last executing test programs: 3.614695592s ago: executing program 2 (id=119): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f00000003c0)=ANY=[], 0x10) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x6, 0x0, 0x0) poll(&(0x7f0000000300)=[{r0, 0xc202}, {0xffffffffffffffff, 0x44}, {r0, 0x8003}], 0x3, 0x4) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000100)={'U-', 0x9e}, 0x16, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000040), 0x12, 0x80801) r2 = syz_open_dev$usbfs(&(0x7f0000000140), 0x10001, 0x105000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @notrack={{0xc}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x6c}}, 0x800) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)={0xe8, 0x40, 0x107, 0x70bd2d, 0x25dfdbfb, {0x4, 0x7c}, [@typed={0x4}, @typed={0xcd, 0x2b, 0x0, 0x0, @binary="2702817f2c4603d1939cfd361f6b7c5365720e2b996b6361cd643b5494227f2ce5cba495880958eb65d045f75ee5bbccf7dcfdb9c01fb546dc029f6e32ad3bfddb23c12b9d9bf98394be76f88b9df2fbe67772b2f77a89fac636b2c2f9e6e13d6d3a032531c76a9edb589ed2331caae2714a0517d652881ae94042a2b9309eb9ce80e3acac4cbc281477a631126f73e9e833a559641651dab2f449de17290e0330ca96cb2fa798d73e47e6555085aa6d8922fb314ae10fe715fe2c7fba2104762e169ea3a245ce6796"}]}, 0xe8}}, 0x0) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, &(0x7f0000000180)={0x27b, 0x1, "d10d0ea959d635537c3c2ec05f3c4ba8a575532b3c6b297f8882c679606d536131d6f72f3225c5880865b35f539506701b7cc767145e02808659f5ce037b6b179699bec79d648b0c53e10412f5cda7bbb91bcaeb74ae638046e5a412a21ba338eeba140ccaac4f9a3cee597862de6412410a8e80c4a8fa8fea18b0c0278720638111e1d44d8b886d65e03b394911522bf79cbd63d0724988e0bd44b3db4968688ff54f95a750a7d6940f4094d44ae3436db668b7694bee8c8fad415efc688237b120090052589db8f4d6e95f169a932fdad21ec01dc88ce597207493295d1df84cc3d0f1e35ad91bf3487dd77f27f03ff508ce193e0dd57caa03da3bfb812350"}) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, 0x0) r8 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r9, 0x84, 0x7a, &(0x7f0000000340)={0x0, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) ioctl$sock_netrom_SIOCADDRT(r8, 0x890b, &(0x7f0000000080)={0x0, @null, @bpq0, 0x5, 'syz1\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x6, 0x1, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}) 3.526266436s ago: executing program 0 (id=120): syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x0) (async) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x0) r1 = openat$dsp(0xffffff9c, &(0x7f0000000000), 0x201, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r1, 0x80045017, &(0x7f0000000040)) (async) ioctl$SNDCTL_DSP_GETODELAY(r1, 0x80045017, &(0x7f0000000040)) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f00000005c0)={0x53, 0x0, 0x27, 0x0, @scatter={0x2, 0x3, &(0x7f0000000180)}, &(0x7f0000000280)="008d7acda0b2", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0xe0, 0x0) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0xe0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYRES32=r5], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) sendmsg$NFT_BATCH(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYRES32=r5], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r7, &(0x7f0000000340)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaabb86dd6d002000001011fffe8000000000000000000000000000aeff0200000000000000000000000000014f194e2000109078c205ffffff7f0000"], 0x4a) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) read$FUSE(r4, &(0x7f0000000340)={0x2020}, 0x2020) (async) read$FUSE(r4, &(0x7f0000000340)={0x2020}, 0x2020) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x38) (async) r9 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x38) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000040)={0x4, 0x0, 0x8000000, 0x1000, &(0x7f0000fff000/0x1000)=nil}) ioctl$I2C_SLAVE(r0, 0x703, 0x0) 3.319391564s ago: executing program 2 (id=121): mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x2172, 0xffffffffffffffff, 0x3000) (async) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) (async) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) (async) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, 0x0) sendmmsg$inet6(r1, 0x0, 0x0, 0x4) (async) capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x40200006, 0x0, 0x6, 0x7}) (async) setrlimit(0x40000000000008, &(0x7f0000000080)={0x0, 0x6}) (async) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendmmsg$inet(r3, &(0x7f0000000780)=[{{&(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaffffffff0000000010000000000000000000000007"], 0x30}}], 0x1, 0x4000804) (async) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000001440)=""/4106, 0x100a}], 0x1, 0x300, 0x0) 3.251847912s ago: executing program 0 (id=123): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), r1) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f00000003c0)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000030000000100000008000100", @ANYRES32=r3, @ANYBLOB="4c00088048000080200004000a004e2100000002000000000000000000000000000000010000000024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c"], 0x68}, 0x1, 0x0, 0x0, 0x4009041}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@mcast2, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r0, &(0x7f0000000140)={&(0x7f0000000080)={0xa, 0x4e26, 0x80000, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000002300)=[@hopopts_2292={{0x18, 0x29, 0x36, {0x2b}}}, @hopopts={{0x18, 0x29, 0x3b, {0x85}}}], 0x30}, 0x810) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f0000000000)=0x0) bind$nfc_llcp(r4, &(0x7f0000001040)={0x27, r6, 0xfffffffe, 0x4, 0x0, 0x1, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3f}, 0x60) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) eventfd2(0x1, 0x80001) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f0000000200)={0x0, @nfc={0x27, r6, 0x1, 0x6}, @ethernet={0x306, @local}, @can={0x1d, r7}, 0xd, 0x0, 0x0, 0x0, 0x13d9, &(0x7f0000000180)='veth0_to_hsr\x00', 0xffffffffffffff2d, 0x5, 0x1000}) 3.236318287s ago: executing program 2 (id=124): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) syz_usb_connect(0x2, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b000111000000090400000195699b000905", @ANYRES32], 0x0) r2 = ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f00000001c0)={0x200001fe0000}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) r3 = socket$kcm(0x10, 0x5, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="33fe00002a0053ea"], 0xfe33) r4 = memfd_create(&(0x7f0000000040)='\x00', 0x4) r5 = memfd_create(&(0x7f0000000080)='\\\x00', 0x2) r6 = memfd_create(&(0x7f0000000100)='/dev/kvm\x00', 0x4) r7 = memfd_create(&(0x7f0000000140)='/dev/kvm\x00', 0x6) r8 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x40002) ioctl$SG_SET_FORCE_PACK_ID(r8, 0x227b, &(0x7f00000001c0)=0x2001) r9 = fcntl$dupfd(r8, 0x0, r8) write$FUSE_INIT(r9, &(0x7f0000000080)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x81, 0x21004040, 0x5, 0xd65b, 0x1, 0x1850c00, 0x0, 0x0, 0x40, 0xa}}, 0x50) read$FUSE(r9, &(0x7f0000003780)={0x2020, 0x0, 0x0, 0x0}, 0x2020) r11 = memfd_create(&(0x7f0000000240)='wlan1\x00', 0x5) r12 = memfd_create(&(0x7f0000000280)='\x00', 0x4) r13 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r13, 0x6, 0x0, 0x0, 0x0) r14 = fsmount(r13, 0x0, 0x0) fchdir(r14) r15 = creat(&(0x7f0000000040)='./file0\x00', 0x0) close(r15) r16 = socket$phonet_pipe(0x23, 0x5, 0x2) listen(r16, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x8000, &(0x7f0000000440)=ANY=[@ANYBLOB="74726166633d66642c7266646e6d3d36dc7f148c", @ANYRESHEX=r15, @ANYBLOB=',wfdno=', @ANYRESHEX=r16, @ANYBLOB=',dfltuid=', @ANYRESHEX=r10, @ANYBLOB=',\x00']) accept4$unix(r15, 0x0, 0x0, 0x0) ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f00000002c0)={0x0, 0x9, [{r4, 0x0, 0x1000000000000, 0xfffff000}, {r5, 0x0, 0x4000, 0x1000000}, {r6, 0x0, 0x0, 0x1000000}, {r7, 0x0, 0xbd4220b418d85ef3, 0x8000}, {r9, 0x0, 0xfffffffff0000000}, {r11, 0x0, 0x8000, 0x100000000}, {r12, 