last executing test programs: 7.881142261s ago: executing program 3 (id=246): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async) mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@volatile}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) (async) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x3a}) (async) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) (async) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000180)=ANY=[], 0x118) (async, rerun: 32) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r2, 0xc01864c2, &(0x7f00000000c0)={0x0, 0x0, r2}) (rerun: 32) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r2, 0xc01864c2, &(0x7f0000000340)={0x0, 0x1, r2}) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r2, 0xc01864c2, &(0x7f0000000380)={0x0, 0x0, r2}) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f00000003c0)={0x0}) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r2, 0xc01864c2, &(0x7f0000000400)={0x0, 0x0, r2}) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r2, 0xc01864c2, &(0x7f0000000580)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r2, 0xc01864c2, &(0x7f0000000480)={0x0, 0x1, r2}) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r2, 0xc01864c2, &(0x7f00000004c0)={0x0, 0x1, r1}) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r2, 0xc01064c5, &(0x7f0000000540)={&(0x7f0000000500)=[0x0, r3, r4, r5, r6, r7, r8, r9, r10], 0x9}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x0) bind$inet(r1, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x1, &(0x7f0000000000)=0xf, 0x4) (async) r11 = syz_open_procfs(0x0, &(0x7f0000000300)='net/xfrm_stat\x00') (async, rerun: 64) r12 = timerfd_create(0x3, 0x800) (rerun: 64) ftruncate(r12, 0x3119c976) (async, rerun: 64) write$RDMA_USER_CM_CMD_CREATE_ID(r11, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x106}}, 0x20) (rerun: 64) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f00000001c0)=0x2000) (async) write$binfmt_script(r11, &(0x7f0000000200)={'#! ', './file0', [], 0xa, "0a0d0005c07ee07cf61bd056f3b85b8bf22663f66f508758f09d7e4d94336e3ae41e1f276b1470fcbb95827e46daffaa6c99b066df647da7f61d5c106b8281250d931b162af5303f5e172b0372a5fdfff4ad9030f1ba6bc882d2a12bba32d3600b2900ff6198e7cf87da111789af3db1f1e6f6b1c381266402ed0125db6ce99049cb665131d41417a196e315b0c6394cfa724404502d54ab8582c2f53bef5b69ca3fd14f6e6c4f39eb778edeb4fbfda7373de4c3615c417d61b01a75d0ecb8f8eb2e6ceffe61fd1364ff82136ddd999396c0d3598b9257a9"}, 0xe3) 7.845359564s ago: executing program 3 (id=247): r0 = openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x101001, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000140)={'comedi_bond\x00', [0x8, 0x2, 0x7fffffff, 0x84e9, 0xb5, 0x2006, 0x6, 0x20008, 0x80ffa, 0x0, 0x69b5, 0x8500, 0x1003, 0x1000004, 0xf, 0x10000, 0xffffffa8, 0x7ffffffd, 0xe, 0x9ea, 0xd, 0x3fffd, 0x8, 0x5, 0x746f, 0xff, 0x5, 0x8, 0x2, 0x4, 0x7]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f00000002c0)={'bridge0\x00', @random="0100"}) 7.789045403s ago: executing program 3 (id=248): getpriority(0x0, 0xffffffffffffffff) r0 = getpid() ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)={0x0, 0x0}) syz_pidfd_open(r1, 0x0) getpgid(r0) socket$kcm(0xa, 0x3, 0x3a) 7.695607591s ago: executing program 3 (id=249): r0 = socket$inet_sctp(0x2, 0x5, 0x84) listen(r0, 0xfffffff9) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f00000002c0)=0x400, 0x4) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000ac0)=0x5, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r2, 0x1, 0x2f, &(0x7f0000000600)=0xdfc, 0x10) sendmmsg$inet(r2, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000440)="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", 0x122}, {&(0x7f0000000040)="dcf6c7a8594cbefed4f7b6af317a47ee47be6e2d4a61e5cc0a2a79081670698a39", 0x21}, {&(0x7f0000000580)="43b6624bcf70a4c826371a24e33c4d2bae5d7babbfb1ba2c6ecf970f9def87320ccb4fbbb31e12d8fd21d656ef864f17c24210eac6248dd40efb9b0ac8da179915840a5c9d2f213d47a7367669a3870626413286b92bd7b51f2b4f99eec1b6ff81751fb805f86ea434a7531f3c9878bdc2cadebaba4621", 0x77}, {&(0x7f0000000d40)="518d091c0e9f6c2c05550d880894aea3fd3718de3675e1f30ffff0ff511d8b6a90c94d442c509c6a01f65cad16374ea2e62749579d0000000000000000000000000000c691982d5010be49260288f8f9629ccc782d9acbdb9cba112648136045612cd4d67e00f5bb0e1ac16467a133dc1c16fb5f364f689e2cc053bd4230cfc69fc863967ffb3f2196c2b42fe3bfeea73ccd4e83d75afed8077204552c34fcf30b180b341707fa86712df21db64c1da4bec3dd8adec0e45f60fdc6fbd9417c6c7958ce970e54e96b81da444ccf90f7041e93f2fb061d2fe681fed67fc52841607461af044c7191", 0xe7}, {&(0x7f0000000740)="9f189b8d5e6ee068cce816de05698d4fe01cdb8e875eefe3db5e153722b1745423f726b35f80b980f8a7e6cab9983bc947924f6d30813d0899d80c2cb6a3cb80a16f14c194157b98c823780ea180f5f304f5694e0b90569c14c118c5896396f9c79d867b5026d66ae9eda462f1233702f941cf239ec1bfe8c9ca3c5faa4c0efa368def9717a2da7e0cde5146db635972858964020d656353a476e01071bc9367c8ab8ee6b5ff6cd25be88a2326b81df502c8b117250afb4a1b9f205eac48359e3c4323ff3e32f2be7c235dfb3613995f704263f6085512d9e267d49f43cb55255ecd5ddb42153df7b980f08cec8c0341a7c0b25c2215fbbb7c8fc128b9f0b6bc1bf061ffc5991d335691cd72902056876cba7dc2c619dd8eb75e387ed526407d774133fef0f6208bca52334a065c36f230170a8971287164653d2aaad9d2b4f2fd755c1cd890f6013943e8d4d80b915d5460", 0x152}, {&(0x7f0000000b40)="aa27de4a8cfe6fc7fd36ac634de0b7dce04f6ce3e3d452f1c75502b2cbb29fa999d2a372e83819556e792a18e17c128a1ee3a593fbac892cbb425705d6cdbb4a07ea786417aac814e03e5d80b297abe644830816977ccba1f493", 0x5a}], 0x6}}], 0x1, 0x8040) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$cgroup2(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x800010, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x4) close_range(r1, 0xffffffffffffffff, 0x0) socket(0x22, 0x2, 0x24) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r4, 0xffffffffffffffff, 0x0) r5 = syz_usb_connect(0x0, 0x202, &(0x7f0000000180)=ANY=[@ANYBLOB="1201100152018b401e040740185d000000010902180101040000030904"], 0x0) syz_usb_control_io$cdc_ecm(r5, 0x0, &(0x7f0000000040)={0x1c, 0x0, 0x0, 0x0}) syz_usb_control_io$sierra_net(r5, &(0x7f0000000140)={0x14, 0x0, 0x0}, &(0x7f0000000280)={0x1c, &(0x7f00000001c0)=ANY=[@ANYBLOB="40df00000000"], 0x0, 0x0}) r6 = landlock_create_ruleset(&(0x7f0000000140)={0x4000}, 0x18, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r6, 0x7ffffffe, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, &(0x7f0000000240)) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) 7.619977265s ago: executing program 2 (id=250): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) splice(r2, 0x0, r4, 0x0, 0x725e65a6, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="900000a453001f", 0x7, 0x20000080, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)='\'\x00\x00\x00!', 0x5, 0x0, 0x0, 0x0) write$binfmt_elf64(r3, &(0x7f0000000000)=ANY=[], 0xfffffd88) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, 0x0, 0x300) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setreuid(0x0, 0xee00) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000000)={@remote, 0x200000, 0x0, 0x3, 0x1, 0x9, 0x4}, 0x20) setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f0000000180)={0x2, {{0x2, 0x4e23, @empty}}, {{0x2, 0x4e24, @private=0xa010100}}}, 0x108) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x200000, 0x2, 0x0, 0x0, 0xfffd, 0x6}, 0x20) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) 7.129260501s ago: executing program 3 (id=251): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100001517ee40f00a057a0000010203010902120001000000000904000000ff054900962f1e76dc258d3146b880abd100c8bc67968b568455aaf94432250122c6a49b32743f21f5a3723fe740a8be4eaa038f6fa753600de02bd84f3f8e0bdedb73502ab1784e7761f17d580daa131794a828d766ab89abefdb6d54501eac9d2695766eb2da0697a457e7c420dbbd4af62950e63996062e0693966aaa63bd6f97f7121581cd198a5d6e904c72fb2d70845e6826be05ec163c6f355e245dbddc7e43021ee5ceb6da75fbac2e9acdf48d0becd30000673c15a31b0acf668bf7845a45971ec45c8c02718a8f258fe17360c15b8d1c4da1dd0727f95392cceb58b61d9b65676685dc4b528ad7c837507b66956652116146630e4a51ddb776e3bf93a6588678ac97168eeae3c32ff346c61b10032276bac5c3d5b84ebfc563549b723e1ad277c85f498f62f45752cfa8ee79eba9c87d29c933b591f9150c65bef06f635d158c5cd31bb6e41fb4afea6da348e147c19a00920a96942af370812ddeec2964bdbaa1cce23ceb76786bd16c97"], 0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) connect$l2tp6(r1, &(0x7f0000000080)={0xa, 0x0, 0x6, @ipv4={'\x00', '\xff\xff', @loopback}, 0x2, 0x4}, 0x20) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000480)={0x34, &(0x7f0000000040)=ANY=[@ANYBLOB="20311100000008"], 0x0, 0x0, 0x0, 0x0, 0x0}) getsockname$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @initdev}}, &(0x7f0000000280)=0x20) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x0) (async) socket$l2tp6(0xa, 0x2, 0x73) (async) connect$l2tp6(r1, &(0x7f0000000080)={0xa, 0x0, 0x6, @ipv4={'\x00', '\xff\xff', @loopback}, 0x2, 0x4}, 0x20) (async) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000480)={0x34, &(0x7f0000000040)=ANY=[@ANYBLOB="20311100000008"], 0x0, 0x0, 0x0, 0x0, 0x0}) (async) getsockname$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @initdev}}, &(0x7f0000000280)=0x20) (async) 6.835932887s ago: executing program 3 (id=252): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) (async) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) (async) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x103000, 0x0) ioctl$XFS_IOC_FSGROWFSLOG(r1, 0x4008586f, &(0x7f0000000040)={0x6, 0x2}) syz_usb_connect(0x3, 0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="120100036ffa680863070120ff2c0102030109024000021109440c0904080601ff8bbd020a240507000d02010205240503095b"], &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0}) 6.696732474s ago: executing program 32 (id=252): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) (async) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) (async) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x103000, 0x0) ioctl$XFS_IOC_FSGROWFSLOG(r1, 0x4008586f, &(0x7f0000000040)={0x6, 0x2}) syz_usb_connect(0x3, 0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="120100036ffa680863070120ff2c0102030109024000021109440c0904080601ff8bbd020a240507000d02010205240503095b"], &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0}) 6.688671802s ago: executing program 2 (id=254): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) syz_usb_connect(0x3, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x74, 0xd, 0xcf, 0x40, 0xbda, 0x140, 0xda29, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x6, 0xff, 0xf0, 0x8, [{{0x9, 0x4, 0x9e, 0x8, 0x0, 0xce, 0xe0, 0xa7, 0x4c}}]}}]}}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0xa9525000) unlink(&(0x7f0000000140)='./cgroup\x00') syz_usb_connect(0x3, 0x45, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100003d1a1310210414017211010203010902330001000000000904b400000202ff0005241c"], 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040), 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="d8000000180081064e81f782db44b904021d080006007c09e8fe55a10a0015400100142603600e1208001e0000000401040008004000014003000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) 5.165101169s ago: executing program 0 (id=259): r0 = syz_usb_connect(0x0, 0x202, &(0x7f0000000180)=ANY=[@ANYBLOB="1201100152018b401e040740185d000000010902180101040000030904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000040)={0x1c, 0x0, 0x0, 0x0}) syz_usb_control_io$sierra_net(r0, &(0x7f0000000140)={0x14, 0x0, 0x0}, &(0x7f0000000280)={0x1c, &(0x7f00000001c0)={0x40, 0x30}, 0x0, 0x0}) creat(&(0x7f0000000580)='./file0\x00', 0x80) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x1000, 0x10ffff, 0xfffffffd}) r1 = syz_open_dev$loop(&(0x7f0000000000), 0x401, 0x200) ioctl$IOC_PR_REGISTER(r1, 0x401870c8, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="0010bf000000bf100985e6c17292acb76078f5afd3e83c7696626cc7d6f1edebd100b2b357e45c5f04d7954a95b8f50280c9e236079cd410ade96e7f9f3a2f343ca38458c5a08822ca86cc76a7e4b0a7409e6716f2be43f94d601f3b57a7b842a3233da40cd5c046414f95cae4cd343eee1b37bf897cc1ed3507097ac8763b626dd7186baf6fb99869a4d4f7c556e5ed189e78e20465bd9d2a1effd11a351c04c768d35c1185fd6a8eda0be9f08bdb76f5491c96458f8b8209b68d8e000000000000000000"], &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000500)={0x44, &(0x7f00000000c0)=ANY=[@ANYBLOB="200f7000000087d6019c2ef4fbed6bb070255f77a97ac916524b87168c7847222a2ad0afc7ea52b215a7510b42b5dad98f771981dbf2eb97e4fe9351c5cb0d5bbbe52dd43f8e8a965aa6c3d07ddf6b60ae52d91bc43052c66d8ef28bd8098d82949e884545c6e36fa4c7aec4d85aa510664eaa7e3150"], &(0x7f0000000200)={0x0, 0xa, 0x1}, &(0x7f0000000240)={0x0, 0x8, 0x1, 0x8}, &(0x7f00000003c0)={0x20, 0x80, 0x1c, {0x9, 0x9d, 0x2, 0xf389, 0x81, 0x3, 0x7, 0xfdef, 0x551e, 0x2, 0x9, 0x7}}, &(0x7f0000000400)={0x20, 0x85, 0x4, 0x4}, &(0x7f0000000440)={0x20, 0x83, 0x2}, &(0x7f0000000480)={0x20, 0x87, 0x2, 0x6620}, &(0x7f00000004c0)={0x20, 0x89, 0x2}}) 3.543868771s ago: executing program 2 (id=261): r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x2, 0x0) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r1, 0x7a6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3, 0x0, 0x6}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r2, &(0x7f0000003540)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000003480)={0x20, 0x3, 0x8, 0x301, 0x0, 0x0, {0x3, 0x0, 0x4}, [@CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @tcp}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x880) r3 = dup2(r0, r0) pwritev(r3, &(0x7f0000000180)=[{&(0x7f0000000000)="139b05e5c9a976629722f9569fd45dff02589863e5b47a57d1280a6a8377d463b8b4a00cc229867becdb6e5c67f4db0f53cf0f28de201721a754b6e249f8f9fbe1f82657ee78fe8827b1f85696900c8d654a", 0x52}, {&(0x7f0000000080)="723488c56c5437ee4bdfed8ad3f51feeda82660196f1f50262192dae0f5c677cf4e8804d7b142ae0ab530d4da6a694e5109a6f9612a792754eaa800cf0300327dd6ef269d7bcb05eb2a58d8d942dd73c1504d7a07340ea44f11755238370019b359e2cb47a5c0300a89765478aa223423a7bb635cec311c9b94a1f8b39d3a712c48b2b73a2d3fb30f20dd68dcc190fa5ec01fe93421e79840847089b48ea17cdba6b204d01adcec1172b68c90410834f37f53a1070474d186accfe5e0298", 0xbe}, {&(0x7f0000000480)="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", 0x1000}], 0x3, 0xffff539c, 0x2) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_int(r4, 0x0, 0x6, 0x0, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000340)={0xb, {'syz1\x00', 'syz1\x00', 'syz1\x00', 0x0, 0xd3b, 0x3, 0x7, 0xfffffff9, 0xfffffff7}}, 0x118) pread64(r3, &(0x7f00000001c0)=""/184, 0xb8, 0x3f17715f) 3.469272257s ago: executing program 2 (id=262): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x1) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc0189375, &(0x7f0000000300)={{0x1, 0x1, 0x46}, './file0/../file0\x00'}) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x21, &(0x7f0000000500)=ANY=[@ANYBLOB='nr_blocks=9,nr_inodes=4']) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), &(0x7f0000000080), 0x2, 0x0) 3.363909782s ago: executing program 2 (id=263): r0 = syz_usb_connect(0x1, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201520284f11b084f080100d0f2010203010902120001011820bb09047e3900289e4b0d"], &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000000c0)={0x14, &(0x7f0000000040)={0x20, 0xb, 0x30, {0x30, 0x10, "f3938877e4a1eecd57c2c2f97eacab3ea5246e0e7ffe1aa99407587b1f8eb30bfb1045d3b7154aa396b9f536a558"}}, &(0x7f0000000240)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000200)={0x1c, &(0x7f0000000100)={0x20, 0x31, 0x75, "8d4069abf3e185bd8070e21985860d008f77dda743726b9bccc148f5303534aeacc036d1800853c15458c20f5f7b9530d7610e0a1209fcf1668abadfa252ea76b034f1bf6b78a73f5b711b47e8202080dc520d39d570df9290aadf310453e7477d307c9f8d717a681324acb33b707e6133ac0ae76c"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0x4}, &(0x7f00000001c0)={0x0, 0x8, 0x1, 0x8}}) 2.031887228s ago: executing program 0 (id=264): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) pipe(0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) write$binfmt_aout(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="03000000b500000001000000feefffff"], 0xc8) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) close_range(r1, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) newfstatat(0xffffffffffffff9c, &(0x7f0000001300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1100) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x10000008ebc, 0x0) syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002a69bbc104f959941760f010203010902240001040000000904330202020c07"], 0x0) 1.793509606s ago: executing program 4 (id=253): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) r1 = syz_create_resource$binfmt(&(0x7f0000000100)='./file1\x00') r2 = openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff) close(r2) execveat$binfmt(0xffffffffffffff9c, r1, 0x0, &(0x7f0000004780)={[], 0xf000}, 0x1000) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, 0x0, &(0x7f0000000500)) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r4, 0xffffffffffffffff, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000740)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="002208000000a20100c3"], 0x0}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[], 0x32600) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x101302, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000380)={0x4, [0x0, 