last executing test programs: 1m1.150066537s ago: executing program 1 (id=3247): r0 = socket$netlink(0x10, 0x3, 0x0) readv(r0, &(0x7f0000000340), 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe7a0e9796cfd1647e299f4e376fdba", 0x10}], 0x2}], 0x1, 0x44000) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/83, 0x53}], 0x1}, 0x0) writev(r0, &(0x7f0000000000), 0x0) r3 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x41, 0x0) r4 = dup3(r3, r2, 0x0) setuid(0xee01) socket$phonet_pipe(0x23, 0x5, 0x2) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) syz_genetlink_get_family_id$tipc2(&(0x7f00000006c0), r5) sendmsg$TIPC_NL_BEARER_SET(r5, &(0x7f0000000640)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000600)={&(0x7f0000000380)=ANY=[@ANYBLOB='\x00\x00\x00', @ANYBLOB="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"], 0x25c}, 0x1, 0x0, 0x0, 0x40}, 0x2000c000) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r7, 0x3ba0, &(0x7f0000000180)={0x48, 0xc, r8, 0x0, 0x0, 0x7fff}) r9 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r9, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r9, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r10, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r7, 0x3b89, &(0x7f0000000140)={0x28, 0x0, r11, r8, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000100)}) ioctl$IOMMU_IOAS_MAP$PAGES(r7, 0x3b85, &(0x7f0000000000)={0x28, 0x6, r8, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000}) shutdown(r5, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x2c, r6, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x2c}}, 0x24000880) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000040)={'ipvlan1\x00', 0x403}) ioctl$TIOCSTI(r4, 0x5412, 0x0) ioctl$VIDIOC_G_FMT(r4, 0xc0d05604, &(0x7f0000000000)={0x6, @meta={0x54505356, 0x11b7f6d8, 0x585a, 0xaf44, 0x230c5c43}}) 1m0.288385423s ago: executing program 1 (id=3248): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_HEADER(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0xc, 0x6, 0x301, 0x0, 0x0, {0x1, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x20004411}, 0x4040804) (async) r1 = accept$unix(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x6e) accept4(r1, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000180)=0x80, 0x81800) 1m0.287668278s ago: executing program 1 (id=3249): syz_open_dev$usbfs(0x0, 0x204, 0x82) r0 = syz_open_dev$dri(&(0x7f0000000080), 0xfffffffffffffffc, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x8}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000100)={0x2, &(0x7f0000000140)=[{0x34, 0x6, 0x0, 0x2}, {0x16, 0x0, 0x0, 0x100}]}) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002280)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x3}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x0) 59.198082561s ago: executing program 1 (id=3251): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000400)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000000c0)={@hyper, 0x1}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, 0x0, &(0x7f0000000140)) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r0, 0x7a6, &(0x7f0000000080)={0x9, 0x0, 0x75c, 0x3e2, 0x6, 0x7}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0xe004) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x11) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x3e, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40ffffff07000000400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x20004015}, 0x40) r5 = syz_open_dev$vcsu(&(0x7f0000000000), 0x5a19, 0x10100) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r7, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010028bd7000000000008900000008000300", @ANYRES32=r8, @ANYBLOB="10001d800c00008006000500080000005713a6bc9935b8928183b5e5da56ea9c031f6ab048572ecc69937ecddd0ca9a4d9129098d500f64db7ce29ac4b9bc65b01d9390dfb3a057e3fe97287f3995556b3b08a2294b03567734632f261a3acfb9acee0947cadde31d6e6f9bded484a02f6e3b5245478301a288e300382b1fb593ab4548c42357094308b45cb468f00c85948980ca186331c0923068864ffbd015e9ca05a00"], 0x2c}, 0x1, 0x0, 0x0, 0x4001}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_MGMT(r5, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="00022b067000fcdbdf255200000008000300", @ANYRES32=r9, @ANYBLOB="0800cb0000000000060048002400000005008800070000000400cf0018002a006512505050505050080211000001ffffffffffff050088000b00000005008800060000000500890006000000"], 0x68}, 0x1, 0x0, 0x0, 0x2400c004}, 0x1) r10 = syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582020002"], 0x0) syz_usb_control_io$uac1(r10, 0x0, 0x0) syz_usb_control_io$uac3(r10, 0x0, 0x0) syz_usb_control_io(r10, 0x0, 0x0) syz_usb_control_io$lan78xx(r10, 0x0, &(0x7f0000000400)={0x34, &(0x7f0000000340)=ANY=[@ANYBLOB="0014af"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) 53.419032885s ago: executing program 1 (id=3260): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x18, r1, 0x325, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}}, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000100)="8a", 0x1}], 0x1, &(0x7f0000000080)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x41, 0x9, 0x2000000}}], 0x20}, 0x0) 53.130014246s ago: executing program 1 (id=3263): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f00000002c0)=0x5, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(r0, &(0x7f0000007080)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x45833af92e4b39ff, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg(r1, &(0x7f0000000280)=[{{&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0xf277, @loopback, 0x1a, 0xffffffff}, 0x80, &(0x7f0000000080)=[{&(0x7f0000002b40)="f7", 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[{0x20, 0x84, 0x2, "5a4eadd81bcf9b9bfb"}], 0x20}}], 0x2, 0x40408c1) 37.443972278s ago: executing program 32 (id=3263): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f00000002c0)=0x5, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(r0, &(0x7f0000007080)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x45833af92e4b39ff, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg(r1, &(0x7f0000000280)=[{{&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0xf277, @loopback, 0x1a, 0xffffffff}, 0x80, &(0x7f0000000080)=[{&(0x7f0000002b40)="f7", 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[{0x20, 0x84, 0x2, "5a4eadd81bcf9b9bfb"}], 0x20}}], 0x2, 0x40408c1) 17.302404441s ago: executing program 3 (id=3306): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) capset(&(0x7f00000001c0)={0x19980330}, &(0x7f0000000200)={0x80, 0x200003, 0x101, 0x6, 0x7, 0x8}) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000080)) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/dev_mcast\x00') pread64(r3, &(0x7f0000001600)=""/4104, 0x1008, 0x5) r4 = syz_open_dev$vcsu(&(0x7f0000000140), 0x7e, 0x202803) renameat2(r3, &(0x7f0000000100)='./file0\x00', r4, &(0x7f0000000280)='./file0\x00', 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x13f, 0x2}}, 0x21) write$RDMA_USER_CM_CMD_BIND(r5, &(0x7f00000001c0)={0x14, 0x88, 0xfa00, {r6, 0x30, 0x0, @in6={0xa, 0x4e24, 0x1, @mcast1, 0x3}}}, 0x90) bind$inet(r2, &(0x7f0000000380)={0x2, 0x4e22, @multicast2}, 0x10) r7 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r7, 0x29, 0x2a, &(0x7f00000001c0)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(r7, 0x29, 0x2c, &(0x7f00000005c0)={0x7, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty, 0xff}}}, 0x108) setsockopt$sock_int(r2, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r8, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r8, &(0x7f0000000240)={0xa, 0x4e20, 0x7f, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xfffffffe}, 0x1c) setsockopt$sock_int(r1, 0x1, 0x28, &(0x7f0000000040)=0x8, 0x4) listen(r2, 0x0) ioctl$sock_SIOCBRDELBR(r7, 0x89a1, &(0x7f00000002c0)='vlan0\x00') r9 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r9, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x5}, 0x4) close(0x3) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) syz_pidfd_open(0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40, 0x0) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) 14.253550415s ago: executing program 3 (id=3307): ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000000a80)={0xffffffffffffffff, &(0x7f0000000780)='$$@\x00', 0x0, &(0x7f00000009c0)={@_ha_fsid={[0xfffffff9, 0x1]}, {0xd5de, 0xde, 0x2, 0x7b3}}, 0x9, &(0x7f0000000a00), &(0x7f0000000a40)=0x1}) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000ac0)={0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000b00)=0x20) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000401e04012800000000000109022400010000000009040100010300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) r2 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010003070102202505a8a44000210203010902240001010940ff090400060200000004090501026002080108090582024800080204"], &(0x7f0000000500)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x250, 0x5, 0x13, 0x88, 0x10, 0x4}, 0x34, &(0x7f0000000080)={0x5, 0xf, 0x34, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0xb, 0x8, 0x4, 0xfff8}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x9, 0xf, 0x2}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x4, 0x92, 0x5a90}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "acbec7aec21f4bab80edaf4dfbbb1176"}]}, 0x6, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x401}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x1809}}, {0xa1, &(0x7f0000000180)=@string={0xa1, 0x3, "e56bc7ef76b870402e1fafe6f52ccd5ebc2e913aac1318779bd03d83269f7470b84b41a7263b03a01fa5b32e331dcfc807e78f013cd3dc2169f861de4618838ec8064008b2969b3cab8eb5f474e7c4d1117b15d5192d53d23a45d15e5bd74a2df6b3bd8b39cfcae51983c2c9b70fd88eb22eacc148caee01ac5238f09b02bb8ad739dd2c4ac7d7ce13c530c4ddb713214eda0fb6090b7d87c5b0967276fc96"}}, {0xa8, &(0x7f0000000240)=@string={0xa8, 0x3, "f738f56a819edb0cbae270cd035225648011179a810fe5af6a0274b454f484c0b87c07ad49740fe355f1936b8b9e0c7b54a0c12d35cd0f307796758907d5e17112a5c35ab8da39e5011ccf0419e3eddc8409e13d384efee12726fcdc63f4a2f450d7e153920de2d1db2531e8c43e378a4389ef8a67b993cab46f3f96fe85be26f68924577caaba7793d647729271b571e9e6c1a78e729ef779f689cd2c7bc595a909af855fe7"}}, {0xd4, &(0x7f0000000300)=@string={0xd4, 0x3, "e3ffdf566877a9aa301b4c612b76aacd639e1c496bc08ecc448e37b34279d6764b9013559ab01358af55fab9668fa75036a6cf5a68c72a547693ce3bf033f33abff8075c60e9861225c8c379db80e7b4db2275785cfa14a2b53e9e534e760d1d6e1aefc6b374242b0a46b1f9bd696f52f55207c21a1b340284adb8c0580c11ab3333c24636a58920a9755e8e3afd54bc2d1a79b901574c4bb25712c5dc9b8c85bb6ccc897d8bd0d5c779d07b1b490a150e7c0ab7410dd38b6d7bd7913af8c4bdc800a64b9b7a68dc5ccdaa6296f2225dc1f1"}}, {0xf7, &(0x7f0000000400)=@string={0xf7, 0x3, "1df735a9b4df3f119e43211636c754bb6f3b87941188a07fab8901f3d93e2f7c1fab050d520f604d4575b19a44fdc6602ca3ed4f44e595e6281a7aa1e44b1e58ee621b71496c10116bd69ac15b4adba56ca1e5bb2907f1c59f76eabb495f9742d64e5c5074a06c94c2c51fffadb7ea6a03fe3198fcc79dcf7a0bbd4dc00e9c689b1dad6173522ecff4cf79ac34f18d311441f58878e425add1e4689b11a2843fadf3f5f05f34bb87217f2b8305356edb64fef185590af948a81467bd0bfb2363f050f7788923beffda0ccf4f6854c9b86057c83a1dc35c4e11881c96d6935075c3c5404917ac88d52c7be311cf301cc21eeb26ee8b"}}]}) syz_usb_control_io$printer(r2, &(0x7f00000006c0)={0x14, &(0x7f0000000580)={0x40, 0x21, 0xf5, {0xf5, 0x0, "ece4b5c94c904cdf745ade256a77c410b6a714cc29ec173967603295406e4a6da19c7b8d1bd7c71bb38601e93d5b51f088744151158fe6f116370df7805c27b6710b5a033fdf1bd662e2deed822bdd36c581ab6d98471a71d12f90f96166e47e859ce7e87d2cfed0802897f5eac31297e68b4b924b7a734c9473b283907f50ff20b95e0a9da429864613cc38fac39fc8d99d576d95f69fb11cfd58cf2d3bbb5dfb241c757cf0ac5397975d48f0a9c5c463d75725fbde6efd9930da91bfc14a3eec82670c6e196be4aa751519baf264a4a6b4b52e45c7c44edd5a1695678d6b396a6c80a30b5c8a0774a0ce0bf242d515f72821"}}, &(0x7f0000000680)=ANY=[@ANYBLOB="00030909000000035904"]}, &(0x7f0000000940)={0xfffffffffffffe6f, &(0x7f0000000700)={0x20, 0x1d, 0x4c, "cf420691a42cbf0d363730535f9d3b628098b269a3093d28ac66bb8a9477b7aaf898d319d5ef3ff37cc0cf9549b4453d41f8612a615af393daa1e2f21ad9cecd4b43a3ffd4f3591787a1616a"}, &(0x7f0000000980)={0x0, 0xa, 0x1, 0x6}, &(0x7f00000007c0)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000800)={0x20, 0x0, 0x9c, {0x9a, "e906642a0e9edac2bb5c7bef2c2ea548f92360dd5b3de6d74940d378376102c8751537273b34ffeee8c38275a82e3e8266d4b134b03719c8e0d2451dbde313f9352d81fd710fd8bedb87ee29e5f3adbd90165a8728f656d3b2c8d8009761738e875e19b8f840b4cd7db5d47fc723778c0c213498752d62633655f5631f509e0e4bb3190b4ed41cb4aee0c9b46895be6b27fe5d367753a5d32042"}}, &(0x7f00000008c0)={0x20, 0x1, 0x1, 0x5}, &(0x7f0000000900)={0x20, 0x0, 0x1, 0x12}}) 13.035387679s ago: executing program 0 (id=3310): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sched_setscheduler(0x0, 0x2, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000500)={0x44, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x25, 0x33, @action={{{}, {}, @device_b}, @addba_resp}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4084}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xf, 0x59032, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$UFFDIO_UNREGISTER(r3, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffd000/0x1000)=nil, 0x1000}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000456000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x69, 0x0, 0x0) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x4b564d02, 0xec000000, 0xcd}]}) ioctl$KVM_SET_LAPIC(r6, 0x4400ae8f, &(0x7f00000005c0)={"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"}) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000080)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1, 0x0, 0x2, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000180)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x1, 0x3, 0x0, 0x7}, 0x20) r8 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r8, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0e00009bd029ef80"], 0xfe33) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$SO_BINDTODEVICE(r9, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) r10 = open(&(0x7f0000000000)='./file0\x00', 0x109102, 0x104) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r10, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r11, 0x800, 0x70bd26, 0x25dfdbfb, {}, [@ETHTOOL_A_COALESCE_TX_USECS_IRQ={0x8, 0x8, 0xffff}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_LOW={0x8, 0x11, 0x7}, @ETHTOOL_A_COALESCE_RX_USECS_HIGH={0x8, 0x13, 0xff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x90) write(r9, &(0x7f00000000c0)="8f2a0a65bd", 0x5) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4, 0x13, r9, 0x12e5e000) 11.890081173s ago: executing program 3 (id=3312): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$inet(r2, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0}, 0x0) sendmsg$rds(r2, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x4e21, @private=0xa010102}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x840) close_range(r1, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000000), 0x8, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}}]}) r3 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r3, &(0x7f0000000040)={0xa, 0x7, 0x0, @dev={0xfe, 0x80, '\x00', 0xb}, 0x8}, 0x20) r4 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r4, &(0x7f0000000000)={0xa, 0x0, 0x9, @empty, 0xe226, 0x1}, 0x20) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r6, 0x541b, &(0x7f0000000000)={0xffffffffffffffff}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$pppl2tp(0x18, 0x1, 0x1) r10 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r9, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r10, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYRESDEC=r0, @ANYRESDEC, @ANYRESHEX=r6, @ANYRES16=r9, @ANYRESOCT=r5, @ANYRESOCT=r8, @ANYRES16=r6, @ANYRESDEC=0x0, @ANYRESHEX=r9, @ANYRESOCT=r1], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14}}, 0x64}}, 0x0) close_range(r7, 0xffffffffffffffff, 0x0) r11 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r11, &(0x7f0000000040)={0xa, 0x7, 0x1, @empty, 0x8, 0x400000}, 0x20) 9.180182286s ago: executing program 3 (id=3313): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) readlink(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)=""/125, 0x7d) (async) r1 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) ioctl$PTP_PEROUT_REQUEST2(r2, 0x40383d0c, &(0x7f0000000040)={{0x200000000000004, 0xfffffffb}, {0xff039010, 0xdf5}, 0xc, 0x20000006}) (async) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x4000}, 0x6, 0x0, 0x4, 0x0, 0x0, 0x2, 'syz1\x00', 0x0, 0x11}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0x40405515, 0x0) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r4 = socket$inet(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000140)='batadv0\x00', 0x10) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) (async) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) (async) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="f80000002100010000000000fefffffffc020000000000000000000000000000fc02000000000000000000000000000000000000000000000a00000084000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="b66b6e0003000000500011"], 0xf8}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x4000000000001, 0x0, 0x1, 0x0) (async) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) (async) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, 0x0) (async) read(0xffffffffffffffff, 0x0, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) sendfile(r7, r7, 0x0, 0x40008) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={0x0}}, 0x0) (async) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) (async) syz_open_dev$usbfs(&(0x7f0000000540), 0x8, 0xa08003) 9.179084358s ago: executing program 2 (id=3314): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) accept4(r0, 0x0, 0x0, 0x800) (async) r1 = accept4(r0, 0x0, 0x0, 0x800) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000880)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x30, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x4}]}], {0x14}}, 0x78}}, 0x200000d4) sendmsg$TIPC_NL_KEY_FLUSH(r1, 0x0, 0x8040) (async) sendmsg$TIPC_NL_KEY_FLUSH(r1, 0x0, 0x8040) recvfrom$rxrpc(r1, 0x0, 0x0, 0x40002020, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r1) 8.802666365s ago: executing program 3 (id=3315): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000000)=0x1c) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000d0918108ac051582588f0000000109022d00010000000009040000030b05000009058d67c000fcff0009050502000000000009058bf9", @ANYRES16], 0x0) r2 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r2, &(0x7f0000000280)={0xa, 0x0, 0x1, @mcast1, 0x9, 0x3}, 0x20) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x5, 0x0, 0x1, {0x0, 0xea60}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "3fae8a9ad451a727"}}, 0x48}}, 0x0) sendmsg$can_bcm(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x5, 0x609f, 0x0, {0x0, 0x2710}, {0x0, 0xea60}, {}, 0x1, @can={{0x3, 0x1}, 0x1, 0x3, 0x0, 0x0, "6ee7ba2197db18bc"}}, 0x48}, 0x1, 0x0, 0x0, 0x20040800}, 0x44801) syz_usb_control_io$uac1(r1, 0x0, 0x0) 8.196430323s ago: executing program 2 (id=3316): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000003dc0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f0000004080)={&(0x7f0000003d40)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000004040)={&(0x7f0000003e00)={0x23c, 0x0, 0x2, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_SEC_DEVKEY={0xb0, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x2c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x5}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}]}]}, @NL802154_DEVKEY_ATTR_ID={0x1c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x18, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0x2}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0x100}}]}]}, @NL802154_DEVKEY_ATTR_ID={0x18, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}]}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x7fff}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xd430}, @NL802154_DEVKEY_ATTR_ID={0x24, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}]}]}, @NL802154_ATTR_SEC_DEVKEY={0x74, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x3}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_ID={0x50, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x6}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}]}]}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVKEY={0xc8, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x3}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x7fff}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x7}]}, @NL802154_DEVKEY_ATTR_ID={0x6c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x100}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x6}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x3ff}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x625a9380}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x10d5}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x18, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}]}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}]}]}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x23c}, 