?? [ 1045.498504][ T1023] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1045.506064][ T1023] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1045.742877][ T1023] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1045.750697][ T1023] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1046.195333][T29521] CoreChips 5-1:0.41: probe with driver CoreChips failed with error -32 [ 1046.974429][ T1041] netlink: 32 bytes leftover after parsing attributes in process `syz.3.11121'. [ 1047.107239][ T1044] syzkaller0: entered promiscuous mode [ 1047.112857][ T1044] syzkaller0: entered allmulticast mode [ 1047.176700][ T1047] syzkaller0: entered promiscuous mode [ 1047.182499][ T1047] syzkaller0: entered allmulticast mode [ 1048.205338][ T1549] usb 5-1: USB disconnect, device number 58 [ 1051.035532][ T1076] netlink: 32 bytes leftover after parsing attributes in process `syz.5.11131'. [ 1051.347747][ T1091] syzkaller0: entered promiscuous mode [ 1051.363776][ T1091] syzkaller0: entered allmulticast mode [ 1051.427247][ T5859] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 1051.604931][ T5859] usb 5-1: Using ep0 maxpacket: 16 [ 1051.613767][ T5859] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 1051.632445][ T5859] usb 5-1: config 0 has no interface number 0 [ 1051.638705][ T5859] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 1051.648972][ T5859] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 1051.661848][ T5859] usb 5-1: config 0 interface 41 has no altsetting 0 [ 1051.690810][ T5859] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1051.709849][ T5859] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1051.719200][ T5859] usb 5-1: Product: syz [ 1051.723498][ T5859] usb 5-1: Manufacturer: syz [ 1051.737637][ T5859] usb 5-1: SerialNumber: syz [ 1051.756737][ T5859] usb 5-1: config 0 descriptor?? [ 1051.771619][ T1086] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1051.780200][ T1086] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1052.014329][ T1086] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1052.022014][ T1086] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1052.481470][ T5859] CoreChips 5-1:0.41: probe with driver CoreChips failed with error -32 [ 1053.451897][ T1112] kthread_run failed with err -4 [ 1053.494616][ T1118] netlink: 80 bytes leftover after parsing attributes in process `syz.5.11146'. [ 1053.924135][ T1146] netlink: 68 bytes leftover after parsing attributes in process `syz.3.11157'. [ 1054.055706][ T1148] virt_wifi0 speed is unknown, defaulting to 1000 [ 1054.403578][ T5859] usb 5-1: USB disconnect, device number 59 [ 1054.507801][T29521] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 1054.620307][ T1170] syzkaller0: entered promiscuous mode [ 1054.626140][ T1170] syzkaller0: entered allmulticast mode [ 1054.692936][T29521] usb 3-1: Using ep0 maxpacket: 32 [ 1054.701656][T29521] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 1054.723817][T29521] usb 3-1: config 0 has no interface number 0 [ 1054.743976][T29521] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1054.753101][T29521] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1054.771951][T29521] usb 3-1: Product: syz [ 1054.779520][T29521] usb 3-1: Manufacturer: syz [ 1054.784642][T29521] usb 3-1: SerialNumber: syz [ 1054.801459][T29521] usb 3-1: config 0 descriptor?? [ 1054.824584][T29521] smsc95xx v2.0.0 [ 1055.286217][T29521] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1055.297411][T29521] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1056.833288][ T1188] virt_wifi0 speed is unknown, defaulting to 1000 [ 1057.223899][T30662] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 1057.394975][T30662] usb 5-1: Using ep0 maxpacket: 16 [ 1057.407106][T30662] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 1057.415256][T30662] usb 5-1: config 0 has no interface number 0 [ 1057.421984][T30662] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 1057.433831][T30662] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 1057.444251][T30662] usb 5-1: config 0 interface 41 has no altsetting 0 [ 1057.458462][T30662] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1057.468751][T30662] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1057.477217][T30662] usb 5-1: Product: syz [ 1057.481919][T30662] usb 5-1: Manufacturer: syz [ 1057.486555][T30662] usb 5-1: SerialNumber: syz [ 1057.494813][T30662] usb 5-1: config 0 descriptor?? [ 1057.502942][ T1195] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1057.510317][ T1195] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1057.731613][T29521] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 1057.757577][ T1195] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1057.758283][T29521] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71 [ 1057.778078][ T1195] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1057.786193][T29521] usb 3-1: USB disconnect, device number 84 [ 1058.062615][ T1219] syzkaller0: entered promiscuous mode [ 1058.068389][ T1219] syzkaller0: entered allmulticast mode [ 1058.242326][T30662] CoreChips 5-1:0.41: probe with driver CoreChips failed with error -32 [ 1058.674702][ T30] audit: type=1107 audit(1758929198.781:791): pid=1232 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 1060.231200][T29521] usb 5-1: USB disconnect, device number 60 [ 1060.686002][ T30] audit: type=1107 audit(1758929200.660:792): pid=1274 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 1060.710529][T30662] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 1060.967874][T30662] usb 3-1: Using ep0 maxpacket: 32 [ 1060.975243][T30662] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 1060.984081][T30662] usb 3-1: config 0 has no interface number 0 [ 1060.993361][T30662] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1061.005479][T30662] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1061.013929][T30662] usb 3-1: Product: syz [ 1061.018218][T30662] usb 3-1: Manufacturer: syz [ 1061.024173][T30662] usb 3-1: SerialNumber: syz [ 1061.032552][T30662] usb 3-1: config 0 descriptor?? [ 1061.043942][T30662] smsc95xx v2.0.0 [ 1061.418411][ T1305] syzkaller0: entered promiscuous mode [ 1061.450786][ T1305] syzkaller0: entered allmulticast mode [ 1061.486653][T30662] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1061.514115][T30662] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1061.765902][T30662] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 1061.777322][T30662] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -32 [ 1062.688120][ T1325] netlink: 40 bytes leftover after parsing attributes in process `syz.5.11221'. [ 1063.660560][ T1549] usb 3-1: USB disconnect, device number 85 [ 1063.730338][ T30] audit: type=1107 audit(1758929203.512:793): pid=1328 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 1064.175776][T30662] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 1064.411014][T15654] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 1064.418721][ T1351] netlink: 32 bytes leftover after parsing attributes in process `syz.2.11232'. [ 1064.432631][T30662] usb 4-1: Using ep0 maxpacket: 16 [ 1064.441142][T30662] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 1064.449794][T30662] usb 4-1: config 0 has no interface number 0 [ 1064.456286][T30662] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 1064.467307][T30662] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 1064.478687][T30662] usb 4-1: config 0 interface 41 has no altsetting 0 [ 1064.488670][T30662] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1064.500177][T30662] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1064.508951][T30662] usb 4-1: Product: syz [ 1064.513272][T30662] usb 4-1: Manufacturer: syz [ 1064.518449][T30662] usb 4-1: SerialNumber: syz [ 1064.529726][T30662] usb 4-1: config 0 descriptor?? [ 1064.540180][ T1340] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1064.547680][ T1340] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1064.571519][T15654] usb 5-1: Using ep0 maxpacket: 32 [ 1064.578812][T15654] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 1064.589723][T15654] usb 5-1: config 0 has no interface number 0 [ 1064.600833][T15654] usb 5-1: config 0 interface 184 has no altsetting 0 [ 1064.611148][T15654] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1064.623187][T15654] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1064.631551][T15654] usb 5-1: Product: syz [ 1064.638500][T15654] usb 5-1: Manufacturer: syz [ 1064.643254][T15654] usb 5-1: SerialNumber: syz [ 1064.660082][T15654] usb 5-1: config 0 descriptor?? [ 1064.680427][T15654] smsc75xx v1.0.0 [ 1064.728655][ T1359] virt_wifi0 speed is unknown, defaulting to 1000 [ 1064.785764][ T1340] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1064.793067][ T1340] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1065.248587][T30662] CoreChips 4-1:0.41: probe with driver CoreChips failed with error -32 [ 1065.350545][T15654] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 1065.361652][T15654] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1065.949825][ T1384] fuse: Bad value for 'fd' [ 1065.970530][ T1380] syzkaller0: entered promiscuous mode [ 1065.976447][ T1380] syzkaller0: entered allmulticast mode [ 1067.155823][ T1549] usb 4-1: USB disconnect, device number 56 [ 1067.199194][ T1407] fuse: Bad value for 'fd' [ 1067.562497][T15654] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000304: -71 [ 1067.576966][T15654] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to write ADDR_FILTX+4: -71 [ 1067.589699][T15654] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to set mac address [ 1067.600688][T15654] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 1067.612662][T15654] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71 [ 1067.628345][T15654] usb 5-1: USB disconnect, device number 61 [ 1068.380193][ T1434] fuse: Bad value for 'fd' [ 1068.582320][T15654] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 1068.742504][T15654] usb 3-1: Using ep0 maxpacket: 16 [ 1068.749720][T15654] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 1068.758650][T15654] usb 3-1: config 0 has no interface number 0 [ 1068.770163][T15654] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 1068.783103][T15654] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 1068.793741][T15654] usb 3-1: config 0 interface 41 has no altsetting 0 [ 1068.803954][T15654] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1068.813663][T15654] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1068.822593][T15654] usb 3-1: Product: syz [ 1068.826963][T15654] usb 3-1: Manufacturer: syz [ 1068.831762][T15654] usb 3-1: SerialNumber: syz [ 1068.839201][T15654] usb 3-1: config 0 descriptor?? [ 1068.845128][ T1432] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1068.853666][ T1432] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1069.081316][ T1432] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1069.088920][ T1432] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1069.357460][ T1453] tipc: Enabling of bearer rejected, failed to enable media [ 1069.545082][T15654] CoreChips 3-1:0.41: probe with driver CoreChips failed with error -32 [ 1069.563197][ T1464] netlink: 16 bytes leftover after parsing attributes in process `syz.3.11276'. [ 1070.795155][ T1510] netlink: 24 bytes leftover after parsing attributes in process `syz.5.11292'. [ 1070.857395][ T30] audit: type=1107 audit(1758929210.188:794): pid=1513 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 1070.891806][ T1516] netlink: 16 bytes leftover after parsing attributes in process `syz.5.11294'. [ 