0x0, 0xfffffffffffff000}, {r14, 0x0, 0x1000000, 0xfffffffff0000000}, {r15, 0x0, 0x1000000000000, 0x100000000}]}) ioctl$KVM_SET_USER_MEMORY_REGION2(r1, 0x40a0ae49, &(0x7f0000000180)={0x4, 0x4, 0x6000, 0x2000, &(0x7f0000ffc000/0x2000)=nil, 0x100000000000000, r2}) 2.979073761s ago: executing program 0 (id=126): r0 = syz_open_dev$dri(&(0x7f0000000280), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000200)={0x0, 0x0, 0x0}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000280)='cdg', 0x3) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) ioctl$BTRFS_IOC_INO_PATHS(r1, 0xc0389423, &(0x7f0000000140)={0x2, 0x20, [0x3ff, 0x8, 0x53], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0]}) setsockopt$inet_int(r1, 0x0, 0x0, &(0x7f0000000000)=0x4, 0x4) r2 = socket$inet(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000000c0)='bond0\x00', 0x10) sendto$inet(r2, 0x0, 0x0, 0x48080, &(0x7f0000000040)={0x2, 0x4e23, @loopback}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) preadv(r3, &(0x7f0000001500)=[{&(0x7f0000000400)=""/21, 0x15}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000001440)=""/133, 0x85}], 0x3, 0x10, 0xf) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x30, 0x40, 0x107, 0x70bd2b, 0x0, {0x3, 0x7c}, [@nested={0x4, 0x9c}, @nested={0x15, 0x9, 0x0, 0x1, [@generic="f8e6d8ffed6c1097d7a2e1b20a0bf42fdf"]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4048090}, 0xc000) sendto$inet(r2, &(0x7f00000001c0)='\x00', 0x1, 0x200008d0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) ioprio_set$pid(0x1, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r4, 0x84, 0x13, &(0x7f0000000040)=0x5, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000001600)=0x3, 0x4) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x129a01, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @broadcast}) write$tun(r5, &(0x7f0000000040)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x3, 0x3d}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x71, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x4e24, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0x9, 0x0, 0x7, 0x0, 0x13, {[@window={0xb, 0x3}, @timestamp={0x5, 0xa, 0x460000c1, 0x4000}]}}, {"2244070000bc0be4bdf9da2470a34ec90000932b52c828de6f79d82439cc00080000000000009248ba27afeb7396efe6b9986063fd95e9391e"}}}}}, 0x7f) ioprio_get$pid(0x3, 0x0) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x2f, &(0x7f0000000200)="d4aad529785a65fce054bf02e2833fe5a3a42c2ed973bea4864aa96fdf8cb0938d", 0x21) 2.903206276s ago: executing program 3 (id=127): socket$rds(0x15, 0x5, 0x0) (async) r0 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r0, &(0x7f00000012c0)={&(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4804}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) prctl$PR_GET_TSC(0x19, &(0x7f0000000000)) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c000000020601030000000000000000000000000900020073797a100000000005000100060000000500050000000000050004000000000014000780080011400000000005001500030000000d000300686173683a6d6163"], 0x5c}}, 0x4000000) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000c00)={"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"}) ioctl$KVM_RUN(r3, 0xae80, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)={[{0x2d, 'net_cls'}, {0x2d, 'cpuset'}, {0x2d, 'devices'}]}, 0x1a) 2.46337574s ago: executing program 1 (id=128): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB, @ANYRESDEC], 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000000080)="00012c615bc20000") 2.343529357s ago: executing program 3 (id=129): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4d8, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x0, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000080000000804"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0x47, &(0x7f0000000040)="135298675b6f839687d94ebca301f328e46a87ffff6e04e99e70af6668350e93cdc6e84c70e49484ae86489e0e3d0dacfc59204d2fa2cc227e5b244f08d46713380fa4b5939e71") 1.836266748s ago: executing program 0 (id=130): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000000c0)="d8000000180081084e81f783db4cb9040a07080006007c09e8fc55a10a0015000600142603600e120800020081000401a80001625db338ee5eebfffd035c0461c1d67f6f94007134cf6efb803fa007a290457f0189b316277ce06bbaceac3c2fb14c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775820d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace0d81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/216, 0xd8}], 0x1}, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r3, 0x4068aea3, &(0x7f00000001c0)={0xbe, 0x0, 0x1}) (async) ioctl$KVM_GET_MSRS_cpu(r3, 0xc008ae88, &(0x7f0000000100)={0x1, 0x0, [{0x4b564d04}]}) 1.728100592s ago: executing program 2 (id=131): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$cgroup2(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x800010, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)='./file0/../file0\x00') openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) syz_clone(0x40000, &(0x7f0000000180)="6001fe3fce999b0d7343cf29eb1fd5c6b7e79d48c809093eb53e5b2c8ba7150173da0cac94f073d6c11130cafedfc16650e1fc9fadbbda2a1ed6fd56d2e06068", 0x40, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) 1.596587528s ago: executing program 3 (id=132): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000840)=ANY=[@ANYBLOB="2c0000002d0001002dbd7000ffdba64c08000d00", @ANYRES32=r0, @ANYBLOB="14001a801000db800c00ac8008000100627066"], 0x2c}], 0x1, 0x0, 0x0, 0x20004880}, 0xc000) 1.485001953s ago: executing program 0 (id=133): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x18, r1, 0x1, 0x4, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x4}]}, 0x18}}, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r3, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000080)={r3, 0x0, 0xf2ae, 0x7ff}) r5 = syz_open_dev$loop(&(0x7f00000005c0), 0xffff, 0x109041) r6 = gettid() setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000240)={0x1, 0x2, 0xb, 0x10, 0x6, 0x7, 0x3, 0x7f, 0x8, 0x2, 0x5, 0xf1, 0xf9, 0xff}, 0xe) timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r8 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r8, r7, &(0x7f00000000c0)=0x58, 0x5) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f00000002c0)={0xffffffffffffffff, 0x1000, {0x2a00, 0x80010000, 0x0, 0x52, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d09000000000000008dd4992861ac1000", "90be6c09306003d8006000", [0x0, 0x2]}}) syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$BLKGETSIZE64(r5, 0x80081272, &(0x7f0000000140)) r9 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r9, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/65, 0x328000, 0x800}, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) getsockopt$EBT_SO_GET_INIT_INFO(r4, 0x0, 0x82, &(0x7f0000000180)={'nat\x00', 0x0, 0x0, 0x0, [0x1, 0x81, 0x8, 0x81, 0x9, 0x3]}, &(0x7f0000000100)=0x78) 1.48453697s ago: executing program 2 (id=134): syz_usb_connect(0x0, 0x5a, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ec13b2106d04f308280b0102030109024800010000000009046900000e010000084101", @ANYBLOB="32b683adf11f83220156c564000400000000000089c5"], 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x2, &(0x7f00000001c0)=0x7ff, 0x4) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002, 0x2000}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x406f413, 0x0) r2 = syz_usb_connect$uac1(0x5, 0xef, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001000000ff6b1d01014000010203010902dd00a4d0050904000000010100000a240103000002010209240304050306020405240502030d24070104006d1452a98908550d24080607000bef38240496390c24020400020202573c00060d2406050403030003000700400904010000010200000904010101010200000724010f080110090501090000020508072501808107000904020000010200000904020101010200000924020140040605160b2402010804ff0670b33d08240201090101000b240202020005008eb2370f24020108027fd5adcfd13fa5a5150905820910000901d90725010305f3ff0000"], &(0x7f0000000300)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x300, 