0x1, 0x0, 0x0, 0x4040090}, 0x4000) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000280)={'wpan1\x00', 0x0}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_SETPARAMS(r5, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000300)={0x20, 0x0, 0x5, 0x0, 0x0, {0x22}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x20}}, 0x0) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r5, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r1, 0x0, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24048040}, 0x400) sendmsg(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="5500000018007fd500fe01b2a4a280930a06000000a843089100fe801100080008000c00080000002d000f009b2c136ef75afb83de448daa72540d8102d2c55327c43ab82286ef1fdd20642383656d4d2449155037", 0x55}], 0x1}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'wlan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000001a00)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000019c0)={&(0x7f0000001940)={0x5c, r6, 0x8, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_STA_FLAGS={0x1c, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_AUTHORIZED={0x4}, @NL80211_STA_FLAG_WME={0x4}, @NL80211_STA_FLAG_WME={0x4}, @NL80211_STA_FLAG_WME={0x4}, @NL80211_STA_FLAG_TDLS_PEER={0x4}, @NL80211_STA_FLAG_AUTHENTICATED={0x4}]}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x6}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x106}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_VLAN={0x8, 0x14, r8}]}, 0x5c}}, 0x4000000) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000300)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="00012dbdf12c3b3504837ce8000008000300", @ANYRES32=r4, @ANYBLOB="08002c000000000008000300", @ANYRES32=r9, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0xc0) sendmsg$NL802154_CMD_SET_LBT_MODE(r0, &(0x7f0000000140)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20000}, 0xffffffffffffff28, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="57fb2243", @ANYRES16, @ANYBLOB="00012cbd7000fbdbdf251200000005001386f5691dfc3a89dcda086f8f000c0006000210000080000000"], 0x30}, 0x1, 0x0, 0x0, 0x20044080}, 0x44) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan1\x00', 0x0}) r11 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x200000000000012c, &(0x7f0000000000)=[{0x7c, 0x0, 0xf7}, {0x6, 0x0, 0x0, 0x7fffffff}]}) sendmsg$TIPC_NL_PUBL_GET(r11, &(0x7f0000003d00)={&(0x7f0000003ac0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000003cc0)={&(0x7f0000003b00)={0x1c0, 0x0, 0x800, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x180, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x8, @local, 0x3ff}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x5, @empty, 0x499e}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfffffff0}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfffffffa}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xba2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xad6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x9, @local, 0x5}}}}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x8, @remote, 0xd}}, {0x14, 0x2, @in={0x2, 0x4e20, @remote}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1000}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3a}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}]}]}, 0x1c0}, 0x1, 0x0, 0x0, 0x20000800}, 0x8184) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r10, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c00018005000200000000000800040005000000080001000200"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r12 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r12, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r12, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r13}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000001a40)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xff, 0x4b}}, './file0\x00'}) read$FUSE(r14, &(0x7f0000001a80)={0x2020}, 0x2020) ioctl$IOMMU_IOAS_MAP$PAGES(r12, 0x3b85, &(0x7f0000000000)={0x28, 0x7, r13, 0x0, &(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1004000}) r15 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r15, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)=[{&(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x12c4}], 0x1}, 0x24048080) 7.431335135s ago: executing program 0 (id=3317): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(0xffffffffffffffff, 0x3312, 0x8) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0xf4, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x12}, [@CTA_EXPECT_NAT={0xcc, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x6c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x2c}}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @private0}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x2}]}, @CTA_EXPECT_NAT={0x14, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}]}, 0xf4}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000c40)="120000001200e7ef007b0000000000faffa0", 0x12, 0x8800, 0x0, 0x0) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x230, 0xf) mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3) setsockopt$inet_tcp_int(r0, 0x6, 0x18, &(0x7f0000000000)=0xfffffffa, 0x4) 7.206444237s ago: executing program 2 (id=3318): mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0xfffffff7) r0 = fanotify_init(0x18, 0x101000) r1 = ioctl$USERFAULTFD_IOC_NEW(0xffffffffffffffff, 0xaa00) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x242}) fanotify_mark(r0, 0x401, 0x1a, 0xffffffffffffffff, 0x0) r2 = socket(0x840000000002, 0x3, 0xff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$KDSKBENT(r5, 0x4b47, &(0x7f00000000c0)={0xfb, 0x4, 0x5a8f}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000280)={'batadv_slave_0\x00', 0x0}) r9 = memfd_create(&(0x7f0000000280)='\x01\xfd\xae.+\xa6\x8c\xb6?2\x199\x94S,|x?Ue[\xbd\xe1!\x033\xbc\'#\xff\x17\x9b%\xf3[d \x97\xf5G\x97A\xc2\xd8\xf0Uq\xe6+\xa5l\x94\v\xb6\a\x17\\\xfb\x04!\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\x00\x19\x8d\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19P\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xcc\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\xa1\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xe9k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6\xbel\x9b.o\xbe\x80\x9dx\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\xaf\xa2\x14]p+\x96\x1ei|n\xda\xee\\\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\xf8\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\x03\xce\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xffY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\vi\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x15&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96\xb8\x02\x13pA\x19\tf\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKlb\xe5:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcc\xcaXe\xe1\xa2\xaa\x02\x86\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01O\xd3r\xa2\xa9u\x93', 0x6) fcntl$addseals(r9, 0x409, 0x8) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0xe, 0x8013, r9, 0x117c0000) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_HARDIF(r10, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)={0x24, r7, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r8}]}, 0x24}, 0x1, 0x0, 0x0, 0x200000c0}, 0x40) sendmsg$nl_xfrm(r2, &(0x7f00000008c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000880)={&(0x7f00000005c0)=@report={0x180, 0x20, 0x4, 0x70bd28, 0x25dfdbfb, {0x2b, {@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4, 0x0, 0x4e21, 0x6, 0x2, 0x20, 0x52e04a52646faf7d, 0x6c, r6, 0xee01}}, [@algo_auth={0xf6, 0x1, {{'digest_null-generic\x00'}, 0x570, "2149dbf63a08d17216247de50dffc0f8c2035ae8f75e23491f4fa0b082eca81ce38aaef236ca10b38d14d89eb35ad50ccd1d24383ac74d33678a34f5789a9ce2abb6f2a19f4fc27fd7e992680354440755b92b0eb4100131e98447520241c733b64ec1607915c45ca3bf0f132b6ace74d326f43a4de89c93485991cbd7edde57eed7348223c8db67145f1ff12b8e43fe659710a49dd87498f5a69c6044346ba31f30df3f4d2cc22134b99f6188c5"}}, @srcaddr={0x14, 0xd, @in6=@loopback}, @tmpl={0x4}, @replay_esn_val={0x24, 0x17, {0x2, 0x70bd26, 0x70bd2a, 0x70bd2c, 0x70bd29, 0x4, [0x3, 0xca8]}}]}, 0x180}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) sendmmsg$inet(r2, &(0x7f0000000580)=[{{&(0x7f0000000080)={0x2, 0x10, @remote}, 0x10, &(0x7f00000002c0)=[{&(0x7f00000000c0)="a90500000040746400010000007f27b9dac3b12d05815b057efaafb62c7b501152725c175436ff8ffbdc60ce7ad615186ba60b230a5df8b4f2db665c0f05fe12edd9923c02e58ef35f79323452748511374ee7554c2e3740d004cc3eb66c697d07756747417c993cb237f80822966a1d384ed52342acb97145c9378275fcd684049d612e562665763415382263afa2ffa4598f12dea4f58a4c3be88a4da41a", 0x9f}, {&(0x7f00000003c0)="f38b350cb3f762fd25ed0e0522dd4396dad7a8450c9310b48c91ad5104d324", 0x1f}, {&(0x7f00000001c0)="bac6f4d4d4f2c7bbafa765ba60665f40b6d743eb0bd162bac953705c35aa3e35b808e62a3a8a5baa6f8b808f4412aff75b603fdf20eaf1af0dd02b291fd32974197a7cdafa59181a27533e237372aff3b44068f0ad213e3fe19f29ebc24e1e4daaf5c987d6dea343aa264ddeaf01c6f49b715f531bee01f82c04f897927e3d45293f717b7d0697bf0d931592798eab929b712d26984b4f225ee077db41feeab182129e488434e54800d26e25be637aa4dcc2eded5725735f95d04d8e589701e895092125a2ac9ca667420103d66b750b", 0xd0}], 0x3}}], 0x1, 0x800) socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$inet6_int(r2, 0x29, 0x31, &(0x7f0000000000)=0x9d79, 0x4) 7.02831322s ago: executing program 2 (id=3319): mknod$loop(0x0, 0x200, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$tmpfs(0x0, 0x0, 0x0, 0x80dc, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x20008000) r0 = syz_open_dev$dri(0x0, 0x1, 0x500000) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x0) ioctl$SIOCX25SENDCALLACCPT(r1, 0x8918) landlock_restrict_self(0xffffffffffffffff, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x6) getpid() sendto$inet6(0xffffffffffffffff, &(0x7f0000000140)="7800000018002507b9409b14ffff00000204be04020506050e020409430009003f000c200a", 0x25, 0x8004, 0x0, 0x0) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f00000000c0)='nfs\x00', 0x0, &(0x7f0000000000)='\x06\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\v\xda\xbfS\x16 \x04\r\xcd\xdb:\xd4\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x000x0}) (async) ioctl$sock_proto_private(r0, 0x89e6, &(0x7f0000000000)="f22f5a5aaafc3c842ab082858d5783d64223851cb5fb4d60046c6fdbcdf25bd92b3a4285e0e1617faed368953006debc7b166020ed84aba8f4f0adb889049fcaff6014395e5e16ca9d21fc947fd85adcfd5604a897dc0e79b77b7e5593b2709f4e85e5243f4ca8b111e0") setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x1, 0x0, @multicast}, 0x10) (async) r2 = socket$nl_audit(0x10, 0x3, 0x9) setsockopt$netlink_NETLINK_RX_RING(r2, 0x10e, 0x6, 0x0, 0x0) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r1, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x10) (async) r3 = socket(0x40000000015, 0x5, 0x0) (async) r4 = syz_open_dev$vim2m(&(0x7f0000000340), 0x1, 0x2) ioctl$vim2m_VIDIOC_QUERYCAP(r4, 0x80685600, &(0x7f00000006c0)) (async) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4e22, 0x3, @ipv4={'\x00', '\xff\xff', @loopback}, 0x101}, 0x1c) (async) r5 = syz_genetlink_get_family_id$team(&(0x7f00000002c0), r3) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1000, 0x0) ioctl$TUNSETQUEUE(r6, 0x400454d9, &(0x7f0000000100)={'macvtap0\x00'}) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000300)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000005c0)={&(0x7f0000000480)={0x108, r5, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [{{0x8, 0x1, r7}, {0xec, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r1}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xb6b}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}]}, 0x108}, 0x1, 0x0, 0x0, 0x4004}, 0x2400c051) (async) getsockopt$sock_buf(r3, 0x1, 0x1c, 0x0, &(0x7f00000001c0)) r8 = socket$unix(0x1, 0x5, 0x0) r9 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r9, &(0x7f0000000000)=[{&(0x7f0000000400)="580000001400192340834b80040d8c560a067fbc45ff810500000d00070058000b480400945f640094272d7061d328b92d0000000000008000f0fffeffe809000000fff5dd000000100001000a0808004149004001040800", 0x58}], 0x1) (async) socketpair(0x27, 0x3, 0x81, &(0x7f0000000180)={0xffffffffffffffff}) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000140)={'batadv_slave_0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000000c0)={r11, 0x1, 0x6, @remote}, 0x10) (async) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r8) 4.184685205s ago: executing program 0 (id=3321): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0xc, &(0x7f0000000100)=0x3e60, 0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r1, 0x8983, &(0x7f0000000040)={0x6, 'syzkaller1\x00', {0x2}, 0xcba2}) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f00000006c0)={0x0, 'team_slave_0\x00', {0x1}, 0x2b1}) sendmsg$netlink(r0, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="240000001e00290700000000000000000c000000000000000000", @ANYBLOB="d46a76d115463546e219026e25f0cd8e20c286d33d2490d13d08f0653bfe33dbe4903c749a9ff468c1a97a6f5541412a1fe1c7b4ee517ed0fff2cbd87072a20cc6f3741941ef57d543a441a36221756a8ccd6e13fc8959359c0b5e8d48c76074fccd096194c725e02bacebf97b146ee71e39bdb2bc0bc8e8ae56b03276c9075d1e1d8f1f37cb8bc7efd8bc3117b4a5f4b45a438dcb3e7d3dd5513c82320a4ec0c1f039cc5c111427af0f98340258c9ba55b974a5e986e9b096f8053f7319bf424db6f62a1a15312d8a37b8140ebadb10c0c16ab8e7"], 0x24}], 0x1, 0x0, 0x0, 0x4000000}, 0x0) 2.283289433s ago: executing program 0 (id=3322): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) r1 = getpid() waitid(0x1, r1, 0x0, 0x8, 0x0) syz_usb_connect$uac3(0x6, 0xde, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x582, 0x582, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xcc, 0x3, 0x1, 0xc, 0x0, 0x5, {0x8, 0xb, 0x1, 0x1, 0x1, 0x25, 0x30, 0xb4}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x7, 0x39, 0xfffffffc}, [@power_domain={0xd, 0x24, 0x10, 0x1, 0xf0f0, 0x2, 0x5, "1a7d4ee4"}, @feature_unit={0x15, 0x24, 0x7, 0x4, 0x1, [0x9, 0x6, 0xc, 0x6]}, @selector_unit={0xd, 0x24, 0xc, 0x5, 0x8, "1d064772693188ba"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x7, 0x8, 0x8e, "59fc"}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x0, 0xf9}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x1, 0x4}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0xfe, 0x2, 0x7, 0x3, 'u'}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x4, 0x5}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x2, 0x3, 0x0, {0xa, 0x25, 0x25, 0x8, 0xf, 0x1930}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x3, 0x40, 0x4, 0x6, 0x7f}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x3, 0x7, 0xff, {0xa, 0x25, 0x25, 0xd, 0x5, 0x1}}}}}}}}]}}, &(0x7f0000000540)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x0, 0x89, 0x7, 0xd, 0x10, 0x2}, 0x5, &(0x7f0000000180)={0x5, 0xf, 0x5}, 0xa, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x420}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x41a}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x411}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x1009}}, {0x91, &(0x7f00000002c0)=@string={0x91, 0x3, "2feea0ef9079a246a915e5feccba1c9d05c2fd94b32f643d20e51350695c6d32849837e9d3c74b8da6f39366df5726f07e140a314d3750b8cbfe63a1a0f084b7c3ea1612cecab20c9fe3da3161d8b99b3b60b4669a54af18a031e23b4f09c36e7abb884db616b44671477c433c34a02c86b56c1a578a88d5f8cd3d96bd90e3c49194c9ac22d0795858a3da93e97e69"}}, {0x48, &(0x7f0000000380)=@string={0x48, 0x3, "3e9f28abc2ae84dcdf78c5b5044e3bc5c5040706812694279447091777fa4bb916827d61ccf9515907bbe9f6c915acf218fe1d3fb22daf029f5d534c3fcf28f224ca1e09bb76"}}, {0x32, &(0x7f0000000400)=@string={0x32, 0x3, "cb1d815cc84b50f530b2e1120e7fec24f0ae62961a4793227732f9e5136c3776d587fa17e49651c1dadab9801aefe4fd"}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x1001}}, {0x4e, &(0x7f0000000480)=@string={0x4e, 0x3, "fe08371a54a6bfcca237acd770f3650c032ceae975e665e3104666ddd573364ecdc8d0d71c812b221b2f8f9f5361025b520d8aff3554479b8921d61e5036fc7fd5a3e9983f8006b869f24730"}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x2c09}}]}) sendfile(r0, r0, 0x0, 0x2000fb) openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) (async) getpid() (async) waitid(0x1, r1, 0x0, 0x8, 0x0) (async) syz_usb_connect$uac3(0x6, 0xde, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x582, 0x582, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xcc, 0x3, 0x1, 0xc, 0x0, 0x5, {0x8, 0xb, 0x1, 0x1, 0x1, 0x25, 0x30, 0xb4}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x7, 0x39, 0xfffffffc}, [@power_domain={0xd, 0x24, 0x10, 0x1, 0xf0f0, 0x2, 0x5, "1a7d4ee4"}, @feature_unit={0x15, 0x24, 0x7, 0x4, 0x1, [0x9, 0x6, 0xc, 0x6]}, @selector_unit={0xd, 0x24, 0xc, 0x5, 0x8, "1d064772693188ba"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x7, 0x8, 0x8e, "59fc"}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x0, 0xf9}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x1, 0x4}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0xfe, 0x2, 0x7, 0x3, 'u'}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x4, 0x5}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x2, 0x3, 0x0, {0xa, 0x25, 0x25, 0x8, 0xf, 0x1930}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x3, 0x40, 0x4, 0x6, 0x7f}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x3, 0x7, 0xff, {0xa, 0x25, 0x25, 0xd, 0x5, 0x1}}}}}}}}]}}, &(0x7f0000000540)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x0, 0x89, 0x7, 0xd, 0x10, 0x2}, 0x5, &(0x7f0000000180)={0x5, 0xf, 0x5}, 0xa, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x420}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x41a}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x411}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x1009}}, {0x91, &(0x7f00000002c0)=@string={0x91, 0x3, "2feea0ef9079a246a915e5feccba1c9d05c2fd94b32f643d20e51350695c6d32849837e9d3c74b8da6f39366df5726f07e140a314d3750b8cbfe63a1a0f084b7c3ea1612cecab20c9fe3da3161d8b99b3b60b4669a54af18a031e23b4f09c36e7abb884db616b44671477c433c34a02c86b56c1a578a88d5f8cd3d96bd90e3c49194c9ac22d0795858a3da93e97e69"}}, {0x48, &(0x7f0000000380)=@string={0x48, 0x3, "3e9f28abc2ae84dcdf78c5b5044e3bc5c5040706812694279447091777fa4bb916827d61ccf9515907bbe9f6c915acf218fe1d3fb22daf029f5d534c3fcf28f224ca1e09bb76"}}, {0x32, &(0x7f0000000400)=@string={0x32, 0x3, "cb1d815cc84b50f530b2e1120e7fec24f0ae62961a4793227732f9e5136c3776d587fa17e49651c1dadab9801aefe4fd"}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x1001}}, {0x4e, &(0x7f0000000480)=@string={0x4e, 0x3, "fe08371a54a6bfcca237acd770f3650c032ceae975e665e3104666ddd573364ecdc8d0d71c812b221b2f8f9f5361025b520d8aff3554479b8921d61e5036fc7fd5a3e9983f8006b869f24730"}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x2c09}}]}) (async) sendfile(r0, r0, 0x0, 0x2000fb) (async) 2.2285097s ago: executing program 2 (id=3323): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001", @ANYRESOCT], 0x7c}, 0x1, 0x0, 0x0, 0x4001}, 0x0) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r1, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wpan4\x00', 0x0}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r5) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)={0x130, r6, 0x4, 0xfffffffd, 