0x0, 0x0, 0x0]}, &(0x7f00000003c0)=0x14) ioctl$KVM_CREATE_DEVICE(r7, 0xc00caee0, &(0x7f0000000100)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r8, 0x4018aee1, &(0x7f00000001c0)=@attr_other={0x0, 0x1, 0x2, 0x0}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a6c000000030a010300000000000000000100000638000480080002406771b75d080001400000000014000300776730000000000000000000000000000800014000000002080002405a8a263f08000a40000000020900010073797a31000000000900030073797a300000000000010000000a0101000000000000000007000005eb0006001967aae0b28241660660fa66d9028414658185526084a61ff43d28d57e2f1cd93b29733e6a2eec5103092cc696513c06203ab09fef7cfda59556efd63352115b19e6e69e4ed94efbcbb53df6322ec23029e12bc016620edd6f6072a341ac9f320ce79b718cb6c6ea6420d4b9f61d100cddbffb3255b787d6a0ed4eb7da0566ad436e96d3eec79e3a5a70c7e517d1a9c0ce03bab208c6f707acbae1dec12689b0b9cfd9148388397de17bad40e3656631acf15e500c7c0767fa4a04754fc3101de2578b7382717f5c61501e4fcc7f1a8f105ed0645a9ae268a5ba2fb9657b4da84775e69226d8d0c91704001c0000000b0a010400000000000000000a000009080008400000000148000000050a05000000000000000000020000000b00070066696c74657200002800048014000300736974300000000000000000000000000800014000000002080001400000000460000000140a01010000000000000000020000090c000640000000000000000434000800c230f46081c9843030449a3aa8b2a43d6300e922dcf5f91cc75536787e76ba7bfeb45c650a12a813fe5f6f5cc3ec172b0900020073797a3100000000140000001100010000000000000000000500000a"], 0x258}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) keyctl$join(0x1, &(0x7f0000000040)={'syz', 0x0}) r9 = syz_open_dev$hiddev(&(0x7f0000000000), 0x0, 0x880) ioctl$HIDIOCGREPORT(r9, 0x400c4807, &(0x7f0000000040)={0x3, 0x200, 0x401}) getrandom(&(0x7f0000000400)=""/5, 0x5, 0x2) 1.730628898s ago: executing program 2 (id=267): r0 = syz_open_dev$cec(&(0x7f00000000c0), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f00000001c0)={"1b000500", 0x100, 0x5, 0x3, 0x2800, 0xed03, "f70000000300", '\x00', "03000600", "e8cc1304", ["8b59b4d766cbd60600000700", "c2fed6e1dcc98a1c907c6b40", '\x00', "0000000000000000001000"]}) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1200010000c8a12040201b651ea201020301dc021b0001fc001000090457fd308749c08381077957121afe0972b5a4b2087fec9dc6769bc99e9cc95e06fb3a2bb3c15d8928923f26238a00"/90], 0x0) syz_usb_connect$cdc_ecm(0x1, 0x85, &(0x7f0000000100)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x73, 0x1, 0x1, 0x4, 0x20, 0x6, [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x2, 0x6, 0x0, 0x4, {{0x6, 0x24, 0x6, 0x0, 0x0, "eb"}, {0x5, 0x24, 0x0, 0x5a}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x9, 0x3}, [@mbim_extended={0x8, 0x24, 0x1c, 0x9, 0x6, 0x9}, @mbim={0xc, 0x24, 0x1b, 0x6, 0x4, 0xf7, 0xe, 0x2, 0x4}, @network_terminal={0x7, 0x24, 0xa, 0x9, 0x9, 0x7, 0x7f}, @country_functional={0xc, 0x24, 0x7, 0xf, 0xcde, [0x4bf, 0x5, 0xff]}, @dmm={0x7, 0x24, 0x14, 0x9}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xac, 0xff, 0xf1}}], {{0x9, 0x5, 0x82, 0x2, 0x270, 0x10, 0x3, 0x4}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0xa, 0xb, 0xdb}}}}}]}}]}}, &(0x7f00000006c0)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x110, 0xe3, 0x1, 0x1, 0x20, 0x2}, 0x31, &(0x7f0000000240)={0x5, 0xf, 0x31, 0x4, [@ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x54, 0x8, 0x4, 0x1, 0xfb}, @ssp_cap={0x14, 0x10, 0xa, 0x4, 0x2, 0x9, 0x1e, 0x37c, [0xffc0c0, 0xff0f]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x3, 0x80, 0x7}]}, 0x7, [{0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x144e}}, {0x97, &(0x7f00000002c0)=@string={0x97, 0x3, "6c92db9cb365ec79ab5fc661f65ae6832ac3094719a0af5deb83f9f3786492e0039a9297908782ddc7dd657d847f9d34f5c3ec1f44bf47e56dfabbd4d38cfc57bbd12836c6818f7e89d34807cf2da4de8c1976bb8bb53af20081ae85582f202bbe245f593388f8f995bcd4c00bc1939bfaccb32db09f8cd1dc9e5347cf998a2b45f6e616de0b54ef8062fe94b137bab8396a03cc21"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x43e}}, {0xe2, &(0x7f00000003c0)=@string={0xe2, 0x3, "544157970895fd164dcbb839fd778944941ec5e509b65353a3c6d44d95cf34a90098134769b541cdaac7e4d96f0d91e966f22647f01124606c66d50b8c7926bf090ebfbc6419420868d7b765375e889503206020cc98b0ac83b95e55864115e619bfc429e6f7e7f4bbd1443a0a88225246b2f242cd65ff6121cec1c0854ee37a819c013e1820534e9d1e6ff891c4fcad05d2d0e2d2f1838529ca60c511d2ca04df3245e9b5d2f2f9e918a8bc583feb1ad4dc040457c358acf5019b94ef33bdf8935d105a328d0706b86171a918d88b515d70bce9ab890516dc913887638ee9d4"}}, {0x8e, &(0x7f00000004c0)=@string={0x8e, 0x3, "2d822dcc6cdf2b6698fc4754930b109242961fc5d28d783010d635697d5bef6878acc986df9da25b96624aae1b35b96d77a1cd8f09a41da4e262bdbe0ac4e3f0cddbfc4f5b3c88ac1ea6342e724101a576eceb709aadef571ed3e888036a39b90da6cd5586546402a53a2c94e38c4bbb9eae894d16fa9fedfc94a2d19703ba16e5ae2795d94f0b2acde53619"}}, {0xd7, &(0x7f0000000580)=@string={0xd7, 0x3, "6761271a5050eb9cc16892fa352a37c1587439381871513e9bfca7ea73888ce85e7a9cee6b34582ad5de04140968bb6f4374d9ec350ebf7473ef60d3a5c5c4ee7ffd8804f6d03efced58adb078b869433d030bbc6292eed6b7e7bc9da42afbe2ebf28ab155ea0eabb98febef084c712e67ccf4410fbd0700c3de9810f6e6bc6613ef278840b3b763f0b8197dcad19222c11ff30dd95da5d5ee634edf38e6a4a26bad4b3465f6d27cc1216f0e7568416671368964caafdf377d5d89713774837c9eb89ba3a30b213749eb2a1588200cfa656c4e6f2f"}}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x414}}]}) 1.560750938s ago: executing program 1 (id=268): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073793d48000000000900010073797a31000000001c000380180000800c00018006000100d10300000800034000000001140000001100010000000000000000000100000a8152d9ac11717d38be4d84b5c2c8633ce0a8b678e2cc74bfa1fc823471582cd13d9bf0a982491870b05d3595eff2cbde1cf79760b0c709d2ac8006272e679173a7bba51df36057626fd069639654bea05c72d5d515ddb4b6922f0c766d27bf1da8c177272d"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000480)=[{0x6, 0x0, 0x0, 0x7ffffffb}]}) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r3, 0x118, 0x1, &(0x7f0000000000)=0x3de, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_SET_TUNSRC(r4, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="02002abd7000ffdb0000db409743a584a5250300000005000500020000000500051d04000000"], 0x2c}, 0x1, 0x0, 0x0, 0x24000080}, 0x80) close_range(r2, 0xffffffffffffffff, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f0000000180)="0b036800e0ff64000200475400f6a13bb1000000080088a84803", 0x100a6, 0x0, &(0x7f0000000140), 0x14) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$SO_BINDTODEVICE_wg(r6, 0x1, 0x19, &(0x7f0000000180)='wg2\x00', 0x4) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r7, 0x8933, &(0x7f00000002c0)={'wg2\x00', 0x0}) bind$xdp(r6, &(0x7f00000001c0)={0x2c, 0x2, r8, 0x29, r6}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000680)={'team0\x00', 0x0}) r10 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r10, &(0x7f0000000380)={0x1d, r11, 0x1, {0x0, 0x0, 0x3}, 0xff}, 0x18) r12 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r12, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendto$packet(r12, &(0x7f0000000300)="0000001d1ed6734a199e2d00", 0x1f, 0x0, &(0x7f0000000080)={0x11, 0x8100, r13, 0x1, 0x3}, 0x14) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000006c0)=0x0, &(0x7f0000000700)=0x4) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000740)={@private2, 0x0}, &(0x7f0000000780)=0x14) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000900)={'ip_vti0\x00', &(0x7f00000007c0)={'syztnl0\x00', 0x0, 0x8, 0x0, 0x8, 0x7, {{0x3e, 0x4, 0x3, 0x3a, 0xf8, 0x65, 0x0, 0x7, 0x2f, 0x0, @rand_addr=0x64010102, @loopback, {[@cipso={0x86, 0x20, 0xffffffffffffffff, [{0x1, 0xf, "6a594642158a9c90001ec86e50"}, {0x7, 0x8, "89014cca063b"}, {0x7, 0x3, "0e"}]}, @cipso={0x86, 0x4d, 0x1, [{0x0, 0x10, "39b1508be8ca7dd2cb973235dd79"}, {0x0, 0xf, "b5adcda43df88d8427e5f6a169"}, {0x0, 0x8, "1d7777e35cdb"}, {0x1, 0x12, "13763b61aabc0a64deaa15a87b497337"}, {0x0, 0xe, "6e3ee612152d08d37963b53f"}]}, @timestamp_addr={0x44, 0x24, 0x5, 0x1, 0xd, [{@rand_addr=0x64010101, 0x97fd}, {@multicast1, 0x2}, {@private=0xa010102, 0x5}, {@broadcast, 0x8}]}, @lsrr={0x83, 0x7, 0x52, [@local]}, @cipso={0x86, 0x18, 0x0, [{0x0, 0x12, "cd9f2ea75d48f099b17eff674991478a"}]}, @cipso={0x86, 0x33, 0xffffffffffffffff, [{0x0, 0xc, "9083f5451bb5f24ce121"}, {0x6, 0x5, "20c967"}, {0x2, 0xd, "f5a10f67e0ef0a8afc6c78"}, {0x0, 0x5, "cbd6f9"}, {0x2, 0xa, "e078f62fe3f386fe"}]}]}}}}}) sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000940)={0x140, 0x0, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x140}, 0x1, 0x0, 0x0, 0x24020000}, 0x40805) 655.386165ms ago: executing program 1 (id=269): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000840)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010027bd7000fddbdf255400000008000300", @ANYRES32=r3], 0x28}, 0x1, 0x0, 0x0, 0x4010}, 0x4004004) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x18, r4, 0x1, 0x70bd2b, 0x4, {}, [@TIPC_NLA_NODE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) 543.871621ms ago: executing program 1 (id=270): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045568, 0x6) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f0000000100)=@ethtool_sfeatures}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x4) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r0, 0x6, 0x3, 0x7ff}) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000100)={{0x2, 0x0, 0x1, 0x7}, 'syz0\x00', 0xa}) ioctl$UI_DEV_CREATE(r0, 0x5501) 543.379631ms ago: executing program 0 (id=271): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (async) prlimit64(0x0, 0x7, &(0x7f0000000000)={0x5, 0x978d}, 0x0) (async) getrlimit(0x5, &(0x7f0000000040)) getsockopt$sock_cred(r0, 0x1, 0x4d, 0x0, &(0x7f0000000000)) 514.534324ms ago: executing program 1 (id=272): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x37, [0xfffffff8, 0x8, 0x5, 0x9, 0x7, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x1, 0x8, 0xd, 0x4, 0x12a3, 0x6, 0x1, 0x2, 0x6, 0x10001, 0x81, 0x8a, 0x79, 0x2, 0x10000, 0x0, 0x91, 0x8, 0x4, 0x16, 0x8, 0x5, 0x401, 0xfffffff5, 0x6, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0xb6, 0x3, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x5, 0x8e, 0xd50, 0x7, 0x2, 0x899, 0x401, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x4, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x1, 0xf1, 0x4, 0xab00060, 0x5, 0x6, 0x2, 0x5, 0xfffffff8, 0x1ff, 0x81, 0xfffffffc, 0x1, 0x1cb, 0x1, 0x80000004, 0x6, 0x438, 0x77, 0x9, 0x99, 0x7fffffff, 0x4, 0x5c, 0x1, 0x1000, 0xfffff801, 0x5], [0x4, 0xfffffffe, 0xffff, 0x637b, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x800008d3, 0x200006, 0x8, 0x400, 0x82, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x1, 0x5, 0x9, 0xa, 0x3, 0x9, 0x1, 0xc7, 0xfff, 0x10000a, 0x10000002, 0x400, 0x3e55, 0x5, 0xd3, 0x8, 0x3436, 0x3, 0xd, 0x3, 0x601, 0x0, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x2, 0x7a, 0x9, 0x6, 0x10000, 0xfffffffd, 0x8, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x8, 0x5, 0x7f, 0x6300, 0x40, 0xfb, 0x1005, 0x1, 0x7, 0x1e, 0x9, 0x81, 0x3, 0x9d86, 0xd, 0xfffffff7, 0x8, 0x140f2, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0x8, 0x32d, 0x0, 0x1ff, 0x2000803, 0xfffffffc, 0x10000, 0x0, 0x1b3a, 0x81, 0x3, 0x7, 0x3, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0x2, 0x6, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) (async) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) (async) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) (async) symlinkat(0x0, 0xffffffffffffff9c, 0x0) (async) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) linkat(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x1000) chdir(0x0) openat(0xffffffffffffff9c, 0x0, 0x442, 0x108) (async) close(r4) lsetxattr(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0)=@known='user.incfs.size\x00', 0x0, 0x0, 0x0) 486.294804ms ago: executing program 0 (id=273): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d6c2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x8, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x810, r2, 0x798f000) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x33, 0x790, 0x80000000002, 0x180, 0x400000004, 0xffffffffffffffff, 0xf1, 0x3, 0xfffffffffffffd7e, 0x45, 0x0, 0x3b9, 0xfffffffffffffffe, 0x0, 0x0, 0x8], 0x8000000, 0x3c4210}) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000000040)=0x3, 0x4) sendmsg$inet_sctp(r3, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0xc851) sendmmsg$inet_sctp(r3, &(0x7f0000001880)=[{&(0x7f0000000000)=@in={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f0000000400)=[@sndinfo={0x20, 0x84, 0x2, {0x2, 0x200, 0xb54, 0xffff070d}}], 0x20}], 0x1, 0x10) ioctl$KVM_RUN(r2, 0xae80, 0x0) 276.027481ms ago: executing program 1 (id=274): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$F2FS_IOC_DECOMPRESS_FILE(r0, 0xf517, 0x0) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000500)=ANY=[@ANYRES8=r0], 0x58) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f0000000280)="1a0000000212a277", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback, 0x20}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f00000001c0)=ANY=[@ANYRES32=0x0, @ANYBLOB='G'], 0x9) sendto$inet6(r1, &(0x7f0000000240)="b1", 0x1, 0x4040044, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback, 0xfffffe01}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r1, 0x84, 0x23, &(0x7f0000000040)={0x0, 0x6}, 0x8) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'ipvlan1\x00', 0x0}) bind$packet(r2, &(0x7f0000000140)={0x11, 0x0, r3, 0x1, 0x4, 0x6, @remote}, 0x14) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/cpuinfo\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000180)={0x1, [0x0]}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000001600)={r5, 0x7}, 0x8) sendmmsg$sock(r2, &(0x7f0000000940)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40400c0) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) fsetxattr$security_ima(r6, &(0x7f0000000000), 0x0, 0x0, 0x2) close(0xffffffffffffffff) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYRES32=r2], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a6c000000060a0104000000000000000002000000400004803c0001800a0001006d617463680000002c00028014000300f4f03b0200000000000000116b61979e090001006c3274700000000008000240000000000900010073797a3000000000090002007301003200000000140000001100010000000000000000000000000a"], 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 274.103596ms ago: executing program 0 (id=275): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r4, 0x29, 0x10, 0x0, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000280), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r5, 0xc0405602, &(0x7f0000000140)={0x0, 0x1, 0x0, "ee471a55b5e2c266422ef07bbfd7a61e37466e060403bbd8115bd48970e86a02"}) sendmsg$NL80211_CMD_SET_POWER_SAVE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000ffdbdf253d00000008000300", @ANYRES32=r3, @ANYBLOB="0f005d0001000000589f0170532a98fb3878db1951106b7c1d85ba9164416c5bb37fb60b2f7294f527f4b051d26b4c1a3c62d35541cedeb06422cb169247b43577c99c3c911b1e20eec11d225227a951153693a4fca6f84798e0d790010c26a4b73a875d1b876c2a5473c75c7c01aee44c82e01e8105a62eae50b033ae0bc031f8"], 0x24}, 0x1, 0x0, 0x0, 0xa014}, 0x4000090) 196.475388ms ago: executing program 0 (id=276): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x80) fchdir(r2) creat(&(0x7f0000001400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x80) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x19) 173.055271ms ago: executing program 1 (id=277): ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000000)='/dev/net/tun\x00', 0x101102, &(0x7f0000000040)={@align=0x3, {0xfffa, 0xe914, 0x6, 0x6}}, 0xce4, &(0x7f0000000080), &(0x7f0000000100)=0x2}) sendmsg$GTP_CMD_ECHOREQ(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x3c, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@GTPA_PEER_ADDR6={0x14, 0xb, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @GTPA_TID={0xc, 0x3, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r0}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44040}, 0x11) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaabb86dd6d00"], 0x46) 0s ago: executing program 4 (id=278): syz_usb_connect(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x442, 0x30, 0x19, 0x4c, 0x20, 0xc45, 0x627c, 0xb710, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x4, 0x5, 0xe8, 0xe, [{{0x9, 0x4, 0xc9, 0x8, 0x0, 0x29, 0xfe, 0xf4, 0x9}}]}}]}}, &(0x7f0000000080)={0xfffffffffffffe0b, 0x0, 0x0, 0x0, 0x0, [{0x0, &(0x7f00000000c0)=@lang_id={0x0, 0x3, 0x441}}]}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.56' (ED25519) to the list of known hosts. [ 65.021353][ T5814] cgroup: Unknown subsys name 'net' [ 65.135860][ T5814] cgroup: Unknown subsys name 'cpuset' [ 65.144655][ T5814] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 66.468589][ T5814] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 70.028576][ T5837] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 70.031103][ T5840] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 70.037228][ T5837] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 70.046274][ T5840] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 70.051494][ T5837] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 70.059027][ T5840] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 70.065743][ T5837] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 70.079668][ T5837] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 70.080009][ T5841] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 70.087811][ T5837] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 70.095990][ T5841] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 70.109774][ T5837] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 70.117734][ T5841] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 70.118769][ T5145] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 70.125723][ T5841] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 70.133451][ T5145] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 70.140777][ T5841] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 70.148534][ T5145] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 70.155970][ T5841] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 70.169736][ T5841] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 70.607158][ T5828] chnl_net:caif_netlink_parms(): no params data found [ 70.689865][ T5826] chnl_net:caif_netlink_parms(): no params data found [ 70.771745][ T5825] chnl_net:caif_netlink_parms(): no params data found [ 70.920840][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.929716][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.937344][ T5828] bridge_slave_0: entered allmulticast mode [ 70.946022][ T5828] bridge_slave_0: entered promiscuous mode [ 70.960411][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.967897][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.975490][ T5826] bridge_slave_0: entered allmulticast mode [ 70.983059][ T5826] bridge_slave_0: entered promiscuous mode [ 70.991943][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.000746][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.008177][ T5826] bridge_slave_1: entered allmulticast mode [ 71.015780][ T5826] bridge_slave_1: entered promiscuous mode [ 71.036971][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.044237][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.051417][ T5828] bridge_slave_1: entered allmulticast mode [ 71.059053][ T5828] bridge_slave_1: entered promiscuous mode [ 71.108854][ T5827] chnl_net:caif_netlink_parms(): no params data found [ 71.141467][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.169760][ T5825] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.177323][ T5825] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.184679][ T5825] bridge_slave_0: entered allmulticast mode [ 71.192327][ T5825] bridge_slave_0: entered promiscuous mode [ 71.203177][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.216527][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.243338][ T5825] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.250573][ T5825] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.258062][ T5825] bridge_slave_1: entered allmulticast mode [ 71.265571][ T5825] bridge_slave_1: entered promiscuous mode [ 71.301236][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.359611][ T5825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.372323][ T5826] team0: Port device team_slave_0 added [ 71.403403][ T5825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.416418][ T5826] team0: Port device team_slave_1 added [ 71.431512][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.438114][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.441713][ T5828] team0: Port device team_slave_0 added [ 71.455361][ T5828] team0: Port device team_slave_1 added [ 71.507021][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.514666][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.521842][ T5827] bridge_slave_0: entered allmulticast mode [ 71.529394][ T5827] bridge_slave_0: entered promiscuous mode [ 71.540078][ T5825] team0: Port device team_slave_0 added [ 71.549167][ T5825] team0: Port device team_slave_1 added [ 71.576497][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.583869][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.591143][ T5827] bridge_slave_1: entered allmulticast mode [ 71.599004][ T5827] bridge_slave_1: entered promiscuous mode [ 71.618231][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.625685][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.651868][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.669393][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.676550][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.702818][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.738679][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.746053][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.772218][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.784560][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.791542][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.818060][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.845599][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.852893][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.879341][ T5825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.914580][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.925419][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.932598][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.959142][ T5825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.990999][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.045203][ T5828] hsr_slave_0: entered promiscuous mode [ 72.052487][ T5828] hsr_slave_1: entered promiscuous mode [ 72.105647][ T5827] team0: Port device team_slave_0 added [ 72.118421][ T5825] hsr_slave_0: entered promiscuous mode [ 72.125604][ T5825] hsr_slave_1: entered promiscuous mode [ 72.132475][ T5825] debugfs: 'hsr0' already exists in 'hsr' [ 72.138468][ T5825] Cannot create hsr debugfs directory [ 72.150407][ T5826] hsr_slave_0: entered promiscuous mode [ 72.157488][ T5826] hsr_slave_1: entered promiscuous mode [ 72.164473][ T5826] debugfs: 'hsr0' already exists in 'hsr' [ 72.170244][ T5826] Cannot create hsr debugfs directory [ 72.179705][ T5827] team0: Port device team_slave_1 added [ 72.212709][ T5835] Bluetooth: hci0: command tx timeout [ 72.212713][ T5841] Bluetooth: hci3: command tx timeout [ 72.212920][ T5835] Bluetooth: hci1: command tx timeout [ 72.218708][ T5841] Bluetooth: hci2: command tx timeout [ 72.263174][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.270156][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.296475][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.339051][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.346230][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.372970][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.567340][ T5827] hsr_slave_0: entered promiscuous mode [ 72.574481][ T5827] hsr_slave_1: entered promiscuous mode [ 72.581129][ T5827] debugfs: 'hsr0' already exists in 'hsr' [ 72.587119][ T5827] Cannot create hsr debugfs directory [ 72.871239][ T5828] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 72.892713][ T5828] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 72.904107][ T5828] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 72.929819][ T5828] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 73.015703][ T5825] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 73.039964][ T5825] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 73.055827][ T5825] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 73.068068][ T5825] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 73.145608][ T5826] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 73.156440][ T5826] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 73.182701][ T5826] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 73.209401][ T5826] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 73.284994][ T5827] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 73.296401][ T5827] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 73.316410][ T5827] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 73.326468][ T5827] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 73.356729][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.406833][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.437582][ T3473] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.444871][ T3473] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.490162][ T3473] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.497353][ T3473] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.549925][ T5825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.638897][ T5825] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.663755][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.686673][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.693944][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.724055][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.753966][ T1042] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.761137][ T1042] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.777508][ T5826] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.819582][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.826949][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.844581][ T5827] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.857224][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.864433][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.897778][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.905295][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.950238][ T1042] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.957480][ T1042] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.055148][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.289730][ T5828] veth0_vlan: entered promiscuous mode [ 74.296061][ T5830] Bluetooth: hci3: command tx timeout [ 74.301570][ T5830] Bluetooth: hci0: command tx timeout [ 74.307218][ T5835] Bluetooth: hci2: command tx timeout [ 74.313407][ T5841] Bluetooth: hci1: command tx timeout [ 74.352482][ T5828] veth1_vlan: entered promiscuous mode [ 74.467608][ T5825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.481407][ T5828] veth0_macvtap: entered promiscuous mode [ 74.515699][ T5828] veth1_macvtap: entered promiscuous mode [ 74.604108][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.617581][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.640385][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.654469][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.670438][ T5825] veth0_vlan: entered promiscuous mode [ 74.697767][ T5825] veth1_vlan: entered promiscuous mode [ 74.714336][ T58] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.723850][ T58] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.760559][ T58] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.771278][ T58] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.866574][ T5827] veth0_vlan: entered promiscuous mode [ 74.885172][ T5825] veth0_macvtap: entered promiscuous mode [ 74.901961][ T5825] veth1_macvtap: entered promiscuous mode [ 74.944491][ T5827] veth1_vlan: entered promiscuous mode [ 74.980852][ T3473] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.984543][ T5826] veth0_vlan: entered promiscuous mode [ 75.001164][ T3473] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.042605][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.076091][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.096817][ T3473] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.109881][ T3473] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.109885][ T5826] veth1_vlan: entered promiscuous mode [ 75.125237][ T1042] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.135146][ T1042] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.149286][ T5827] veth0_macvtap: entered promiscuous mode [ 75.163863][ T1042] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.173877][ T1042] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.213773][ T5827] veth1_macvtap: entered promiscuous mode [ 75.257433][ T5828] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 75.287525][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.342696][ T3473] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.364411][ T3473] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.377786][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.397402][ T5919] veth1_vlan: mtu greater than device maximum [ 75.421013][ T5826] veth0_macvtap: entered promiscuous mode [ 75.437221][ T559] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.482186][ T559] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.490947][ T559] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.508361][ T5826] veth1_macvtap: entered promiscuous mode [ 75.524041][ T559] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.533323][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.543641][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.651027][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.706811][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.752615][ T3508] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.766842][ T559] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.767846][ T3508] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.783572][ T559] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.853443][ T559] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.862546][ T559] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.879276][ T559] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.891859][ T559] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.903575][ T5895] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 76.073085][ T5895] usb 1-1: Using ep0 maxpacket: 32 [ 76.088044][ T5895] usb 1-1: config 0 has an invalid interface number: 188 but max is 0 [ 76.104990][ T3508] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.119418][ T5895] usb 1-1: config 0 has no interface number 0 [ 76.138345][ T3508] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.153483][ T5895] usb 1-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 76.191151][ T5895] usb 1-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 76.215226][ T5895] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.241497][ T1042] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.249410][ T5895] usb 1-1: Product: syz [ 76.249440][ T5895] usb 1-1: Manufacturer: syz [ 76.249452][ T5895] usb 1-1: SerialNumber: syz [ 76.270094][ T5895] usb 1-1: config 0 descriptor?? [ 76.290943][ T5923] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 76.318454][ T1042] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.352380][ T5874] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 76.372937][ T5830] Bluetooth: hci2: command tx timeout [ 76.373514][ T5841] Bluetooth: hci3: command tx timeout [ 76.378389][ T5830] Bluetooth: hci0: command tx timeout [ 76.378413][ T5830] Bluetooth: hci1: command tx timeout [ 76.409178][ T5941] netlink: 256 bytes leftover after parsing attributes in process `syz.2.10'. [ 76.510891][ T5923] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 76.516064][ T5874] usb 4-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 76.535722][ T5874] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 76.547071][ T5874] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 76.557325][ T5874] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 76.572722][ T5874] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 76.581960][ T5874] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 76.591472][ T5874] usb 4-1: SerialNumber: syz [ 76.601639][ T5936] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 76.722136][ T9] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 76.817796][ T5829] usb 4-1: USB disconnect, device number 2 [ 76.892155][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 76.899278][ T9] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 76.910587][ T9] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 76.920927][ T9] usb 2-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 76.935106][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 76.942504][ T5895] asix 1-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 76.953158][ T9] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 76.964810][ T5895] asix 1-1:0.188: probe with driver asix failed with error -32 [ 76.973857][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.990646][ T9] usb 2-1: config 0 descriptor?? [ 77.023770][ T10] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 77.162225][ T10] usb 3-1: device descriptor read/64, error -71 [ 77.401094][ T5943] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 77.411970][ T5944] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 77.411967][ T5943] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 77.422450][ T10] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 77.441394][ T5944] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 77.460406][ T9] hid (null): unknown global tag 0xc [ 77.466947][ T9] hid (null): invalid report_size 686824678 [ 77.473072][ T9] hid (null): invalid report_count 34888 [ 77.478901][ T9] hid (null): unknown global tag 0xc [ 77.486252][ T9] hid (null): unknown global tag 0xe [ 77.564756][ T10] usb 3-1: device