0x5, 0x7, 0x61, 0x40}, 0x1d, &(0x7f0000000180)={0x5, 0xf, 0x1d, 0x1, [@ssp_cap={0x18, 0x10, 0xa, 0x80, 0x3, 0x3b, 0xf, 0x0, [0xff, 0x0, 0xc0]}]}, 0x5, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x421}}, {0xe, &(0x7f0000000200)=@string={0xe, 0x3, "826cc4cd355ca7e2aedd8691"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x421}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x100a}}, {0x38, &(0x7f00000003c0)=ANY=[@ANYBLOB="3803cc882de8e56667a8a6c8d51a51767d8096209209eae6d7f2ac2d1bf8fa9d723f94157fe3cf471fb7f8adba76df933e8b5d3c34cb146a"]}]}) syz_usb_ep_write(r2, 0xa, 0x3b, &(0x7f0000000380)="ead844a45c2b4ace4bcb6d25a5883d077a4142069bfeeedb5f6a58c34f3ff67e952c7798630d7f7df2332396b3bda2001a8b1d2ad7a01dac0009ac") 1.382865138s ago: executing program 3 (id=135): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="30080000111558017b057f04942a30009e000100fcffffff00000002200000001c0000002f64f50f72eb8dd165c3ab160338c8f5995dbb2076000000"], 0x30}], 0x1}, 0x0) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) r2 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r2, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x98f90d, 0x9, '\x00', @p_u8=0x0}}) (async) getsockopt$bt_sco_SCO_OPTIONS(0xffffffffffffffff, 0x11, 0x1, 0x0, &(0x7f0000000380)) (async) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) (async) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="ac010000", @ANYRES16=r1, @ANYBLOB="00042bbd7000ffdbdf2544000000050018011d00000008002201e200000005001801060000000800a0000f0000000f0024000cecb0b035920b8b2483980018015a803c000280050004000300000005000600000000000500040001000000050007000100000005000600020200000500060001000000050007000100000030000380050006000000000024000100600301021605360218047c0948090306483603241212301b160401180100600270000280160001000b36500c04120603120b4406034812011b02000005000700010000001e0002001f191c262c1a49324a2a01521420512748053709274d3a11553a000023000100000160051218600c0348360c1b0c059c6c30300501040212001406360b4802000500040001000000380002801400030008000000070005000100100018fe09000500060000000000050006000200000005000600010000000800010012120b104c002380050013000100000006001200fa02000006000a0000000000050011000000000008000900060000000600120006000000050006000e00000006000300ca00000005000700020000000400bf00283b0ac3a7009effd031fb7baefd9e5f74b086b001fc1453322a7a58aafa383200"], 0x1ac}, 0x1, 0x0, 0x0, 0x44}, 0x22040050) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002500), r3) (async) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r7, 0x84, 0xc, 0x0, 0x0) (async, rerun: 64) pipe2$watch_queue(&(0x7f0000002240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) (async, rerun: 64) r10 = add_key$user(&(0x7f0000000100), &(0x7f0000000700)={'syz', 0x3}, &(0x7f0000000140)="8e", 0x1, 0xffffffffffffffff) pipe2$watch_queue(&(0x7f0000000240)={0xffffffffffffffff}, 0x80) (async) r12 = socket$nl_audit(0x10, 0x3, 0x9) getsockopt$SO_TIMESTAMP(r12, 0x1, 0x0, &(0x7f00000003c0), &(0x7f0000000400)=0x4) (async) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000001c0), 0x106, 0x6}}, 0x20) (async) r13 = syz_genetlink_get_family_id$devlink(&(0x7f0000000900), r3) sendmsg$DEVLINK_CMD_PORT_GET(r9, &(0x7f00000008c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x8802}, 0xc, &(0x7f0000000880)={&(0x7f0000000780)=ANY=[@ANYBLOB="d4000000", @ANYRES16=r13, @ANYBLOB="000226bd7000ffdbdf2505000000080001007063690011000200303030303a30303a31302e300000000008000300030000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000800030000000000080001007063690011000200303030303a30303a31302e300000000008000300020000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000300020000000e0001007e657464657673696d0000000f0002006e65746465764b696d3000000800030003000000"], 0xd4}, 0x1, 0x0, 0x0, 0x20008090}, 0x4000) keyctl$KEYCTL_WATCH_KEY(0x20, r10, r11, 0x6) keyctl$KEYCTL_WATCH_KEY(0x20, r10, r8, 0x0) (async) keyctl$chown(0x4, r10, 0x0, 0x0) (async) keyctl$KEYCTL_WATCH_KEY(0x20, r10, r11, 0xe2) connect$netrom(r6, &(0x7f0000000300)={{0x6, @default, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}, 0x48) (async) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) (async) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f00000026c0)={0x0, 0x0, &(0x7f0000002680)={&(0x7f0000000a00)=ANY=[@ANYRES32=r6, @ANYRES16=r5, @ANYBLOB="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", @ANYRES32=r4, @ANYBLOB="bfe6a5fcc96b508adf0b2cc54a838bb00ae245a7418dfaa6e0a78d802c98a1f8a04dbf87b4ea233299df640b92736cea6eed48f7b8c0eeed78b9454359d1db01acc8bd840f004e141c86b9d28ca94f24a0c3a98eb989a6936e0159e20a28191e77efa65a3338bed1fc19a8b7e55bb1334a020c119e25"], 0x1c}, 0x1, 0x0, 0x0, 0x11}, 0x18010) 1.324241914s ago: executing program 0 (id=136): creat(0x0, 0x40) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r0, &(0x7f0000000240)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "d9298498abdba7f061bd1ca44c226af5160e961711a07760760beeab11e88509de7f1939e8abff005597c8ef039a5be42200", 0x38}, 0x60) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100), 0x80, 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x84022, &(0x7f0000000300)=ANY=[@ANYBLOB='nr_inodes=5,size=2']) listen(r0, 0x0) accept4$nfc_llcp(r0, 0x0, 0x0, 0x80000) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000200), 0x900, 0x0) ioctl$VIDIOC_G_AUDOUT(r3, 0x80345631, 0x0) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000000)=0x200000000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) readv(r2, &(0x7f0000000340)=[{&(0x7f00000008c0)=""/195, 0xc3}], 0x1) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000100)={'sit0\x00', &(0x7f00000001c0)={'sit0\x00', 0x0, 0x0, 0x10, 0x0, 0x0, {{0xb, 0x4, 0x0, 0x0, 0x2c, 0x800, 0x0, 0x0, 0x0, 0x0, @loopback, @empty, {[@ssrr={0x89, 0x17, 0x77, [@local, @local, @rand_addr=0x64010100, @broadcast, @multicast2]}]}}}}}) syz_usb_connect(0x2, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000001e9811040200193815b000001010902120001000000000904"], 0x0) 1.264558841s ago: executing program 3 (id=137): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket(0x3, 0x800, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x20, 0x19, 0x1, 0x0, 0x0, {0x1d, 0xd601, 0x9}, [@nested={0xc, 0xb, 0x0, 0x1, [@typed={0x8, 0x121, 0x0, 0x0, @uid}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x804) r2 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp6_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000040)=0x9fe1, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f0000000000)={0x0, 0x300, &(0x7f0000000680)={&(0x7f0000000e80)={0x44, r0, 0x801, 0x400, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY={0x28, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x14, 0x1, "4abee33957edf8aaae14574df4"}, @NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac09}]}]}, 0x44}}, 0x0) 1.14679094s ago: executing program 3 (id=138): unshare(0x22020600) r0 = socket$pppoe(0x18, 0x1, 0x0) read(r0, &(0x7f0000000000)=""/30, 0x1e) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f1, &(0x7f0000000340)={'vcan0\x00', &(0x7f0000000040)=@ethtool_rxfh_indir={0x38}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)={0x1c, 0x5e, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32=0x1}, @generic="82"]}, 0x1c}], 0x1}, 0x0) syz_usb_connect(0x0, 0x64, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000cb8be6406d05000000390102030109025200010000000009044000000e0100390a2405"], 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x3, 0x81, 0x3}, {0x61, 0xf}, {0x6, 0x0, 0x0, 0x5}]}) ioctl$KVM_SET_GSI_ROUTING(r3, 0x4008ae6a, &(0x7f0000000580)={0x3, 0x0, [{0x9, 0x4, 0x0, 0x0, @msi={0x1, 0x9, 0xac93, 0x8}}, {0x4, 0x2, 0x0, 0x0, @sint={0x4, 0x80000000}}, {0x43, 0x3, 0x1, 0x0, @msi={0x600000, 0x200, 0x4, 0x8}}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="660f388173ab0fc76fb4360fc9bb25cc00007666ba6b41b000f303c70fae6e2fc0c00f0f2367260f01ca660f38817700c4c2459d78ad", 0x36}], 0x1, 