0x0, {}, [@NL802154_ATTR_SEC_DEVKEY={0x118, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_ID={0xb4, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x4}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x3c}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x48, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_MODE={0x65, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}]}]}, @NL802154_DEVKEY_ATTR_ID={0x38, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x24, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0x1186291776988912}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x4}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x69d}]}, @NL802154_ATTR_SEC_DEVKEY={0x4}]}, 0x130}}, 0x4000040) sendmsg$NL802154_CMD_NEW_SEC_DEV(r2, &(0x7f0000000500)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x64, r3, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_SEC_DEVICE={0x34, 0x2e, 0x0, 0x1, [@NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ATTR_KEY_MODE={0x8, 0x6, 0x1}, @NL802154_DEV_ATTR_KEY_MODE={0x8, 0x6, 0x1}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ATTR_PAN_ID={0x6, 0x2, 0x2}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000810}, 0x44811) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a90000000060a010400000000000000000a0004050900010073797a310000000064000480600001800a000100696e6e657200000050000280080004400000001a2c00058076ff01007061796c6f6164001c00028008000340000000928800024000000001080004400000002c0800034000000002080002400000008408000140000000000900020073797a32"], 0xb8}, 0x1, 0x0, 0x0, 0x8890}, 0x24008080) 875.444056ms ago: executing program 0 (id=3324): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) (async) r2 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_udp_int(r2, 0x11, 0xb, 0x0, &(0x7f0000000040)) (async) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~'], 0x1c}}, 0x4000054) close(r0) 491.3606ms ago: executing program 0 (id=3325): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2, 0x4) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x2000010, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) pselect6(0x40, &(0x7f0000000100)={0x2, 0x0, 0x0, 0x0, 0x800, 0x3ff}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0xffffffffffffffff, 0x9}, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000540)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000180), 0x3) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000080), 0x3) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)=[{&(0x7f00000005c0)={0x28, 0x1a, 0x1, 0x0, 0x25dfdbff, "", [@typed={0xa, 0x3ffc, 0x0, 0x0, @str=':*^${\b'}, @nested={0x9, 0x1c, 0x0, 0x1, [@generic="579d06ab3d"]}]}, 0x28}], 0x1}, 0x0) 0s ago: executing program 2 (id=3326): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000a00), r1) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000240), 0x8202, 0x0) read$FUSE(r3, &(0x7f0000000280)={0x2020}, 0x2020) sendmsg$TIPC_NL_BEARER_DISABLE(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="010025bd7000fedbc92502000000659d29bebc918ecbbf184a807a6b49b9eb2187"], 0x14}, 0x1, 0x0, 0x0, 0x4040090}, 0x24004012) write$cgroup_int(r0, &(0x7f0000000040)=0x1f00, 0x12) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) accept$packet(0xffffffffffffffff, 0x0, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x30, r6, 0x5, 0x3, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0x4}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0x80}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x20044044}, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000006c0)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) fcntl$lock(r9, 0x25, &(0x7f0000000040)={0x0, 0x2, 0x9, 0x4}) fcntl$lock(r9, 0x6, &(0x7f0000000080)={0x0, 0x2, 0x1, 0xbc2}) fcntl$lock(r9, 0x24, &(0x7f0000000000)={0x2, 0x2, 0x5, 0x1}) sendmsg$NL80211_CMD_GET_INTERFACE(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x20, r8, 0x20, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x1, 0x44}}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x74e1f762df15d13b}, 0x24004804) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)) kernel console output (not intermixed with test programs): ing 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 545.670688][ T10] usb 1-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 545.670716][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 545.670734][ T10] usb 1-1: Product: syz [ 545.670747][ T10] usb 1-1: Manufacturer: syz [ 545.670760][ T10] usb 1-1: SerialNumber: syz [ 545.704007][ T1138] team0 (unregistering): Port device team_slave_0 removed [ 545.919612][ T10] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 546.314963][T13076] usb 3-1: USB disconnect, device number 103 [ 546.561146][T16836] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 546.561903][T16836] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 546.741112][T16882] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 546.768866][T16882] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 546.780187][ T10] usb 1-1: failed to enable PITCH for EP 0x82 [ 546.782118][ T10] usb 1-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 546.782139][ T10] usb 1-1: clock source 0 is not valid, cannot use [ 546.784395][ T10] usb 1-1: 2:1: cannot get freq (v2/v3): err -71 [ 546.818862][ T10] usb 1-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 546.919260][T13076] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 547.089499][T13076] usb 3-1: Using ep0 maxpacket: 32 [ 547.105199][T13076] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 547.105224][T13076] usb 3-1: config 0 has no interface number 0 [ 547.105269][T13076] usb 3-1: config 0 interface 12 has no altsetting 0 [ 547.146172][T13076] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 547.146198][T13076] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 547.146216][T13076] usb 3-1: Product: syz [ 547.146746][T13076] usb 3-1: Manufacturer: syz [ 547.146761][T13076] usb 3-1: SerialNumber: syz [ 547.226832][T13076] usb 3-1: config 0 descriptor?? [ 547.269468][ T10] usb 1-1: USB disconnect, device number 61 [ 547.626022][T13076] f81534 3-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 547.626182][T13076] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71 [ 547.626200][T13076] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 547.626399][T13076] f81534 3-1:0.12: probe with driver f81534 failed with error -71 [ 547.717722][T13076] usb 3-1: USB disconnect, device number 104 [ 547.950262][T16960] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 548.139981][T16960] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 548.221589][T16981] fuse: Bad value for 'fd' [ 548.370306][ T5711] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 548.406851][T10761] udevd[10761]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 548.531213][ T5711] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 548.531246][ T5711] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 548.531281][ T5711] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 548.531301][ T5711] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 548.538465][ T5711] usb 3-1: config 0 descriptor?? [ 548.987556][ T5711] cm6533_jd 0003:0D8C:0022.0017: unknown main item tag 0x0 [ 548.987728][ T5711] cm6533_jd 0003:0D8C:0022.0017: unknown main item tag 0x0 [ 549.023958][ T5711] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0D8C:0022.0017/input/input35 [ 549.175586][T16966] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 549.195933][T16966] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 549.743517][T17027] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 549.851215][ T5711] cm6533_jd 0003:0D8C:0022.0017: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.2-1/input0 [ 549.915728][ T5274] 8021q: adding VLAN 0 to HW filter on device eth2 [ 549.984642][T13076] usb 3-1: USB disconnect, device number 105 [ 550.211129][T17045] fido_id[17045]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 550.509330][ T5711] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 550.828309][T17079] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3000'. [ 551.182365][T17096] loop3: detected capacity change from 0 to 7 [ 551.224385][T17096] Dev loop3: unable to read RDB block 7 [ 551.225350][T17096] loop3: AHDI p1 p2 [ 551.225375][T17096] loop3: partition table partially beyond EOD, truncated [ 551.226537][T17096] loop3: p1 start 1702000233 is beyond EOD, truncated [ 552.478230][T17143] netlink: 'syz.0.3013': attribute type 10 has an invalid length. [ 552.831880][ T5711] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 552.980029][ T5762] usb 3-1: new low-speed USB device number 106 using dummy_hcd [ 553.013964][T17143] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 553.016890][ T5711] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 553.016941][ T5711] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 553.016963][ T5711] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 553.043761][ T5711] usb 1-1: config 0 descriptor?? [ 553.091262][ T5711] pwc: Askey VC010 type 2 USB webcam detected. [ 553.139994][ T5762] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 64, setting to 0 [ 553.140090][ T5762] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 40, changing to 4 [ 553.140116][ T5762] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 0 [ 553.145140][ T5762] usb 3-1: string descriptor 0 read error: -22 [ 553.145332][ T5762] usb 3-1: New USB device found, idVendor=17cc, idProduct=1010, bcdDevice= 0.40 [ 553.145354][ T5762] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 553.173603][T17143] team0: Port device netdevsim1 added [ 553.293680][ T5711] pwc: recv_control_msg error -32 req 02 val 2b00 [ 553.346056][ T5711] pwc: recv_control_msg error -71 req 02 val 2700 [ 553.346669][ T5711] pwc: recv_control_msg error -71 req 02 val 2c00 [ 553.348870][ T5711] pwc: recv_control_msg error -71 req 04 val 1000 [ 553.349595][ T5711] pwc: recv_control_msg error -71 req 04 val 1300 [ 553.351515][ T5711] pwc: recv_control_msg error -71 req 04 val 1400 [ 553.354370][ T5711] pwc: recv_control_msg error -71 req 02 val 2000 [ 553.358022][ T5711] pwc: recv_control_msg error -71 req 02 val 2100 [ 553.359853][ T5711] pwc: recv_control_msg error -71 req 04 val 1500 [ 553.362210][ T5711] pwc: recv_control_msg error -71 req 02 val 2500 [ 553.363630][ T5711] pwc: recv_control_msg error -71 req 02 val 2400 [ 553.365849][ T5711] pwc: recv_control_msg error -71 req 02 val 2600 [ 553.367403][ T5711] pwc: recv_control_msg error -71 req 02 val 2900 [ 553.369419][ T5711] pwc: recv_control_msg error -71 req 02 val 2800 [ 553.382624][ T5711] pwc: recv_control_msg error -71 req 04 val 1100 [ 553.384662][ T5711] pwc: recv_control_msg error -71 req 04 val 1200 [ 553.442518][ T5762] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 553.504569][ T5762] snd-usb-audio 3-1:1.1: probe with driver snd-usb-audio failed with error -71 [ 553.546628][ T5762] snd-usb-audio 3-1:1.2: probe with driver snd-usb-audio failed with error -71 [ 553.592534][ T5711] pwc: Registered as video103. [ 553.592871][ T5762] usb 3-1: USB disconnect, device number 106 [ 553.625080][ T5711] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input36 [ 553.862840][ T5711] usb 1-1: USB disconnect, device number 63 [ 554.136155][T17214] comedi comedi0: comedi_config --init_data is deprecated [ 554.154518][T17214] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 554.155779][T17214] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 554.250534][T17221] netlink: 'syz.2.3019': attribute type 28 has an invalid length. [ 554.356781][T17225] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3018'. [ 554.462544][ T5711] usb 1-1: new full-speed USB device number 64 using dummy_hcd [ 554.611962][ T5711] usb 1-1: device descriptor read/64, error -71 [ 554.876150][T16054] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 554.879310][ T5711] usb 1-1: new full-speed USB device number 65 using dummy_hcd [ 554.904562][T16054] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 554.907463][T16054] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 554.965099][T16054] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 554.982249][T16054] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 555.009588][ T5711] usb 1-1: device descriptor read/64, error -71 [ 555.129714][ T5711] usb usb1-port1: attempt power cycle [ 555.131628][T16054] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 555.172102][T16054] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 555.354339][T16054] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 555.426500][T17270] nfs: Bad value for 'source' [ 555.479327][ T5711] usb 1-1: new full-speed USB device number 66 using dummy_hcd [ 555.512461][ T5711] usb 1-1: device descriptor read/8, error -71 [ 555.530985][T17279] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 555.531519][T17279] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 555.629439][T13076] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 555.750913][T16054] 8021q: adding VLAN 0 to HW filter on device bond0 [ 555.769267][ T5711] usb 1-1: new full-speed USB device number 67 using dummy_hcd [ 555.790285][T13076] usb 3-1: Using ep0 maxpacket: 32 [ 555.799980][ T5711] usb 1-1: device descriptor read/8, error -71 [ 555.806202][T13076] usb 3-1: config 0 has an invalid interface number: 188 but max is 0 [ 555.808672][T13076] usb 3-1: config 0 has no interface number 0 [ 555.808839][T13076] usb 3-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 555.832578][T16054] 8021q: adding VLAN 0 to HW filter on device team0 [ 555.853936][T13076] usb 3-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 555.853961][T13076] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 555.853980][T13076] usb 3-1: Product: syz [ 555.853993][T13076] usb 3-1: Manufacturer: syz [ 555.854119][T13076] usb 3-1: SerialNumber: syz [ 555.886152][ T1492] bridge0: port 1(bridge_slave_0) entered blocking state [ 555.887566][ T1492] bridge0: port 1(bridge_slave_0) entered forwarding state [ 555.912392][T13076] usb 3-1: config 0 descriptor?? [ 555.917430][ T5711] usb usb1-port1: unable to enumerate USB device [ 555.944525][T17264] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 556.042804][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 556.043030][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 556.150334][T17264] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 556.353789][T13076] asix 3-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 556.354376][T13076] asix 3-1:0.188: probe with driver asix failed with error -61 [ 556.957921][T17310] FAULT_INJECTION: forcing a failure. [ 556.957921][T17310] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 556.957956][T17310] CPU: 0 UID: 0 PID: 17310 Comm: syz.0.3028 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 556.957981][T17310] Tainted: [L]=SOFTLOCKUP [ 556.957988][T17310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 556.957998][T17310] Call Trace: [ 556.958006][T17310] [ 556.958014][T17310] dump_stack_lvl+0xe8/0x150 [ 556.958040][T17310] should_fail_ex+0x46b/0x600 [ 556.958070][T17310] _copy_from_user+0x2d/0xb0 [ 556.958090][T17310] comedi_unlocked_ioctl+0x603/0x1b00 [ 556.958128][T17310] ? kasan_quarantine_put+0xbb/0x1f0 [ 556.958146][T17310] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 556.958183][T17310] ? do_vfs_ioctl+0x117b/0x1540 [ 556.958208][T17310] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 556.958260][T17310] ? __fget_files+0x2a/0x420 [ 556.958281][T17310] ? __fget_files+0x2a/0x420 [ 556.958298][T17310] ? __fget_files+0x3a6/0x420 [ 556.958314][T17310] ? __fget_files+0x2a/0x420 [ 556.958334][T17310] ? bpf_lsm_file_ioctl+0x9/0x20 [ 556.958357][T17310] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 556.958379][T17310] __se_sys_ioctl+0xff/0x170 [ 556.958400][T17310] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 556.958419][T17310] do_syscall_64+0x15f/0x560 [ 556.958442][T17310] ? trace_irq_disable+0x3b/0x140 [ 556.958464][T17310] ? clear_bhb_loop+0x40/0x90 [ 556.958486][T17310] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 556.958504][T17310] RIP: 0033:0x7f0e1dd5ce59 [ 556.958521][T17310] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 556.958536][T17310] RSP: 002b:00007f0e1bfb6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 556.958556][T17310] RAX: ffffffffffffffda RBX: 00007f0e1dfd5fa0 RCX: 00007f0e1dd5ce59 [ 556.958569][T17310] RDX: 0000200000000140 RSI: 0000000040946400 RDI: 0000000000000003 [ 556.958581][T17310] RBP: 00007f0e1bfb6090 R08: 0000000000000000 R09: 0000000000000000 [ 556.958592][T17310] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 556.958603][T17310] R13: 00007f0e1dfd6038 R14: 00007f0e1dfd5fa0 R15: 00007ffdeccb05d8 [ 556.958632][T17310] [ 557.726707][T16054] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 558.390889][T17358] FAULT_INJECTION: forcing a failure. [ 558.390889][T17358] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 558.390923][T17358] CPU: 1 UID: 0 PID: 17358 Comm: syz.0.3036 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 558.390958][T17358] Tainted: [L]=SOFTLOCKUP [ 558.390968][T17358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 558.390979][T17358] Call Trace: [ 558.390987][T17358] [ 558.390995][T17358] dump_stack_lvl+0xe8/0x150 [ 558.391020][T17358] should_fail_ex+0x46b/0x600 [ 558.391048][T17358] _copy_to_user+0x31/0xb0 [ 558.391068][T17358] simple_read_from_buffer+0xe1/0x170 [ 558.391099][T17358] proc_fail_nth_read+0x1be/0x230 [ 558.391123][T17358] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 558.391146][T17358] ? rw_verify_area+0x2ac/0x4e0 [ 558.391166][T17358] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 558.391187][T17358] vfs_read+0x212/0xa80 [ 558.391214][T17358] ? __pfx_vfs_read+0x10/0x10 [ 558.391242][T17358] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 558.391267][T17358] ? lockdep_hardirqs_on+0x7a/0x110 [ 558.391289][T17358] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 558.391311][T17358] ? mutex_lock_nested+0x152/0x1d0 [ 558.391329][T17358] ? fdget_pos+0x252/0x320 [ 558.391354][T17358] ksys_read+0x156/0x270 [ 558.391376][T17358] ? __pfx_ksys_read+0x10/0x10 [ 558.391403][T17358] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 558.391423][T17358] do_syscall_64+0x15f/0x560 [ 558.391446][T17358] ? trace_irq_disable+0x3b/0x140 [ 558.391465][T17358] ? clear_bhb_loop+0x40/0x90 [ 558.391486][T17358] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 558.391504][T17358] RIP: 0033:0x7f0e1dd1d68e [ 558.391520][T17358] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 558.391535][T17358] RSP: 002b:00007f0e1bf94fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 558.391555][T17358] RAX: ffffffffffffffda RBX: 00007f0e1bf956c0 RCX: 00007f0e1dd1d68e [ 558.391568][T17358] RDX: 000000000000000f RSI: 00007f0e1bf950a0 RDI: 0000000000000007 [ 558.391579][T17358] RBP: 00007f0e1bf95090 R08: 0000000000000000 R09: 0000000000000000 [ 558.391591][T17358] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 558.391603][T17358] R13: 00007f0e1dfd6128 R14: 00007f0e1dfd6090 R15: 00007ffdeccb05d8 [ 558.391631][T17358] [ 558.736649][T16054] veth0_vlan: entered promiscuous mode [ 558.775414][T16054] veth1_vlan: entered promiscuous mode [ 558.944684][T16054] veth0_macvtap: entered promiscuous mode [ 558.973103][T16054] veth1_macvtap: entered promiscuous mode [ 559.091212][T16054] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 559.153958][T16054] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 559.180075][ T1492] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 559.208741][ T1492] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 559.208784][ T1492] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 559.208818][ T1492] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 559.453921][ T10] usb 1-1: new full-speed USB device number 68 using dummy_hcd [ 559.534552][T13074] usb 3-1: USB disconnect, device number 107 [ 559.610870][ T10] usb 1-1: not running at top speed; connect to a high speed hub [ 559.610936][ T10] usb 1-1: too many configurations: 232, using maximum allowed: 8 [ 559.636367][ T10] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 559.636400][ T10] usb 1-1: can't read configurations, error -61 [ 559.870615][ T10] usb 1-1: new full-speed USB device number 69 using dummy_hcd [ 560.081526][ T10] usb 1-1: not running at top speed; connect to a high speed hub [ 560.081606][ T10] usb 1-1: too many