1071.148979][ T1549] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 1071.320074][ T1549] usb 5-1: Using ep0 maxpacket: 8 [ 1071.326936][ T1549] usb 5-1: config 0 has an invalid descriptor of length 97, skipping remainder of the config [ 1071.337914][ T1549] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 1071.349478][ T1549] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 97, changing to 10 [ 1071.360802][ T1549] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid maxpacket 24929, setting to 1024 [ 1071.375394][ T1549] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1071.390283][ T1549] usb 5-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1071.399496][ T1549] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1071.407618][ T1549] usb 5-1: Product: syz [ 1071.411827][ T1549] usb 5-1: Manufacturer: syz [ 1071.416537][ T1549] usb 5-1: SerialNumber: syz [ 1071.423248][ T1549] usb 5-1: config 0 descriptor?? [ 1071.578561][T15653] usb 3-1: USB disconnect, device number 86 [ 1071.645632][ T1549] radio-si470x 5-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 1071.652870][ T1549] radio-si470x 5-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 1071.861100][ T1549] radio-si470x 5-1:0.0: software version 0, hardware version 0 [ 1071.868913][ T1549] radio-si470x 5-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 1071.882672][ T1549] radio-si470x 5-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 1072.084021][ C0] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1072.091500][ C0] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1072.098284][ C0] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1072.110275][ C0] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1072.122252][ C0] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1072.133242][ C0] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1072.141064][ C0] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1072.153800][ C0] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1072.160514][ C0] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1072.161281][ T1551] netlink: 24 bytes leftover after parsing attributes in process `syz.5.11305'. [ 1072.168101][ C0] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1072.168381][ C0] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1072.168584][ C0] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1072.168786][ C0] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1072.204574][ C0] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1072.211911][ C0] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1072.218571][ C0] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1072.225210][ C0] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1072.231918][ C0] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1072.238568][ C0] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1072.247430][ C0] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1072.254095][ C0] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1072.260750][ C0] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1072.267420][ C0] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1072.274073][ C0] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1072.280730][ C0] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1072.287489][ C0] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1072.294325][ C0] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1072.300984][ C0] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1072.307674][ C0] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1072.314357][ C0] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1072.321401][ C0] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1072.328579][ C0] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1072.335242][ C0] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1072.342355][ C0] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1072.349239][ C0] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1072.356070][ C0] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1072.362756][ C0] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1072.369407][ C0] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1072.376148][ C0] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1072.382794][ C0] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1072.389439][ C0] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1072.396121][ C0] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1072.402944][ C0] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1072.409603][ C0] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1072.416273][ C0] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1072.422936][ C0] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1072.429598][ C0] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1072.436290][ C0] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1072.442950][ C0] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1072.449591][ C0] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1072.456269][ C0] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1072.462917][ C0] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1072.472476][ C0] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1072.479140][ C0] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1072.485793][ C0] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1072.492443][ C0] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1072.499111][ C0] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1072.505667][ T1549] radio-si470x 5-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 1072.514148][ C0] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1072.520776][ C0] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1072.527340][ C0] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1072.533932][ C0] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1072.540779][ C0] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1072.547341][ C0] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1072.553954][ C0] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1072.560530][ C0] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1072.567660][ C0] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1072.574952][ C0] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1072.581934][ C0] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1072.588953][ C0] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1072.595916][ C0] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1072.602576][ C0] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1072.609246][ C0] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1072.618987][ C0] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1072.625805][ C0] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1072.632464][ C0] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1072.639211][ C0] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1072.645945][ C0] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1072.652739][ C0] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1072.659538][ C0] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1072.666316][ C0] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1072.672965][ C0] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1072.679727][ C0] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1072.686503][ C0] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1072.693181][ C0] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1072.699835][ C0] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1072.706500][ C0] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1072.713198][ C0] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1072.719851][ C0] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1072.727912][ C0] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1072.734600][ C0] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1072.741266][ C0] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1072.747952][ C0] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1072.754673][ C0] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1072.761623][ C0] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1072.768908][ C0] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1072.775731][ C0] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1072.782665][ C0] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1072.789306][ C0] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1072.796140][ C0] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1072.802821][ C0] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1072.809824][ C0] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1072.816484][ C0] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1072.823139][ C0] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1072.829799][ C0] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1072.836453][ C0] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1072.843113][ C0] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1072.849778][ C0] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1072.856447][ C0] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1072.863098][ C0] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1072.869854][ C0] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1072.876519][ C0] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1072.883301][ C0] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1072.889972][ C0] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1072.896657][ C0] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1072.903474][ C0] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1072.913971][ T1549] radio-si470x 5-1:0.0: probe with driver radio-si470x failed with error -22 [ 1072.934280][ T1560] virt_wifi0 speed is unknown, defaulting to 1000 [ 1072.935361][ T1549] usb 5-1: USB disconnect, device number 62 [ 1073.264927][ T1581] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11316'. [ 1073.456112][ T1584] syzkaller0: entered promiscuous mode [ 1073.463150][ T1584] syzkaller0: entered allmulticast mode [ 1073.685263][ T1593] netlink: 12 bytes leftover after parsing attributes in process `syz.5.11321'. [ 1074.319620][ T5859] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 1074.551286][ T5859] usb 5-1: Using ep0 maxpacket: 32 [ 1074.560272][ T5859] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 1074.572408][ T5859] usb 5-1: config 0 has no interface number 0 [ 1074.578590][ T5859] usb 5-1: config 0 interface 184 has no altsetting 0 [ 1074.604357][ T5859] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1074.613534][ T5859] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1074.623439][ T5859] usb 5-1: Product: syz [ 1074.627930][ T5859] usb 5-1: Manufacturer: syz [ 1074.632576][ T5859] usb 5-1: SerialNumber: syz [ 1074.646866][ T5859] usb 5-1: config 0 descriptor?? [ 1074.665853][ T5859] smsc75xx v1.0.0 [ 1075.108274][ T5859] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 1075.120146][ T5859] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 1075.130456][ T5859] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 1075.141367][ T5859] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -32 [ 1076.228963][ T30] audit: type=1107 audit(1758929215.209:795): pid=1621 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 1076.332206][ T1628] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11335'. [ 1076.571835][ T5859] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 1076.743710][ T5859] usb 4-1: Using ep0 maxpacket: 8 [ 1076.750784][ T5859] usb 4-1: config 0 has an invalid descriptor of length 97, skipping remainder of the