0x51, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x60, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r5, 0x4080aebf, &(0x7f0000005700)={{0x0, 0x0, 0x80, {0x100000, 0x2}}, "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", "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"}) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, &(0x7f0000000900)={0x84, &(0x7f0000000640)=ANY=[@ANYBLOB="001704000000ab6763a85e756cfcc07cb1b05caf3d5cbfb1e2bf3b59479c3dda6def9e694355c8464ae471500000000000000d9c5d9043c1dea703b469c7df71dc02708e9d16a52b884ed29a01f976a5b55d02b6e1aa1860ea2d82c244ee297c06f2eeea64ff436d8c457157a18f7625a8007a66b2a09e4b7c990fc4de6f7b5ba763f809f481"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r6, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r6, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000180)=ANY=[@ANYBLOB="601004000000cf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r6, 0x0, &(0x7f0000000300)={0x1c, &(0x7f0000001480)=ANY=[@ANYBLOB="200104"], 0x0, 0x0}) syz_usb_control_io$printer(r6, 0x0, 0x0) syz_usb_control_io$printer(r6, 0x0, &(0x7f0000000400)={0x34, &(0x7f0000000140)=ANY=[@ANYBLOB="4006040008001b6ca2d6"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r6, &(0x7f0000000100)={0x14, &(0x7f00000001c0)={0x40, 0xed74116c3a1dfa45, 0x102, {0x102, 0xf, "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"}}, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xf8ff}}}, &(0x7f0000000540)={0x2c, &(0x7f0000000440)={0x20, 0x2, 0x8a, "16e88deeb46438862e9f4125d0cd06a579d6280ee431afd3447a4db1e9235108de95391fa9e7d2ef37ce1c94c6fc3083a2d5880f59b9d9c58de459b848388888e2fe0bd98de5e0dfa5d9534489af58570665ba66ce99fadd4053c8a568b9719df9cb2b5674c5d4a2fcf03dcd39c7a606a6a1df12076c4418ba05fb2680800cc23e4b35ebc52617606dbb"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xfe}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0xfe}, &(0x7f00000003c0)={0xc0, 0x5, 0x5, "010b220bdd"}, &(0x7f0000000500)={0x40, 0x5, 0x3, "7958c1"}}) socket$inet_udp(0x2, 0x2, 0x0) 1.016412895s ago: executing program 1 (id=139): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x8, 0xc22941) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x5) write$char_usb(r2, &(0x7f0000000040)="85", 0x1) sendmsg$inet(r0, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYRES64=r1], 0x128}, 0x0) close(0x3) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f0000000000)=0x10, 0x4) 987.330232ms ago: executing program 2 (id=140): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4d8, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x0, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0x0, 0x0) 723.900214ms ago: executing program 32 (id=140): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4d8, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x0, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0x0, 0x0) 679.304306ms ago: executing program 1 (id=142): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x4e}]}) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000000)=ANY=[], 0x6) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002a00010000000000fcdbdf250301f2800c00180008ac0f0100000000140001"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 580.749107ms ago: executing program 1 (id=143): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000180)=ANY=[@ANYBLOB="d10dd45d745dc90c9acdfa16a11323a2c568612cc875703db07263763f814d125665340e2b922c5816dcbf396329cb79c0e3294088db9b40fe05a3620ec6014eb4b64dc995dd6fc2a8ec3514bad1e6ba5e11b0a894266695ca368ffa953833f97c9f07b0a19a04e0781e4e0146dd149a47280ee27786841e761454492890c645714b32217a33cda6aaa0caec94a2b1facf98f68a6a4e1d4b553179c2403a6ce1503ac9d056b598b880420ad0fd399510fb49ad217c8d316609b1f519a6a09885c00534ecd6fcac71b44ded9e4d0da68956cd449aabc9caad8f49fbcf8066566bfb78457e851801abb1d5edde7b9ea3010e"], 0x40}}, 0x40850) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r1, &(0x7f0000000680)={0x13, 0x10, 0x10f, {0x0, r2, 0x2}}, 0x18) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, 0x0, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf87, 0x4}, 0x1c) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'gre0\x00', 0x0}) sendto$packet(r6, 0x0, 0x0, 0x240458d1, &(0x7f0000000200)={0x11, 0x88a8, r7, 0x1, 0x85, 0x6, @broadcast}, 0x14) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000ec0)={0x18, r4, 0x81, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_TX_RATES={0x4, 0x10d}]}, 0x18}}, 0x0) sendmsg$kcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000040)="be776ab2cd4ebaf1ab249f8084c930ddc3b89062da7b5e8699b91b145f724967d5521896301513526cc196bd9773e64403c97016d94cb9e739", 0x39}, {&(0x7f00000002c0)="2a51c63b7ed9fc26750399098df9511fd0ff520b7908e0e46dba257ad1cbff6e00bff7f44a6d9c387091d369c6a95aae031d137cb6cf84e2dc12f4a6fa6e57cb15b64e8e8ed1fc4cdce02862962c0ad5eb17714586a75b735f9bb5a8170d0f29b787a0b66c2eb1611b1a91430946f34a0f44ba6ae776adcd324e9e6e9a39afcc9905a807055ad4f300812b6f0f2d0b06c1ff8bc1bdebe68912e5203327a8f7ccd31874641236e6966996356abfe9ce37c691af641be9ecbe0f1d289ab7f1a8d00de8c5279fef824ca36e16c98cb63b6c0b3c3a67af0e38236ee2006d1c7e208c8dbbdf5e186da367", 0xe8}], 0x2, &(0x7f0000000400)}, 0xfba21cb2536df0d2) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x4, [@sadb_address={0x3, 0x6, 0x3c, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0) 206.084888ms ago: executing program 1 (id=144): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e24, 0x3, @local, 0x9}, 0x1c) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r1, 0x104, 0x5, &(0x7f0000001bc0)=0x1, 0x4) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x4e22, 0x2, @empty, 0x8}, 0x1c) listen(r0, 0x204) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a09000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) 0s ago: executing program 1 (id=145): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="120100002eab5a40401c3405cc6d010203010902120001000000000904"], 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000540)={0x34, &(0x7f0000000700)={0x40, 0x16, 0x4, "d78c10b3"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000380)={0x2c, &(0x7f0000000040)={0x40, 0xd, 0x7b, {0x7b, 0xed3d58d8947b3bba, "1fb50ed4dbb06b8cb270ce5d08dec34258406f5ec11d13210178fdb4815b14c37c9d0534882eda0791ba14419d3c32fc1e62414a70b38ae4e79cb683558593ba8fb133beed44231e6db568318e59dd3bad6591ae8ce70162426d3e0fb97222f3a1dd7ffd9fc04b0aa5a792c415789142bc89d0d91b63f75670"}}, &(0x7f0000000200)={0x0, 0x3, 0xdb, @string={0xdb, 0x3, "ddb360790cc44b9ac5d8ac231febf67221883dd56172d082d585f6d29b2d6f8a2eebba9712ae9b3f3be2b0a16dd974f69b1e4329bd896c55d2d41417c5d2a11400b0a4749b1124871bdad1f54ab49e0398338124ccf2e1707dd9bb5362dd30a74ed4612f8f336d4c23b584d3024d6106060944f00227e301fc4420866e54ba673e89a58dfb70de4ace5994f9aa287fdac657ad047b5561df861662a87fbb078f41a9a5bb4fe3014d0d65a010cd8367913daa573682c2399ef6093282d89e9795cdb3a934b630090a0420c47321183084f0e56a8b78bf5b9042"}}, &(0x7f0000000100)={0x0, 0xf, 0x39, {0x5, 0xf, 0x39, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x6, 0x6}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0xcf, 0xf8, 0x8001}, @ssp_cap={0x20, 0x10, 0xa, 0xc, 0x5, 0x80, 0x0, 0x8, [0x3fc0, 0xff0000, 0xff0000, 0xffffc0, 0xf]}]}}, &(0x7f0000000300)={0x20, 0x29, 0xf, {0xf, 0x29, 0x3, 0x80, 0x7, 0x7, "62783cc7", "b5dc134a"}}, &(0x7f0000000340)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x6, 0x60, 0x1, 0xf, 0xf, 0x81a3, 0x4}}}, &(0x7f0000000840)={0x84, 0x0, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0xd6}, &(0x7f0000000480)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000004c0)={0x20, 0x0, 0x8, {0x400, 0x20, [0xf0]}}, &(0x7f0000000500)={0x40, 0x7, 0x2, 0x3}, &(0x7f0000000580)={0x40, 0x9, 0x1, 0x2}, &(0x7f00000005c0)={0x40, 0xb, 0x2, "9681"}, &(0x7f0000000600)={0x40, 0xf, 0x2, 0x5aa7}, &(0x7f0000000640)={0x40, 0x13, 0x6, @local}, &(0x7f0000000680)={0x40, 0x17, 0x6, @broadcast}, &(0x7f00000006c0)={0x40, 0x19, 0x2, "b069"}, &(0x7f0000000740)={0x40, 0x1a, 0x2, 0x8}, &(0x7f0000000780)={0x40, 0x1c, 0x1, 