configurations: 232, using maximum allowed: 8 [ 560.083169][ T10] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 560.083202][ T10] usb 1-1: can't read configurations, error -61 [ 560.084950][ T10] usb usb1-port1: attempt power cycle [ 560.369664][T13074] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 560.373957][T17391] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3042'. [ 560.374327][T17391] bridge0: port 3(team0) entered disabled state [ 560.525788][T13074] usb 3-1: Using ep0 maxpacket: 16 [ 560.535099][T13074] usb 3-1: config index 0 descriptor too short (expected 4164, got 68) [ 560.535201][T13074] usb 3-1: config 253 has an invalid descriptor of length 0, skipping remainder of the config [ 560.535222][T13074] usb 3-1: too many endpoints for config 253 interface 0 altsetting 0: 228, using maximum allowed: 30 [ 560.535249][T13074] usb 3-1: config 253 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 228 [ 560.597654][T13074] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice=17.ba [ 560.597672][T13074] usb 3-1: New USB device strings: Mfr=252, Product=60, SerialNumber=1 [ 560.597683][T13074] usb 3-1: Product: syz [ 560.597690][T13074] usb 3-1: Manufacturer: syz [ 560.597697][T13074] usb 3-1: SerialNumber: syz [ 560.640665][ T10] usb 1-1: new full-speed USB device number 70 using dummy_hcd [ 560.696516][ T10] usb 1-1: not running at top speed; connect to a high speed hub [ 560.696589][ T10] usb 1-1: too many configurations: 232, using maximum allowed: 8 [ 560.706257][ T10] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 560.706290][ T10] usb 1-1: can't read configurations, error -61 [ 560.813390][T17391] bridge_slave_1: left allmulticast mode [ 560.813423][T17391] bridge_slave_1: left promiscuous mode [ 560.837623][T17391] bridge0: port 2(bridge_slave_1) entered disabled state [ 560.861421][ T10] usb 1-1: new full-speed USB device number 71 using dummy_hcd [ 560.865487][T13074] rndis_host 3-1:253.0: missing cdc header ether descriptor [ 560.900130][ T10] usb 1-1: not running at top speed; connect to a high speed hub [ 560.900190][ T10] usb 1-1: too many configurations: 232, using maximum allowed: 8 [ 560.907362][ T10] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 560.907394][ T10] usb 1-1: can't read configurations, error -61 [ 560.907746][ T10] usb usb1-port1: unable to enumerate USB device [ 560.926318][T13074] usb 3-1: USB disconnect, device number 108 [ 560.994928][T17391] bridge_slave_0: left allmulticast mode [ 560.994959][T17391] bridge_slave_0: left promiscuous mode [ 560.995594][T17391] bridge0: port 1(bridge_slave_0) entered disabled state [ 561.560329][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 561.560350][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 562.002709][ T2378] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 562.002727][ T2378] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 562.102001][ T5762] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 562.253049][ T5762] usb 3-1: Using ep0 maxpacket: 32 [ 562.300429][ T5762] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 562.300454][ T5762] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 562.364852][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.381542][ T5762] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 562.381569][ T5762] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 562.381588][ T5762] usb 3-1: Product: syz [ 562.381603][ T5762] usb 3-1: Manufacturer: syz [ 562.381615][ T5762] usb 3-1: SerialNumber: syz [ 562.391617][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.426746][ T5762] usb 3-1: config 0 descriptor?? [ 562.657515][T17419] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 562.658708][T17419] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 562.671403][T17420] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 562.674210][T17420] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 562.805413][T17454] netlink: 'syz.3.3050': attribute type 9 has an invalid length. [ 562.805433][T17454] netlink: 'syz.3.3050': attribute type 2 has an invalid length. [ 562.862025][T17449] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3050'. [ 562.869604][ T5711] usb 3-1: USB disconnect, device number 109 [ 563.316426][T17476] loop3: detected capacity change from 0 to 7 [ 563.318783][T17476] Dev loop3: unable to read RDB block 7 [ 563.318809][T17476] loop3: AHDI p1 p2 [ 563.318836][T17476] loop3: partition table partially beyond EOD, truncated [ 563.343010][T17476] loop3: p1 start 1702000233 is beyond EOD, truncated [ 564.084891][ T5619] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 564.133082][ T5619] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 564.136856][ T5619] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 564.152965][ T5619] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 564.153967][ T5619] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 564.501745][T17512] loop3: detected capacity change from 0 to 7 [ 564.529971][T17512] Dev loop3: unable to read RDB block 7 [ 564.529998][T17512] loop3: AHDI p1 p2 [ 564.530025][T17512] loop3: partition table partially beyond EOD, truncated [ 564.530280][T17512] loop3: p1 start 1702000233 is beyond EOD, truncated [ 564.760326][T17524] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3069'. [ 565.283515][ T5711] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 565.444852][ T5711] usb 2-1: Using ep0 maxpacket: 16 [ 565.455736][ T5711] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 565.455787][ T5711] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 157 [ 565.455810][ T5711] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 565.458353][ T5711] usb 2-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 565.458378][ T5711] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 565.458398][ T5711] usb 2-1: Product: syz [ 565.458412][ T5711] usb 2-1: Manufacturer: syz [ 565.458425][ T5711] usb 2-1: SerialNumber: syz [ 565.515358][ T5711] usb 2-1: config 0 descriptor?? [ 565.531094][T17536] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 565.552787][ T5711] port100 2-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 565.653111][T17565] loop3: detected capacity change from 0 to 7 [ 565.654404][T17565] Dev loop3: unable to read RDB block 7 [ 565.654437][T17565] loop3: AHDI p1 p2 [ 565.654465][T17565] loop3: partition table partially beyond EOD, truncated [ 565.654703][T17565] loop3: p1 start 1702000233 is beyond EOD, truncated [ 565.759247][ T5762] usb 3-1: new full-speed USB device number 110 using dummy_hcd [ 565.922131][ T5762] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 565.922162][ T5762] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 565.922199][ T5762] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 565.922220][ T5762] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 565.996966][ T5762] usb 3-1: config 0 descriptor?? [ 566.002158][T17536] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 566.006122][T17536] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 566.020842][ T5762] hub 3-1:0.0: USB hub found [ 566.031783][T17575] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 566.032727][T17575] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 566.055207][ T5711] usb 2-1: USB disconnect, device number 108 [ 566.222475][ T5762] hub 3-1:0.0: 1 port detected [ 566.437574][ T5762] hub 3-1:0.0: hub_hub_status failed (err = -71) [ 566.437600][ T5762] hub 3-1:0.0: config failed, can't get hub status (err -71) [ 566.469354][ T5762] usbhid 3-1:0.0: can't add hid device: -71 [ 566.469464][ T5762] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 566.584015][ T5616] Bluetooth: hci3: command tx timeout [ 566.604490][ T5762] usb 3-1: USB disconnect, device number 110 [ 566.790835][T17615] sock: sock_timestamping_bind_phc: sock not bind to device [ 567.659442][T13076] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 567.828906][T13076] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 567.828943][T13076] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 567.828955][T13076] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 567.872007][T13076] usb 3-1: config 0 descriptor?? [ 567.900168][T13076] pwc: Askey VC010 type 2 USB webcam detected. [ 567.964163][T17556] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 567.992224][ T10] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 568.161555][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 568.163098][ T10] usb 2-1: config 114 has an invalid interface number: 20 but max is 0 [ 568.163123][ T10] usb 2-1: config 114 has no interface number 0 [ 568.163161][ T10] usb 2-1: config 114 interface 20 altsetting 232 bulk endpoint 0x1 has invalid maxpacket 1023 [ 568.163183][ T10] usb 2-1: config 114 interface 20 altsetting 232 has an endpoint descriptor with address 0xCA, changing to 0x8A [ 568.163208][ T10] usb 2-1: config 114 interface 20 altsetting 232 bulk endpoint 0x8A has invalid maxpacket 16 [ 568.163229][ T10] usb 2-1: config 114 interface 20 has no altsetting 0 [ 568.166213][ T10] usb 2-1: New USB device found, idVendor=03f0, idProduct=0f7f, bcdDevice=2d.ac [ 568.166238][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 568.166257][ T10] usb 2-1: Product: syz [ 568.166278][ T10] usb 2-1: Manufacturer: syz [ 568.166292][ T10] usb 2-1: SerialNumber: syz [ 568.185541][T17651] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 568.185710][T17651] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 568.293954][T13076] pwc: recv_control_msg error -32 req 02 val 2b00 [ 568.386975][T13076] pwc: recv_control_msg error -32 req 02 val 2700 [ 568.397384][T17651] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 568.398871][T17651] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 568.401126][T13076] pwc: recv_control_msg error -32 req 02 val 2c00 [ 568.407922][T13076] pwc: recv_control_msg error -32 req 04 val 1000 [ 568.409586][T13076] pwc: recv_control_msg error -32 req 04 val 1300 [ 568.414601][T13076] pwc: recv_control_msg error -32 req 04 val 1400 [ 568.416981][T13076] pwc: recv_control_msg error -32 req 02 val 2000 [ 568.418194][T13076] pwc: recv_control_msg error -32 req 02 val 2100 [ 568.419471][T13076] pwc: recv_control_msg error -32 req 04 val 1500 [ 568.420689][T13076] pwc: recv_control_msg error -32 req 02 val 2500 [ 568.421912][T13076] pwc: recv_control_msg error -32 req 02 val 2400 [ 568.422909][T13076] pwc: recv_control_msg error -32 req 02 val 2600 [ 568.424157][T13076] pwc: recv_control_msg error -32 req 02 val 2900 [ 568.425387][T13076] pwc: recv_control_msg error -32 req 02 val 2800 [ 568.449310][T17651] 9pnet_virtio: no channels available for device syz [ 568.651618][ T5616] Bluetooth: hci3: command tx timeout [ 568.765235][T13076] pwc: recv_control_msg error -71 req 04 val 1200 [ 568.978884][T13076] pwc: Registered as video103. [ 569.024726][T13076] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input37 [ 569.067100][T13076] usb 3-1: USB disconnect, device number 111 [ 569.313728][T17704] loop3: detected capacity change from 0 to 7 [ 569.358464][T17704] Dev loop3: unable to read RDB block 7 [ 569.358488][T17704] loop3: AHDI p1 p2 [ 569.358511][T17704] loop3: partition table partially beyond EOD, truncated [ 569.363726][T17704] loop3: p1 start 1702000233 is beyond EOD, truncated [ 569.973586][T17556] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 570.107965][T17734] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 570.122793][T17734] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 570.228801][ T10] pl2303 2-1:114.20: required interrupt-in endpoint missing [ 570.246690][ T10] usb 2-1: USB disconnect, device number 109 [ 570.627214][T17777] afs: Bad value for 'source' [ 570.683583][T17556] team0: Port device netdevsim1 removed [ 570.694383][T17556] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 570.729268][ T5616] Bluetooth: hci3: command tx timeout [ 570.855244][T13076] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 570.868244][T17787] loop3: detected capacity change from 0 to 7 [ 570.878896][T17787] Dev loop3: unable to read RDB block 7 [ 570.878934][T17787] loop3: AHDI p1 p2 [ 570.878958][T17787] loop3: partition table partially beyond EOD, truncated [ 570.879720][T17787] loop3: p1 start 1702000233 is beyond EOD, truncated [ 571.029341][T13076] usb 2-1: device descriptor read/64, error -71 [ 571.269347][T13076] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 571.326381][T17556] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 571.403387][T13076] usb 2-1: device descriptor read/64, error -71 [ 571.547252][T13076] usb usb2-port1: attempt power cycle [ 571.673482][T17497] bridge0: port 1(bridge_slave_0) entered blocking state [ 571.673911][T17497] bridge0: port 1(bridge_slave_0) entered disabled state [ 571.674147][T17497] bridge_slave_0: entered allmulticast mode [ 571.677259][T17497] bridge_slave_0: entered promiscuous mode [ 571.682594][T17497] bridge0: port 2(bridge_slave_1) entered blocking state [ 571.682960][T17497] bridge0: port 2(bridge_slave_1) entered disabled state [ 571.683185][T17497] bridge_slave_1: entered allmulticast mode [ 571.695697][T17497] bridge_slave_1: entered promiscuous mode [ 571.889925][T13076] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 571.920397][T13076] usb 2-1: device descriptor read/8, error -71 [ 571.952693][T17497] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 571.975573][T17497] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 572.169774][T13076] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 572.191238][T13076] usb 2-1: device descriptor read/8, error -71 [ 572.219643][T17497] team0: Port device team_slave_0 added [ 572.233177][T17497] team0: Port device team_slave_1 added [ 572.304372][T13076] usb usb2-port1: unable to enumerate USB device [ 572.467882][T17906] FAULT_INJECTION: forcing a failure. [ 572.467882][T17906] name failslab, interval 1, probability 0, space 0, times 0 [ 572.467915][T17906] CPU: 1 UID: 0 PID: 17906 Comm: syz.2.3110 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 572.467938][T17906] Tainted: [L]=SOFTLOCKUP [ 572.467955][T17906] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 572.467966][T17906] Call Trace: [ 572.467972][T17906] [ 572.467980][T17906] dump_stack_lvl+0xe8/0x150 [ 572.468006][T17906] should_fail_ex+0x46b/0x600 [ 572.468034][T17906] should_failslab+0xa8/0x100 [ 572.468057][T17906] __kmalloc_noprof+0xdf/0x7b0 [ 572.468077][T17906] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 572.468103][T17906] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 572.468130][T17906] genl_family_rcv_msg_doit+0xd9/0x330 [ 572.468149][T17906] ? __asan_memcpy+0x40/0x70 [ 572.468176][T17906] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 572.468200][T17906] ? __pfx_genl_get_cmd+0x10/0x10 [ 572.468218][T17906] ? __pfx_tipc_nl_node_get_monitor+0x10/0x10 [ 572.468243][T17906] ? __pfx_tipc_nl_node_dump_monitor+0x10/0x10 [ 572.468269][T17906] ? lockdep_hardirqs_on+0x7a/0x110 [ 572.468292][T17906] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 572.468320][T17906] genl_rcv_msg+0x61c/0x7a0 [ 572.468345][T17906] ? __pfx_genl_rcv_msg+0x10/0x10 [ 572.468361][T17906] ? ref_tracker_free+0x673/0x820 [ 572.468384][T17906] ? __pfx_tipc_nl_node_get_monitor+0x10/0x10 [ 572.468409][T17906] ? ____sys_sendmsg+0x55c/0x870 [ 572.468430][T17906] ? ___sys_sendmsg+0x2a5/0x360 [ 572.468461][T17906] netlink_rcv_skb+0x232/0x4b0 [ 572.468485][T17906] ? __pfx_genl_rcv_msg+0x10/0x10 [ 572.468505][T17906] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 572.468548][T17906] genl_rcv+0x28/0x40 [ 572.468566][T17906] netlink_unicast+0x780/0x920 [ 572.468598][T17906] netlink_sendmsg+0x813/0xb40 [ 572.468631][T17906] ? __pfx_netlink_sendmsg+0x10/0x10 [ 572.468657][T17906] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 572.468681][T17906] ? aa_sock_msg_perm+0x122/0x200 [ 572.468700][T17906] ? __pfx_netlink_sendmsg+0x10/0x10 [ 572.468722][T17906] sock_sendmsg_nosec+0x112/0x150 [ 572.468744][T17906] ____sys_sendmsg+0x55c/0x870 [ 572.468772][T17906] ? __pfx_____sys_sendmsg+0x10/0x10 [ 572.468803][T17906] ? import_iovec+0x73/0xa0 [ 572.468825][T17906] ___sys_sendmsg+0x2a5/0x360 [ 572.468847][T17906] ? __lock_acquire+0x6b5/0x2d10 [ 572.468873][T17906] ? __pfx____sys_sendmsg+0x10/0x10 [ 572.468933][T17906] ? __fget_files+0x2a/0x420 [ 572.468956][T17906] ? __fget_files+0x3a6/0x420 [ 572.468985][T17906] __x64_sys_sendmsg+0x1c3/0x2a0 [ 572.469011][T17906] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 572.469045][T17906] ? __pfx_ksys_write+0x10/0x10 [ 572.469074][T17906] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 572.469094][T17906] do_syscall_64+0x15f/0x560 [ 572.469115][T17906] ? trace_irq_disable+0x3b/0x140 [ 572.469135][T17906] ? clear_bhb_loop+0x40/0x90 [ 572.469154][T17906] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 572.469172][T17906] RIP: 0033:0x7f64af8fce59 [ 572.469189][T17906] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 572.469205][T17906] RSP: 002b:00007f64adb4e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 572.469225][T17906] RAX: ffffffffffffffda RBX: 00007f64afb75fa0 RCX: 00007f64af8fce59 [ 572.469239][T17906] RDX: 0000000000044044 RSI: 0000200000000380 RDI: 0000000000000003 [ 572.469251][T17906] RBP: 00007f64adb4e090 R08: 0000000000000000 R09: 0000000000000000 [ 572.469262][T17906] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 572.469272][T17906] R13: 00007f64afb76038 R14: 00007f64afb75fa0 R15: 00007ffd2b57d498 [ 572.469302][T17906] [ 572.816488][ T5616] Bluetooth: hci3: command tx timeout [ 572.857286][T17497] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 572.857302][T17497] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 572.857327][T17497] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 572.902328][T17497] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 572.902344][T17497] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 572.902369][T17497] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 573.499301][ T10] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 573.659306][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 573.662773][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 573.664908][ T10] usb 3-1: config 5 has an invalid interface number: 56 but max is 2 [ 573.664930][ T10] usb 3-1: config 5 has an invalid interface number: 56 but max is 2 [ 573.664947][ T10] usb 3-1: config 5 has an invalid interface number: 69 but max is 2 [ 573.664964][ T10] usb 3-1: config 5 has 2 interfaces, different from the descriptor's value: 3 [ 573.664983][ T10] usb 3-1: config 5 has no interface number 0 [ 573.664998][ T10] usb 3-1: config 5 has no interface number 1 [ 573.665053][ T10] usb 3-1: config 5 interface 56 has no altsetting 0 [ 573.665071][ T10] usb 3-1: config 5 interface 56 has no altsetting 1 [ 573.665087][ T10] usb 3-1: config 5 interface 69 has no altsetting 0 [ 573.713169][ T10] usb 3-1: New USB device found, idVendor=06f8, idProduct=3002, bcdDevice=ed.09 [ 573.713210][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 573.713230][ T10] usb 3-1: Product: syz [ 573.713242][ T10] usb 3-1: Manufacturer: syz [ 573.713256][ T10] usb 3-1: SerialNumber: syz [ 573.864547][T17556] bridge_slave_1: left allmulticast mode [ 573.976987][T17556] bridge_slave_1: left promiscuous mode [ 573.977372][T17556] bridge0: port 2(bridge_slave_1) entered disabled state [ 574.111076][ T822] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 574.261428][ T822] usb 2-1: Using ep0 maxpacket: 16 [ 574.264405][ T822] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 574.264433][ T822] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 574.264454][ T822] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 574.264547][ T822] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 574.264575][ T822] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 574.297535][T17981] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 574.302751][ T822] usb 2-1: config 0 descriptor?? [ 574.307831][T17981] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 574.364021][T17556] bridge_slave_0: left allmulticast mode [ 574.364144][T17556] bridge_slave_0: left promiscuous mode [ 574.440688][T17987] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 