config [ 1076.761419][ T5859] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 1076.788920][ T5859] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 97, changing to 10 [ 1076.806767][ T5859] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid maxpacket 24929, setting to 1024 [ 1076.818341][ T5859] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1076.838559][ T5859] usb 4-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1076.848289][ T5859] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1076.861765][ T5859] usb 4-1: Product: syz [ 1076.865981][ T5859] usb 4-1: Manufacturer: syz [ 1076.871227][ T5859] usb 4-1: SerialNumber: syz [ 1076.878638][ T5859] usb 4-1: config 0 descriptor?? [ 1077.114351][ T5859] radio-si470x 4-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 1077.121344][ T5859] radio-si470x 4-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 1077.295906][T15653] usb 5-1: USB disconnect, device number 63 [ 1077.328855][ T5859] radio-si470x 4-1:0.0: software version 0, hardware version 0 [ 1077.343172][ T5859] radio-si470x 4-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 1077.385206][ T5859] radio-si470x 4-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 1077.543615][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1077.550396][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1077.557045][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1077.563710][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1077.570405][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1077.577132][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1077.583806][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1077.590512][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1077.597182][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1077.603854][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1077.611814][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1077.619185][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1077.627143][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1077.634323][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1077.640988][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1077.647638][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1077.654381][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1077.661051][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1077.667683][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1077.674327][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1077.680989][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1077.687688][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1077.694381][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1077.701061][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1077.707717][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1077.714385][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1077.721063][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1077.734512][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1077.741368][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1077.748450][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1077.755266][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1077.762049][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1077.768704][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1077.775524][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1077.782203][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1077.789306][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1077.795982][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1077.802671][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1077.809325][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1077.815970][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1077.822633][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1077.829322][ T5859] radio-si470x 4-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 1077.829424][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1077.837974][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1077.845386][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1077.851957][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1077.858825][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1077.865432][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1077.872063][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1077.878871][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1077.885484][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1077.892104][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1077.898704][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1077.905284][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1077.911910][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1077.918509][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1077.925130][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1077.931778][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1077.938436][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1077.945066][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1077.953131][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1077.966465][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1077.973068][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1077.979909][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1077.986554][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1077.993119][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1077.999741][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1078.006575][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1078.013341][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1078.018097][ T1696] syzkaller0: entered promiscuous mode [ 1078.019975][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1078.032107][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1078.038859][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1078.045568][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1078.047973][ T1696] syzkaller0: entered allmulticast mode [ 1078.052587][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1078.064879][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1078.072102][ T5859] radio-si470x 4-1:0.0: probe with driver radio-si470x failed with error -22 [ 1078.094633][ T5859] usb 4-1: USB disconnect, device number 57 [ 1080.178368][ T30] audit: type=1107 audit(1758929218.902:796): pid=1725 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 1080.432460][ T5859] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 1080.658231][ T1741] syzkaller0: entered promiscuous mode [ 1080.663771][ T1741] syzkaller0: entered allmulticast mode [ 1080.699806][ T5859] usb 4-1: Using ep0 maxpacket: 8 [ 1080.707590][ T5859] usb 4-1: config 0 has an invalid descriptor of length 97, skipping remainder of the config [ 1080.718332][ T5859] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 1080.730201][ T5859] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 97, changing to 10 [ 1080.741747][ T5859] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid maxpacket 24929, setting to 1024 [ 1080.753344][ T5859] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1080.769501][ T5859] usb 4-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1080.779059][ T5859] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1080.806788][ T5859] usb 4-1: Product: syz [ 1080.835621][ T5859] usb 4-1: Manufacturer: syz [ 1080.871064][ T5859] usb 4-1: SerialNumber: syz [ 1080.882380][ T5859] usb 4-1: config 0 descriptor?? [ 1081.105806][ T5859] radio-si470x 4-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 1081.113254][ T5859] radio-si470x 4-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 1081.328856][ T5859] radio-si470x 4-1:0.0: software version 0, hardware version 0 [ 1081.337672][ T5859] radio-si470x 4-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 1081.351148][ T5859] radio-si470x 4-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 1081.547722][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1081.554814][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1081.561485][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1081.572929][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1081.579681][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1081.586346][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1081.593044][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1081.600272][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1081.606943][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1081.613743][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1081.620465][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1081.634322][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1081.641023][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1081.647770][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1081.654410][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1081.661077][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1081.668079][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1081.674912][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1081.681590][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1081.688253][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1081.697627][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1081.704277][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1081.710983][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1081.717748][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1081.724426][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1081.731129][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1081.737928][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1081.744687][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1081.751387][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1081.758051][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1081.764714][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1081.771437][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1081.778765][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1081.785431][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1081.792315][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1081.799074][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1081.805830][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1081.812626][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1081.819267][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1081.825924][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1081.832589][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1081.839300][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1081.845973][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1081.852651][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1081.859300][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1081.866303][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1081.872967][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1081.879707][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1081.886723][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1081.893504][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1081.900236][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1081.906905][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1081.913590][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1081.920371][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1081.927050][