0x75}, &(0x7f00000007c0)={0x40, 0x1e, 0x1, 0x7}, &(0x7f0000000800)={0x40, 0x21, 0x1}}) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e24, @empty}}, 0x9, 0x5}, &(0x7f0000000000)=0x90) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.149' (ED25519) to the list of known hosts. [ 81.475846][ T5814] cgroup: Unknown subsys name 'net' [ 81.646329][ T5814] cgroup: Unknown subsys name 'cpuset' [ 81.655393][ T5814] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 83.384602][ T5814] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 87.229348][ T5828] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 87.265633][ T5837] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 87.276329][ T5837] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 87.293472][ T5837] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 87.297106][ T5840] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 87.304230][ T5839] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 87.315198][ T5840] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 87.315265][ T5837] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 87.323230][ T5840] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 87.330862][ T5839] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 87.336977][ T5840] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 87.346031][ T5837] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 87.357864][ T5840] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 87.361000][ T5837] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 87.365568][ T5148] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 87.374227][ T5837] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 87.381279][ T5148] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 87.394044][ T5837] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 87.414754][ T5834] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 87.422516][ T5834] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 88.116870][ T5826] chnl_net:caif_netlink_parms(): no params data found [ 88.161300][ T5825] chnl_net:caif_netlink_parms(): no params data found [ 88.193585][ T5823] chnl_net:caif_netlink_parms(): no params data found [ 88.277364][ T5829] chnl_net:caif_netlink_parms(): no params data found [ 88.428248][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.436349][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.444368][ T5826] bridge_slave_0: entered allmulticast mode [ 88.451764][ T5826] bridge_slave_0: entered promiscuous mode [ 88.491072][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.499084][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.506360][ T5826] bridge_slave_1: entered allmulticast mode [ 88.513824][ T5826] bridge_slave_1: entered promiscuous mode [ 88.539063][ T5825] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.546365][ T5825] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.553614][ T5825] bridge_slave_0: entered allmulticast mode [ 88.560868][ T5825] bridge_slave_0: entered promiscuous mode [ 88.581013][ T5823] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.588488][ T5823] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.596325][ T5823] bridge_slave_0: entered allmulticast mode [ 88.603872][ T5823] bridge_slave_0: entered promiscuous mode [ 88.624518][ T5825] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.631713][ T5825] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.639047][ T5825] bridge_slave_1: entered allmulticast mode [ 88.646467][ T5825] bridge_slave_1: entered promiscuous mode [ 88.680937][ T5823] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.688178][ T5823] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.695456][ T5823] bridge_slave_1: entered allmulticast mode [ 88.702833][ T5823] bridge_slave_1: entered promiscuous mode [ 88.739287][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.761315][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.768986][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.776935][ T5829] bridge_slave_0: entered allmulticast mode [ 88.784395][ T5829] bridge_slave_0: entered promiscuous mode [ 88.795552][ T5825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.807236][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.829706][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.837336][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.844859][ T5829] bridge_slave_1: entered allmulticast mode [ 88.852265][ T5829] bridge_slave_1: entered promiscuous mode [ 88.861942][ T5825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.885958][ T5823] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.935352][ T5823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.972466][ T5826] team0: Port device team_slave_0 added [ 88.997542][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.008759][ T5825] team0: Port device team_slave_0 added [ 89.016655][ T5826] team0: Port device team_slave_1 added [ 89.050409][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.063108][ T5825] team0: Port device team_slave_1 added [ 89.085165][ T5823] team0: Port device team_slave_0 added [ 89.115922][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.123261][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.149278][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.163494][ T5823] team0: Port device team_slave_1 added [ 89.194838][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.201831][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.228685][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.254830][ T5829] team0: Port device team_slave_0 added [ 89.261622][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.268907][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.299888][ T5825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.332783][ T5829] team0: Port device team_slave_1 added [ 89.339161][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.346350][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.372962][ T5825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.385823][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.392871][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.419435][ T5823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.449455][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.453006][ T5837] Bluetooth: hci1: command tx timeout [ 89.456548][ T5840] Bluetooth: hci2: command tx timeout [ 89.462146][ T5834] Bluetooth: hci0: command tx timeout [ 89.467922][ T5148] Bluetooth: hci3: command tx timeout [ 89.478627][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.504832][ T5823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.549316][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.556377][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.582537][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.612943][ T5826] hsr_slave_0: entered promiscuous mode [ 89.619601][ T5826] hsr_slave_1: entered promiscuous mode [ 89.630267][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.637692][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.663823][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.737440][ T5825] hsr_slave_0: entered promiscuous mode [ 89.744509][ T5825] hsr_slave_1: entered promiscuous mode [ 89.750739][ T5825] debugfs: 'hsr0' already exists in 'hsr' [ 89.757154][ T5825] Cannot create hsr debugfs directory [ 89.789926][ T5823] hsr_slave_0: entered promiscuous mode [ 89.796472][ T5823] hsr_slave_1: entered promiscuous mode [ 89.802868][ T5823] debugfs: 'hsr0' already exists in 'hsr' [ 89.808622][ T5823] Cannot create hsr debugfs directory [ 89.885852][ T5829] hsr_slave_0: entered promiscuous mode [ 89.892494][ T5829] hsr_slave_1: entered promiscuous mode [ 89.899051][ T5829] debugfs: 'hsr0' already exists in 'hsr' [ 89.904909][ T5829] Cannot create hsr debugfs directory [ 90.384053][ T5826] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 90.397170][ T5826] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 90.427646][ T5826] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 90.457167][ T5826] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 90.522868][ T5823] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 90.537087][ T5823] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 90.550997][ T5823] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 90.563787][ T5823] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 90.700186][ T5829] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 90.710972][ T5829] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 90.724889][ T5829] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 90.736907][ T5829] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 90.899652][ T5825] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 90.915549][ T5825] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 90.927030][ T5825] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 90.944952][ T5825] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 90.987916][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.057104][ T5826] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.089413][ T2961] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.096839][ T2961] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.129883][ T2961] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.137066][ T2961] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.175977][ T5823] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.229739][ T5823] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.276905][ T3577] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.284106][ T3577] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.299082][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.326291][ T2987] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.333480][ T2987] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.383832][ T5829] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.418689][ T5825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.430101][ T1041] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.437367][ T1041] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.486620][ T1041] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.493883][ T1041] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.509817][ T5825] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.535319][ T5148] Bluetooth: hci0: command tx timeout [ 91.535347][ T5830] Bluetooth: hci1: command tx timeout [ 91.540821][ T5840] Bluetooth: hci2: command tx timeout [ 91.547305][ T5834] Bluetooth: hci3: command tx timeout [ 91.581555][ T2987] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.589170][ T2987] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.627626][ T2961] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.634904][ T2961] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.842771][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.999529][ T5826] veth0_vlan: entered promiscuous mode [ 92.021022][ T981] cfg80211: failed to load regulatory.db [ 92.084670][ T5826] veth1_vlan: entered promiscuous mode [ 92.152323][ T5823] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.229273][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.260392][ T5826] veth0_macvtap: entered promiscuous mode [ 92.288761][ T5826] veth1_macvtap: entered promiscuous mode [ 92.305088][ T5825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.317311][ T5823] veth0_vlan: entered promiscuous mode [ 92.350580][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.368435][ T5823] veth1_vlan: entered promiscuous mode [ 92.381350][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.427353][ T180] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.438150][ T180] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.448507][ T5829] veth0_vlan: entered promiscuous mode [ 92.458821][ T180] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.469531][ T180] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.506097][ T5823] veth0_macvtap: entered promiscuous mode [ 92.514978][ T5829] veth1_vlan: entered promiscuous mode [ 92.539854][ T5823] veth1_macvtap: entered promiscuous mode [ 92.594180][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.626060][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.638204][ T5825] veth0_vlan: entered promiscuous mode [ 92.680634][ T2961] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.690494][ T2961] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.704928][ T180] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.712503][ T2961] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.713717][ T180] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.723611][ T5825] veth1_vlan: entered promiscuous mode [ 92.747786][ T2961] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.767957][ T5829] veth0_macvtap: entered promiscuous mode [ 92.800105][ T5829] veth1_macvtap: entered promiscuous mode [ 92.830592][ T3577] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.839731][ T3577] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.886083][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.924874][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.945095][ T5826] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 92.970523][ T1041] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.979586][ T1041] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.988761][ T1041] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.999967][ T1041] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.009377][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.036997][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.065510][ T5825] veth0_macvtap: entered promiscuous mode [ 93.125835][ T5825] veth1_macvtap: entered promiscuous mode [ 93.169571][ T3577] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.179138][ T3577] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.249144][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.275711][ T3577] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.299542][ T3577] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.344808][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.404817][ T180] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.420189][ T180] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.444195][ T180] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.455361][ T2961] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.470405][ T2961] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.501631][ T180] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.613733][ T5830] Bluetooth: hci0: command tx timeout [ 93.617163][ T5833] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 93.619305][ T5834] Bluetooth: hci2: command tx timeout [ 93.632924][ T5830] Bluetooth: hci3: command tx timeout [ 93.632940][ T5840] Bluetooth: hci1: command tx timeout [ 93.726916][ T1041] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.752815][ T1041] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.782348][ T5833] usb 4-1: device descriptor read/64, error -71 [ 93.822062][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.831781][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.953398][ T5926] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 94.032899][ T5833] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 94.040561][ T5933] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 94.122390][ T5926] usb 1-1: Using ep0 maxpacket: 16 [ 94.130963][ T5926] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 94.145427][ T5926] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 94.156938][ T5926] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.169441][ T5926] usb 1-1: config 0 descriptor?? [ 94.202680][ T5833] usb 4-1: device descriptor read/64, error -71 [ 94.225292][ T5933] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 