descriptor read/64, error -71 [ 77.593716][ T5961] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 77.674163][ T796] usb 2-1: USB disconnect, device number 2 [ 77.682853][ T10] usb usb3-port1: attempt power cycle [ 77.911581][ T5980] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 77.983253][ T5980] pimreg3: entered allmulticast mode [ 78.006844][ T5980] kvm: MONITOR instruction emulated as NOP! [ 78.072640][ T10] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 78.105344][ T10] usb 3-1: device descriptor read/8, error -71 [ 78.332598][ T5915] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 78.352208][ T10] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 78.383274][ T10] usb 3-1: device descriptor read/8, error -71 [ 78.456405][ T5830] Bluetooth: hci1: command tx timeout [ 78.457298][ T5835] Bluetooth: hci3: command tx timeout [ 78.462233][ T5841] Bluetooth: hci0: command tx timeout [ 78.467347][ T5835] Bluetooth: hci2: command tx timeout [ 78.519352][ T5915] usb 4-1: Using ep0 maxpacket: 32 [ 78.525967][ T10] usb usb3-port1: unable to enumerate USB device [ 78.554951][ T5915] usb 4-1: unable to get BOS descriptor or descriptor too short [ 78.566876][ T5915] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 78.577285][ T5915] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 78.589006][ T5915] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 78.601369][ T5915] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 78.638579][ T10] usb 1-1: USB disconnect, device number 2 [ 78.646911][ T5915] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.664472][ T5915] usb 4-1: Product: syz [ 78.675738][ T5915] usb 4-1: Manufacturer: syz [ 78.680382][ T5915] usb 4-1: SerialNumber: syz [ 78.817681][ T6021] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 78.892795][ T6025] autofs: Unknown parameter '2+:s 0' [ 78.921992][ T5980] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 78.943415][ T5980] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 78.992400][ T9] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 79.009761][ T5915] usb 4-1: 0:2 : does not exist [ 79.073929][ T5915] usb 4-1: USB disconnect, device number 3 [ 79.116162][ T6034] netlink: 4 bytes leftover after parsing attributes in process `syz.0.24'. [ 79.124597][ T5834] udevd[5834]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 79.167121][ T9] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 79.177798][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.197015][ T9] usb 2-1: Product: syz [ 79.201292][ T9] usb 2-1: Manufacturer: syz [ 79.206032][ T9] usb 2-1: SerialNumber: syz [ 79.426090][ T6008] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.434931][ T6008] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.462260][ T47] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 79.569525][ T6038] tipc: Started in network mode [ 79.574780][ T6038] tipc: Node identity 2, cluster identity 5 [ 79.580716][ T6038] tipc: Node number set to 2 [ 79.587255][ T6038] netlink: 'syz.3.26': attribute type 2 has an invalid length. [ 79.614806][ T47] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 79.625921][ T47] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 79.638359][ T47] usb 1-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=69.cf [ 79.658997][ T9] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 79.660186][ T47] usb 1-1: New USB device strings: Mfr=1, Product=0, SerialNumber=0 [ 79.678128][ T9] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 79.692373][ T9] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 79.695794][ T47] usb 1-1: Manufacturer: syz [ 79.707813][ T9] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 79.730385][ T9] usb 2-1: USB disconnect, device number 3 [ 79.735147][ T47] usb 1-1: config 0 descriptor?? [ 79.755640][ T47] uvcvideo 1-1:0.0: Found UVC 0.00 device (18ec:3288) [ 79.773402][ T47] uvcvideo 1-1:0.0: No valid video chain found. [ 79.799377][ T6042] netlink: 8 bytes leftover after parsing attributes in process `syz.3.28'. [ 79.809021][ T6042] netlink: 8 bytes leftover after parsing attributes in process `syz.3.28'. [ 79.846518][ T6042] netlink: 256 bytes leftover after parsing attributes in process `syz.3.28'. [ 79.916792][ T29] audit: type=1326 audit(1771084988.564:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6045 comm="syz.2.29" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f826259bf79 code=0x0 [ 79.959707][ T6036] netlink: 52 bytes leftover after parsing attributes in process `syz.0.25'. [ 79.969983][ T6036] netlink: 'syz.0.25': attribute type 1 has an invalid length. [ 79.973652][ T6049] syz.3.30 uses obsolete (PF_INET,SOCK_PACKET) [ 80.043003][ T6052] mmap: syz.3.30 (6052) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 80.051027][ T9] usb 1-1: USB disconnect, device number 3 [ 80.057538][ T6052] capability: warning: `syz.3.30' uses deprecated v2 capabilities in a way that may be insecure [ 80.282178][ T10] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 80.323755][ T6067] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.335794][ T6067] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 80.356052][ T6069] lo: entered promiscuous mode [ 80.376847][ T6070] overlayfs: invalid origin (000000ca67081e5f112bed8ab4416592a5356da96db48150eae0040000006fe65c239a40022f00000000000000000000) [ 80.408892][ T6065] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 80.442728][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 80.449684][ T10] usb 3-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 80.462303][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.471175][ T6064] lo: left promiscuous mode [ 80.478045][ T10] usb 3-1: config 0 descriptor?? [ 80.490498][ T10] gspca_main: sunplus-2.14.0 probing 041e:400b [ 80.713155][ T6080] tmpfs: Unknown parameter '0x0000000000000003' [ 80.970949][ T10] gspca_sunplus: reg_w_riv err -71 [ 80.994579][ T10] sunplus 3-1:0.0: probe with driver sunplus failed with error -71 [ 81.030844][ T10] usb 3-1: USB disconnect, device number 6 [ 81.061050][ T6086] netlink: 36 bytes leftover after parsing attributes in process `syz.1.38'. [ 81.572575][ T10] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 81.611063][ T29] audit: type=1804 audit(1771084990.254:3): pid=6116 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.47" name="/newroot/12/file1" dev="fuse" ino=1 res=1 errno=0 [ 81.627349][ T6116] sg_write: data in/out 411065/130 bytes for SCSI command 0x89-- guessing data in; [ 81.627349][ T6116] program syz.2.47 not setting count and/or reply_len properly [ 81.649582][ T6118] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 81.651291][ T5915] usb 2-1: new low-speed USB device number 4 using dummy_hcd [ 81.746561][ T10] usb 4-1: config index 0 descriptor too short (expected 65183, got 72) [ 81.767197][ T10] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 81.779906][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.789324][ T10] usb 4-1: Product: syz [ 81.796639][ T10] usb 4-1: Manufacturer: syz [ 81.823577][ T10] usb 4-1: SerialNumber: syz [ 81.832363][ T5915] usb 2-1: Invalid ep0 maxpacket: 64 [ 81.855117][ T10] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 81.886751][ T5888] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 81.912218][ T9] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 81.990951][ T5915] usb 2-1: new low-speed USB device number 5 using dummy_hcd [ 82.084697][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 82.094691][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 82.097477][ T6125] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 82.113280][ T6125] UDF-fs: Scanning with blocksize 512 failed [ 82.114879][ T6099] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.129229][ T9] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 82.129321][ T6125] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 82.144842][ T9] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 82.149382][ T6125] UDF-fs: Scanning with blocksize 1024 failed [ 82.163780][ T6125] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 82.164756][ T6099] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.171526][ T6125] UDF-fs: Scanning with blocksize 2048 failed [ 82.179386][ T9] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 82.179410][ T9] usb 3-1: Product: syz [ 82.179423][ T9] usb 3-1: Manufacturer: syz [ 82.186122][ T6125] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 82.194547][ T5915] usb 2-1: Invalid ep0 maxpacket: 64 [ 82.198959][ T6125] UDF-fs: Scanning with blocksize 4096 failed [ 82.203348][ T5915] usb usb2-port1: attempt power cycle [ 82.234965][ T9] usb 3-1: SerialNumber: syz [ 82.238775][ T6099] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.258471][ T9] usb 3-1: config 0 descriptor?? [ 82.268540][ T6099] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.290940][ T6099] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.321044][ T6099] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.332787][ T5874] usb 4-1: USB disconnect, device number 4 [ 82.469909][ T6116] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.479024][ T6116] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.488065][ T6116] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.497042][ T6116] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.507375][ T6116] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.516541][ T6116] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.527062][ T47] usb 3-1: USB disconnect, device number 7 [ 82.552155][ T9] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 82.572184][ T5915] usb 2-1: new low-speed USB device number 6 using dummy_hcd [ 82.602819][ T5915] usb 2-1: Invalid ep0 maxpacket: 64 [ 82.713328][ T9] usb 1-1: too many configurations: 198, using maximum allowed: 8 [ 82.722808][ T9] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 82.731166][ T9] usb 1-1: can't read configurations, error -61 [ 82.737690][ T5915] usb 2-1: new low-speed USB device number 7 using dummy_hcd [ 82.762883][ T5915] usb 2-1: Invalid ep0 maxpacket: 64 [ 82.768421][ T5915] usb usb2-port1: unable to enumerate USB device [ 82.882209][ T9] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 82.932219][ T5888] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 82.940643][ T5888] ath9k_htc: Failed to initialize the device [ 82.948185][ T5874] usb 4-1: ath9k_htc: USB layer deinitialized [ 83.032940][ T9] usb 1-1: too many configurations: 198, using maximum allowed: 8 [ 83.043728][ T9] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 83.051322][ T9] usb 1-1: can't read configurations, error -61 [ 83.058294][ T9] usb usb1-port1: attempt power cycle [ 83.128655][ T6135] fuse: Unknown parameter 'Qzf' [ 83.252251][ T5874] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 83.402222][ T5874] usb 4-1: Using ep0 maxpacket: 32 [ 83.409004][ T5874] usb 4-1: config index 0 descriptor too short (expected 241, got 72) [ 83.417298][ T5874] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 83.422520][ T9] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 83.429093][ T5874] usb 4-1: New USB device found, idVendor=110a, idProduct=2210, bcdDevice=bd.da [ 83.446796][ T5874] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.453046][ T5933] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 83.465535][ T5874] usb 4-1: config 0 descriptor?? [ 83.465596][ T9] usb 1-1: too many configurations: 198, using maximum allowed: 8 [ 83.474494][ T5874] mos7840 4-1:0.0: Moschip 7840/7820 USB Serial Driver converter detected [ 83.491678][ T9] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 83.499667][ T9] usb 1-1: can't read configurations, error -61 [ 83.612127][ T5933] usb 3-1: Using ep0 maxpacket: 8 [ 83.621624][ T5933] usb 3-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 83.630845][ T5933] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.638953][ T9] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 83.646528][ T5933] usb 3-1: Product: syz [ 83.651438][ T5933] usb 3-1: Manufacturer: syz [ 83.656262][ T5933] usb 3-1: SerialNumber: syz [ 83.664346][ T5933] usb 3-1: config 0 descriptor?? [ 83.673831][ T9] usb 1-1: too many configurations: 198, using maximum allowed: 8 [ 83.685486][ T9] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 83.695860][ T9] usb 1-1: can't read configurations, error -61 [ 83.702646][ T9] usb usb1-port1: unable to enumerate USB device [ 83.874838][ T47] usb 3-1: USB disconnect, device number 8 [ 84.094389][ T5874] mos7840 ttyUSB0: probe with driver mos7840 failed with error -71 [ 84.109205][ T5874] mos7840 ttyUSB1: probe with driver mos7840 failed with error -71 [ 84.125738][ T5874] usb 4-1: USB disconnect, device number 5 [ 84.139204][ T5874] mos7840 4-1:0.0: device disconnected [ 84.355504][ T6141] ======================================================= [ 84.355504][ T6141] WARNING: The mand mount option has been deprecated and [ 84.355504][ T6141] and is ignored by this kernel. Remove the mand [ 84.355504][ T6141] option from the mount to silence this warning. [ 84.355504][ T6141] ======================================================= [ 84.404738][ T6141] overlayfs: failed to clone lowerpath [ 84.414003][ T6141] netlink: 'syz.1.56': attribute type 10 has an invalid length. [ 84.429244][ T6141] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.459726][ T6141] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 84.480030][ T6141] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 84.487849][ T6141] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 84.503932][ T6141] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 84.511517][ T6141] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 84.531719][ T6141] bond0: (slave batadv0): Releasing backup interface [ 84.738279][ T6153] sctp: [Deprecated]: syz.3.58 (pid 6153) Use of int in max_burst socket option deprecated. [ 84.738279][ T6153] Use struct sctp_assoc_value instead [ 84.977484][ T6162] faux_driver vkms: [drm] Unknown color mode 11; guessing buffer size. [ 85.088091][ T6167] overlay: ./file1 is not a directory [ 85.394404][ T6177] netlink: 4 bytes leftover after parsing attributes in process `syz.2.66'. [ 85.395467][ T6179] netlink: 4 bytes leftover after parsing attributes in process `syz.2.66'. [ 85.444330][ T5888] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 85.473647][ T6181] 9pnet_fd: p9_fd_create_tcp (6181): problem connecting socket to 127.0.0.1 [ 85.602209][ T5888] usb 2-1: Using ep0 maxpacket: 32 [ 85.613760][ T5888] usb 2-1: config 0 has an invalid interface number: 244 but max is 0 [ 85.624355][ T5888] usb 2-1: config 0 has no interface number 0 [ 85.635334][ T5888] usb 2-1: config 0 interface 244 has no altsetting 0 [ 85.645956][ T6188] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 85.649435][ T5888] usb 2-1: New USB device found, idVendor=0e41, idProduct=4750, bcdDevice=26.9c [ 85.672069][ T5888] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.685816][ T5888] usb 2-1: Product: syz [ 85.698913][ T5888] usb 2-1: Manufacturer: syz [ 85.704784][ T5888] usb 2-1: SerialNumber: syz [ 85.714952][ T5888] usb 2-1: config 0 descriptor?? [ 85.727733][ T5888] snd_usb_toneport 2-1:0.244: Line 6 GuitarPort found [ 85.908343][ T6195] netlink: 'syz.2.71': attribute type 1 has an invalid length. [ 85.928504][ T6189] Zero length message leads to an empty skb [ 85.935718][ T5888] snd_usb_toneport 2-1:0.244: cannot get proper max packet size [ 85.947102][ T6195] netlink: 128 bytes leftover after parsing attributes in process `syz.2.71'. [ 85.956051][ T5888] snd_usb_toneport 2-1:0.244: Line 6 GuitarPort now disconnected [ 85.963477][ T5888] snd_usb_toneport 2-1:0.244: probe with driver snd_usb_toneport failed with error -22 [ 85.977426][ T6195] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 86.002387][ T6195] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 86.017186][ T6195] capability: warning: `syz.2.71' uses 32-bit capabilities (legacy support in use) [ 86.138724][ T6174] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.155653][ T6174] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.172144][ T5951] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 86.174115][ T5933] usb 2-1: USB disconnect, device number 8 [ 86.342127][ T5951] usb 4-1: Using ep0 maxpacket: 16 [ 86.353800][ T5951] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 86.365757][ T5951] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 86.378635][ T5951] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 86.390746][ T5951] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 86.400039][ T5951] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.408138][ T5951] usb 4-1: Product: syz [ 86.412379][ T5951] usb 4-1: Manufacturer: syz [ 86.417915][ T5951] usb 4-1: SerialNumber: syz [ 86.602229][ T5933] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 86.753090][ T5933] usb 1-1: Using ep0 maxpacket: 32 [ 86.760058][ T5933] usb 1-1: config 0 has an invalid interface number: 196 but max is 0 [ 86.768484][ T5933] usb 1-1: config 0 has no interface number 0 [ 86.782384][ T797] cfg80211: failed to load regulatory.db [ 86.789734][ T5933] usb 1-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 86.799976][ T5933] usb 