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1081.934016][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1081.940692][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1081.947377][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1081.954272][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1081.961030][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1081.967884][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1081.974572][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1081.981340][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1081.988252][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1081.995356][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1082.002031][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1082.008701][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1082.015377][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1082.022054][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1082.028756][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1082.035444][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1082.042076][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1082.048887][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1082.055540][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1082.062297][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1082.068978][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1082.075649][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1082.082288][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1082.088943][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1082.095639][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1082.104693][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1082.111706][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1082.118373][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1082.125061][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1082.131639][ T5859] radio-si470x 4-1:0.0: si470x_set_report: usb_control_msg returned -110 [ 1082.140281][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1082.146905][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1082.153693][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1082.160363][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1082.167355][ T5859] radio-si470x 4-1:0.0: probe with driver radio-si470x failed with error -22 [ 1083.188910][T15654] usb 4-1: USB disconnect, device number 58 [ 1083.589383][T29673] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 1083.736351][ T1786] virt_wifi0 speed is unknown, defaulting to 1000 [ 1083.783308][T29673] usb 5-1: Using ep0 maxpacket: 32 [ 1083.796968][T29673] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 1083.812032][T29673] usb 5-1: config 0 has no interface number 0 [ 1083.818197][T29673] usb 5-1: config 0 interface 184 has no altsetting 0 [ 1083.837348][T29673] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1083.852075][T29673] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1083.861296][T29673] usb 5-1: Product: syz [ 1083.867388][T29673] usb 5-1: Manufacturer: syz [ 1083.872104][T29673] usb 5-1: SerialNumber: syz [ 1083.883894][T29673] usb 5-1: config 0 descriptor?? [ 1083.902154][T29673] smsc75xx v1.0.0 [ 1084.214431][ T1811] tipc: Enabling of bearer rejected, failed to enable media [ 1084.338957][T29673] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 1084.352796][ T1817] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11420'. [ 1084.370032][T29673] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 1084.381234][T29673] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 1084.392630][T29673] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -32 [ 1084.596381][ T1830] tipc: Enabling of bearer rejected, failed to enable media [ 1086.203961][ T30] audit: type=1107 audit(1758929224.531:797): pid=1929 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 1086.475157][T15654] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 1086.611159][T15653] usb 5-1: USB disconnect, device number 64 [ 1086.751399][T15654] usb 4-1: Using ep0 maxpacket: 8 [ 1086.759069][T15654] usb 4-1: config 0 has an invalid descriptor of length 97, skipping remainder of the config [ 1086.774651][T15654] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 1086.802311][T15654] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 97, changing to 10 [ 1086.816038][T15654] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid maxpacket 24929, setting to 1024 [ 1086.827780][T15654] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1086.845146][T15654] usb 4-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1086.854579][T15654] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1086.865231][T15654] usb 4-1: Product: syz [ 1086.869588][T15654] usb 4-1: Manufacturer: syz [ 1086.874822][T15654] usb 4-1: SerialNumber: syz [ 1086.891153][T15654] usb 4-1: config 0 descriptor?? [ 1087.133468][T15654] radio-si470x 4-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 1087.141288][T15654] radio-si470x 4-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 1087.355898][T15654] radio-si470x 4-1:0.0: software version 0, hardware version 0 [ 1087.364510][T15654] radio-si470x 4-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 1087.378504][T15654] radio-si470x 4-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 1087.572401][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1087.579373][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1087.586065][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1087.592800][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1087.599925][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1087.606789][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1087.613681][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1087.620687][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1087.627391][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1087.634189][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1087.641077][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1087.647764][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1087.654524][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1087.661277][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1087.667969][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1087.674700][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1087.681371][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1087.688288][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1087.695169][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1087.701893][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1087.708606][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1087.715258][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1087.721975][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1087.722154][ T5859] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 1087.728613][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1087.728825][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1087.729040][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1087.756305][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1087.763093][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1087.769793][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1087.776441][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1087.783206][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1087.789966][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1087.796668][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1087.806517][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1087.813186][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1087.819829][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1087.826490][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1087.833202][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1087.839879][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1087.846580][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1087.853291][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1087.860002][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1087.867116][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1087.873783][T15654] radio-si470x 4-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 1087.882410][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1087.889126][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1087.895702][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1087.902353][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1087.909047][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1087.915979][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1087.922650][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1087.929234][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1087.929780][ T5859] usb 5-1: Using ep0 maxpacket: 32 [ 1087.936483][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1087.948276][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1087.955052][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1087.962289][T15654] radio-si470x 4-1:0.0: probe with driver radio-si470x failed with error -22 [ 1087.969231][ T5859] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 1087.979688][T15654] usb 4-1: USB disconnect, device number 59 [ 1087.992579][ T5859] usb 5-1: config 0 has no interface number 0 [ 1088.011880][ T5859] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1088.036947][ T5859] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1088.045014][ T5859] usb 5-1: Product: syz [ 1088.053739][ T5859] usb 5-1: Manufacturer: syz [ 1088.060578][ T5859] usb 5-1: SerialNumber: syz [ 1088.068012][ T5859] usb 5-1: config 0 descriptor?? [ 1088.077709][ T5859] smsc95xx v2.0.0 [ 1088.519093][ T5859] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1088.547406][ T5859] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1088.580934][ T2012] netlink: 28 bytes leftover after parsing attributes in process `syz.5.11510'. [ 1088.724214][ T30] audit: type=1107 audit(1758929226.887:798): pid=2019 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 1088.978112][ T1549] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 1089.088379][ T2030] netlink: 28 bytes leftover after parsing attributes in process `syz.2.11519'. [ 1089.245219][ T1549] usb 4-1: Using ep0 maxpacket: 8 [ 1089.252531][ T1549] usb 4-1: config 0 has an invalid descriptor of length 97, skipping remainder of the config [ 1089.264172][ T1549] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 1089.276323][ T1549] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 97, changing to 10 [ 1089.288447][ T1549] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid maxpacket 24929, setting to 1024 [ 1089.301063][ T1549] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1089.343743][ T1549] usb 4-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1089.373651][ T1549] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1089.381999][ T1549] usb 4-1: Product: syz [ 1089.390962][ T1549] usb 4-1: Manufacturer: syz [ 1089.396187][ T1549] usb 4-1: SerialNumber: syz [ 1089.409631][ T1549] usb 4-1: config 0 descriptor?? [ 1089.636903][ T1549] radio-si470x 4-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 1089.643904][ T1549] radio-si470x 4-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 1089.855780][ T1549] radio-si470x 4-1:0.0: software version 0, hardware version 0 [ 1089.863543][ T1549] radio-si470x 4-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 1089.876045][ T1549] radio-si470x 