574.455361][T17987] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 574.528467][T17556] bridge0: port 1(bridge_slave_0) entered disabled state [ 574.549021][T17994] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 574.560720][T17994] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 574.852773][ T822] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0018/input/input38 [ 575.184845][ T822] microsoft 0003:045E:07DA.0018: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 575.329972][ T822] usb 2-1: USB disconnect, device number 114 [ 575.672850][T18012] fido_id[18012]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 576.700820][T17556] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 576.780408][T17556] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 576.840300][T17556] bond0 (unregistering): Released all slaves [ 576.973480][T17497] hsr_slave_0: entered promiscuous mode [ 576.979733][T17497] hsr_slave_1: entered promiscuous mode [ 576.982368][T17497] debugfs: 'hsr0' already exists in 'hsr' [ 576.982473][T17497] Cannot create hsr debugfs directory [ 577.119935][ T5274] 8021q: adding VLAN 0 to HW filter on device eth1 [ 577.426806][ T10] usb 3-1: USB disconnect, device number 112 [ 577.549628][T18050] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3117'. [ 577.634458][T18065] loop3: detected capacity change from 0 to 7 [ 577.635883][T18065] Dev loop3: unable to read RDB block 7 [ 577.635908][T18065] loop3: AHDI p1 p2 [ 577.635932][T18065] loop3: partition table partially beyond EOD, truncated [ 577.636674][T18065] loop3: p1 start 1702000233 is beyond EOD, truncated [ 577.919918][ T10] usb 3-1: new full-speed USB device number 113 using dummy_hcd [ 578.084303][ T10] usb 3-1: device descriptor read/64, error -71 [ 578.331634][ T10] usb 3-1: new full-speed USB device number 114 using dummy_hcd [ 578.369064][T18112] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 578.380973][T18112] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 578.469363][ T10] usb 3-1: device descriptor read/64, error -71 [ 578.579820][ T10] usb usb3-port1: attempt power cycle [ 578.959318][ T10] usb 3-1: new full-speed USB device number 115 using dummy_hcd [ 578.980658][ T10] usb 3-1: device descriptor read/8, error -71 [ 579.141840][T17556] hsr_slave_0: left promiscuous mode [ 579.158233][T18158] netlink: 'syz.3.3125': attribute type 23 has an invalid length. [ 579.180636][T17556] hsr_slave_1: left promiscuous mode [ 579.182258][T17556] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 579.182281][T17556] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 579.189958][T13076] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 579.222972][T17556] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 579.222997][T17556] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 579.234757][ T10] usb 3-1: new full-speed USB device number 116 using dummy_hcd [ 579.260024][ T10] usb 3-1: device descriptor read/8, error -71 [ 579.330286][T18165] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3126'. [ 579.371889][ T10] usb usb3-port1: unable to enumerate USB device [ 579.388251][T13076] usb 2-1: New USB device found, idVendor=2b73, idProduct=0013, bcdDevice= 0.40 [ 579.388278][T13076] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 579.388605][T13076] usb 2-1: Product: syz [ 579.388620][T13076] usb 2-1: Manufacturer: syz [ 579.388634][T13076] usb 2-1: SerialNumber: syz [ 579.391325][T17556] veth1_macvtap: left promiscuous mode [ 579.391416][T17556] veth0_macvtap: left promiscuous mode [ 579.417135][T17556] veth1_vlan: left promiscuous mode [ 579.417322][T17556] veth0_vlan: left promiscuous mode [ 579.676260][T18146] sg_write: data in/out 24576/136 bytes for SCSI command 0x0-- guessing data in; [ 579.676260][T18146] program syz.1.3124 not setting count and/or reply_len properly [ 579.753813][T18184] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 579.781165][T18184] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 580.280151][T13076] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 580.325455][T13076] usb 2-1: USB disconnect, device number 115 [ 580.446832][T10756] udevd[10756]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 581.041709][ T822] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 581.149855][T17556] team0 (unregistering): Port device team_slave_1 removed [ 581.199222][ T822] usb 3-1: Using ep0 maxpacket: 32 [ 581.201473][ T822] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 581.201501][ T822] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 581.201525][ T822] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 581.201545][ T822] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 581.201569][ T822] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 581.203731][ T822] usb 3-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 581.203755][ T822] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 581.203773][ T822] usb 3-1: Product: syz [ 581.203786][ T822] usb 3-1: Manufacturer: syz [ 581.203799][ T822] usb 3-1: SerialNumber: syz [ 581.217658][ T822] usb 3-1: config 0 descriptor?? [ 581.337644][T17556] team0 (unregistering): Port device team_slave_0 removed [ 581.411743][T18238] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3134'. [ 581.437333][T18239] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 581.447190][T18239] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 581.493469][ T822] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 581.493515][ T822] input input39: Device does not respond to id packet M [ 581.495583][ T822] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 581.495629][ T822] input input39: Device does not respond to id packet P [ 581.495990][ T822] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 581.496032][ T822] input input39: Device does not respond to id packet B [ 581.496409][ T822] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 581.496451][ T822] input input39: Device does not respond to id packet N [ 581.496844][ T822] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 581.499551][ T822] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 581.503098][ T822] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 581.505364][ T822] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 581.684198][ T822] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input39 [ 581.698236][T18251] ieee802154 phy0 wpan0: encryption failed: -22 [ 581.765710][ T822] usb 3-1: USB disconnect, device number 117 [ 581.777285][T18257] netlink: 'syz.2.3135': attribute type 10 has an invalid length. [ 582.288843][ T5274] 8021q: adding VLAN 0 to HW filter on device eth2 [ 582.398224][T18257] 8021q: adding VLAN 0 to HW filter on device bond0 [ 582.410278][T18257] team0: Port device bond0 added [ 582.427631][T18275] dns_resolver: Unsupported server list version (17) [ 583.421560][T18313] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3143'. [ 584.523949][T18345] dvmrp2: entered allmulticast mode [ 584.570225][T13076] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 584.702012][T18354] netlink: 'syz.3.3150': attribute type 28 has an invalid length. [ 584.734075][T13076] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 584.734416][T13076] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 584.734438][T13076] usb 3-1: Product: syz [ 584.734452][T13076] usb 3-1: SerialNumber: syz [ 584.863700][T13076] usb 3-1: config 0 descriptor?? [ 584.881769][T13076] hso 3-1:0.0: Not our interface [ 584.930666][T18361] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3151'. [ 585.083175][T18371] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 585.083774][T18371] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 585.642270][ T822] usb 3-1: USB disconnect, device number 118 [ 585.813145][T18403] 9p: Bad value for 'port' [ 587.142060][T18444] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3160'. [ 587.182772][T18448] netlink: 'syz.3.3159': attribute type 28 has an invalid length. [ 587.630622][T13072] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 587.635120][T18472] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3165'. [ 587.759291][T13072] usb 3-1: device descriptor read/64, error -71 [ 587.786412][T18471] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 587.999388][T13072] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 588.129598][T13072] usb 3-1: device descriptor read/64, error -71 [ 588.138879][T17497] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 588.188129][T17497] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 588.194209][T17497] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 588.240211][T13072] usb usb3-port1: attempt power cycle [ 588.243009][T17497] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 588.248004][T17497] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 588.305797][T18500] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 588.306366][T18500] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 588.414318][T17497] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 588.421391][T17497] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 588.554377][T17497] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 588.592453][T18511] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3169'. [ 588.670302][T13072] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 588.692001][T13072] usb 3-1: device descriptor read/8, error -71 [ 588.866235][T18528] netlink: 'syz.3.3170': attribute type 28 has an invalid length. [ 588.945046][T13072] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 588.960974][T13072] usb 3-1: device descriptor read/8, error -71 [ 589.069825][T13072] usb usb3-port1: unable to enumerate USB device [ 589.194581][T17497] 8021q: adding VLAN 0 to HW filter on device bond0 [ 589.436191][T17497] 8021q: adding VLAN 0 to HW filter on device team0 [ 589.534083][ T83] bridge0: port 1(bridge_slave_0) entered blocking state [ 589.544921][ T83] bridge0: port 1(bridge_slave_0) entered forwarding state [ 589.625326][ T1177] bridge0: port 2(bridge_slave_1) entered blocking state [ 589.625495][ T1177] bridge0: port 2(bridge_slave_1) entered forwarding state [ 589.677470][T18550] netlink: 'syz.1.3172': attribute type 1 has an invalid length. [ 589.677491][T18550] netlink: 'syz.1.3172': attribute type 2 has an invalid length. [ 590.490652][ T5711] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 590.523998][T18585] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3177'. [ 590.660102][ T5711] usb 2-1: Using ep0 maxpacket: 32 [ 590.663417][ T5711] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 590.663441][ T5711] usb 2-1: config 0 has no interface number 0 [ 590.708888][ T5711] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 590.708919][ T5711] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 590.708937][ T5711] usb 2-1: Product: syz [ 590.708957][ T5711] usb 2-1: Manufacturer: syz [ 590.708970][ T5711] usb 2-1: SerialNumber: syz [ 590.718735][T18588] netlink: 'syz.2.3178': attribute type 28 has an invalid length. [ 590.725554][ T5711] usb 2-1: config 0 descriptor?? [ 591.159506][T13074] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 591.172443][ T5711] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 591.172467][ T5711] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 591.319364][T13074] usb 3-1: Using ep0 maxpacket: 8 [ 591.323563][T13074] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 591.323612][T13074] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 591.323825][T13074] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 591.323944][T13074] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 591.323966][T13074] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 591.328047][T13074] usb 3-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 591.328072][T13074] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 591.328268][T13074] usb 3-1: Product: syz [ 591.328283][T13074] usb 3-1: Manufacturer: syz [ 591.328399][T13074] usb 3-1: SerialNumber: syz [ 591.404454][T18575] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 591.406073][T18575] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 591.463561][T13074] usb 3-1: config 0 descriptor?? [ 591.678193][T13074] radio-si470x 3-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 591.678218][T13074] radio-si470x 3-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 591.773710][T17497] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 591.883940][T18593] 9pnet_fd: Insufficient options for proto=fd [ 591.913948][T13074] radio-si470x 3-1:0.0: si470x_get_report: usb_control_msg returned -71 [ 591.913969][T13074] radio-si470x 3-1:0.0: si470x_get_scratch: si470x_get_report returned -71 [ 591.960287][T13074] radio-si470x 3-1:0.0: probe with driver radio-si470x failed with error -5 [ 591.996463][T13074] usb 3-1: USB disconnect, device number 123 [ 592.035727][T17497] veth0_vlan: entered promiscuous mode [ 592.193722][T17497] veth1_vlan: entered promiscuous mode [ 592.352967][T17497] veth0_macvtap: entered promiscuous mode [ 592.387348][T17497] veth1_macvtap: entered promiscuous mode [ 592.468448][T17497] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 592.544436][T17497] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 592.678060][ T5616] Bluetooth: hci2: ISO packet for unknown connection handle 0 [ 592.728620][ T1028] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 592.729798][ T1028] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 592.729838][ T1028] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 592.729989][ T1028] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 593.273835][T18569] tmpfs: Bad value for 'mpol' [ 593.275390][T18569] syz.1.3175 (18569): drop_caches: 4 [ 593.311929][ T5711] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000006c: -71 [ 593.312218][ T5711] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 593.432724][ T5711] usb 2-1: USB disconnect, device number 116 [ 594.476574][T17563] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 594.476594][T17563] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 594.600944][T13066] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 594.786548][T13066] usb 2-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 594.786577][T13066] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 594.786597][T13066] usb 2-1: Product: syz [ 594.786611][T13066] usb 2-1: Manufacturer: syz [ 594.786624][T13066] usb 2-1: SerialNumber: syz [ 594.833004][T13066] usb 2-1: config 0 descriptor?? [ 594.865964][T13066] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 595.040784][T13066] gspca_sunplus: reg_r err -71 [ 595.048897][T13066] usb 2-1: USB disconnect, device number 117 [ 595.108277][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 595.108296][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 595.225810][ T5616] Bluetooth: hci2: command 0x0406 tx timeout [ 595.461707][T18684] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3185'. [ 595.942487][T13066] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 596.030003][ T822] usb 2-1: new full-speed USB device number 118 using dummy_hcd [ 596.104155][T13066] usb 1-1: Using ep0 maxpacket: 32 [ 596.236056][T13066] usb 1-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 596.236084][T13066] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 596.236103][T13066] usb 1-1: Product: syz [ 596.236116][T13066] usb 1-1: Manufacturer: syz [ 596.236129][T13066] usb 1-1: SerialNumber: syz [ 596.331839][T13066] usb 1-1: config 0 descriptor?? [ 596.356909][ T5616] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 596.411498][ T5616] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 596.413408][ T5616] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 596.415537][T13066] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 596.421165][ T5616] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 596.448871][ T5616] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 596.534729][T13074] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 596.693688][T13074] usb 3-1: Using ep0 maxpacket: 32 [ 596.709093][T13074] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 596.718925][T13074] usb 3-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 596.718953][T13074] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 596.718990][T13074] usb 3-1: Product: syz [ 596.719004][T13074] usb 3-1: Manufacturer: syz [ 596.719018][T13074] usb 3-1: SerialNumber: syz [ 596.882907][T13074] usb 3-1: config 0 descriptor?? [ 597.193865][ C0] raw-gadget.0 gadget.0: ignoring, device is not running [ 597.196022][T13066] gspca_ov534_9: reg_w failed -32 [ 597.426348][T13074] cdc_ether 3-1:0.0: skipping garbage [ 597.426370][T13074] cdc_ether 3-1:0.0: missing cdc header descriptor [ 597.474919][T13074] usb 3-1: unsupported MDLM descriptors [ 597.484986][ T822] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 597.485019][ T822] usb 2-1: can't read configurations, error -71 [ 597.506053][ T5619] Bluetooth: hci2: unexpected event for opcode 0x203c [ 597.525128][T18702] veth0_to_team: mtu less than device minimum [ 597.620035][ T10] usb 3-1: USB disconnect, device number 124 [ 597.652696][T13066] gspca_ov534_9: Unknown sensor 0000 [ 597.652777][T13066] ov534_9 1-1:0.0: probe with driver ov534_9 failed with error -22 [ 597.711599][T13066] usb 1-1: USB disconnect, device number 72 [ 597.965617][T18742] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 597.966208][T18742] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 598.201804][T18752] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 598.202073][T18752] overlayfs: overlapping lowerdir path [ 598.365784][T13066] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 598.512893][T13066] usb 1-1: device descriptor read/64, error -71 [ 598.751795][T13066] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 598.879892][T13066] usb 1-1: device descriptor read/64, error -71 [ 599.001115][ T5711] usb 4-1: USB disconnect, device number 103 [ 599.011695][T13066] usb usb1-port1: attempt power cycle [ 599.132224][ T5619] Bluetooth: hci4: command tx timeout [ 599.277385][T17563] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 599.344121][T18774] bridge0: port 3(veth0_to_bridge) entered blocking state [ 599.344316][T18774] bridge0: port 3(veth0_to_bridge) entered disabled state [ 599.344498][T18774] veth0_to_bridge: entered allmulticast mode [ 599.346325][T18774] veth0_to_bridge: entered promiscuous mode [ 599.346453][T18774] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 599.348300][T18774] bridge0: port 3(veth0_to_bridge) entered blocking state [ 599.348408][T18774] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 599.411560][T13066] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 599.444258][T13066] usb 1-1: device descriptor read/8, error -71 [ 599.720321][T13066] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 599.757478][T13066] usb 1-1: device descriptor read/8, error -71 [ 599.856860][T18806] netlink: 'syz.2.3196': attribute type 32 has an invalid length. [ 599.870494][T13066] usb usb1-port1: unable to enumerate USB device [ 600.011780][T17563] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 600.075770][T18820] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3199'. [ 600.081859][ T5711] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 600.260224][ T5711] usb 2-1: Using ep0 maxpacket: 32 [ 600.265100][ T5711] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 600.265124][ T5711] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 600.265143][ T5711] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 600.265161][ T5711] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 600.265179][ T5711] usb 2-1: config 1 has no interface number 0 [ 600.265219][ T5711] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 600.265239][ T5711] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 600.291370][ T5711] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 600.478932][ T5711] snd_usb_pod 2-1:1.1: endpoint not available, using fallback values [ 600.479358][ T5711] snd_usb_pod 2-1:1.1: invalid control EP [ 600.479374][ T5711] snd_usb_pod 2-1:1.1: cannot start listening: -22 [ 600.479652][ T5711] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 