1-1: config 0 interface 196 has no altsetting 0 [ 86.809211][ T5933] usb 1-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 86.819703][ T5933] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.828619][ T5933] usb 1-1: Product: syz [ 86.836198][ T5951] usb 4-1: 0:2 : does not exist [ 86.840042][ T5933] usb 1-1: Manufacturer: syz [ 86.845791][ T5933] usb 1-1: SerialNumber: syz [ 86.853796][ T5933] usb 1-1: config 0 descriptor?? [ 86.860290][ T6219] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 86.878407][ T5951] usb 4-1: 1:0: failed to get current value for ch 0 (-22) [ 86.963568][ T5951] usb 4-1: USB disconnect, device number 6 [ 86.969652][ T47] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 87.001150][ T5834] udevd[5834]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 87.074092][ T6233] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.086559][ T6233] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.114346][ T6233] dlm: Unknown command passed to DLM device : 0 [ 87.114346][ T6233] [ 87.146367][ T6219] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 87.172181][ T47] usb 2-1: Using ep0 maxpacket: 16 [ 87.179229][ T47] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 87.187648][ T47] usb 2-1: config 0 has no interface number 0 [ 87.197213][ T47] usb 2-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 87.220190][ T47] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.238089][ T47] usb 2-1: Product: syz [ 87.242936][ T47] usb 2-1: Manufacturer: syz [ 87.247612][ T47] usb 2-1: SerialNumber: syz [ 87.263716][ T47] usb 2-1: config 0 descriptor?? [ 87.273293][ T47] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 87.309559][ T6241] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.324256][ T6241] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.345880][ T6241] random: crng reseeded on system resumption [ 87.432358][ T5951] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 87.543529][ T5874] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 87.572251][ T5951] usb 4-1: device descriptor read/64, error -71 [ 87.682230][ T5874] usb 3-1: device descriptor read/64, error -71 [ 87.812176][ T5951] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 87.922276][ T5874] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 87.942173][ T5951] usb 4-1: device descriptor read/64, error -71 [ 88.056116][ T5874] usb 3-1: device descriptor read/64, error -71 [ 88.062743][ T5951] usb usb4-port1: attempt power cycle [ 88.172424][ T5874] usb usb3-port1: attempt power cycle [ 88.300923][ T6222] netlink: 60 bytes leftover after parsing attributes in process `syz.1.78'. [ 88.311791][ T6222] netlink: 60 bytes leftover after parsing attributes in process `syz.1.78'. [ 88.385112][ T47] gspca_spca1528: reg_w err -71 [ 88.391384][ T47] spca1528 2-1:0.1: probe with driver spca1528 failed with error -71 [ 88.403995][ T5951] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 88.415039][ T47] usb 2-1: USB disconnect, device number 9 [ 88.444342][ T5951] usb 4-1: device descriptor read/8, error -71 [ 88.512230][ T5874] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 88.532783][ T5874] usb 3-1: device descriptor read/8, error -71 [ 88.682140][ T5951] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 88.709920][ T5951] usb 4-1: device descriptor read/8, error -71 [ 88.772306][ T5874] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 88.793344][ T5874] usb 3-1: device descriptor read/8, error -71 [ 88.823447][ T5951] usb usb4-port1: unable to enumerate USB device [ 88.903238][ T5874] usb usb3-port1: unable to enumerate USB device [ 89.182159][ T5874] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 89.362246][ T5874] usb 2-1: Using ep0 maxpacket: 32 [ 89.372425][ T5874] usb 2-1: config 0 has an invalid interface number: 16 but max is 0 [ 89.381349][ T5874] usb 2-1: config 0 has no interface number 0 [ 89.390478][ T5874] usb 2-1: config 0 interface 16 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 89.401199][ T5874] usb 2-1: config 0 interface 16 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 89.414638][ T5874] usb 2-1: New USB device found, idVendor=0499, idProduct=102a, bcdDevice=85.2d [ 89.429872][ T5933] ipheth 1-1:0.196: ipheth_get_macaddr: usb_control_msg: -71 [ 89.436952][ T5874] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.458454][ T5874] usb 2-1: Product: syz [ 89.465331][ T5874] usb 2-1: Manufacturer: syz [ 89.470211][ T5874] usb 2-1: SerialNumber: syz [ 89.473212][ T5933] ipheth 1-1:0.196: probe with driver ipheth failed with error -71 [ 89.482605][ T5874] usb 2-1: config 0 descriptor?? [ 89.495736][ T6244] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 89.507161][ T6244] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 89.527297][ T5933] usb 1-1: USB disconnect, device number 8 [ 89.539405][ T5874] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 89.555139][ T6252] overlayfs: missing 'lowerdir' [ 90.147118][ T6270] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 90.155160][ T6270] UDF-fs: Scanning with blocksize 512 failed [ 90.161766][ T6270] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 90.171132][ T6270] UDF-fs: Scanning with blocksize 1024 failed [ 90.177789][ T6270] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 90.185564][ T6270] UDF-fs: Scanning with blocksize 2048 failed [ 90.192185][ T6270] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 90.202309][ T6270] UDF-fs: Scanning with blocksize 4096 failed [ 90.471823][ T6285] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 90.538161][ T6285] CIFS mount error: No usable UNC path provided in device string! [ 90.538161][ T6285] [ 90.563823][ T6290] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 90.575955][ T6285] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 90.587848][ T6290] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 90.599453][ T6290] overlayfs: missing 'lowerdir' [ 90.757188][ T6297] support for cryptoloop has been removed. Use dm-crypt instead. [ 90.790647][ T6297] netlink: 'syz.3.92': attribute type 4 has an invalid length. [ 90.804329][ T47] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 90.889094][ T6305] netlink: 24 bytes leftover after parsing attributes in process `syz.2.94'. [ 90.984004][ T47] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 90.992304][ T47] usb 1-1: config 0 has no interface number 0 [ 91.006715][ T47] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 91.017283][ T47] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.027094][ T47] usb 1-1: Product: syz [ 91.031350][ T47] usb 1-1: Manufacturer: syz [ 91.042210][ T47] usb 1-1: SerialNumber: syz [ 91.055366][ T47] usb 1-1: config 0 descriptor?? [ 91.270131][ T6291] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 91.278918][ T6291] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 91.288526][ T47] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 91.301212][ T47] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 91.312125][ T5933] usb 3-1: new low-speed USB device number 13 using dummy_hcd [ 91.312491][ T47] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 91.328078][ T47] usb 1-1: media controller created [ 91.345554][ T47] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 91.442121][ T5933] usb 3-1: device descriptor read/64, error -71 [ 91.489743][ T6291] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 91.498829][ T6291] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 91.507972][ T47] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 91.539878][ T47] usb 1-1: USB disconnect, device number 9 [ 91.692199][ T5933] usb 3-1: new low-speed USB device number 14 using dummy_hcd [ 91.822231][ T5933] usb 3-1: device descriptor read/64, error -71 [ 91.942906][ T5933] usb usb3-port1: attempt power cycle [ 91.952358][ T797] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 91.972197][ T47] usb 2-1: USB disconnect, device number 10 [ 92.077694][ T6319] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1340 [ 92.104006][ T797] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 92.111765][ T797] usb 4-1: can't read configurations, error -61 [ 92.252662][ T797] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 92.282228][ T5933] usb 3-1: new low-speed USB device number 15 using dummy_hcd [ 92.302927][ T5933] usb 3-1: device descriptor read/8, error -71 [ 92.352153][ T47] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 92.404264][ T797] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 92.411934][ T797] usb 4-1: can't read configurations, error -61 [ 92.419675][ T797] usb usb4-port1: attempt power cycle [ 92.442188][ T5888] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 92.524367][ T47] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 92.533350][ T47] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 92.543596][ T47] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 92.552148][ T5933] usb 3-1: new low-speed USB device number 16 using dummy_hcd [ 92.554764][ T47] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 92.570549][ T47] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.578646][ T47] usb 2-1: Product: 숪タ≧酕〵ꏓꣶ泥鹟茇쓙쎙萰 [ 92.583079][ T5933] usb 3-1: device descriptor read/8, error -71 [ 92.586240][ T47] usb 2-1: Manufacturer: ᖏ始҃ⵠ͙㗹뿂当岂녇漢㫊簾며礍㡟ꋷṆƭ궳桑琊庭鶖૝턀ⷘ⁽囃쉹聇㿥珯㕺愆 [ 92.592936][ T5888] usb 1-1: Using ep0 maxpacket: 32 [ 92.606244][ T47] usb 2-1: SerialNumber: ⸩詆ㄕ䗉⾔∖⒙洸務刏梅禘짹韩㩷콗ᄕᔝﺈታ穇㟉 [ 92.622180][ T5888] usb 1-1: config 0 has an invalid interface number: 29 but max is 0 [ 92.630358][ T5888] usb 1-1: config 0 has no interface number 0 [ 92.642716][ T5888] usb 1-1: config 0 interface 29 has no altsetting 0 [ 92.651968][ T5888] usb 1-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 92.665687][ T5888] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.676420][ T5888] usb 1-1: Product: syz [ 92.680612][ T5888] usb 1-1: Manufacturer: syz [ 92.685327][ T5888] usb 1-1: SerialNumber: syz [ 92.692642][ T5888] usb 1-1: config 0 descriptor?? [ 92.713469][ T5933] usb usb3-port1: unable to enumerate USB device [ 92.762201][ T797] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 92.787024][ T797] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 92.794793][ T797] usb 4-1: can't read configurations, error -61 [ 92.889421][ T6324] sctp: [Deprecated]: syz.1.98 (pid 6324) Use of int in max_burst socket option. [ 92.889421][ T6324] Use struct sctp_assoc_value instead [ 92.920527][ T47] usb 2-1: 0:2 : does not exist [ 92.924146][ T5888] peak_usb 1-1:0.29: PEAK-System PCAN-USB X6 v0 fw v0.0.0 (2 channels) [ 92.934401][ T797] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 92.958961][ T47] usb 2-1: USB disconnect, device number 11 [ 92.976488][ T797] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 92.988308][ T5834] udevd[5834]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 93.004510][ T797] usb 4-1: can't read configurations, error -61 [ 93.015753][ T797] usb usb4-port1: unable to enumerate USB device [ 93.127535][ T5888] peak_usb 1-1:0.29 can0: unable to request usb[type=2 value=5] err=-71 [ 93.136881][ T5888] peak_usb 1-1:0.29: unable to tell PCAN-USB X6 driver is loaded (err -71) [ 93.175724][ T5888] peak_usb 1-1:0.29: probe with driver peak_usb failed with error -71 [ 93.188604][ T5888] usb 1-1: USB disconnect, device number 10 [ 93.938047][ T29] audit: type=1400 audit(1771085002.584:4): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=6338 comm="syz.0.105" [ 94.312240][ T5888] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 94.353784][ T6346] libceph: resolve '4' (ret=-3): failed [ 94.472172][ T5888] usb 1-1: Using ep0 maxpacket: 8 [ 94.483947][ T5888] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 94.502104][ T5888] usb 1-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00 [ 94.511966][ T5888] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.535715][ T5888] usb 1-1: config 0 descriptor?? [ 94.778981][ T5888] usbhid 1-1:0.0: can't add hid device: -71 [ 94.792250][ T5888] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 94.804181][ T5888] usb 1-1: USB disconnect, device number 11 [ 94.918628][ T6358] program syz.0.110 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 95.066972][ T6361] netlink: 132 bytes leftover after parsing attributes in process `syz.1.112'. [ 95.112154][ T797] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 95.263707][ T797] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 95.286751][ T797] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 95.298334][ T797] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 95.312855][ T797] usb 4-1: New USB device found, idVendor=2040, idProduct=2000, bcdDevice=65.72 [ 95.322263][ T797] usb 4-1: New USB device strings: Mfr=151, Product=0, SerialNumber=0 [ 95.336159][ T797] usb 4-1: Manufacturer: syz [ 95.350426][ T797] usb 4-1: config 0 descriptor?? [ 95.359501][ T797] smsusb:smsusb_probe: board id=9, interface number 0 [ 95.369202][ T797] smsusb:smsusb_probe: Device initialized with return code -19 [ 95.475914][ T6372] syzkaller1: entered promiscuous mode [ 95.481601][ T6372] syzkaller1: entered allmulticast mode [ 95.574367][ T797] usb 4-1: USB disconnect, device number 15 [ 95.586575][ T6372] netlink: 4 bytes leftover after parsing attributes in process `syz.1.115'. [ 96.012322][ T47] usb 1-1: new low-speed USB device number 12 using dummy_hcd [ 96.162210][ T47] usb 1-1: Invalid ep0 maxpacket: 32 [ 96.293069][ T47] usb 1-1: new low-speed USB device number 13 using dummy_hcd [ 96.294657][ T6390] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.329678][ T6390] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.452402][ T47] usb 1-1: Invalid ep0 maxpacket: 32 [ 96.459022][ T47] usb usb1-port1: attempt power cycle [ 96.464585][ T5874] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 96.612544][ T5874] usb 4-1: device descriptor read/64, error -71 [ 96.622169][ T5875] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 96.783644][ T5875] usb 2-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0x44, changing to 0x4 [ 96.796845][ T5875] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x4 has an invalid bInterval 0, changing to 10 [ 96.808349][ T5875] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x4 has invalid maxpacket 16706, setting to 64 [ 96.820793][ T5875] usb 2-1: config 0 interface 0 has no altsetting 0 [ 96.827628][ T47] usb 1-1: new low-speed USB device number 14 using dummy_hcd [ 96.839510][ T5875] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 96.849027][ T5875] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 96.858375][ T5874] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 96.870008][ T5875] usb 2-1: Product: syz [ 96.874479][ T47] usb 1-1: Invalid ep0 maxpacket: 32 [ 96.881058][ T5875] usb 2-1: Manufacturer: syz [ 96.887656][ T5875] usb 2-1: SerialNumber: syz [ 96.896740][ T5875] usb 2-1: config 0 descriptor?? [ 96.902543][ T6389] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 96.915954][ T5875] usb 2-1: selecting invalid altsetting 0 [ 97.002191][ T5874] usb 4-1: device descriptor read/64, error -71 [ 97.008679][ T47] usb 1-1: new low-speed USB device number 15 using dummy_hcd [ 97.022639][ T6375] syz.2.116 (6375): drop_caches: 3 [ 97.033495][ T47] usb 1-1: Invalid ep0 maxpacket: 32 [ 97.044439][ T47] usb usb1-port1: unable to enumerate USB device [ 97.112658][ T5875] usb 2-1: USB disconnect, device number 12 [ 97.122476][ T5874] usb usb4-port1: attempt power cycle [ 97.332422][ T5888] usb 3-1: new low-speed USB device number 17 using dummy_hcd [ 97.472173][ T5874] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 97.494161][ T5874] usb 4-1: device descriptor read/8, error -71 [ 97.501213][ T5888] usb 3-1: New USB device found, idVendor=046d, idProduct=08b1, bcdDevice=6d.2a [ 97.510612][ T5888] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.520498][ T5888] usb 3-1: config 0 descriptor?? [ 97.528470][ T5888] pwc: Logitech QuickCam Notebook Pro USB webcam detected. [ 97.732305][ T5874] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 97.752929][ T5874] usb 4-1: device descriptor read/8, error -71 [ 97.862485][ T5874] usb usb4-port1: unable to enumerate USB device [ 97.912138][ T9] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 97.931820][ T6392] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.940595][ T6392] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.950642][ T6392] netlink: 54 bytes leftover after parsing attributes in process `syz.2.121'. [ 97.964552][ T6392] IPVS: ip_vs_edit_dest(): server weight less than zero [ 97.973657][ T797] IPVS: starting estimator thread 0... [ 97.975246][ T6392] Mount JFS Failure: -5 [ 97.983883][ T6392] jfs_mount failed w/return code = -5 [ 97.995867][ T5888] pwc: send_video_command error -71 [ 98.001926][ T5888] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 98.010145][ T5888] Philips webcam 3-1:0.0: probe with driver Philips webcam failed with error -71 [ 98.021134][ T5888] usb 3-1: USB disconnect, device number 17 [ 98.062366][ T6396] IPVS: using max 36 ests per chain, 86400 per kthread [ 98.073913][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 98.083809][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 98.097902][ T9] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 98.107313][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.115441][ T9] usb 2-1: Product: syz [ 98.119695][ T9] usb 2-1: Manufacturer: syz [ 98.124331][ T9] usb 2-1: SerialNumber: syz [ 98.130786][ T9] usb 2-1: config 0 descriptor?? [ 98.368503][ T9] usb 2-1: USB disconnect, device number 13 [ 98.549909][ T6398] pim6reg1: entered promiscuous mode [ 98.556267][ T6398] pim6reg1: entered allmulticast mode [ 98.735129][ T6400] netlink: 64 bytes leftover after parsing attributes in process `syz.2.124'. [ 98.748312][ T6400] program syz.2.124 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 98.951111][ T6410] netlink: 24 bytes leftover after parsing attributes in process `syz.2.129'. [ 99.056287][ T6413] netlink: 'syz.2.130': attribute type 30 has an invalid length. [ 99.192254][ T5874] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 99.199930][ T5875] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 99.246658][ T6416] netlink: 'syz.3.131': attribute type 11 has an invalid length. [ 99.254673][ T6416] netlink: 224 bytes leftover after parsing attributes in process `syz.3.131'. [ 99.300266][ T6418] netlink: 176 bytes leftover after parsing attributes in process `syz.3.132'. [ 99.315054][ T6420] netlink: 176 bytes leftover after parsing attributes in process `syz.3.132'. [ 99.352135][ T5875] usb 2-1: Using ep0 maxpacket: 8 [ 99.357318][ T5874] usb 1-1: Using ep0 maxpacket: 16 [ 99.368308][ T5875] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 99.379643][ T5874] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 99.390995][ T5875] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 57637, setting to 1024 [ 99.402498][ T5874] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 99.417380][ T5875] usb 2-1: New USB device found, idVendor=0c70, idProduct=f00a, bcdDevice= 0.00 [ 99.428158][ T5874] usb 1-1: New USB device found, idVendor=046d, idProduct=c537, bcdDevice= 0.00 [ 99.437341][ T5875] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.445550][ T5874] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.456369][ T5875] usb 2-1: config 0 descriptor?? [ 99.469687][ T5874] usb 1-1: config 0 descriptor?? [ 99.685214][ T6407] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.696266][ T6407] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.741958][ T6407] netlink: 12 bytes leftover after parsing attributes in process `syz.0.126'. [ 99.752320][ T47] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 99.882865][ T5875] aquacomputer_d5next 0003:0C70:F00A.0002: collection stack underflow [ 99.891712][ T5875] aquacomputer_d5next 0003:0C70:F00A.0002: item 0 4 0 12 parsing failed [ 99.901288][ T5875] aquacomputer_d5next 0003:0C70:F00A.0002: probe with driver aquacomputer_d5next failed with error -22 [ 99.914214][ T47] usb 4-1: config 0 has an invalid interface number: 111 but max is 0 [ 99.925298][ T47] usb 4-1: config 0 has no interface number 0 [ 99.932638][ T47] usb 4-1: New USB device found, idVendor=05a9, idProduct=8065, bcdDevice=41.96 [ 99.941710][ T47] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.951891][ T47] usb 4-1: config 0 descriptor?? [ 99.957555][ T5874] hid (null): unknown global tag 0xd [ 99.965462][ T47] gspca_main: ov534_9-2.14.0 probing 05a9:8065 [ 99.975111][ T5874] logitech-djreceiver 0003:046D:C537.0003: unknown global tag 0xd [ 99.983328][ T5951] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 99.991067][ T5874] logitech-djreceiver 0003:046D:C537.0003: item 0 1 1 13 parsing failed [ 100.001262][ T5874] logitech-djreceiver 0003:046D:C537.0003: logi_dj_probe: parse failed [ 100.009692][ T5874] logitech-djreceiver 0003:046D:C537.0003: probe with driver logitech-djreceiver failed with error -22 [ 100.085387][ T5874] usb 2-1: USB disconnect, device number 14 [ 100.146625][ T5951] usb 3-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 100.156046][ T5951] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.165805][ T5888] usb 1-1: USB disconnect, device number 16 [ 100.176940][ T5951] usb 3-1: config 0 descriptor?? [ 100.536596][ T47] gspca_ov534_9: reg_w failed -71 [ 100.799019][ T5951] pegasus 3-1:0.0: probe with driver pegasus failed with error -32 [ 100.843010][ T47] gspca_ov534_9: Unknown sensor 0000 [ 100.843098][ T47] ov534_9 4-1:0.111: probe with driver ov534_9 failed with error -22 [ 100.844902][ T6451] fuse: Bad value for 'user_id' [ 100.862422][ T47] usb 4-1: USB disconnect, device number 20 [ 100.877287][ T6447] dvmrp12: entered allmulticast mode [ 100.893355][ T6451] fuse: Bad value for 'user_id' [ 101.726795][ T6472] netlink: 16 bytes leftover after parsing attributes in process `syz.0.145'. [ 101.833463][ T47] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 101.892396][ T5951] usb 4-1: new full-speed USB device number 21 using dummy_hcd [ 101.982148][ T47] usb 2-1: Using ep0 maxpacket: 32 [ 101.989799][ T47] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 102.001409][ T47] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 102.012504][ T47] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 8960, setting to 1024 [ 102.023587][ T47] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 102.034861][ T47] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 102.047908][ T47] usb 2-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 102.058733][ T47] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.067028][ T47] usb 2-1: Product: syz [ 102.071260][ T47] usb 2-1: Manufacturer: syz [ 102.076180][ T47] usb 2-1: SerialNumber: syz [ 102.086142][ T47] usb 2-1: config 0 descriptor?? [ 102.092232][ T5951] usb 4-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 102.103011][ T5951] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.111215][ T5951] usb 4-1: Product: syz [ 102.115514][ T5951] usb 4-1: Manufacturer: syz [ 102.120124][ T5951] usb 4-1: SerialNumber: syz [ 102.129492][ T5951] usb 4-1: config 0 descriptor?? [ 102.143243][ T5933] usb 1-1: new low-speed USB device number 17 using dummy_hcd [ 102.272204][ T5933] usb 1-1: device descriptor read/64, error -71 [ 102.307061][ T47] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 102.315668][ T47] input input8: Device does not respond to id packet M [ 102.325321][ T47] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 102.335656][ T47] input input8: Device does not respond to id packet P [ 102.344282][ T47] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 102.350522][ T47] input input8: Device does not respond to id packet B [ 102.361864][ T47] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 102.371554][ T47] input input8: Device does not respond to id packet N [ 102.382627][ T47] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 102.390941][ T47] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 102.407423][ T47] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 102.422647][ T47] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 102.433057][ T47] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input8 [ 102.473787][ T6490] sp0: Synchronizing with TNC [ 102.476657][ T47] usb 2-1: USB disconnect, device number 15 [ 102.476707][ C1] iforce 2-1:0.0: iforce_usb_irq - usb_submit_urb failed with result -19 [ 102.505301][ T6490] sp0: Found TNC [ 102.512215][ T5933] usb 1-1: new low-speed USB device number 18 using dummy_hcd [ 102.513426][ T6490] process 'syz.1.149' launched './file2' with NULL argv: empty string added [ 102.543207][ T6490] netlink: 24 bytes leftover after parsing attributes in process `syz.1.149'. [ 102.555503][ T6489] [U] ` [ 102.560299][ T5951] airspy 4-1:0.0: Board ID: 00 [ 102.567195][ T5951] airspy 4-1:0.0: Firmware version: [ 102.652307][ T5933] usb 1-1: device descriptor read/64, error -71 [ 102.741645][ T5888] usb 3-1: USB disconnect, device number 18 [ 102.762514][ T5933] usb usb1-port1: attempt power cycle [ 102.937258][ T6502] virtio-fs: tag not found [ 103.142436][ T5933] usb 1-1: new low-speed USB device number 19 using dummy_hcd [ 103.223617][ T5933] usb 1-1: device descriptor read/8, error -71 [ 103.313733][ T47] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 103.396619][ T5951] airspy 4-1:0.0: usb_control_msg() failed -71 request 0f [ 103.407498][ T5951] airspy 4-1:0.0: Registered as swradio24 [ 103.418526][ T5951] airspy 4-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 103.434261][ T5951] usb 4-1: USB disconnect, device number 21 [ 103.462271][ T5933] usb 1-1: new low-speed USB device number 20 using dummy_hcd [ 103.483534][ T5933] usb 1-1: device descriptor read/8, error -71 [ 103.494123][ T47] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 103.505798][ T47] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 103.517864][ T47] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 103.530820][ T47] usb 3-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 103.532111][ T797] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 103.540456][ T47] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.559674][ T47] usb 3-1: config 0 descriptor?? [ 103.592385][ T5933] usb usb1-port1: unable to enumerate USB device [ 103.715470][ T797] usb 2-1: unable to get BOS descriptor or descriptor too short [ 103.725027][ T797] usb 2-1: not running at top speed; connect to a high speed hub [ 103.739321][ T797] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 147, changing to 4 [ 103.752955][ T797] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 103.762262][ T797] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.770323][ T797] usb 2-1: Product: syz [ 103.774803][ T797] usb 2-1: Manufacturer: syz [ 103.779490][ T797] usb 2-1: SerialNumber: syz [ 103.991793][ T6506] netlink: 8 bytes leftover after parsing attributes in process `syz.1.155'. [ 103.995785][ T47] steelseries 0003:1038:12B6.0004: unknown main item tag 0x0 [ 104.013499][ T47] steelseries 0003:1038:12B6.0004: unknown main item tag 0x0 [ 104.020938][ T797] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 104.030198][ T47] steelseries 0003:1038:12B6.0004: unknown main item tag 0x0 [ 104.030310][ T797] usb 2-1: unit 0 not found! [ 104.038127][ T47] steelseries 0003:1038:12B6.0004: unknown main item tag 0x0 [ 104.048203][ T797] usb 2-1: 5:0: cannot get min/max values for control 2 (id 5) [ 104.050095][ T47] steelseries 0003:1038:12B6.0004: unknown main item tag 0x0 [ 104.075822][ T47] steelseries 0003:1038:12B6.0004: unknown main item tag 0x0 [ 104.084089][ T47] steelseries 0003:1038:12B6.0004: unknown main item tag 0x0 [ 104.087045][ T797] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5) [ 104.091752][ T47] steelseries 0003:1038:12B6.0004: unknown main item tag 0x0 [ 104.107918][ T47] steelseries 0003:1038:12B6.0004: unknown main item tag 0x0 [ 104.115600][ T47] steelseries 0003:1038:12B6.0004: unknown main item tag 0x0 [ 104.119857][ T797] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5) [ 104.136313][ T47] steelseries 0003:1038:12B6.0004: hidraw0: USB HID vff.fc Device [HID 1038:12b6] on usb-dummy_hcd.2-1/input0 [ 104.171383][ T797] usb 2-1: USB disconnect, device number 16 [ 104.212581][ T5875] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 104.382240][ T5875] usb 4-1: Using ep0 maxpacket: 16 [ 104.388983][ T5875] usb 4-1: config 0 interface 0 altsetting 253 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 104.400334][ T5875] usb 4-1: config 0 interface 0 has no altsetting 0 [ 104.407026][ T5875] usb 4-1: New USB device found, idVendor=04d9, idProduct=a072, bcdDevice= 0.00 [ 104.416765][ T5875] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.426939][ T5875] usb 4-1: config 0 descriptor?? [ 104.465816][ T47] usb 3-1: USB disconnect, device number 19 [ 104.822134][ T24] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 104.857856][ T5875] holtek_mouse 0003:04D9:A072.0005: hidraw0: USB HID v0.05 Device [HID 04d9:a072] on usb-dummy_hcd.3-1/input0 [ 104.955861][ T6517] netlink: 'syz.0.158': attribute type 1 has an invalid length. [ 104.976037][ T24] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 105.007639][ T24] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 105.050167][ T24] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 105.068209][ T24] usb 2-1: config 1 has no interface number 0 [ 105.074631][ T24] usb 2-1: too many endpoints for config 1 interface 1 altsetting 1: 32, using maximum allowed: 30 [ 105.102562][ T24] usb 2-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 105.119628][ T24] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 105.132115][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.140156][ T24] usb 2-1: Product: syz [ 105.145267][ T24] usb 2-1: Manufacturer: syz [ 105.149865][ T24] usb 2-1: SerialNumber: syz [ 105.282127][ T5888] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 105.352219][ T47] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 105.363666][ T24] cdc_mbim 2-1:1.1: probe with driver cdc_mbim failed with error -71 [ 105.375842][ T24] usb 2-1: USB disconnect, device number 17 [ 105.422329][ T5888] usb 3-1: device descriptor read/64, error -71 [ 105.522176][ T47] usb 1-1: Using ep0 maxpacket: 32 [ 105.529032][ T47] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 105.540079][ T47] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 105.550460][ T47] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 105.559741][ T47] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.571998][ T47] usb 1-1: config 0 descriptor?? [ 105.584322][ T47] hub 1-1:0.0: USB hub found [ 105.662174][ T5888] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 105.703792][ T6533] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.713655][ T6533] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.791858][ T47] hub 1-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 105.812421][ T5888] usb 3-1: device descriptor read/64, error -71 [ 105.922514][ T5888] usb usb3-port1: attempt power cycle [ 106.066708][ T6543] random: crng reseeded on system resumption [ 106.198557][ T47] usbhid 1-1:0.0: can't add hid device: -71 [ 106.204870][ T47] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 106.237347][ T47] usb 1-1: USB disconnect, device number 21 [ 106.285487][ T5888] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 106.312842][ T5888] usb 3-1: device descriptor read/8, error -71 [ 106.383817][ T24] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 106.545683][ T24] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 106.554957][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.562142][ T5888] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 106.563192][ T24] usb 2-1: Product: syz [ 106.575356][ T24] usb 2-1: Manufacturer: syz [ 106.582125][ T24] usb 2-1: SerialNumber: syz [ 106.592982][ T5888] usb 3-1: device descriptor read/8, error -71 [ 106.593192][ T24] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 106.622128][ T47] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 106.702547][ T5888] usb usb3-port1: unable to enumerate USB device [ 107.107711][ T6559] loop8: detected capacity change from 0 to 1 [ 107.117792][ T6559] Dev loop8: unable to read RDB block 1 [ 107.123803][ T6559] loop8: unable to read partition table [ 107.129645][ T6559] loop8: partition table beyond EOD, truncated [ 107.136002][ T6559] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 107.191623][ T6562] netlink: 'syz.1.167': attribute type 10 has an invalid length. [ 107.244111][ T6564] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.254678][ T6564] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.322323][ T6567] openvswitch: netlink: IP tunnel dst address not specified [ 107.435801][ T6574] sctp: [Deprecated]: syz.0.175 (pid 6574) Use of int in max_burst socket option. [ 107.435801][ T6574] Use struct sctp_assoc_value instead [ 107.652332][ T47] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 107.659592][ T47] ath9k_htc: Failed to initialize the device [ 107.685320][ T47] usb 2-1: ath9k_htc: USB layer deinitialized [ 107.692952][ T5875] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 107.807831][ T6577] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.818044][ T6577] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.830930][ T6578] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.840000][ T6578] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.851396][ T5875] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 107.860813][ T5875] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.869984][ T5875] usb 1-1: Product: syz [ 107.875055][ T5875] usb 1-1: Manufacturer: syz [ 107.880113][ T5875] usb 1-1: SerialNumber: syz [ 107.895346][ T5875] usb 1-1: config 0 descriptor?? [ 107.918168][ T24] usb 2-1: USB disconnect, device number 18 [ 107.959883][ T6582] netlink: 14 bytes leftover after parsing attributes in process `syz.3.177'. [ 108.108646][ T5875] usb-storage 1-1:0.0: USB Mass Storage device detected [ 108.232742][ T6598] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.241691][ T6598] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.305537][ T5875] usb 1-1: USB disconnect, device number 22 [ 108.372212][ T5835] Bluetooth: hci3: command tx timeout [ 108.661171][ T6605] tmpfs: Bad value for 'mpol' [ 109.175045][ T5888] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 