4-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 1089.945984][ T5859] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 1089.958427][ T5859] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -32 [ 1090.068215][ T2046] virt_wifi0 speed is unknown, defaulting to 1000 [ 1090.078276][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1090.085033][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1090.092234][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1090.099072][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1090.105804][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1090.112480][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1090.119152][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1090.126308][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1090.133058][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1090.139728][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1090.146544][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1090.153519][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1090.160616][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1090.167394][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1090.174047][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1090.180877][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1090.187661][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1090.194315][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1090.200976][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1090.207850][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1090.214506][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1090.221166][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1090.227836][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1090.234552][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1090.241199][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1090.247877][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1090.254540][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1090.261243][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1090.267930][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1090.274562][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1090.281234][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1090.287910][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1090.294584][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1090.301249][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1090.307976][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1090.314748][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1090.322955][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1090.330076][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1090.336765][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1090.343441][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1090.350105][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1090.356821][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1090.363515][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1090.370179][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1090.376868][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1090.383617][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1090.391292][ T1549] radio-si470x 4-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 1090.399831][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1090.406496][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1090.413116][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1090.419696][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1090.427178][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1090.434702][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1090.442012][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1090.448748][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1090.455607][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1090.462268][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1090.468931][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1090.475622][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1090.482300][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1090.488993][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1090.495849][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1090.502532][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1090.510340][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1090.517415][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1090.524210][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1090.530900][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1090.538115][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1090.545235][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1090.552016][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1090.558682][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1090.565336][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1090.572020][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1090.578684][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1090.585337][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1090.592011][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1090.598670][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1090.605551][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1090.612264][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1090.618936][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1090.625833][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1090.632499][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1090.639184][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1090.645901][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1090.652556][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1090.659221][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1090.665876][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1090.672849][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1090.679931][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1090.686674][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1090.693430][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1090.700096][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1090.706737][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1090.713390][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1090.720123][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1090.726804][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1090.733462][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1090.740143][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1090.746875][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1090.753510][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1090.763769][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1090.770539][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1090.777228][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1090.784246][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1090.790926][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1090.797691][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1090.804345][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1090.811207][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1090.817887][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1090.825081][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1090.832224][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1090.838994][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1090.845675][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1090.852389][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1090.859236][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1090.868254][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1090.875010][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1090.881646][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1090.888318][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1090.894960][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1090.901598][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1090.908235][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1090.914895][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1090.921546][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1090.928182][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1090.934814][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1090.941651][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1090.948301][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1090.954934][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1090.961598][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1090.968528][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1090.975324][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1090.981988][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1090.989247][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1090.995900][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1091.002590][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1091.009233][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1091.015879][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1091.022555][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1091.029205][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1091.035931][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1091.042975][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1091.049878][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1091.056645][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1091.063342][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1091.070024][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1091.076675][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1091.083398][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1091.090112][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1091.096769][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1091.103527][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1091.110193][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1091.115011][T15654] usb 5-1: USB disconnect, device number 65 [ 