600.480177][ T5711] snd_usb_pod 2-1:1.1: probe with driver snd_usb_pod failed with error -22 [ 600.558658][T17563] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 601.026940][T17563] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 601.167291][T18705] bridge0: port 1(bridge_slave_0) entered blocking state [ 601.167510][T18705] bridge0: port 1(bridge_slave_0) entered disabled state [ 601.167655][T18705] bridge_slave_0: entered allmulticast mode [ 601.170412][T18705] bridge_slave_0: entered promiscuous mode [ 601.174850][T18705] bridge0: port 2(bridge_slave_1) entered blocking state [ 601.175197][T18705] bridge0: port 2(bridge_slave_1) entered disabled state [ 601.175728][T18705] bridge_slave_1: entered allmulticast mode [ 601.181543][T18705] bridge_slave_1: entered promiscuous mode [ 601.209299][ T5619] Bluetooth: hci4: command tx timeout [ 601.239870][T13066] usb 3-1: new full-speed USB device number 125 using dummy_hcd [ 601.371029][T18705] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 601.375900][T18705] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 601.402787][T13066] usb 3-1: unable to get BOS descriptor or descriptor too short [ 601.403433][T13066] usb 3-1: not running at top speed; connect to a high speed hub [ 601.406178][T13066] usb 3-1: config 5 has an invalid interface number: 246 but max is 0 [ 601.406201][T13066] usb 3-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 601.406232][T13066] usb 3-1: config 5 has no interface number 0 [ 601.406274][T13066] usb 3-1: config 5 interface 246 altsetting 4 endpoint 0x3 has invalid wMaxPacketSize 0 [ 601.406294][T13066] usb 3-1: config 5 interface 246 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 601.406317][T13066] usb 3-1: config 5 interface 246 has no altsetting 0 [ 601.439699][T13066] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=f5.e4 [ 601.439726][T13066] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 601.439744][T13066] usb 3-1: Product: syz [ 601.439757][T13066] usb 3-1: Manufacturer: syz [ 601.439770][T13066] usb 3-1: SerialNumber: syz [ 601.678916][T18705] team0: Port device team_slave_0 added [ 601.703202][T18705] team0: Port device team_slave_1 added [ 601.782828][T13066] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 601.928552][ T13] usb 3-1: Failed to submit usb control message: -71 [ 601.928585][ T13] usb 3-1: unable to send the bmi data to the device: -71 [ 601.928601][ T13] usb 3-1: unable to get target info from device [ 601.928628][ T13] usb 3-1: could not get target info (-71) [ 601.939025][T13066] usb 3-1: USB disconnect, device number 125 [ 601.973943][ T13] usb 3-1: could not probe fw (-71) [ 602.171212][T18705] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 602.171228][T18705] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 602.171254][T18705] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 602.174944][T18705] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 602.174958][T18705] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 602.174983][T18705] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 602.372565][T18705] hsr_slave_0: entered promiscuous mode [ 602.375436][T18705] hsr_slave_1: entered promiscuous mode [ 602.377616][T18705] debugfs: 'hsr0' already exists in 'hsr' [ 602.377648][T18705] Cannot create hsr debugfs directory [ 602.507567][T19039] netlink: 'syz.2.3208': attribute type 29 has an invalid length. [ 602.551822][T19038] netlink: 'syz.2.3208': attribute type 29 has an invalid length. [ 602.633127][ T37] kauditd_printk_skb: 1470 callbacks suppressed [ 602.633144][ T37] audit: type=1326 audit(33370.957:2625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19055 comm="syz.2.3209" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f64af8fce59 code=0x0 [ 602.841117][ T5711] usb 2-1: USB disconnect, device number 120 [ 602.951326][T17563] pimreg: left allmulticast mode [ 602.951603][T17563] dvmrp2: left allmulticast mode [ 603.239309][T13073] usb 1-1: new full-speed USB device number 77 using dummy_hcd [ 603.239887][ T5711] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 603.300390][ T5619] Bluetooth: hci4: command tx timeout [ 603.389325][ T5711] usb 2-1: Using ep0 maxpacket: 8 [ 603.391158][ T5711] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 603.391182][ T5711] usb 2-1: config 179 has no interface number 0 [ 603.391222][ T5711] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 603.391236][ T5711] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 603.391250][ T5711] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 603.391264][ T5711] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 603.391277][ T5711] usb 2-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 603.391290][ T5711] usb 2-1: config 179 interface 65 has no altsetting 0 [ 603.391308][ T5711] usb 2-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 603.391319][ T5711] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 603.464148][T13073] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 603.464172][T13073] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 603.539016][T13073] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 603.539043][T13073] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 603.539061][T13073] usb 1-1: SerialNumber: syz [ 603.586471][ T5711] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input40 [ 603.637937][T13073] usb 1-1: 0:2 : does not exist [ 603.813793][T19124] loop3: detected capacity change from 0 to 7 [ 603.826830][T19124] Dev loop3: unable to read RDB block 7 [ 603.826857][T19124] loop3: AHDI p1 p2 [ 603.826884][T19124] loop3: partition table partially beyond EOD, truncated [ 603.827303][T19124] loop3: p1 start 1702000233 is beyond EOD, truncated [ 603.836972][T19113] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 603.857941][T19113] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 603.865164][T19108] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 603.876083][T19108] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 603.924109][ T4964] input input40: unable to receive magic message: -110 [ 604.028540][T19134] hugetlbfs: syz.0.3211 (19134): Using mlock ulimits for SHM_HUGETLB is obsolete [ 604.185271][ T4964] input input40: unable to receive magic message: -71 [ 604.275973][T13073] usb 1-1: USB disconnect, device number 77 [ 604.339909][ T4964] input input40: unable to receive magic message: -71 [ 604.359989][ C0] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -1 [ 604.471191][ T5711] usb 2-1: USB disconnect, device number 121 [ 604.471277][ C0] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 604.471343][ C0] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 604.478867][ T4964] input input40: unable to receive magic message: -71 [ 604.682933][T19170] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3215'. [ 604.849759][ T822] usb 3-1: new high-speed USB device number 126 using dummy_hcd [ 604.864702][T17563] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 604.939754][T17563] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 604.981164][T17563] bond0 (unregistering): Released all slaves [ 605.009340][ T822] usb 3-1: Using ep0 maxpacket: 32 [ 605.011911][ T822] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 605.011958][ T822] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 605.011972][ T822] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 605.011985][ T822] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 605.011997][ T822] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 605.012009][ T822] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 605.012020][ T822] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 605.014753][ T822] usb 3-1: New USB device found, idVendor=072f, idProduct=2200, bcdDevice=3f.bf [ 605.014774][ T822] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 605.014784][ T822] usb 3-1: Product: syz [ 605.014791][ T822] usb 3-1: Manufacturer: syz [ 605.014798][ T822] usb 3-1: SerialNumber: syz [ 605.027806][ T822] usb 3-1: config 0 descriptor?? [ 605.049929][ T5711] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 605.055563][T19154] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 605.067213][ T822] usb 3-1: NFC: Reader power on cmd error -90 [ 605.067232][ T822] pn533_usb 3-1:0.0: NFC: Couldn't poweron the reader (error -90) [ 605.067351][ T822] pn533_usb 3-1:0.0: probe with driver pn533_usb failed with error -90 [ 605.196533][ T5711] usb 2-1: device descriptor read/64, error -71 [ 605.328155][T12799] usb 3-1: USB disconnect, device number 126 [ 605.369283][ T5619] Bluetooth: hci4: command tx timeout [ 605.503883][ T5711] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 605.641307][ T5711] usb 2-1: device descriptor read/64, error -71 [ 605.754539][ T5711] usb usb2-port1: attempt power cycle [ 605.939246][T13074] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 606.004776][T19238] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3220'. [ 606.004801][T19238] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3220'. [ 606.004872][T19238] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3220'. [ 606.005603][T19241] loop5: detected capacity change from 0 to 127 [ 606.083284][T19241] loop5: unable to read partition table [ 606.083489][T19241] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 606.119295][T13074] usb 1-1: Using ep0 maxpacket: 32 [ 606.121114][T13074] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 606.121137][T13074] usb 1-1: config 0 has no interface number 0 [ 606.122739][ T5711] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 606.123376][T13074] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 606.123400][T13074] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 606.123418][T13074] usb 1-1: Product: syz [ 606.123431][T13074] usb 1-1: Manufacturer: syz [ 606.123444][T13074] usb 1-1: SerialNumber: syz [ 606.179651][ T5711] usb 2-1: device descriptor read/8, error -71 [ 606.198465][T13074] usb 1-1: config 0 descriptor?? [ 606.419327][ T5711] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 606.453738][ T5711] usb 2-1: device descriptor read/8, error -71 [ 606.561035][ T5711] usb usb2-port1: unable to enumerate USB device [ 606.653794][ T5274] 8021q: adding VLAN 0 to HW filter on device eth1 [ 607.054260][T13074] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 607.250425][T13074] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 607.250718][T13074] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 607.296785][T13074] usb 1-1: USB disconnect, device number 78 [ 607.515330][T19293] netlink: 'syz.2.3222': attribute type 1 has an invalid length. [ 607.515350][T19293] netlink: 'syz.2.3222': attribute type 3 has an invalid length. [ 607.515362][T19293] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3222'. [ 607.877890][T19309] netlink: 332 bytes leftover after parsing attributes in process `syz.1.3225'. [ 607.877946][T19309] netlink: 160 bytes leftover after parsing attributes in process `syz.1.3225'. [ 608.439362][T13074] usb 2-1: new high-speed USB device number 126 using dummy_hcd [ 608.469271][T17563] hsr_slave_0: left promiscuous mode [ 608.510691][T17563] hsr_slave_1: left promiscuous mode [ 608.511674][T17563] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 608.511694][T17563] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 608.529235][T13076] usb 3-1: new high-speed USB device number 127 using dummy_hcd [ 608.560311][T17563] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 608.560335][T17563] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 608.589449][T13074] usb 2-1: Using ep0 maxpacket: 32 [ 608.597203][T13074] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 608.597226][T13074] usb 2-1: config 0 has no interface number 0 [ 608.597269][T13074] usb 2-1: config 0 interface 184 has no altsetting 0 [ 608.635737][T13074] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 608.635763][T13074] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 608.635781][T13074] usb 2-1: Product: syz [ 608.635795][T13074] usb 2-1: Manufacturer: syz [ 608.635808][T13074] usb 2-1: SerialNumber: syz [ 608.673039][T13074] usb 2-1: config 0 descriptor?? [ 608.715502][T13076] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 608.715530][T13076] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 608.715676][T13076] usb 3-1: Product: syz [ 608.715691][T13076] usb 3-1: Manufacturer: syz [ 608.715705][T13076] usb 3-1: SerialNumber: syz [ 608.770164][T13076] usb 3-1: config 0 descriptor?? [ 608.777238][T17563] veth1_macvtap: left promiscuous mode [ 608.777331][T17563] veth0_macvtap: left promiscuous mode [ 608.777635][T17563] veth1_vlan: left promiscuous mode [ 608.777814][T17563] veth0_vlan: left promiscuous mode [ 609.440965][T13076] usb 3-1: USB disconnect, device number 127 [ 610.439369][ T37] audit: type=1804 audit(33377.907:2626): pid=19370 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.3232" name="bus" dev="ramfs" ino=61993 res=1 errno=0 [ 610.883638][T13074] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 610.883669][T13074] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 610.884184][T13074] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 610.884207][T13074] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 610.884230][T13074] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 610.884247][T13074] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 610.884530][T13074] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71 [ 610.913019][T13074] usb 2-1: USB disconnect, device number 126 [ 611.117764][T10692] udevd[10692]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 611.489290][T13076] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 611.639247][T13076] usb 3-1: Using ep0 maxpacket: 8 [ 611.642564][T13076] usb 3-1: unable to get BOS descriptor or descriptor too short [ 611.644013][T13076] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 611.644061][T13076] usb 3-1: config 1 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 611.644086][T13076] usb 3-1: config 1 interface 0 has no altsetting 0 [ 611.648347][T13076] usb 3-1: New USB device found, idVendor=05ac, idProduct=0243, bcdDevice= 0.40 [ 611.648372][T13076] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 611.648390][T13076] usb 3-1: Product: syz [ 611.648403][T13076] usb 3-1: Manufacturer: syz [ 611.648416][T13076] usb 3-1: SerialNumber: syz [ 611.871586][T17563] team_slave_1 (unregistering): left promiscuous mode [ 611.871609][T17563] team_slave_1 (unregistering): left allmulticast mode [ 611.928522][T17563] team0 (unregistering): Port device team_slave_1 removed [ 611.935423][T13076] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input41 [ 611.966848][T17563] team_slave_0 (unregistering): left promiscuous mode [ 611.966876][T17563] team_slave_0 (unregistering): left allmulticast mode [ 611.990472][ T4964] bcm5974 3-1:1.0: could not read from device [ 611.990694][T17563] team0 (unregistering): Port device team_slave_0 removed [ 612.009517][T13075] usb 2-1: new high-speed USB device number 127 using dummy_hcd [ 612.040655][T13076] usb 3-1: USB disconnect, device number 2 [ 612.159653][T13075] usb 2-1: Using ep0 maxpacket: 32 [ 612.161775][T13075] usb 2-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 32 [ 612.161802][T13075] usb 2-1: config 0 interface 0 has no altsetting 0 [ 612.171884][T13075] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 612.171903][T13075] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 612.171913][T13075] usb 2-1: Product: syz [ 612.171925][T13075] usb 2-1: Manufacturer: syz [ 612.171939][T13075] usb 2-1: SerialNumber: syz [ 612.258009][T13075] usb 2-1: config 0 descriptor?? [ 612.258845][T19401] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 612.423172][T17563] dummy0 (unregistering): left promiscuous mode [ 612.423866][T17563] dummy0 (unregistering): left allmulticast mode [ 612.471116][T17563] team0 (unregistering): Port device dummy0 removed [ 612.737615][T13075] gs_usb 2-1:0.0: Couldn't get device config: (err=-121) [ 612.737657][T13075] gs_usb 2-1:0.0: probe with driver gs_usb failed with error -121 [ 613.025818][T13075] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 613.211326][T13075] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 613.211371][T13075] usb 1-1: New USB device found, idVendor=0b05, idProduct=1abe, bcdDevice= 0.00 [ 613.211393][T13075] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 613.224548][T13075] usb 1-1: config 0 descriptor?? [ 613.262597][T19445] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 613.336033][T19404] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 613.339672][T19404] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 613.395462][T18705] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 613.448122][T18705] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 613.457973][T18705] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 613.507588][T18705] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 613.524132][T13066] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 613.524331][T18705] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 613.618596][T18705] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 613.620424][T18705] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 613.701267][T13066] usb 3-1: device descriptor read/64, error -71 [ 613.758702][T18705] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 613.843666][T13075] asus 0003:0B05:1ABE.0019: unknown main item tag 0x0 [ 613.843701][T13075] asus 0003:0B05:1ABE.0019: unknown main item tag 0x0 [ 613.843726][T13075] asus 0003:0B05:1ABE.0019: unknown main item tag 0x0 [ 613.843750][T13075] asus 0003:0B05:1ABE.0019: unknown main item tag 0x0 [ 613.843786][T13075] asus 0003:0B05:1ABE.0019: unknown main item tag 0x0 [ 613.843810][T13075] asus 0003:0B05:1ABE.0019: unknown main item tag 0x0 [ 613.843835][T13075] asus 0003:0B05:1ABE.0019: unknown main item tag 0x3 [ 613.843860][T13075] asus 0003:0B05:1ABE.0019: unknown main item tag 0x3 [ 613.843885][T13075] asus 0003:0B05:1ABE.0019: unknown main item tag 0x3 [ 613.843909][T13075] asus 0003:0B05:1ABE.0019: unknown main item tag 0x3 [ 613.871498][T13075] asus 0003:0B05:1ABE.0019: hidraw0: USB HID v7f.fd Device [HID 0b05:1abe] on usb-dummy_hcd.0-1/input0 [ 613.979243][T13066] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 614.054754][T13075] usb 1-1: USB disconnect, device number 79 [ 614.087354][T19485] fido_id[19485]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 614.119264][T13066] usb 3-1: device descriptor read/64, error -71 [ 614.146059][T18705] 8021q: adding VLAN 0 to HW filter on device bond0 [ 614.208727][T18705] 8021q: adding VLAN 0 to HW filter on device team0 [ 614.226220][ T83] bridge0: port 1(bridge_slave_0) entered blocking state [ 614.226359][ T83] bridge0: port 1(bridge_slave_0) entered forwarding state [ 614.239668][T13066] usb usb3-port1: attempt power cycle [ 614.268677][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 614.268770][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 614.330538][T17563] IPVS: stop unused estimator thread 0... [ 614.591048][T13066] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 614.613296][T13066] usb 3-1: device descriptor read/8, error -71 [ 614.738194][ T5711] usb 2-1: USB disconnect, device number 127 [ 614.852076][T13066] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 614.870407][T13066] usb 3-1: device descriptor read/8, error -71 [ 614.937332][T18705] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 614.990504][T13066] usb usb3-port1: unable to enumerate USB device [ 615.013267][T18705] veth0_vlan: entered promiscuous mode [ 615.047205][T18705] veth1_vlan: entered promiscuous mode [ 615.089761][T18705] veth0_macvtap: entered promiscuous mode [ 615.096142][T18705] veth1_macvtap: entered promiscuous mode [ 615.114268][T13075] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 615.124388][T18705] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 615.155457][T18705] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 615.183209][ T58] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 615.187043][ T58] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 615.187084][ T58] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 615.187115][ T58] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 615.279749][T13075] usb 1-1: Using ep0 maxpacket: 8 [ 615.300982][T13075] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 615.326418][T13075] usb 1-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 615.326444][T13075] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 615.326462][T13075] usb 1-1: Product: syz [ 615.326474][T13075] usb 1-1: Manufacturer: syz [ 615.326487][T13075] usb 1-1: SerialNumber: syz [ 615.362454][T13075] usb 1-1: config 0 descriptor?? [ 615.377790][T13075] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 615.598718][T19523] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 615.599645][T19523] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 615.678109][T19523] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 615.678135][T19523] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 615.678216][T19523] vhci_hcd vhci_hcd.0: Device attached [ 615.694058][T19523] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 615.706093][T19523] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 615.752924][T19535] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 0 [ 615.753426][ T1028] vhci_hcd vhci_hcd.0: stop threads [ 615.753439][ T1028] vhci_hcd vhci_hcd.0: release socket [ 615.753467][ T1028] vhci_hcd vhci_hcd.0: disconnect device [ 616.629858][T13075] gspca_zc3xx: reg_w_i err -71 [ 616.738523][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 616.738855][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 616.739260][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 616.739592][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 616.739937][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 616.740345][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 616.740739][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 616.741082][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 616.741430][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 616.741776][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 616.810432][ T5619] Bluetooth: hci0: command tx timeout [ 616.965177][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 616.965192][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 617.070432][T19555] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 617.228318][T13075] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 617.228401][T13075] gspca_zc3xx 1-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 617.264167][T13075] usb 1-1: USB disconnect, device number 80 [ 617.303028][T19523] F2FS-fs (nbd0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 617.303056][T19523] F2FS-fs (nbd0): Can't find valid F2FS filesystem in 1th superblock [ 617.303697][T19523] F2FS-fs (nbd0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 617.303718][T19523] F2FS-fs (nbd0): Can't find valid F2FS filesystem in 2th superblock [ 617.567859][T19569] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 617.688626][T19568] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 618.041940][T13074] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 618.072278][ T37] audit: type=1326 audit(33386.397:2627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19589 comm="syz.1.3249" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1777c0ce59 code=0x0 [ 618.274174][ T1492] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 618.274195][ T1492] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 618.914056][T13074] usb 3-1: config 0 has an invalid interface number: 199 but max is 1 [ 618.914083][T13074] usb 3-1: config 0 has no interface number 1 [ 618.914137][T13074] usb 3-1: config 0 interface 199 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 618.914172][T13074] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 618.915258][T13074] usb 3-1: New USB device found, idVendor=0002, idProduct=0000, bcdDevice= 0.00 [ 618.915284][T13074] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 618.915302][T13074] usb 3-1: SerialNumber: syz [ 619.227997][T13074] usb 3-1: config 0 descriptor?? [ 619.294211][T19594] binder: 19593:19594 ioctl 4018620d 0 returned -22 [ 619.319970][T19594] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3251'. [ 619.353898][T19594] netlink: 'syz.1.3251': attribute type 29 has an invalid length. [ 619.454282][T13074] uvcvideo 3-1:0.199: Found UVC 0.00 device (0002:0000) [ 619.454314][T13074] uvcvideo 3-1:0.199: No valid video chain found. [ 619.540168][T13074] usb 3-1: USB disconnect, device number 7 [ 620.046061][ T5721] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 620.249341][T13075] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 620.270658][ T5721] usb 2-1: Using ep0 maxpacket: 32 [ 620.277597][ T5721] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 620.277620][ T5721] usb 2-1: config 0 has no interface number 0 [ 620.302176][ T5721] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 620.302202][ T5721] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 620.302220][ T5721] usb 2-1: Product: syz [ 620.302233][ T5721] usb 2-1: Manufacturer: syz [ 620.302246][ T5721] usb 2-1: SerialNumber: syz [ 620.445627][ T5721] usb 2-1: config 0 descriptor?? [ 621.493535][ T5721] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 621.493564][ T5721] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 621.509212][T13075] usb 1-1: Using ep0 maxpacket: 32 [ 621.622254][ T9] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 621.739186][ C1] net_ratelimit: 12293 callbacks suppressed [ 621.739212][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 621.739497][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 621.739827][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 621.740107][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 621.740392][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 621.740663][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 621.740993][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 621.741271][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 621.741553][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 621.741838][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 621.781783][ T5721] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 621.782072][ T5721] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -61 [ 621.799906][ T9] usb 3-1: device descriptor read/64, error -71 [ 621.800951][T13075] usb 1-1: device descriptor read/all, error -71 [ 622.142058][ T9] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 622.364715][ T5721] usb 2-1: USB disconnect, device number 2 [ 623.938957][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 623.939054][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.584079][T19669] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 624.587713][T19669] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 624.847346][T19682] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3259'. [ 624.849437][T19682] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3259'. [ 625.026500][T19689] netlink: 'syz.2.3262': attribute type 28 has an invalid length. [ 626.749375][ C1] net_ratelimit: 14823 callbacks suppressed [ 626.749397][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 626.749744][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 626.750085][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 626.750459][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 626.750797][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 626.751139][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 626.751476][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 626.755541][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:14:65:ce:14:4a, vlan:0) [ 626.756114][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 626.756655][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 627.605829][T19715] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 627.708151][T19715] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 627.785475][T19715] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 627.823068][T19715] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 629.166155][ T4940] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 629.436709][ T4940] usb 3-1: Using ep0 maxpacket: 16 [ 629.555807][T13074] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 629.609293][T13075] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 629.721855][T13074] usb 4-1: Using ep0 maxpacket: 16 [ 629.727361][T13074] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 629.727390][T13074] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 629.727411][T13074] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 629.727449][T13074] usb 4-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 629.727470][T13074] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 629.888248][T13075] usb 1-1: device descriptor read/64, error -71 [ 629.901593][T13074] usb 4-1: config 0 descriptor?? [ 630.546910][ T4940] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 630.546955][ T4940] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 630.546980][ T4940] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 630.547021][ T4940] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 630.547041][ T4940] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 630.890511][ T5619] Bluetooth: hci4: unexpected subevent 0x10 length: 11 > 2 [ 631.637390][T13074] hid (null): unknown global tag 0xe [ 631.739220][T13075] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 631.749984][ T4940] usb 3-1: config 0 descriptor?? [ 631.750910][T19730] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 631.759309][ C0] net_ratelimit: 17157 callbacks suppressed [ 631.759325][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:14:65:ce:14:4a, vlan:0) [ 631.760059][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 631.760469][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 631.761305][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:14:65:ce:14:4a, vlan:0) [ 631.762114][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 631.762527][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 631.763318][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:14:65:ce:14:4a, vlan:0) [ 631.764042][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 631.764448][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 631.765233][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:14:65:ce:14:4a, vlan:0) [ 631.921506][T13075] usb 1-1: device descriptor read/64, error -71 [ 631.989602][T13074] shield 0003:0955:7214.001A: unknown global tag 0xe [ 631.989625][T13074] shield 0003:0955:7214.001A: item 0 1 1 14 parsing failed [ 631.990404][T13074] shield 0003:0955:7214.001A: Parse failed [ 631.990472][T13074] shield 0003:0955:7214.001A: probe with driver shield failed with error -22 [ 632.030762][T13075] usb usb1-port1: attempt power cycle [ 632.513474][ T4940] usbhid 3-1:0.0: can't add hid device: -71 [ 632.513585][ T4940] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 632.706865][ T4940] usb 3-1: USB disconnect, device number 10 [ 635.029258][T13075] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 635.029443][T13073] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 635.812096][T13072] usb 4-1: USB disconnect, device number 104 [ 635.829201][T13075] usb 1-1: Using ep0 maxpacket: 32 [ 635.835535][T13075] usb 1-1: config 0 has an invalid interface number: 83 but max is 0 [ 635.835557][T13075] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 635.835574][T13075] usb 1-1: config 0 has no interface number 0 [ 635.835609][T13075] usb 1-1: config 0 interface 83 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 635.835630][T13075] usb 1-1: config 0 interface 83 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 635.864655][T13075] usb 1-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=d8.11 [ 635.864681][T13075] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 635.864699][T13075] usb 1-1: Product: syz [ 635.864712][T13075] usb 1-1: Manufacturer: syz [ 635.864725][T13075] usb 1-1: SerialNumber: syz [ 635.889166][T13073] usb 3-1: Using ep0 maxpacket: 32 [ 635.941431][T13073] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 635.941461][T13073] usb 3-1: config 0 has no interface number 0 [ 635.969808][T13073] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 635.969834][T13073] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 635.969852][T13073] usb 3-1: Product: syz [ 635.969864][T13073] usb 3-1: Manufacturer: syz [ 635.969878][T13073] usb 3-1: SerialNumber: syz [ 636.119630][T13075] usb 1-1: config 0 descriptor?? [ 636.120087][T13073] usb 3-1: config 0 descriptor?? [ 636.245084][T13073] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 636.245121][T13073] usb 3-1: selecting invalid altsetting 1 [ 636.245136][T13073] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 636.485246][T19803] tmpfs: Bad value for 'mpol' [ 636.769383][ C1] net_ratelimit: 14143 callbacks suppressed [ 636.769410][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 636.769623][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 636.769752][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 636.770013][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 636.770138][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 636.770486][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 636.770760][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:14:65:ce:14:4a, vlan:0) [ 636.770873][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 636.771211][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 636.771445][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 637.195177][T19808] fuse: Bad value for 'fd' [ 637.288981][T13075] redrat3 1-1:0.83: Couldn't find all endpoints [ 637.307502][T13073] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 637.307859][T13073] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 637.307908][T13073] usb 3-1: media controller created [ 638.508071][T13073] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 640.272569][ T5721] usb 1-1: USB disconnect, device number 87 [ 640.890495][T13073] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 640.890550][T13073] zl10353_read_register: readreg error (reg=127, ret==-71) [ 640.891006][T13073] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 641.779155][ C1] net_ratelimit: 17778 callbacks suppressed [ 641.779175][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 641.779521][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 641.779857][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 641.780199][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 641.780534][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 641.780936][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 641.781278][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 641.781612][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 641.781946][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 641.782337][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 644.002348][T13073] usb 3-1: USB disconnect, device number 11 [ 645.333020][ T5616] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 645.496227][ T5616] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 645.499947][ T5616] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 645.510857][ T5616] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 645.512634][ T5616] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 645.773101][T19883] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 646.051386][T19888] comedi: No check for data length of config insn id 1601400420 is implemented [ 646.051405][T19888] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 646.051416][T19888] comedi: Assuming n=86 is correct [ 646.052374][T19884] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3287'. [ 646.789176][ C1] net_ratelimit: 16995 callbacks suppressed [ 646.789198][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 646.789231][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:14:65:ce:14:4a, vlan:0) [ 646.789572][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 646.789917][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 646.789952][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 646.790255][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 646.790332][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 646.790699][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 646.791044][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 646.791108][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:14:65:ce:14:4a, vlan:0) [ 647.609285][ T5619] Bluetooth: hci1: command tx timeout [ 649.769244][ T5619] Bluetooth: hci1: command tx timeout [ 651.699245][T13076] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 651.799237][ C1] net_ratelimit: 17735 callbacks suppressed [ 651.799258][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 651.799512][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 651.799643][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 651.799905][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 651.800045][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 651.800392][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 651.800698][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:14:65:ce:14:4a, vlan:0) [ 651.800737][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 651.801075][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 651.801385][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 652.689323][T13076] usb 3-1: Using ep0 maxpacket: 32 [ 652.769824][T13076] usb 3-1: config 0 has an invalid interface number: 83 but max is 0 [ 652.769850][T13076] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 652.769867][T13076] usb 3-1: config 0 has no interface number 0 [ 652.769927][T13076] usb 3-1: config 0 interface 83 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 652.769949][T13076] usb 3-1: config 0 interface 83 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 652.821300][ T5619] Bluetooth: hci1: command tx timeout [ 652.933901][T13076] usb 3-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=d8.11 [ 652.933929][T13076] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 652.933948][T13076] usb 3-1: Product: syz [ 652.933961][T13076] usb 3-1: Manufacturer: syz [ 652.933974][T13076] usb 3-1: SerialNumber: syz [ 652.988006][T13076] usb 3-1: config 0 descriptor?? [ 653.012020][T13076] redrat3 3-1:0.83: Couldn't find all endpoints [ 653.259660][T13073] usb 1-1: new low-speed USB device number 89 using dummy_hcd [ 653.287494][T12799] usb 3-1: USB disconnect, device number 13 [ 653.513876][T13073] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 64, setting to 0 [ 653.513923][T13073] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 40, changing to 4 [ 653.513947][T13073] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 0 [ 653.518603][T13073] usb 1-1: string descriptor 0 read error: -22 [ 653.518764][T13073] usb 1-1: New USB device found, idVendor=17cc, idProduct=1010, bcdDevice= 0.40 [ 653.518787][T13073] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 654.169445][T13073] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 654.199555][T13073] snd-usb-audio 1-1:1.1: probe with driver snd-usb-audio failed with error -71 [ 654.230704][T13073] snd-usb-audio 1-1:1.2: probe with driver snd-usb-audio failed with error -71 [ 654.319301][T13073] usb 1-1: USB disconnect, device number 89 [ 654.901574][ T5619] Bluetooth: hci1: command tx timeout [ 656.809311][ C0] net_ratelimit: 16092 callbacks suppressed [ 656.809331][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:14:65:ce:14:4a, vlan:0) [ 656.810092][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 656.810496][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 656.811276][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:14:65:ce:14:4a, vlan:0) [ 656.817202][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 656.817491][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 656.817825][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 656.818102][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 