109.234034][ T5933] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 109.342232][ T5888] usb 1-1: Using ep0 maxpacket: 32 [ 109.351564][ T5888] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 109.364884][ T5888] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 109.375102][ T5888] usb 1-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 109.384503][ T5888] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.404548][ T5888] usb 1-1: config 0 descriptor?? [ 109.412213][ T5933] usb 2-1: Using ep0 maxpacket: 16 [ 109.421340][ T5933] usb 2-1: config 0 has an invalid interface number: 240 but max is 0 [ 109.429834][ T5933] usb 2-1: config 0 has no interface number 0 [ 109.438663][ T5933] usb 2-1: New USB device found, idVendor=041e, idProduct=4018, bcdDevice=ed.b4 [ 109.447985][ T5933] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.457067][ T5933] usb 2-1: Product: syz [ 109.461495][ T5933] usb 2-1: Manufacturer: syz [ 109.466414][ T5933] usb 2-1: SerialNumber: syz [ 109.475444][ T5933] usb 2-1: config 0 descriptor?? [ 109.484687][ T5933] gspca_main: spca508-2.14.0 probing 041e:4018 [ 109.593369][ T6621] netlink: 1372 bytes leftover after parsing attributes in process `syz.3.189'. [ 109.686762][ T5933] gspca_spca508: reg_read err -32 [ 109.700394][ T5933] gspca_spca508: reg_read err -32 [ 109.706756][ T5933] gspca_spca508: reg_read err -32 [ 109.723436][ T5933] gspca_spca508: reg_read err -32 [ 109.732552][ T6617] netlink: 37 bytes leftover after parsing attributes in process `syz.1.187'. [ 109.745342][ T5933] gspca_spca508: reg_read err -32 [ 109.767451][ T6631] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.777319][ T6631] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.819378][ T5888] hid_parser_main: 6 callbacks suppressed [ 109.819420][ T5888] zydacron 0003:13EC:0006.0006: unknown main item tag 0x0 [ 109.833159][ T5888] zydacron 0003:13EC:0006.0006: unknown main item tag 0x0 [ 109.842478][ T5888] zydacron 0003:13EC:0006.0006: hidraw1: USB HID v0.00 Device [HID 13ec:0006] on usb-dummy_hcd.0-1/input0 [ 109.959122][ T5933] gspca_spca508: reg write: error -71 [ 109.966199][ T5933] spca508 2-1:0.240: probe with driver spca508 failed with error -71 [ 109.984247][ T5933] usb 2-1: USB disconnect, device number 19 [ 110.018596][ T24] usb 1-1: USB disconnect, device number 23 [ 110.381068][ T6641] binder: BINDER_SET_CONTEXT_MGR already set [ 110.387505][ T6641] binder: 6639:6641 ioctl 4018620d 2000000000c0 returned -16 [ 110.547638][ T6648] warning: `syz.1.198' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 110.658809][ T6654] netlink: 'syz.3.197': attribute type 21 has an invalid length. [ 110.676477][ T6654] netlink: 156 bytes leftover after parsing attributes in process `syz.3.197'. [ 110.688854][ T6654] netlink: 4 bytes leftover after parsing attributes in process `syz.3.197'. [ 110.695806][ T6657] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 110.761576][ T6659] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 110.872136][ T9] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 111.034748][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 111.045627][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 111.056665][ T9] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 111.065889][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 111.082100][ T9] usb 3-1: SerialNumber: syz [ 111.310175][ T9] usb 3-1: 0:2 : does not exist [ 111.507845][ T6653] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 111.519611][ T6653] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 111.540760][ T24] usb 3-1: USB disconnect, device number 24 [ 111.552247][ T5874] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 111.722236][ T47] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 111.730103][ T5874] usb 1-1: Using ep0 maxpacket: 32 [ 111.737942][ T5874] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 111.751667][ T5874] usb 1-1: config 0 has no interface number 0 [ 111.767282][ T5874] usb 1-1: config 0 interface 12 has no altsetting 0 [ 111.787323][ T5874] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 111.796905][ T5874] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.806855][ T5874] usb 1-1: Product: syz [ 111.815575][ T5874] usb 1-1: Manufacturer: syz [ 111.820293][ T5874] usb 1-1: SerialNumber: syz [ 111.833587][ T5874] usb 1-1: config 0 descriptor?? [ 111.877266][ T6695] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 111.889468][ T47] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 111.890741][ T6695] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 111.899095][ T47] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.910915][ T6695] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 111.919640][ T47] usb 2-1: config 0 descriptor?? [ 111.928396][ T6695] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 111.946408][ T47] cp210x 2-1:0.0: cp210x converter detected [ 111.996436][ T6695] kvm: emulating exchange as write [ 112.003922][ T6697] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.015248][ T6697] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 112.123608][ T6701] random: crng reseeded on system resumption [ 112.186192][ T6703] kvm: pic: level sensitive irq not supported [ 112.186363][ T6703] kvm: pic: non byte read [ 112.197723][ T6703] kvm: pic: level sensitive irq not supported [ 112.197798][ T6703] kvm: pic: non byte read [ 112.343675][ T47] cp210x 2-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 112.360892][ T47] cp210x 2-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 112.379657][ T47] cp210x 2-1:0.0: GPIO initialisation failed: -71 [ 112.406559][ T47] usb 2-1: cp210x converter now attached to ttyUSB0 [ 112.437567][ T47] usb 2-1: USB disconnect, device number 20 [ 112.459181][ T47] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 112.468626][ T47] cp210x 2-1:0.0: device disconnected [ 112.705180][ T6722] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.714380][ T6722] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.262151][ T24] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 113.285095][ T6728] 9p: Bad value for 'wfdno' [ 113.331092][ T6730] 9p: Bad value for 'rfdno' [ 113.331613][ T6731] 9p: Bad value for 'rfdno' [ 113.400824][ T6731] trusted_key: encrypted_key: insufficient parameters specified [ 113.432142][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 113.438901][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 113.451736][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 113.461624][ T24] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 113.470795][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.481354][ T24] usb 2-1: config 0 descriptor?? [ 113.489509][ T24] hub 2-1:0.0: USB hub found [ 113.711388][ T24] hub 2-1:0.0: 1 port detected [ 113.738141][ T6742] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.748351][ T6742] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.911761][ T5874] f81534 1-1:0.12: f81534_set_register: reg: 1003 data: a0 failed: -71 [ 113.920248][ T5874] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71 [ 113.927657][ T5874] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 113.935327][ T5874] f81534 1-1:0.12: probe with driver f81534 failed with error -71 [ 113.947357][ T5874] usb 1-1: USB disconnect, device number 24 [ 114.319422][ T9] usb 2-1: USB disconnect, device number 21 [ 114.322111][ T24] hub 2-1:0.0: hub_ext_port_status failed (err = -71) [ 114.340166][ T6749] sock: sock_set_timeout: `syz.3.227' (pid 6749) tries to set negative timeout [ 114.500819][ T6753] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.511405][ T6753] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.537488][ T6757] netlink: 60 bytes leftover after parsing attributes in process `syz.0.230'. [ 114.550770][ T6757] netlink: 60 bytes leftover after parsing attributes in process `syz.0.230'. [ 114.605858][ T6761] program syz.0.231 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 114.701069][ T6763] netlink: 104 bytes leftover after parsing attributes in process `syz.0.232'. [ 114.742655][ T5875] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 114.758334][ T6767] netlink: 4 bytes leftover after parsing attributes in process `syz.0.233'. [ 114.902293][ T5875] usb 3-1: Using ep0 maxpacket: 32 [ 114.909883][ T6772] netlink: 16 bytes leftover after parsing attributes in process `syz.0.235'. [ 114.926513][ T5875] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=67.fe [ 114.945849][ T5875] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.954850][ T5875] usb 3-1: Product: syz [ 114.959295][ T5875] usb 3-1: Manufacturer: syz [ 114.964352][ T5875] usb 3-1: SerialNumber: syz [ 114.976469][ T5875] usb 3-1: config 0 descriptor?? [ 115.152135][ T5888] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 115.182410][ T6781] netlink: 44 bytes leftover after parsing attributes in process `syz.3.240'. [ 115.194647][ T6781] netlink: 'syz.3.240': attribute type 6 has an invalid length. [ 115.203515][ T6781] netlink: 'syz.3.240': attribute type 5 has an invalid length. [ 115.209459][ T6756] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input9 [ 115.211162][ T6781] netlink: 'syz.3.240': attribute type 4 has an invalid length. [ 115.257048][ T5875] snd-usb-6fire 3-1:0.0: unable to receive device firmware state. [ 115.266853][ T5875] snd-usb-6fire 3-1:0.0: probe with driver snd-usb-6fire failed with error -71 [ 115.285606][ T5875] usb 3-1: USB disconnect, device number 25 [ 115.292965][ T9] usb 2-1: new low-speed USB device number 22 using dummy_hcd [ 115.317284][ T5888] usb 1-1: config index 0 descriptor too short (expected 1051, got 27) [ 115.332080][ T5888] usb 1-1: config 0 has an invalid interface number: 0 but max is -1 [ 115.344371][ T5888] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 115.362208][ T5888] usb 1-1: config 0 interface 0 altsetting 12 bulk endpoint 0x87 has invalid maxpacket 149 [ 115.385859][ T5888] usb 1-1: config 0 interface 0 has no altsetting 0 [ 115.398856][ T5888] usb 1-1: New USB device found, idVendor=06cd, idProduct=010a, bcdDevice=d9.c3 [ 115.408381][ T5888] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.416871][ T5888] usb 1-1: Product: syz [ 115.421099][ T5888] usb 1-1: Manufacturer: syz [ 115.426520][ T5888] usb 1-1: SerialNumber: syz [ 115.434806][ T5888] usb 1-1: config 0 descriptor?? [ 115.440471][ T6772] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 115.452234][ T9] usb 2-1: device descriptor read/64, error -71 [ 115.666398][ T5888] keyspan 1-1:0.0: Keyspan 4 port adapter converter detected [ 115.686950][ T5888] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 7 [ 115.694769][ T9] usb 2-1: new low-speed USB device number 23 using dummy_hcd [ 115.709534][ T5888] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 81 [ 115.719509][ T5888] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 1 [ 115.729461][ T5888] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 115.740164][ T5888] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 82 [ 115.748690][ T5888] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 2 [ 115.758375][ T5888] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 115.768443][ T5888] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 83 [ 115.776403][ T5888] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 3 [ 115.787698][ T5888] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 115.798933][ T5888] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 84 [ 115.808075][ T5888] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 4 [ 115.819279][ T5888] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 115.845397][ T5888] usb 1-1: USB disconnect, device number 25 [ 115.856585][ T5888] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 115.866217][ T9] usb 2-1: device descriptor read/64, error -71 [ 115.895341][ T5888] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 115.913142][ T5888] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 115.935855][ T5888] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 115.947825][ T5888] keyspan 1-1:0.0: device disconnected [ 115.982847][ T9] usb usb2-port1: attempt power cycle [ 116.086913][ T6800] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.096232][ T6800] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 116.107481][ T6800] program syz.3.245 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 116.152637][ T24] usb 3-1: new low-speed USB device number 26 using dummy_hcd [ 116.292878][ T5888] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 116.303604][ T24] usb 3-1: config 7 has an invalid interface number: 252 but max is 0 [ 116.311835][ T24] usb 3-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 116.323107][ T24] usb 3-1: config 7 has no interface number 0 [ 116.329218][ T24] usb 3-1: config 7 interface 252 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 116.342380][ T24] usb 3-1: config 7 interface 252 has no altsetting 0 [ 116.352236][ T9] usb 2-1: new low-speed USB device number 24 using dummy_hcd [ 116.360174][ T24] usb 3-1: string descriptor 0 read error: -22 [ 116.366581][ T24] usb 3-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice=56.c0 [ 116.376294][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.382987][ T9] usb 2-1: device descriptor read/8, error -71 [ 116.452279][ T5888] usb 1-1: Using ep0 maxpacket: 32 [ 116.461327][ T5888] usb 1-1: config 1 interface 0 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 32 [ 116.471275][ T5888] usb 1-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 116.484355][ T5888] usb 1-1: config 1 interface 0 has no altsetting 0 [ 116.593009][ T5933] usb 3-1: USB disconnect, device number 26 [ 116.633234][ T9] usb 2-1: new low-speed USB device number 25 using dummy_hcd [ 116.662876][ T9] usb 2-1: device descriptor read/8, error -71 [ 116.782864][ T9] usb usb2-port1: unable to enumerate USB device [ 116.921779][ T6808] comedi comedi0: Minor 8 could not be opened [ 117.024155][ T6812] delete_channel: no stack [ 117.030752][ T6812] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.041867][ T6812] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.846680][ T24] usb 4-1: USB disconnect, device number 22 [ 117.923219][ T559] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.030609][ T559] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.181702][ T559] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.266975][ T559] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.273034][ T5145] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 118.287658][ T5145] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 118.297002][ T5145] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 118.306120][ T5145] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 118.316100][ T5145] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 118.402170][ T9] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 118.488587][ T559] bridge_slave_1: left allmulticast mode [ 118.492231][ T5875] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 118.495926][ T559] bridge_slave_1: left promiscuous mode [ 118.509592][ T559] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.521749][ T559] bridge_slave_0: left allmulticast mode [ 118.528230][ T559] bridge_slave_0: left promiscuous mode [ 118.534319][ T559] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.563209][ T9] usb 3-1: device descriptor read/64, error -71 [ 118.652306][ T5875] usb 2-1: Using ep0 maxpacket: 32 [ 118.661290][ T5875] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=67.fe [ 118.671608][ T5875] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.676166][ T559] dvmrp12 (unregistering): left allmulticast mode [ 118.679677][ T5875] usb 2-1: Product: syz [ 118.690377][ T5875] usb 2-1: Manufacturer: syz [ 118.695164][ T5875] usb 2-1: SerialNumber: syz [ 118.704967][ T5875] usb 2-1: config 0 descriptor?? [ 118.734405][ T5888] usb 1-1: string descriptor 0 read error: -71 [ 118.754723][ T5888] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 118.783304][ T5888] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.799339][ T559] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 118.808675][ T5888] usb 1-1: can't set config #1, error -71 [ 118.817744][ T9] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 118.838736][ T5888] usb 1-1: USB disconnect, device number 26 [ 118.847851][ T559] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 118.860922][ T559] bond0 (unregistering): Released all slaves [ 118.934329][ T6820] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input10 [ 118.965644][ T9] usb 3-1: device descriptor read/64, error -71 [ 118.973338][ T5875] snd-usb-6fire 2-1:0.0: unable to receive device firmware state. [ 118.984916][ T5875] snd-usb-6fire 2-1:0.0: probe with driver snd-usb-6fire failed with error -71 [ 118.996248][ T559] tipc: Left network mode [ 119.023633][ T5875] usb 2-1: USB disconnect, device number 26 [ 119.112778][ T9] usb usb3-port1: attempt power cycle [ 119.236668][ T6821] chnl_net:caif_netlink_parms(): no params data found [ 119.278669][ T6836] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 119.287040][ T6836] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 119.296670][ T6836] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 119.306784][ T6836] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 119.472183][ T9] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 119.523602][ T9] usb 3-1: device descriptor read/8, error -71 [ 119.657675][ T559] hsr_slave_0: left promiscuous mode [ 119.670715][ T559] hsr_slave_1: left promiscuous mode [ 119.677153][ T559] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 119.684903][ T559] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 119.693900][ T559] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 119.703327][ T559] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 119.716081][ T559] veth1_macvtap: left promiscuous mode [ 119.721852][ T559] veth0_macvtap: left promiscuous mode [ 119.729539][ T559] veth1_vlan: left promiscuous mode [ 119.735769][ T559] veth0_vlan: left promiscuous mode [ 119.763023][ T9] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 119.792752][ T9] usb 3-1: device descriptor read/8, error -71 [ 119.810995][ T559] pimreg3 (unregistering): left allmulticast mode [ 119.862180][ T5875] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 119.882117][ T47] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 119.909215][ T9] usb usb3-port1: unable to enumerate USB device [ 119.937101][ T559] team0 (unregistering): Port device team_slave_1 removed [ 119.955648][ T559] team0 (unregistering): Port device team_slave_0 removed [ 120.014338][ T5875] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 120.025254][ T5875] usb 1-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 120.042179][ T47] usb 2-1: Using ep0 maxpacket: 16 [ 120.047458][ T5875] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.067503][ T47] usb 2-1: config 237 has an invalid interface number: 221 but max is 0 [ 120.077385][ T47] usb 2-1: config 237 has no interface number 0 [ 120.094973][ T5875] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 120.109721][ T6821] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.112463][ T47] usb 2-1: config 237 interface 221 has no altsetting 0 [ 120.119107][ T6821] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.125967][ T47] usb 2-1: New USB device found, idVendor=1b80, idProduct=d700, bcdDevice=d3.c3 [ 120.141803][ T47] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.150251][ T47] usb 2-1: Product: syz [ 120.153070][ T6821] bridge_slave_0: entered allmulticast mode [ 120.154777][ T47] usb 2-1: Manufacturer: syz [ 120.165633][ T47] usb 2-1: SerialNumber: syz [ 120.178058][ T6821] bridge_slave_0: entered promiscuous mode [ 120.188840][ T6821] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.198237][ T6821] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.207787][ T6821] bridge_slave_1: entered allmulticast mode [ 120.215999][ T6821] bridge_slave_1: entered promiscuous mode [ 120.264908][ T6821] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 120.279973][ T6821] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 120.359466][ T6821] team0: Port device team_slave_0 added [ 120.372592][ T5835] Bluetooth: hci2: command tx timeout [ 120.390678][ T6821] team0: Port device team_slave_1 added [ 120.467588][ T6864] netlink: 60 bytes leftover after parsing attributes in process `syz.1.260'. [ 120.484460][ T6864] netlink: 60 bytes leftover after parsing attributes in process `syz.1.260'. [ 120.500524][ T6821] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 120.508824][ T6821] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 120.537137][ T6821] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 120.561029][ T6821] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 120.569024][ T6821] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 120.595800][ T6821] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 120.673547][ T6821] hsr_slave_0: entered promiscuous mode [ 120.681059][ T6821] hsr_slave_1: entered promiscuous mode [ 120.688466][ T6821] debugfs: 'hsr0' already exists in 'hsr' [ 120.699340][ T6821] Cannot create hsr debugfs directory [ 120.954931][ T6821] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 120.978987][ T6821] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 120.997302][ T6821] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 121.015656][ T6821] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 121.246920][ T6821] 8021q: adding VLAN 0 to HW filter on device bond0 [ 121.305207][ T6821] 8021q: adding VLAN 0 to HW filter on device team0 [ 121.318482][ T6895] devtmpfs: Too few inodes for current use [ 121.340406][ T3519] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.347632][ T3519] bridge0: port 1(bridge_slave_0) entered forwarding state [ 121.396324][ T3519] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.403570][ T3519] bridge0: port 2(bridge_slave_1) entered forwarding state [ 121.685373][ T5875] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -110 [ 121.703880][ T5875] stv0680 1-1:4.0: STV(e): camera ping failed!! [ 121.717604][ T5875] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -32 [ 121.724666][ T9] usb 3-1: new low-speed USB device number 31 using dummy_hcd [ 121.733439][ T5875] stv0680 1-1:4.0: last error: 0, command = 0x0 [ 121.830250][ T6821] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 121.895157][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 121.909056][ T9] usb 3-1: config 1 has an invalid interface number: 126 but max is 0 [ 121.920258][ T9] usb 3-1: config 1 has no interface number 0 [ 121.928058][ T9] usb 3-1: config 1 interface 126 has no altsetting 0 [ 121.950322][ T9] usb 3-1: string descriptor 0 read error: -22 [ 121.957268][ T9] usb 3-1: New USB device found, idVendor=084f, idProduct=0001, bcdDevice=f2.d0 [ 121.979838][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.024375][ T9] empeg 3-1:1.126: empeg converter detected [ 122.224164][ T6821] veth0_vlan: entered promiscuous mode [ 122.230946][ T9] usb 3-1: empeg converter now attached to ttyUSB0 [ 122.259610][ T6821] veth1_vlan: entered promiscuous mode [ 122.350931][ T6821] veth0_macvtap: entered promiscuous mode [ 122.369537][ T6821] veth1_macvtap: entered promiscuous mode [ 122.408747][ T6821] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 122.426856][ T5874] usb 3-1: USB disconnect, device number 31 [ 122.439842][ T5874] empeg ttyUSB0: empeg converter now disconnected from ttyUSB0 [ 122.452486][ T5835] Bluetooth: hci2: command tx timeout [ 122.461309][ T6821] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 122.469939][ T5874] empeg 3-1:1.126: device disconnected [ 122.500557][ T559] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.510772][ T559] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.532976][ T559] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.544772][ T3519] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.627281][ T24] usb 1-1: USB disconnect, device number 27 [ 122.734709][ T3519] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.757853][ T3519] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.784875][ T47] radio-si470x 2-1:237.221: could not find interrupt in endpoint [ 122.825959][ T47] radio-si470x 2-1:237.221: probe with driver radio-si470x failed with error -5 [ 122.841837][ T47] usbhid 2-1:237.221: couldn't find an input interrupt endpoint [ 122.851686][ T1042] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.860824][ T47] usb 2-1: USB disconnect, device number 27 [ 122.885504][ T1042] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.122208][ T24] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 123.282653][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 123.299945][ T24] usb 1-1: config 4 has an invalid interface number: 51 but max is 0 [ 123.313201][ T24] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 123.333156][ T24] usb 1-1: config 4 has no interface number 0 [ 123.352111][ T24] usb 1-1: config 4 interface 51 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 123.354349][ T5933] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 123.371096][ T24] usb 1-1: config 4 interface 51 has no altsetting 0 [ 123.391605][ T24] usb 1-1: New USB device found, idVendor=954f, idProduct=4199, bcdDevice= f.76 [ 123.412325][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.420424][ T24] usb 1-1: Product: syz [ 123.432114][ T24] usb 1-1: Manufacturer: syz [ 123.436785][ T24] usb 1-1: SerialNumber: syz [ 123.451625][ T24] cdc_eem 1-1:4.51: probe with driver cdc_eem failed with error -22 [ 123.452298][ T9] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 123.522666][ T5933] usb 3-1: device descriptor read/64, error -71 [ 123.632667][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 123.640096][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 123.650239][ T24] usb 1-1: USB disconnect, device number 28 [ 123.651271][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 123.671701][ T9] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 123.681726][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.692947][ T9] usb 5-1: config 0 descriptor?? [ 123.762179][ T5933] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 123.905859][ T5933] usb 3-1: device descriptor read/64, error -71 [ 123.914520][ T9] usbhid 5-1:0.0: can't add hid device: -71 [ 123.921746][ T9] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 123.935553][ T9] usb 5-1: USB disconnect, device number 2 [ 124.022990][ T5933] usb usb3-port1: attempt power cycle [ 124.125932][ T6954] netlink: 12 bytes leftover after parsing attributes in process `syz.1.269'. [ 124.363403][ T5933] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 124.392580][ T5933] usb 3-1: device descriptor read/8, error -71 [ 124.492650][ T6974] netlink: 8 bytes leftover after parsing attributes in process `syz.0.275'. [ 124.532446][ T5835] Bluetooth: hci2: command tx timeout [ 124.642700][ T5933] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 124.663079][ T5933] usb 3-1: device descriptor read/8, error -71 [ 124.749706][ T6976] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 124.756767][ T6976] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 124.767657][ T6976] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 124.777890][ T5933] usb usb3-port1: unable to enumerate USB device [ 124.786926][ T6976] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 124.795138][ T6976] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 124.804676][ T6976] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 124.811718][ T6976] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 124.819249][ T6976] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 124.898951][ T6976] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000b: 0000 [#1] SMP KASAN PTI [ 124.911315][ T6976] KASAN: null-ptr-deref in range [0x0000000000000058-0x000000000000005f] [ 124.919752][ T6976] CPU: 1 UID: 0 PID: 6976 Comm: syz.0.276 Tainted: G L syzkaller #0 PREEMPT(full) [ 124.930516][ T6976] Tainted: [L]=SOFTLOCKUP [ 124.934869][ T6976] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 124.945029][ T6976] RIP: 0010:klist_remove+0x156/0x340 [ 124.950344][ T6976] Code: 4d 89 f5 49 c1 ed 03 43 80 7c 3d 00 00 74 08 4c 89 f7 e8 5d c9 80 f6 4d 8b 26 49 83 e4 fe 49 8d 7c 24 58 48 89 f8 48 c1 e8 03 <42> 80 3c 38 00 74 05 e8 3e c9 80 f6 49 8b 44 24 58 48 89 44 24 08 [ 124.970230][ T6976] RSP: 0018:ffffc900035270e0 EFLAGS: 00010202 [ 124.976312][ T6976] RAX: 000000000000000b RBX: ffff88802d56dac0 RCX: 0000000000000000 [ 124.984364][ T6976] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000058 [ 124.992329][ T6976] RBP: ffffc900035271e0 R08: ffffffff901a0ea3 R09: 1ffffffff20341d4 [ 125.000298][ T6976] R10: dffffc0000000000 R11: fffffbfff20341d5 R12: 0000000000000000 [ 125.008264][ T6976] R13: 1ffff1100562300c R14: ffff88802b118060 R15: dffffc0000000000 [ 125.016314][ T6976] FS: 00007f5a848436c0(0000) GS:ffff88812510b000(0000) knlGS:0000000000000000 [ 125.025239][ T6976] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 125.031818][ T6976] CR2: 0000561c42d8a950 CR3: 000000007548c000 CR4: 00000000003526f0 [ 125.039784][ T6976] Call Trace: [ 125.043067][ T6976] [ 125.045997][ T6976] ? __pfx_klist_remove+0x10/0x10 [ 125.051016][ T6976] ? kobject_move+0x5de/0x720 [ 125.055685][ T6976] ? __pfx_kobject_move+0x10/0x10 [ 125.060702][ T6976] ? do_raw_spin_unlock+0xf5/0x210 [ 125.065888][ T6976] ? get_device_parent+0x366/0x3a0 [ 125.071079][ T6976] device_move+0x193/0x730 [ 125.075479][ T6976] hci_conn_del_sysfs+0xb8/0x1a0 [ 125.080402][ T6976] hci_conn_del+0xc36/0x1230 [ 125.084981][ T6976] ? hci_abort_conn_sync+0xa7b/0x1190 [ 125.090338][ T6976] hci_abort_conn_sync+0xdd0/0x1190 [ 125.095534][ T6976] ? __pfx_hci_abort_conn_sync+0x10/0x10 [ 125.101160][ T6976] ? hci_disconnect_all_sync+0x2e/0x350 [ 125.106709][ T6976] ? hci_disconnect_all_sync+0x2e/0x350 [ 125.112242][ T6976] ? hci_disconnect_all_sync+0x2e/0x350 [ 125.117864][ T6976] hci_disconnect_all_sync+0x1b5/0x350 [ 125.123321][ T6976] hci_suspend_sync+0x417/0xd20 [ 125.128440][ T6976] ? __pfx_hci_suspend_sync+0x10/0x10 [ 125.133804][ T6976] ? lockdep_hardirqs_on+0x7a/0x110 [ 125.138987][ T6976] ? enable_work+0x1fd/0x230 [ 125.143664][ T6976] ? hci_cmd_sync_cancel_sync+0xc9/0x1c0 [ 125.149293][ T6976] hci_suspend_dev+0x28d/0x540 [ 125.154045][ T6976] ? __pfx_hci_suspend_dev+0x10/0x10 [ 125.159332][ T6976] hci_suspend_notifier+0xf2/0x2f0 [ 125.164451][ T6976] notifier_call_chain+0x1be/0x400 [ 125.169685][ T6976] blocking_notifier_call_chain_robust+0x85/0x100 [ 125.176111][ T6976] pm_notifier_call_chain_robust+0x2c/0x60 [ 125.181913][ T6976] snapshot_open+0x19c/0x280 [ 125.186496][ T6976] ? __pfx_snapshot_open+0x10/0x10 [ 125.191592][ T6976] misc_open+0x2d5/0x350 [ 125.195818][ T6976] chrdev_open+0x4cd/0x5e0 [ 125.200225][ T6976] ? __pfx_chrdev_open+0x10/0x10 [ 125.205146][ T6976] ? fsnotify_open_perm_and_set_mode+0x135/0x6d0 [ 125.211472][ T6976] ? __pfx_chrdev_open+0x10/0x10 [ 125.216397][ T6976] do_dentry_open+0x785/0x14e0 [ 125.221166][ T6976] vfs_open+0x3b/0x340 [ 125.225222][ T6976] ? path_openat+0x2df0/0x3860 [ 125.229969][ T6976] path_openat+0x2e08/0x3860 [ 125.234549][ T6976] ? __pfx_stack_trace_save+0x10/0x10 [ 125.239920][ T6976] ? stack_depot_save_flags+0x33/0x810 [ 125.245469][ T6976] ? __pfx_path_openat+0x10/0x10 [ 125.250403][ T6976] ? __x64_sys_openat+0x138/0x170 [ 125.255510][ T6976] ? do_syscall_64+0x14d/0xf80 [ 125.260355][ T6976] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.266404][ T6976] ? __lock_acquire+0x6b5/0x2cf0 [ 125.271328][ T6976] do_file_open+0x23e/0x4a0 [ 125.275905][ T6976] ? __pfx_do_file_open+0x10/0x10 [ 125.280915][ T6976] ? _raw_spin_unlock+0x28/0x50 [ 125.285834][ T6976] ? alloc_fd+0x64b/0x6c0 [ 125.290168][ T6976] do_sys_openat2+0x113/0x200 [ 125.294841][ T6976] ? __se_sys_futex+0x3a8/0x450 [ 125.299679][ T6976] ? __pfx_do_sys_openat2+0x10/0x10 [ 125.304952][ T6976] ? rcu_is_watching+0x15/0xb0 [ 125.309727][ T6976] __x64_sys_openat+0x138/0x170 [ 125.314852][ T6976] do_syscall_64+0x14d/0xf80 [ 125.319433][ T6976] ? trace_irq_disable+0x3b/0x150 [ 125.324533][ T6976] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.330589][ T6976] ? clear_bhb_loop+0x40/0x90 [ 125.335257][ T6976] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.341153][ T6976] RIP: 0033:0x7f5a8399bf79 [ 125.345572][ T6976] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 125.365348][ T6976] RSP: 002b:00007f5a84843028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 125.373922][ T6976] RAX: ffffffffffffffda RBX: 00007f5a83c15fa0 RCX: 00007f5a8399bf79 [ 125.381962][ T6976] RDX: 0000000000000000 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 125.389920][ T6976] RBP: 00007f5a83a327e0 R08: 0000000000000000 R09: 0000000000000000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 125.397897][ T6976] R10: 0000000000000019 R11: 0000000000000246 R12: 0000000000000000 [ 125.405856][ T6976] R13: 00007f5a83c16038 R14: 00007f5a83c15fa0 R15: 00007ffdc8831818 [ 125.413913][ T6976] [ 125.416930][ T6976] Modules linked in: [ 125.422262][ T6976] ---[ end trace 0000000000000000 ]--- [ 125.504697][ T6976] RIP: 0010:klist_remove+0x156/0x340 [ 125.510705][ T6976] Code: 4d 89 f5 49 c1 ed 03 43 80 7c 3d 00 00 74 08 4c 89 f7 e8 5d c9 80 f6 4d 8b 26 49 83 e4 fe 49 8d 7c 24 58 48 89 f8 48 c1 e8 03 <42> 80 3c 38 00 74 05 e8 3e c9 80 f6 49 8b 44 24 58 48 89 44 24 08 [ 125.579928][ T6976] RSP: 0018:ffffc900035270e0 EFLAGS: 00010202 [ 125.590303][ T6976] RAX: 000000000000000b RBX: ffff88802d56dac0 RCX: 0000000000000000 [ 125.603759][ T6976] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000058 [ 125.611817][ T6976] RBP: ffffc900035271e0 R08: ffffffff901a0ea3 R09: 1ffffffff20341d4 [ 125.623151][ T6976] R10: dffffc0000000000 R11: fffffbfff20341d5 R12: 0000000000000000 [ 125.631175][ T6976] R13: 1ffff1100562300c R14: ffff88802b118060 R15: dffffc0000000000 [ 125.641826][ T6976] FS: 00007f5a848436c0(0000) GS:ffff88812510b000(0000) knlGS:0000000000000000 [ 125.651075][ T6976] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 125.660742][ T6976] CR2: 00007f03d9642286 CR3: 000000007548c000 CR4: 00000000003526f0 [ 125.669497][ T6976] Kernel panic - not syncing: Fatal exception [ 125.676244][ T6976] Kernel Offset: disabled [ 125.680620][ T6976] Rebooting in 86400 seconds..