1091.116995][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1091.129647][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1091.136370][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1091.143373][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1091.150324][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1091.156986][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1091.163647][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1091.170307][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1091.176958][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1091.183607][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1091.190249][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1091.197550][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1091.204469][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1091.211126][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1091.217899][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1091.224543][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1091.231190][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1091.237868][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1091.244519][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1091.251171][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1091.257862][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1091.264515][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1091.271168][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1091.278259][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1091.285378][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1091.292116][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1091.298793][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1091.305543][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1091.312242][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1091.318881][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1091.325581][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1091.332223][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1091.338870][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1091.345734][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1091.352387][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1091.359303][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1091.365978][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1091.372907][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1091.379921][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1091.388229][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1091.394893][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1091.401633][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1091.408426][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1091.415197][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1091.422294][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1091.429171][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1091.435822][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1091.442586][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1091.449263][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1091.455909][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1091.462582][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1091.469232][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1091.475912][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1091.482725][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1091.489387][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1091.496048][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1091.502725][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1091.509384][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1091.516051][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1091.522802][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1091.529426][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1091.536096][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1091.542749][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1091.549927][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1091.557146][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1091.563813][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1091.570456][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1091.577207][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1091.583865][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1091.590530][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1091.597187][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1091.603866][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1091.610538][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1091.617200][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1091.623879][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1091.632787][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1091.639504][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1091.646169][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1091.652823][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1091.659662][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1091.666366][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1091.673017][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1091.679702][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1091.686494][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1091.689007][ T2074] syzkaller0: entered promiscuous mode [ 1091.693314][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1091.705200][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1091.711873][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1091.718573][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1091.722721][ T2074] syzkaller0: entered allmulticast mode [ 1091.725254][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1091.738523][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1091.745723][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1091.752704][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1091.759393][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1091.766069][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1091.772723][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1091.790944][ T1549] radio-si470x 4-1:0.0: probe with driver radio-si470x failed with error -22 [ 1091.808510][ T1549] usb 4-1: USB disconnect, device number 60 [ 1091.849589][ T2084] netlink: 20 bytes leftover after parsing attributes in process `syz.3.11544'. [ 1094.249987][ T2122] netlink: 24 bytes leftover after parsing attributes in process `syz.3.11561'. [ 1094.416961][T15654] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 1094.536133][ T30] audit: type=1107 audit(1758929232.329:799): pid=2137 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 1094.572774][T15654] usb 5-1: device descriptor read/64, error -71 [ 1094.733214][T30662] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 1094.872629][ T2148] netlink: 16 bytes leftover after parsing attributes in process `syz.5.11574'. [ 1094.935053][T30662] usb 4-1: Using ep0 maxpacket: 32 [ 1094.940384][T15654] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 1094.954086][T30662] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 1094.962784][T30662] usb 4-1: config 0 has no interface number 0 [ 1094.977325][T30662] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1094.987172][T30662] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1094.995406][T30662] usb 4-1: Product: syz [ 1094.999945][T30662] usb 4-1: Manufacturer: syz [ 1095.004586][T30662] usb 4-1: SerialNumber: syz [ 1095.014194][T30662] usb 4-1: config 0 descriptor?? [ 1095.029589][T30662] smsc95xx v2.0.0 [ 1095.085043][T15654] usb 5-1: device descriptor read/64, error -71 [ 1095.215218][T15654] usb usb5-port1: attempt power cycle [ 1095.397689][ T2167] virt_wifi0 speed is unknown, defaulting to 1000 [ 1095.458159][T30662] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1095.469644][T30662] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1095.590320][T15654] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 1095.653897][T15654] usb 5-1: device descriptor read/8, error -71 [ 1095.908527][T15654] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 1095.930376][T15654] usb 5-1: device descriptor read/8, error -71 [ 1096.047922][T15654] usb usb5-port1: unable to enumerate USB device [ 1098.460100][ T2244] syzkaller1: entered promiscuous mode [ 1098.465860][ T2244] syzkaller1: entered allmulticast mode [ 1098.512198][T30662] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000008: -71 [ 1098.536108][T30662] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 1098.552293][T30662] usb 4-1: USB disconnect, device number 61 [ 1098.708878][ T30] audit: type=1107 audit(1758929236.228:800): pid=2255 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 1099.227652][ T2274] netlink: 60 bytes leftover after parsing attributes in process `syz.3.11632'. [ 1099.350846][ T2273] netlink: 60 bytes leftover after parsing attributes in process `syz.3.11632'. [ 1099.406992][T30662] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 1099.577833][T30662] usb 5-1: Using ep0 maxpacket: 32 [ 1099.585090][T30662] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 1099.601499][T30662] usb 5-1: config 0 has no interface number 0 [ 1099.607678][T30662] usb 5-1: config 0 interface 184 has no altsetting 0 [ 1099.636492][T30662] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1099.656611][T30662] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1099.679958][T30662] usb 5-1: Product: syz [ 1099.689106][T30662] usb 5-1: Manufacturer: syz [ 1099.693893][T30662] usb 5-1: SerialNumber: syz [ 1099.719192][T30662] usb 5-1: config 0 descriptor?? [ 1099.733267][T30662] smsc75xx v1.0.0 [ 1099.778736][ T2299] FAULT_INJECTION: forcing a failure. [ 1099.778736][ T2299] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 1099.792448][ T2299] CPU: 1 UID: 0 PID: 2299 Comm: syz.3.11644 Not tainted syzkaller #0 PREEMPT(full) [ 1099.792477][ T2299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1099.792499][ T2299] Call Trace: [ 1099.792509][ T2299] [ 1099.792518][ T2299] dump_stack_lvl+0x189/0x250 [ 1099.792559][ T2299] ? __pfx____ratelimit+0x10/0x10 [ 1099.792582][ T2299] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1099.792614][ T2299] ? __pfx__printk+0x10/0x10 [ 1099.792643][ T2299] ? __might_fault+0xb0/0x130 [ 1099.792684][ T2299] should_fail_ex+0x414/0x560 [ 1099.792722][ T2299] _copy_from_user+0x2d/0xb0 [ 1099.792749][ T2299] ___sys_sendmsg+0x158/0x2a0 [ 1099.792779][ T2299] ? __pfx____sys_sendmsg+0x10/0x10 [ 1099.792842][ T2299] ? __fget_files+0x2a/0x420 [ 1099.792867][ T2299] ? __fget_files+0x3a0/0x420 [ 1099.792903][ T2299] __x64_sys_sendmsg+0x19b/0x260 [ 1099.792931][ T2299] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1099.792966][ T2299] ? __pfx_ksys_write+0x10/0x10 [ 1099.792992][ T2299] ? do_syscall_64+0xbe/0xfa0 [ 1099.793020][ T2299] do_syscall_64+0xfa/0xfa0 [ 1099.793042][ T2299] ? lockdep_hardirqs_on+0x9c/0x150 [ 1099.793065][ T2299] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1099.793085][ T2299] ? clear_bhb_loop+0x60/0xb0 [ 1099.793111][ T2299] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1099.793135][ T2299] RIP: 0033:0x7f91f118eec9 [ 1099.793163][ T2299] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1099.793181][ T2299] RSP: 002b:00007f91f2040038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1099.793203][ T2299] RAX: ffffffffffffffda RBX: 00007f91f13e5fa0 RCX: 00007f91f118eec9 [ 1099.793220][ T2299] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 1099.793233][ T2299] RBP: 00007f91f2040090 R08: 0000000000000000 R09: 0000000000000000 [ 1099.793247][ T2299] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1099.793260][ T2299] R13: 00007f91f13e6038 R14: 00007f91f13e5fa0 R15: 00007ffdabbb6848 [ 1099.793294][ T2299] [ 1100.227915][ T2306] 9pnet_fd: Insufficient options for proto=fd [ 1100.482719][T30662] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 1100.493871][T30662] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1101.816684][T30662] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 1101.831673][T30662] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 1101.841534][T30662] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 1101.851582][T30662] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -32 [ 1101.975215][ T2384] netlink: 76 bytes leftover after parsing attributes in process `syz.5.11683'. [ 1102.015668][T29521] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 1102.186627][T29521] usb 4-1: Using ep0 maxpacket: 32 [ 1102.196803][T29521] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 1102.208340][T29521] usb 4-1: config 0 has no interface number 0 [ 1102.214505][T29521] usb 4-1: config 0 interface 184 has no