656.818435][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 656.818732][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 658.292705][ T9] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 658.450720][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 658.453094][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 658.453123][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 658.453143][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 658.453180][ T9] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 658.453200][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 658.489282][ T9] usb 3-1: config 0 descriptor?? [ 660.508838][T19988] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3303'. [ 660.592688][ T9] usbhid 3-1:0.0: can't add hid device: -71 [ 660.592802][ T9] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 660.673005][ T9] usb 3-1: USB disconnect, device number 14 [ 661.329069][T20021] netlink: 'syz.2.3305': attribute type 27 has an invalid length. [ 661.821175][ C1] net_ratelimit: 16124 callbacks suppressed [ 661.821197][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 661.821200][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 661.821572][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 661.821920][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 661.821955][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:14:65:ce:14:4a, vlan:0) [ 661.822365][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 661.822630][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 661.822708][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 661.823006][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 661.823588][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:14:65:ce:14:4a, vlan:0) [ 664.214809][T20042] loop4: detected capacity change from 0 to 7 [ 664.398659][ T5762] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 664.415869][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 664.457502][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 664.457535][ C1] buffer_io_error: 9 callbacks suppressed [ 664.457545][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 664.589198][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 664.589229][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 664.592934][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 664.592958][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 664.605224][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 664.635092][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 664.664379][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 664.664412][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 664.814080][ T5762] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 664.814104][ T5762] usb 4-1: config 0 has no interface number 0 [ 664.814167][ T5762] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 664.814190][ T5762] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 664.814226][ T5762] usb 4-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 664.814245][ T5762] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 664.820785][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 664.820818][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 664.834046][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 664.834076][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 664.859434][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 664.859465][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 664.900992][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 664.901023][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 664.901513][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 664.939417][T20042] ldm_validate_partition_table(): Disk read failed. [ 665.017067][T20042] Dev loop4: unable to read RDB block 0 [ 665.025437][ T5762] usb 4-1: config 0 descriptor?? [ 665.032302][T20042] loop4: unable to read partition table [ 665.032495][T20042] loop4: partition table beyond EOD, truncated [ 665.046489][T20042] loop_reread_partitions: partition scan of loop4 (-ý? %`{5 FLQk݊A) failed (rc=-5) [ 665.687050][T20037] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 665.687628][T20037] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 665.710366][ T5762] usbhid 4-1:0.1: can't add hid device: -71 [ 665.710475][ T5762] usbhid 4-1:0.1: probe with driver usbhid failed with error -71 [ 665.779422][ T5762] usb 4-1: USB disconnect, device number 105 [ 666.832265][ C0] net_ratelimit: 15648 callbacks suppressed [ 666.832285][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 666.832971][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 666.833722][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:14:65:ce:14:4a, vlan:0) [ 666.834516][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 666.834903][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 666.835678][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:14:65:ce:14:4a, vlan:0) [ 666.835938][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 666.836360][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 666.836528][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 666.836741][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 667.148318][T20074] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.3310'. [ 667.184266][T19823] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 668.502309][ T5711] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 668.524782][T20078] overlayfs: failed to resolve './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa': -2 [ 668.936195][ T5711] usb 3-1: Using ep0 maxpacket: 32 [ 668.971625][ T5711] usb 3-1: device descriptor read/all, error -71 [ 669.109044][T20093] netlink: 88 bytes leftover after parsing attributes in process `syz.3.3313'. [ 669.182952][T20098] nftables ruleset with unbound chain [ 670.239281][T13072] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 670.244650][T20110] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3316'. [ 670.254916][T20110] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 670.419832][T13072] usb 4-1: Using ep0 maxpacket: 8 [ 670.460569][T13072] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 252, changing to 11 [ 670.460600][T13072] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 670.460621][T13072] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 670.460642][T13072] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 670.460665][T13072] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 59391, setting to 1024 [ 670.460704][T13072] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 670.460724][T13072] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 670.466081][T13072] usb 4-1: config 0 descriptor?? [ 671.457280][T19823] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 671.839286][ C0] net_ratelimit: 14256 callbacks suppressed [ 671.839307][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 671.839613][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 671.840005][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 671.840099][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:14:65:ce:14:4a, vlan:0) [ 671.840388][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 671.840770][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 671.840786][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 671.841160][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 671.841167][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 671.841547][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 673.798303][ T4940] usb 4-1: USB disconnect, device number 106 [ 674.199097][ T37] audit: type=1326 audit(33442.517:2628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20171 comm="syz.3.3320" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2c47f9ce59 code=0x0 [ 674.239388][T20176] batadv_slave_1: entered promiscuous mode [ 674.259828][ T9] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 674.409295][ T9] usb 3-1: device descriptor read/64, error -71 [ 674.659325][ T9] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 674.790816][ T9] usb 3-1: device descriptor read/64, error -71 [ 674.901234][ T9] usb usb3-port1: attempt power cycle [ 675.270491][ T9] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 675.973810][ T9] usb 3-1: device descriptor read/8, error -71 [ 676.849192][ C1] net_ratelimit: 19571 callbacks suppressed [ 676.849214][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 676.849442][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 676.849558][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 676.849902][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 676.850200][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:14:65:ce:14:4a, vlan:0) [ 676.850237][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 676.850587][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 676.850933][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 676.851259][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 676.851584][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 677.588472][T20192] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3323'. [ 678.294075][T20200] netlink: 'syz.0.3325': attribute type 28 has an invalid length. [ 678.646136][T20203] [ 678.646148][T20203] ====================================================== [ 678.646158][T20203] WARNING: possible circular locking dependency detected [ 678.646173][T20203] syzkaller #0 Tainted: G L [ 678.646186][T20203] ------------------------------------------------------ [ 678.646202][T20203] syz.2.3326/20203 is trying to acquire lock: [ 678.646214][T20203] ffff88802968e4c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xcc0 [ 678.646265][T20203] [ 678.646265][T20203] but task is already holding lock: [ 678.646272][T20203] ffffffff8e0756d8 (system_transition_mutex){+.+.}-{4:4}, at: software_resume+0x47/0x4c0 [ 678.646319][T20203] [ 678.646319][T20203] which lock already depends on the new lock. [ 678.646319][T20203] [ 678.646327][T20203] [ 678.646327][T20203] the existing dependency chain (in reverse order) is: [ 678.646335][T20203] [ 678.646335][T20203] -> #5 (system_transition_mutex){+.+.}-{4:4}: [ 678.646360][T20203] mutex_lock_nested+0x5a/0x1d0 [ 678.646379][T20203] lock_system_sleep+0x49/0x70 [ 678.646397][T20203] resume_store+0x2ff/0x4f0 [ 678.646411][T20203] kernfs_fop_write_iter+0x3b0/0x540 [ 678.646434][T20203] vfs_write+0x629/0xba0 [ 678.646450][T20203] ksys_write+0x156/0x270 [ 678.646468][T20203] do_syscall_64+0x15f/0x560 [ 678.646488][T20203] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 678.646506][T20203] [ 678.646506][T20203] -> #4 (&of->mutex){+.+.}-{4:4}: [ 678.646530][T20203] mutex_lock_nested+0x5a/0x1d0 [ 678.646551][T20203] kernfs_seq_start+0x5c/0x420 [ 678.646573][T20203] seq_read_iter+0x3f8/0xe20 [ 678.646594][T20203] do_iter_readv_writev+0x62b/0x8d0 [ 678.646613][T20203] vfs_readv+0x292/0x850 [ 678.646634][T20203] do_readv+0x15a/0x2e0 [ 678.646655][T20203] do_syscall_64+0x15f/0x560 [ 678.646676][T20203] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 678.646692][T20203] [ 678.646692][T20203] -> #3 (&p->lock){+.+.}-{4:4}: [ 678.646716][T20203] mutex_lock_nested+0x5a/0x1d0 [ 678.646733][T20203] seq_read_iter+0xb8/0xe20 [ 678.646753][T20203] lo_rw_aio+0xc80/0xf00 [ 678.646772][T20203] loop_process_work+0x92a/0x11b0 [ 678.646792][T20203] process_one_work+0x98b/0x1630 [ 678.646814][T20203] worker_thread+0xb49/0x1140 [ 678.646836][T20203] kthread+0x388/0x470 [ 678.646853][T20203] ret_from_fork+0x514/0xb70 [ 678.646872][T20203] ret_from_fork_asm+0x1a/0x30 [ 678.646893][T20203] [ 678.646893][T20203] -> #2 ((work_completion)(&worker->work)){+.+.}-{0:0}: [ 678.646918][T20203] process_one_work+0x8d7/0x1630 [ 678.646940][T20203] worker_thread+0xb49/0x1140 [ 678.646962][T20203] kthread+0x388/0x470 [ 678.646978][T20203] ret_from_fork+0x514/0xb70 [ 678.646996][T20203] ret_from_fork_asm+0x1a/0x30 [ 678.647016][T20203] [ 678.647016][T20203] -> #1 ((wq_completion)loop3){+.+.}-{0:0}: [ 678.647041][T20203] touch_wq_lockdep_map+0xcb/0x180 [ 678.647057][T20203] __flush_workqueue+0x14b/0x14f0 [ 678.647072][T20203] drain_workqueue+0xd3/0x390 [ 678.647088][T20203] lo_release+0x287/0x8f0 [ 678.647106][T20203] bdev_release+0x541/0x660 [ 678.647127][T20203] blkdev_release+0x15/0x20 [ 678.647149][T20203] __fput+0x461/0xa70 [ 678.647163][T20203] fput_close_sync+0x11f/0x240 [ 678.647178][T20203] __x64_sys_close+0x7e/0x110 [ 678.647193][T20203] do_syscall_64+0x15f/0x560 [ 678.647223][T20203] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 678.647241][T20203] [ 678.647241][T20203] -> #0 (&disk->open_mutex){+.+.}-{4:4}: [ 678.647265][T20203] __lock_acquire+0x15a5/0x2d10 [ 678.647284][T20203] lock_acquire+0x106/0x350 [ 678.647301][T20203] mutex_lock_nested+0x5a/0x1d0 [ 678.647318][T20203] bdev_open+0xe0/0xcc0 [ 678.647337][T20203] bdev_file_open_by_dev+0x1be/0x240 [ 678.647359][T20203] swsusp_check+0x56/0x490 [ 678.647376][T20203] software_resume+0x51/0x4c0 [ 678.647400][T20203] resume_store+0x333/0x4f0 [ 678.647414][T20203] kernfs_fop_write_iter+0x3b0/0x540 [ 678.647436][T20203] vfs_write+0x629/0xba0 [ 678.647453][T20203] ksys_write+0x156/0x270 [ 678.647470][T20203] do_syscall_64+0x15f/0x560 [ 678.647491][T20203] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 678.647507][T20203] [ 678.647507][T20203] other info that might help us debug this: [ 678.647507][T20203] [ 678.647513][T20203] Chain exists of: [ 678.647513][T20203] &disk->open_mutex --> &of->mutex --> system_transition_mutex [ 678.647513][T20203] [ 678.647542][T20203] Possible unsafe locking scenario: [ 678.647542][T20203] [ 678.647549][T20203] CPU0 CPU1 [ 678.647555][T20203] ---- ---- [ 678.647561][T20203] lock(system_transition_mutex); [ 678.647574][T20203] lock(&of->mutex); [ 678.647587][T20203] lock(system_transition_mutex); [ 678.647602][T20203] lock(&disk->open_mutex); [ 678.647613][T20203] [ 678.647613][T20203] *** DEADLOCK *** [ 678.647613][T20203] [ 678.647619][T20203] 5 locks held by syz.2.3326/20203: [ 678.647629][T20203] #0: ffff888026914128 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320 [ 678.647672][T20203] #1: ffff888035a00480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0 [ 678.647717][T20203] #2: ffff888034313c78 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 678.647764][T20203] #3: ffff88801f2a10f8 (kn->active#60){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 678.647815][T20203] #4: ffffffff8e0756d8 (system_transition_mutex){+.+.}-{4:4}, at: software_resume+0x47/0x4c0 [ 678.647863][T20203] [ 678.647863][T20203] stack backtrace: [ 678.647877][T20203] CPU: 0 UID: 0 PID: 20203 Comm: syz.2.3326 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 678.647902][T20203] Tainted: [L]=SOFTLOCKUP [ 678.647909][T20203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 678.647922][T20203] Call Trace: [ 678.647929][T20203] [ 678.647938][T20203] dump_stack_lvl+0xe8/0x150 [ 678.647960][T20203] print_circular_bug+0x2e1/0x300 [ 678.647986][T20203] check_noncircular+0x12e/0x150 [ 678.648013][T20203] __lock_acquire+0x15a5/0x2d10 [ 678.648037][T20203] ? bd_prepare_to_claim+0x417/0x4a0 [ 678.648058][T20203] ? bdev_open+0xe0/0xcc0 [ 678.648078][T20203] lock_acquire+0x106/0x350 [ 678.648097][T20203] ? bdev_open+0xe0/0xcc0 [ 678.648120][T20203] ? bdev_open+0xe0/0xcc0 [ 678.648143][T20203] ? bdev_open+0xe0/0xcc0 [ 678.648163][T20203] mutex_lock_nested+0x5a/0x1d0 [ 678.648180][T20203] ? bdev_open+0xe0/0xcc0 [ 678.648212][T20203] bdev_open+0xe0/0xcc0 [ 678.648239][T20203] bdev_file_open_by_dev+0x1be/0x240 [ 678.648264][T20203] swsusp_check+0x56/0x490 [ 678.648286][T20203] software_resume+0x51/0x4c0 [ 678.648311][T20203] resume_store+0x333/0x4f0 [ 678.648327][T20203] ? sysfs_file_kobj+0x1a/0x230 [ 678.648351][T20203] ? __pfx_resume_store+0x10/0x10 [ 678.648369][T20203] ? sysfs_file_kobj+0x1a/0x230 [ 678.648394][T20203] ? sysfs_file_kobj+0x1e4/0x230 [ 678.648419][T20203] ? sysfs_kf_write+0x166/0x260 [ 678.648437][T20203] ? __pfx_sysfs_kf_write+0x10/0x10 [ 678.648452][T20203] kernfs_fop_write_iter+0x3b0/0x540 [ 678.648479][T20203] vfs_write+0x629/0xba0 [ 678.648501][T20203] ? __pfx_vfs_write+0x10/0x10 [ 678.648522][T20203] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 678.648544][T20203] ? lockdep_hardirqs_on+0x7a/0x110 [ 678.648568][T20203] ? mutex_lock_nested+0x152/0x1d0 [ 678.648585][T20203] ? fdget_pos+0x252/0x320 [ 678.648605][T20203] ksys_write+0x156/0x270 [ 678.648625][T20203] ? __pfx_ksys_write+0x10/0x10 [ 678.648645][T20203] ? __pfx_kcov_ioctl+0x10/0x10 [ 678.648665][T20203] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 678.648684][T20203] do_syscall_64+0x15f/0x560 [ 678.648706][T20203] ? trace_irq_disable+0x3b/0x140 [ 678.648725][T20203] ? clear_bhb_loop+0x40/0x90 [ 678.648745][T20203] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 678.648763][T20203] RIP: 0033:0x7f64af8fce59 [ 678.648780][T20203] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 678.648796][T20203] RSP: 002b:00007f64adb2d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 678.648816][T20203] RAX: ffffffffffffffda RBX: 00007f64afb76090 RCX: 00007f64af8fce59 [ 678.648831][T20203] RDX: 0000000000000012 RSI: 0000200000000040 RDI: 0000000000000003 [ 678.648844][T20203] RBP: 00007f64af992d6f R08: 0000000000000000 R09: 0000000000000000 [ 678.648857][T20203] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 678.648869][T20203] R13: 00007f64afb76128 R14: 00007f64afb76090 R15: 00007ffd2b57d498 [ 678.648890][T20203] [ 678.649093][T20203] PM: Image not found (code -22) [ 679.180303][T19823] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 679.901765][T20176] batadv_slave_1: left promiscuous mode [ 680.944458][T19823] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 681.859301][ C1] net_ratelimit: 29342 callbacks suppressed [ 681.859319][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 681.859495][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 681.859508][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 681.859700][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 681.859713][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 681.859898][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 681.860096][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:14:65:ce:14:4a, vlan:0) [ 681.860116][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 681.860300][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 681.860475][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 682.573831][T19863] bridge0: port 1(bridge_slave_0) entered blocking state [ 682.574761][T19863] bridge0: port 1(bridge_slave_0) entered disabled state [ 682.574999][T19863] bridge_slave_0: entered allmulticast mode [ 682.593285][T19863] bridge_slave_0: entered promiscuous mode [ 682.609096][T19863] bridge0: port 2(bridge_slave_1) entered blocking state [ 682.609428][T19863] bridge0: port 2(bridge_slave_1) entered disabled state [ 682.609601][T19863] bridge_slave_1: entered allmulticast mode [ 682.614117][T19863] bridge_slave_1: entered promiscuous mode [ 683.981006][T19863] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 685.214901][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.214974][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.439372][T19863] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 685.973297][T19863] team0: Port device team_slave_0 added [ 686.081922][T19863] team0: Port device team_slave_1 added [ 686.869257][ C1] net_ratelimit: 38443 callbacks suppressed [ 686.869278][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 686.869472][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 686.869497][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:14:65:ce:14:4a, vlan:0) [ 686.869657][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 686.869844][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 686.870036][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 686.870209][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 686.870219][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 686.870403][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 686.870417][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 687.289326][ T5616] Bluetooth: hci3: command 0x0406 tx timeout