altsetting 0 [ 1102.226742][T29521] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1102.237349][T29521] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1102.249336][T29521] usb 4-1: Product: syz [ 1102.254124][T29521] usb 4-1: Manufacturer: syz [ 1102.258759][T29521] usb 4-1: SerialNumber: syz [ 1102.266917][T29521] usb 4-1: config 0 descriptor?? [ 1102.279957][T29521] smsc75xx v1.0.0 [ 1102.284732][ T2403] tipc: Enabling of bearer rejected, failed to enable media [ 1102.394644][ T2407] netlink: 24 bytes leftover after parsing attributes in process `syz.2.11691'. [ 1102.945911][T15653] usb 5-1: USB disconnect, device number 70 [ 1102.948396][T29521] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 1102.993955][T29521] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1103.072614][ T5876] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1103.084992][ T5876] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1103.105795][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1103.112857][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1103.119696][ T5876] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1103.129850][ T5876] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1103.141312][ T5876] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1103.220315][ T2417] virt_wifi0 speed is unknown, defaulting to 1000 [ 1103.466525][ T2435] netlink: 24 bytes leftover after parsing attributes in process `syz.2.11700'. [ 1103.545078][T15653] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 1103.592470][T19577] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1103.628072][ T2417] chnl_net:caif_netlink_parms(): no params data found [ 1103.691192][T19577] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1103.706673][T15653] usb 5-1: Using ep0 maxpacket: 8 [ 1103.726525][T15653] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 1103.741371][T15653] usb 5-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 1103.751322][T15653] usb 5-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 1103.759843][T15653] usb 5-1: Product: syz [ 1103.764043][T15653] usb 5-1: Manufacturer: syz [ 1103.768683][T15653] usb 5-1: SerialNumber: syz [ 1103.812399][T19577] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1103.908701][T19577] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1103.928643][ T2417] bridge0: port 1(bridge_slave_0) entered blocking state [ 1103.936175][ T2417] bridge0: port 1(bridge_slave_0) entered disabled state [ 1103.943789][ T2417] bridge_slave_0: entered allmulticast mode [ 1103.953787][ T2417] bridge_slave_0: entered promiscuous mode [ 1103.963648][ T2417] bridge0: port 2(bridge_slave_1) entered blocking state [ 1103.971123][ T2417] bridge0: port 2(bridge_slave_1) entered disabled state [ 1103.978738][ T2417] bridge_slave_1: entered allmulticast mode [ 1103.989228][ T2417] bridge_slave_1: entered promiscuous mode [ 1104.007080][T15653] usb 5-1: Handspring Visor / Palm OS: No valid connect info available [ 1104.026011][T15653] usb 5-1: Handspring Visor / Palm OS: port 0, is for Console use [ 1104.034134][T15653] usb 5-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 1104.045029][T15653] usb 5-1: Handspring Visor / Palm OS: Number of ports: 2 [ 1104.064186][ T2417] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1104.080577][ T2417] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1104.209859][ T2417] team0: Port device team_slave_0 added [ 1104.222193][T19577] bridge0: port 3(batadv0) entered disabled state [ 1104.233454][T19577] bridge_slave_1: left allmulticast mode [ 1104.239177][T19577] bridge_slave_1: left promiscuous mode [ 1104.247183][T19577] bridge0: port 2(bridge_slave_1) entered disabled state [ 1104.260129][T19577] bridge_slave_0: left allmulticast mode [ 1104.266423][T19577] bridge_slave_0: left promiscuous mode [ 1104.278467][T19577] bridge0: port 1(bridge_slave_0) entered disabled state [ 1104.380147][T15653] usb 5-1: palm_os_3_probe - error -110 getting bytes available request [ 1104.394904][T15653] visor 5-1:1.0: Handspring Visor / Palm OS converter detected [ 1104.408483][T15653] usb 5-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 1104.427746][T15653] usb 5-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 1104.859893][T19577] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1104.874124][T19577] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1104.885541][T19577] bond0 (unregistering): Released all slaves [ 1104.907446][ T2417] team0: Port device team_slave_1 added [ 1104.921131][T15653] usb 5-1: USB disconnect, device number 71 [ 1104.941452][T15653] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 1104.982544][T15653] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 1105.002324][T29521] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000300: -71 [ 1105.017870][T29521] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to write ADDR_FILTX: -71 [ 1105.023667][T15653] visor 5-1:1.0: device disconnected [ 1105.032183][T29521] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to set mac address [ 1105.046081][T29521] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 1105.057683][T29521] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71 [ 1105.076006][T29521] usb 4-1: USB disconnect, device number 62 [ 1105.111585][ T2417] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1105.136585][ T2417] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1105.170457][ T2417] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1105.183984][T19577] tipc: Left network mode [ 1105.193475][ T2417] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1105.200889][ T2417] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1105.243647][ T2417] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1105.320858][ T5876] Bluetooth: hci1: command tx timeout [ 1105.343397][ T2459] netlink: 24 bytes leftover after parsing attributes in process `syz.2.11708'. [ 1105.468072][ T2417] hsr_slave_0: entered promiscuous mode [ 1105.476475][ T2417] hsr_slave_1: entered promiscuous mode [ 1105.484383][ T2417] debugfs: 'hsr0' already exists in 'hsr' [ 1105.490347][ T2417] Cannot create hsr debugfs directory [ 1105.705224][T19577] hsr_slave_0: left promiscuous mode [ 1105.726708][T19577] hsr_slave_1: left promiscuous mode [ 1105.744181][T19577] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1105.769502][T19577] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1105.778728][T19577] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1105.797476][T19577] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1105.852258][T19577] veth1_macvtap: left promiscuous mode [ 1105.867834][T19577] veth0_macvtap: left promiscuous mode [ 1105.881043][T19577] veth1_vlan: left promiscuous mode [ 1105.898202][T19577] veth0_vlan: left promiscuous mode [ 1105.919546][T29521] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 1106.013146][ T2495] netlink: 16 bytes leftover after parsing attributes in process `syz.3.11716'. [ 1106.098638][T29521] usb 5-1: Using ep0 maxpacket: 32 [ 1106.111335][T29521] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 1106.130285][T29521] usb 5-1: config 0 has no interface number 0 [ 1106.142783][T29521] usb 5-1: config 0 interface 184 has no altsetting 0 [ 1106.177748][T29521] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1106.192858][T29521] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1106.203067][T29521] usb 5-1: Product: syz [ 1106.212428][T29521] usb 5-1: Manufacturer: syz [ 1106.220647][T29521] usb 5-1: SerialNumber: syz [ 1106.245919][T29521] usb 5-1: config 0 descriptor?? [ 1106.265691][T29521] smsc75xx v1.0.0 [ 1106.802763][T19577] team0 (unregistering): Port device team_slave_1 removed [ 1106.854437][T19577] team0 (unregistering): Port device team_slave_0 removed [ 1106.938670][T29521] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 1106.949596][T29521] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1107.555390][ T5876] Bluetooth: hci1: command tx timeout [ 1107.949894][ C1] ------------[ cut here ]------------ [ 1107.955497][ C1] no supported rates for sta (null) (0xffffffff, band 0) in rate_mask 0x0 with flags 0x0 [ 1107.966529][ C1] WARNING: net/mac80211/rate.c:406 at __rate_control_send_low+0x5e2/0x820, CPU#1: kworker/u8:1/19577 [ 1107.977527][ C1] Modules linked in: [ 1107.981479][ C1] CPU: 1 UID: 0 PID: 19577 Comm: kworker/u8:1 Not tainted syzkaller #0 PREEMPT(full) SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1107.991132][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1108.001282][ C1] Workqueue: netns cleanup_net [ 1108.006144][ C1] RIP: 0010:__rate_control_send_low+0x5e2/0x820 [ 1108.012437][ C1] Code: 38 0f b6 04 28 84 c0 0f 85 d7 01 00 00 41 8b 0f 48 c7 c7 40 f7 d0 8c 48 8b 74 24 18 44 8b 44 24 2c 45 89 e9 e8 df 8b 7c f6 90 <0f> 0b 90 90 e9 70 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c [ 1108.032151][ C1] RSP: 0018:ffffc90000a08538 EFLAGS: 00010246 [ 1108.038307][ C1] RAX: 57f2bc2e2f148500 RBX: 000000000000000c RCX: ffff88807e2e3c80 [ 1108.046321][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 1108.054388][ C1] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004 [ 1108.062447][ C1] R10: dffffc0000000000 R11: fffffbfff1c7a65c R12: ffff888051f6bca8 [ 1108.070551][ C1] R13: 0000000000000000 R14: ffff888028230e80 R15: ffff888028233138 [ 1108.078568][ C1] FS: 0000000000000000(0000) GS:ffff8881258b7000(0000) knlGS:0000000000000000 [ 1108.087585][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1108.094252][ C1] CR2: 00007fcc3e2837e8 CR3: 000000000e338000 CR4: 00000000003526f0 [ 1108.102312][ C1] Call Trace: [ 1108.105673][ C1] [ 1108.108563][ C1] rate_control_send_low+0x1a7/0x7b0 [ 1108.113977][ C1] rate_control_get_rate+0x20b/0x5d0 [ 1108.119345][ C1] ieee80211_beacon_get_finish+0x39a/0x6c0 [ 1108.125241][ C1] ? __pfx_ieee80211_beacon_get_finish+0x10/0x10 [ 1108.131614][ C1] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1108.137079][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 1108.142856][ C1] ieee80211_beacon_get_ap+0x1868/0x1f30 [ 1108.148586][ C1] ? __pfx_ieee80211_beacon_get_ap+0x10/0x10 [ 1108.154701][ C1] ? __ieee80211_beacon_get+0x36/0x1880 [ 1108.160309][ C1] ? __ieee80211_beacon_get+0x36/0x1880 [ 1108.165966][ C1] ? __ieee80211_beacon_get+0x36/0x1880 [ 1108.171571][ C1] __ieee80211_beacon_get+0x118e/0x1880 [ 1108.177231][ C1] ? __ieee80211_beacon_get+0x36/0x1880 [ 1108.182889][ C1] ieee80211_beacon_get_tim+0xb4/0x2b0 [ 1108.188726][ C1] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 1108.194867][ C1] mac80211_hwsim_beacon_tx+0x3ce/0x860 [ 1108.200543][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 1108.207831][ C1] __iterate_interfaces+0x2ab/0x590 [ 1108.213086][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 1108.219250][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 1108.226515][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 1108.232682][ C1] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 1108.239797][ C1] mac80211_hwsim_beacon+0xbb/0x180 [ 1108.245046][ C1] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 1108.250928][ C1] __hrtimer_run_queues+0x52c/0xc60 [ 1108.256192][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 1108.262099][ C1] ? read_tsc+0x9/0x20 [ 1108.266215][ C1] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 1108.272125][ C1] hrtimer_run_softirq+0x187/0x2b0 [ 1108.277305][ C1] handle_softirqs+0x286/0x870 [ 1108.282123][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 1108.287517][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 1108.292872][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 1108.298186][ C1] __irq_exit_rcu+0xca/0x1f0 [ 1108.302827][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 1108.308114][ C1] irq_exit_rcu+0x9/0x30 [ 1108.312395][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1108.318105][ C1] [ 1108.321073][ C1] [ 1108.324035][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1108.330080][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0xa8/0x110 [ 1108.336658][ C1] Code: 74 05 e8 0b 5b 3d f6 48 c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f6 44 24 21 02 75 4f f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 43 e5 05 f6 65 8b 05 dc 98 5b 07 85 c0 74 40 48 c7 04 24 0e 36 [ 1108.356459][ C1] RSP: 0018:ffffc90003807440 EFLAGS: 00000206 [ 1108.362658][ C1] RAX: 57f2bc2e2f148500 RBX: 0000000000000a06 RCX: 57f2bc2e2f148500 [ 1108.365858][T29521] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 1108.370703][ C1] RDX: 0000000000000007 RSI: ffffffff8dc8715f RDI: 0000000000000001 [ 1108.370731][ C1] RBP: ffffc900038074d0 R08: ffffffff8fe49c77 R09: 1ffffffff1fc938e [ 1108.370751][ C1] R10: dffffc0000000000 R11: fffffbfff1fc938f R12: dffffc0000000000 [ 1108.406509][ C1] R13: ffff8880633a4670 R14: ffff8880633a4620 R15: 1ffff92000700e88 [ 1108.414601][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1108.420981][ C1] ? ref_tracker_dir_exit+0x296/0x640 [ 1108.425848][T29521] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 1108.426529][ C1] ? kfree+0x19a/0x6d0 [ 1108.440239][ C1] ref_tracker_dir_exit+0x4bb/0x640 [ 1108.445530][ C1] ? __pfx_ref_tracker_dir_exit+0x10/0x10 [ 1108.451295][ C1] ? free_netdev+0x3f2/0x910 [ 1108.455971][ C1] ? kfree+0x19a/0x6d0 [ 1108.460086][ C1] ? dev_addr_flush+0x18f/0x210 [ 1108.464476][T29521] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 1108.465013][ C1] free_netdev+0x475/0x910 [ 1108.474697][T29521] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -32 [ 1108.478841][ C1] netdev_run_todo+0xe89/0x1020 [ 1108.478888][ C1] ? __pfx_netdev_run_todo+0x10/0x10 [ 1108.497724][ C1] ? unregister_netdevice_queue+0x1b3/0x380 [ 1108.503681][ C1] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 1108.510012][ C1] ? batadv_meshif_destroy_netlink+0x1b0/0x250 [ 1108.516222][ C1] default_device_exit_batch+0x81e/0x890 [ 1108.521946][ C1] ? __pfx___might_resched+0x10/0x10 [ 1108.527280][ C1] ? __pfx_default_device_exit_batch+0x10/0x10 [ 1108.533520][ C1] ? __pfx_rdma_dev_exit_net+0x10/0x10 [ 1108.539047][ C1] ? net_generic+0x1e/0x240 [ 1108.543659][ C1] ? __pfx_default_device_exit_batch+0x10/0x10 [ 1108.550012][ C1] ops_undo_list+0x525/0x990 [ 1108.554651][ C1] ? __pfx_ops_undo_list+0x10/0x10 [ 1108.559802][ C1] ? do_raw_spin_unlock+0x122/0x240 [ 1108.565140][ C1] cleanup_net+0x4d8/0x820 [ 1108.569607][ C1] ? __pfx_cleanup_net+0x10/0x10 [ 1108.574647][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1108.579979][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 1108.586346][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 1108.592136][ C1] process_scheduled_works+0xae1/0x17b0 [ 1108.597807][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 1108.603890][ C1] worker_thread+0x8a0/0xda0 [ 1108.608670][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1108.615096][ C1] ? __kthread_parkme+0x7b/0x200 [ 1108.620097][ C1] kthread+0x711/0x8a0 [ 1108.624227][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1108.629428][ C1] ? __pfx_kthread+0x10/0x10 [ 1108.634162][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1108.639455][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 1108.644791][ C1] ? __pfx_kthread+0x10/0x10 [ 1108.649503][ C1] ret_from_fork+0x4bc/0x870 [ 1108.654138][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1108.659343][ C1] ? __switch_to_asm+0x39/0x70 [ 1108.664162][ C1] ? __switch_to_asm+0x33/0x70 [ 1108.669028][ C1] ? __pfx_kthread+0x10/0x10 [ 1108.673681][ C1] ret_from_fork_asm+0x1a/0x30 [ 1108.678562][ C1] [ 1108.681711][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1108.689027][ C1] CPU: 1 UID: 0 PID: 19577 Comm: kworker/u8:1 Not tainted syzkaller #0 PREEMPT(full) [ 1108.698617][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1108.708724][ C1] Workqueue: netns cleanup_net [ 1108.713539][ C1] Call Trace: [ 1108.716848][ C1] [ 1108.719726][ C1] dump_stack_lvl+0x99/0x250 [ 1108.724409][ C1] ? __asan_memcpy+0x40/0x70 [ 1108.729048][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1108.734303][ C1] ? __pfx__printk+0x10/0x10 [ 1108.738969][ C1] vpanic+0x237/0x6d0 [ 1108.742992][ C1] ? __pfx_vpanic+0x10/0x10 [ 1108.747512][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 1108.752738][ C1] panic+0xb9/0xc0 [ 1108.756473][ C1] ? __pfx_panic+0x10/0x10 [ 1108.760920][ C1] __warn+0x334/0x4c0 [ 1108.764914][ C1] ? __rate_control_send_low+0x5e2/0x820 [ 1108.770568][ C1] ? __rate_control_send_low+0x5e2/0x820 [ 1108.776216][ C1] report_bug+0x2be/0x4f0 [ 1108.780558][ C1] ? __rate_control_send_low+0x5e2/0x820 [ 1108.786205][ C1] ? __rate_control_send_low+0x5e2/0x820 [ 1108.791856][ C1] ? __rate_control_send_low+0x5e4/0x820 [ 1108.797502][ C1] handle_bug+0x84/0x160 [ 1108.801766][ C1] exc_invalid_op+0x1a/0x50 [ 1108.806284][ C1] asm_exc_invalid_op+0x1a/0x20 [ 1108.811167][ C1] RIP: 0010:__rate_control_send_low+0x5e2/0x820 [ 1108.817426][ C1] Code: 38 0f b6 04 28 84 c0 0f 85 d7 01 00 00 41 8b 0f 48 c7 c7 40 f7 d0 8c 48 8b 74 24 18 44 8b 44 24 2c 45 89 e9 e8 df 8b 7c f6 90 <0f> 0b 90 90 e9 70 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c [ 1108.837490][ C1] RSP: 0018:ffffc90000a08538 EFLAGS: 00010246 [ 1108.843587][ C1] RAX: 57f2bc2e2f148500 RBX: 000000000000000c RCX: ffff88807e2e3c80 [ 1108.851571][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 1108.859559][ C1] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004 [ 1108.867557][ C1] R10: dffffc0000000000 R11: fffffbfff1c7a65c R12: ffff888051f6bca8 [ 1108.875563][ C1] R13: 0000000000000000 R14: ffff888028230e80 R15: ffff888028233138 [ 1108.883755][ C1] ? __rate_control_send_low+0x5e1/0x820 [ 1108.889533][ C1] rate_control_send_low+0x1a7/0x7b0 [ 1108.894865][ C1] rate_control_get_rate+0x20b/0x5d0 [ 1108.900180][ C1] ieee80211_beacon_get_finish+0x39a/0x6c0 [ 1108.906097][ C1] ? __pfx_ieee80211_beacon_get_finish+0x10/0x10 [ 1108.912444][ C1] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1108.917845][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 1108.923593][ C1] ieee80211_beacon_get_ap+0x1868/0x1f30 [ 1108.929254][ C1] ? __pfx_ieee80211_beacon_get_ap+0x10/0x10 [ 1108.935264][ C1] ? __ieee80211_beacon_get+0x36/0x1880 [ 1108.940861][ C1] ? __ieee80211_beacon_get+0x36/0x1880 [ 1108.946439][ C1] ? __ieee80211_beacon_get+0x36/0x1880 [ 1108.952006][ C1] __ieee80211_beacon_get+0x118e/0x1880 [ 1108.957581][ C1] ? __ieee80211_beacon_get+0x36/0x1880 [ 1108.963155][ C1] ieee80211_beacon_get_tim+0xb4/0x2b0 [ 1108.968644][ C1] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 1108.974828][ C1] mac80211_hwsim_beacon_tx+0x3ce/0x860 [ 1108.980392][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 1108.987618][ C1] __iterate_interfaces+0x2ab/0x590 [ 1108.992843][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 1108.998938][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 1109.006172][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 1109.012276][ C1] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 1109.019355][ C1] mac80211_hwsim_beacon+0xbb/0x180 [ 1109.024576][ C1] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 1109.030410][ C1] __hrtimer_run_queues+0x52c/0xc60 [ 1109.035701][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 1109.041443][ C1] ? read_tsc+0x9/0x20 [ 1109.045528][ C1] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 1109.051356][ C1] hrtimer_run_softirq+0x187/0x2b0 [ 1109.056499][ C1] handle_softirqs+0x286/0x870 [ 1109.061281][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 1109.066253][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 1109.071568][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 1109.076780][ C1] __irq_exit_rcu+0xca/0x1f0 [ 1109.081400][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 1109.086633][ C1] irq_exit_rcu+0x9/0x30 [ 1109.090904][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1109.096565][ C1] [ 1109.099517][ C1] [ 1109.102460][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1109.108456][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0xa8/0x110 [ 1109.115055][ C1] Code: 74 05 e8 0b 5b 3d f6 48 c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f6 44 24 21 02 75 4f f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 43 e5 05 f6 65 8b 05 dc 98 5b 07 85 c0 74 40 48 c7 04 24 0e 36 [ 1109.134674][ C1] RSP: 0018:ffffc90003807440 EFLAGS: 00000206 [ 1109.140760][ C1] RAX: 57f2bc2e2f148500 RBX: 0000000000000a06 RCX: 57f2bc2e2f148500 [ 1109.148745][ C1] RDX: 0000000000000007 RSI: ffffffff8dc8715f RDI: 0000000000000001 [ 1109.156729][ C1] RBP: ffffc900038074d0 R08: ffffffff8fe49c77 R09: 1ffffffff1fc938e [ 1109.164884][ C1] R10: dffffc0000000000 R11: fffffbfff1fc938f R12: dffffc0000000000 [ 1109.172872][ C1] R13: ffff8880633a4670 R14: ffff8880633a4620 R15: 1ffff92000700e88 [ 1109.180875][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1109.187228][ C1] ? ref_tracker_dir_exit+0x296/0x640 [ 1109.192607][ C1] ? kfree+0x19a/0x6d0 [ 1109.196699][ C1] ref_tracker_dir_exit+0x4bb/0x640 [ 1109.202005][ C1] ? __pfx_ref_tracker_dir_exit+0x10/0x10 [ 1109.207755][ C1] ? free_netdev+0x3f2/0x910 [ 1109.212362][ C1] ? kfree+0x19a/0x6d0 [ 1109.216442][ C1] ? dev_addr_flush+0x18f/0x210 [ 1109.221308][ C1] free_netdev+0x475/0x910 [ 1109.225755][ C1] netdev_run_todo+0xe89/0x1020 [ 1109.230632][ C1] ? __pfx_netdev_run_todo+0x10/0x10 [ 1109.235936][ C1] ? unregister_netdevice_queue+0x1b3/0x380 [ 1109.241848][ C1] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 1109.248107][ C1] ? batadv_meshif_destroy_netlink+0x1b0/0x250 [ 1109.254287][ C1] default_device_exit_batch+0x81e/0x890 [ 1109.260051][ C1] ? __pfx___might_resched+0x10/0x10 [ 1109.265357][ C1] ? __pfx_default_device_exit_batch+0x10/0x10 [ 1109.271535][ C1] ? __pfx_rdma_dev_exit_net+0x10/0x10 [ 1109.277112][ C1] ? net_generic+0x1e/0x240 [ 1109.281659][ C1] ? __pfx_default_device_exit_batch+0x10/0x10 [ 1109.287846][ C1] ops_undo_list+0x525/0x990 [ 1109.292477][ C1] ? __pfx_ops_undo_list+0x10/0x10 [ 1109.297608][ C1] ? do_raw_spin_unlock+0x122/0x240 [ 1109.302822][ C1] cleanup_net+0x4d8/0x820 [ 1109.307252][ C1] ? __pfx_cleanup_net+0x10/0x10 [ 1109.312209][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1109.317435][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 1109.323187][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 1109.328954][ C1] process_scheduled_works+0xae1/0x17b0 [ 1109.334567][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 1109.340680][ C1] worker_thread+0x8a0/0xda0 [ 1109.345309][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1109.351671][ C1] ? __kthread_parkme+0x7b/0x200 [ 1109.356648][ C1] kthread+0x711/0x8a0 [ 1109.360844][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1109.365989][ C1] ? __pfx_kthread+0x10/0x10 [ 1109.370612][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1109.375984][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 1109.381219][ C1] ? __pfx_kthread+0x10/0x10 [ 1109.385848][ C1] ret_from_fork+0x4bc/0x870 [ 1109.390466][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1109.395600][ C1] ? __switch_to_asm+0x39/0x70 [ 1109.400389][ C1] ? __switch_to_asm+0x33/0x70 [ 1109.405527][ C1] ? __pfx_kthread+0x10/0x10 [ 1109.410161][ C1] ret_from_fork_asm+0x1a/0x30 [ 1109.414961][ C1] [ 1109.418273][ C1] Kernel Offset: disabled [ 1109.422625][ C1] Rebooting in 86400 seconds..