94.235391][ T5933] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 94.250148][ T5933] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 94.264567][ T5933] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.276197][ T5933] usb 2-1: config 0 descriptor?? [ 94.313248][ T5833] usb usb4-port1: attempt power cycle [ 94.322791][ T981] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 94.472408][ T981] usb 3-1: Using ep0 maxpacket: 32 [ 94.479741][ T981] usb 3-1: unable to get BOS descriptor or descriptor too short [ 94.489681][ T981] usb 3-1: config 128 has an invalid interface number: 127 but max is 3 [ 94.499535][ T981] usb 3-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 94.510067][ T981] usb 3-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 94.520245][ T981] usb 3-1: config 128 has no interface number 0 [ 94.527904][ T981] usb 3-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 94.539938][ T981] usb 3-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 94.550292][ T981] usb 3-1: config 128 interface 127 has no altsetting 0 [ 94.560118][ T981] usb 3-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 94.569569][ T981] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.584360][ T981] usb 3-1: Product: syz [ 94.588574][ T981] usb 3-1: Manufacturer: syz [ 94.593543][ T981] usb 3-1: SerialNumber: syz [ 94.609578][ T5926] mcp2221 0003:04D8:00DD.0001: unknown main item tag 0x0 [ 94.618647][ T5926] mcp2221 0003:04D8:00DD.0001: unknown main item tag 0x0 [ 94.626287][ T5926] mcp2221 0003:04D8:00DD.0001: unknown main item tag 0x0 [ 94.635827][ T5926] mcp2221 0003:04D8:00DD.0001: unknown main item tag 0x0 [ 94.643377][ T5926] mcp2221 0003:04D8:00DD.0001: unknown main item tag 0x0 [ 94.652039][ T5926] mcp2221 0003:04D8:00DD.0001: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 94.666974][ T5833] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 94.693937][ T5833] usb 4-1: device descriptor read/8, error -71 [ 94.707109][ T5933] kovaplus 0003:1E7D:2D50.0002: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.1-1/input0 [ 94.798151][ C0] usb 1-1: input irq status -75 received [ 94.894622][ T5933] kovaplus 0003:1E7D:2D50.0002: couldn't init struct kovaplus_device [ 94.912650][ T981] usb 3-1: USB disconnect, device number 2 [ 94.923054][ T5933] kovaplus 0003:1E7D:2D50.0002: couldn't install mouse [ 94.932318][ T5833] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 94.942542][ T5933] kovaplus 0003:1E7D:2D50.0002: probe with driver kovaplus failed with error -32 [ 94.956819][ T5833] usb 4-1: device descriptor read/8, error -71 [ 94.980764][ T5838] udevd[5838]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 95.007766][ T5917] usb 1-1: USB disconnect, device number 2 [ 95.073707][ T5833] usb usb4-port1: unable to enumerate USB device [ 95.400138][ T5942] netlink: 'syz.2.8': attribute type 11 has an invalid length. [ 95.408105][ T5942] netlink: 224 bytes leftover after parsing attributes in process `syz.2.8'. [ 95.474566][ T5943] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 95.494702][ T5932] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 95.495126][ T5943] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 95.510656][ T5932] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 95.639759][ T5951] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 95.654615][ T5951] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 95.692307][ T5840] Bluetooth: hci1: command tx timeout [ 95.694620][ T5830] Bluetooth: hci3: command tx timeout [ 95.699762][ T5148] Bluetooth: hci0: command tx timeout [ 95.705102][ T5834] Bluetooth: hci2: command tx timeout [ 95.816780][ T5957] capability: warning: `syz.0.13' uses deprecated v2 capabilities in a way that may be insecure [ 95.862543][ T5833] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 95.993242][ T5833] usb 3-1: device descriptor read/64, error -71 [ 96.072322][ T5873] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 96.224378][ T5873] usb 1-1: config 0 has an invalid interface number: 83 but max is 0 [ 96.232305][ T5833] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 96.232725][ T5873] usb 1-1: config 0 has no interface number 0 [ 96.246238][ T5873] usb 1-1: config 0 interface 83 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 96.260962][ T5873] usb 1-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=39.61 [ 96.270079][ T5873] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.280268][ T5873] usb 1-1: config 0 descriptor?? [ 96.291263][ T5873] ttusbir 1-1:0.83: cannot find expected altsetting [ 96.362297][ T5833] usb 3-1: device descriptor read/64, error -71 [ 96.482728][ T5833] usb usb3-port1: attempt power cycle [ 96.528065][ T5933] usb 1-1: USB disconnect, device number 3 [ 96.786563][ T129] usb 2-1: USB disconnect, device number 2 [ 96.842336][ T5833] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 96.874659][ T5833] usb 3-1: device descriptor read/8, error -71 [ 96.922276][ T5933] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 97.084839][ T5933] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 97.095668][ T5933] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 97.104852][ T5933] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.116588][ T5933] usb 1-1: config 0 descriptor?? [ 97.132103][ T5933] pwc: Askey VC010 type 2 USB webcam detected. [ 97.140716][ T5833] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 97.163143][ T5833] usb 3-1: device descriptor read/8, error -71 [ 97.212841][ T129] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 97.273345][ T5833] usb usb3-port1: unable to enumerate USB device [ 97.355966][ T129] usb 2-1: device descriptor read/64, error -71 [ 97.598998][ T5933] pwc: recv_control_msg error -32 req 02 val 2b00 [ 97.613285][ T129] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 97.752276][ T129] usb 2-1: device descriptor read/64, error -71 [ 97.862531][ T129] usb usb2-port1: attempt power cycle [ 98.212377][ T129] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 98.233178][ T129] usb 2-1: device descriptor read/8, error -71 [ 98.472294][ T129] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 98.494293][ T129] usb 2-1: device descriptor read/8, error -71 [ 98.602564][ T129] usb usb2-port1: unable to enumerate USB device [ 99.032308][ T40] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 99.181755][ T5979] F2FS-fs (nbd3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 99.190513][ T5979] F2FS-fs (nbd3): Can't find valid F2FS filesystem in 1th superblock [ 99.193889][ T40] usb 3-1: Using ep0 maxpacket: 16 [ 99.200501][ T5979] F2FS-fs (nbd3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 99.207927][ T40] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 99.211465][ T5979] F2FS-fs (nbd3): Can't find valid F2FS filesystem in 2th superblock [ 99.226060][ T40] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 99.240270][ T40] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.253005][ T40] usb 3-1: config 0 descriptor?? [ 99.616979][ T5933] pwc: recv_control_msg error -71 req 02 val 2c00 [ 99.633518][ T5933] pwc: recv_control_msg error -71 req 04 val 1000 [ 99.640691][ T5933] pwc: recv_control_msg error -71 req 04 val 1300 [ 99.662328][ T5933] pwc: recv_control_msg error -71 req 04 val 1400 [ 99.676319][ T5933] pwc: recv_control_msg error -71 req 02 val 2000 [ 99.692516][ T129] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 99.694343][ T5987] IPVS: set_ctl: invalid protocol: 135 172.20.20.170:20000 [ 99.702584][ T40] mcp2221 0003:04D8:00DD.0003: unknown main item tag 0x0 [ 99.709201][ T5933] pwc: recv_control_msg error -71 req 02 val 2100 [ 99.715940][ T40] mcp2221 0003:04D8:00DD.0003: unknown main item tag 0x0 [ 99.723871][ T5933] pwc: recv_control_msg error -71 req 04 val 1500 [ 99.730760][ T40] mcp2221 0003:04D8:00DD.0003: unknown main item tag 0x0 [ 99.738624][ T5987] cifs: Unknown parameter 'mode' [ 99.741717][ T40] mcp2221 0003:04D8:00DD.0003: unknown main item tag 0x0 [ 99.754669][ T40] mcp2221 0003:04D8:00DD.0003: unknown main item tag 0x0 [ 99.762876][ T40] mcp2221 0003:04D8:00DD.0003: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 99.782797][ T5933] pwc: recv_control_msg error -71 req 02 val 2500 [ 99.790462][ T5933] pwc: recv_control_msg error -71 req 02 val 2400 [ 99.810246][ T5933] pwc: recv_control_msg error -71 req 02 val 2600 [ 99.830591][ T5933] pwc: recv_control_msg error -71 req 02 val 2900 [ 99.844174][ T5933] pwc: recv_control_msg error -71 req 02 val 2800 [ 99.859694][ T5933] pwc: recv_control_msg error -71 req 04 val 1100 [ 99.869111][ T129] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 99.871037][ T5933] pwc: recv_control_msg error -71 req 04 val 1200 [ 99.891619][ C1] usb 3-1: input irq status -75 received [ 99.911470][ T129] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 99.912585][ T5933] pwc: Registered as video103. [ 99.940986][ T129] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 99.961854][ T129] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 99.994676][ T129] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 100.001703][ T5933] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input6 [ 100.019874][ T129] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 100.070788][ T129] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 100.086104][ T129] usb 4-1: Product: syz [ 100.103231][ T5833] usb 3-1: USB disconnect, device number 7 [ 100.103334][ T5994] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.117570][ T129] usb 4-1: Manufacturer: syz [ 100.133098][ T5933] usb 1-1: USB disconnect, device number 4 [ 100.139256][ T129] cdc_wdm 4-1:1.0: skipping garbage [ 100.153413][ T129] cdc_wdm 4-1:1.0: skipping garbage [ 100.165175][ T5994] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.197404][ T129] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 100.213882][ T5994] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.231692][ T129] cdc_wdm 4-1:1.0: Unknown control protocol [ 100.246577][ T5994] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.362446][ T5926] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 100.365646][ T5985] cdc_wdm 4-1:1.0: Error submitting int urb - -90 [ 100.393088][ T129] usb 4-1: USB disconnect, device number 6 [ 100.406161][ T5999] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 100.524220][ T5926] usb 2-1: config index 0 descriptor too short (expected 35562, got 27) [ 100.532694][ T5926] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 100.541324][ T5926] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 100.552570][ T5926] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 100.561560][ T5926] usb 2-1: config 1 has no interface number 0 [ 100.568624][ T5926] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 100.578379][ T5926] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.602450][ T5926] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 100.791865][ T5926] snd_usb_pod 2-1:1.1: set_interface failed [ 100.807158][ T5926] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 100.833633][ T5926] snd_usb_pod 2-1:1.1: probe with driver snd_usb_pod failed with error -71 [ 100.847292][ T6007] usb usb1: usbfs: interface 0 claimed by hub while 'syz.2.28' sets config #10 [ 100.863523][ T5926] usb 2-1: USB disconnect, device number 7 [ 100.883284][ T6007] netlink: 8 bytes leftover after parsing attributes in process `syz.2.28'. [ 101.066986][ T6016] FAULT_INJECTION: forcing a failure. [ 101.066986][ T6016] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 101.090917][ T6018] netlink: 'syz.2.30': attribute type 2 has an invalid length. [ 101.092340][ T6016] CPU: 1 UID: 0 PID: 6016 Comm: syz.0.31 Not tainted syzkaller #0 PREEMPT(full) [ 101.092369][ T6016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 101.092392][ T6016] Call Trace: [ 101.092402][ T6016] [ 101.092412][ T6016] dump_stack_lvl+0x189/0x250 [ 101.092440][ T6016] ? __pfx____ratelimit+0x10/0x10 [ 101.092473][ T6016] ? __pfx_dump_stack_lvl+0x10/0x10 [ 101.092494][ T6016] ? __pfx__printk+0x10/0x10 [ 101.092551][ T6016] should_fail_ex+0x414/0x560 [ 101.092587][ T6016] _copy_to_user+0x31/0xb0 [ 101.092626][ T6016] simple_read_from_buffer+0xe1/0x170 [ 101.092655][ T6016] proc_fail_nth_read+0x1b3/0x220 [ 101.092694][ T6016] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 101.092733][ T6016] ? rw_verify_area+0x2a6/0x4d0 [ 101.092763][ T6016] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 101.092799][ T6016] vfs_read+0x200/0xa30 [ 101.092829][ T6016] ? fdget_pos+0x247/0x320 [ 101.092858][ T6016] ? __pfx___mutex_lock+0x10/0x10 [ 101.092894][ T6016] ? __pfx_vfs_read+0x10/0x10 [ 101.092927][ T6016] ? __fget_files+0x2a/0x420 [ 101.092955][ T6016] ? __fget_files+0x3a0/0x420 [ 101.092978][ T6016] ? __fget_files+0x2a/0x420 [ 101.093012][ T6016] ksys_read+0x145/0x250 [ 101.093047][ T6016] ? __pfx_ksys_read+0x10/0x10 [ 101.093082][ T6016] ? do_syscall_64+0xbe/0xf80 [ 101.093120][ T6016] do_syscall_64+0xfa/0xf80 [ 101.093155][ T6016] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.093178][ T6016] ? clear_bhb_loop+0x60/0xb0 [ 101.093223][ T6016] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.093247][ T6016] RIP: 0033:0x7fb26fb8e15c [ 101.093275][ T6016] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 101.093295][ T6016] RSP: 002b:00007fb270ab8030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 101.093321][ T6016] RAX: ffffffffffffffda RBX: 00007fb26fde5fa0 RCX: 00007fb26fb8e15c [ 101.093339][ T6016] RDX: 000000000000000f RSI: 00007fb270ab80a0 RDI: 0000000000000004 [ 101.093354][ T6016] RBP: 00007fb270ab8090 R08: 0000000000000000 R09: 0000000000000000 [ 101.093368][ T6016] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 101.093382][ T6016] R13: 00007fb26fde6038 R14: 00007fb26fde5fa0 R15: 00007ffd6d710ff8 [ 101.093421][ T6016] [ 101.183045][ T6019] netlink: 'syz.2.30': attribute type 2 has an invalid length. [ 101.242299][ T5926] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 101.344490][ T6018] !: entered promiscuous mode [ 101.351306][ T6019] !: left promiscuous mode [ 101.544584][ T5926] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 101.588378][ T5926] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 101.612854][ T5926] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 101.652954][ T5926] usb 4-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 101.682259][ T5926] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.744554][ T5926] usb 4-1: config 0 descriptor?? [ 102.152261][ T5933] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 102.164209][ T5833] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 102.237480][ T5926] usbhid 4-1:0.0: can't add hid device: -71 [ 102.245741][ T5926] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 102.258249][ T5926] usb 4-1: USB disconnect, device number 7 [ 102.312340][ T5833] usb 3-1: device descriptor read/64, error -71 [ 102.318840][ T5933] usb 2-1: Using ep0 maxpacket: 16 [ 102.325580][ T5933] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 102.336818][ T5933] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 102.348042][ T5933] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.359053][ T5933] usb 2-1: config 0 descriptor?? [ 102.552377][ T5833] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 102.662323][ T129] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 102.692433][ T5833] usb 3-1: device descriptor read/64, error -71 [ 102.778001][ T5933] mcp2221 0003:04D8:00DD.0004: unknown main item tag 0x0 [ 102.785471][ T5933] mcp2221 0003:04D8:00DD.0004: unknown main item tag 0x0 [ 102.793106][ T5933] mcp2221 0003:04D8:00DD.0004: unknown main item tag 0x0 [ 102.800367][ T5933] mcp2221 0003:04D8:00DD.0004: unknown main item tag 0x0 [ 102.808495][ T5833] usb usb3-port1: attempt power cycle [ 102.816075][ T5933] mcp2221 0003:04D8:00DD.0004: unknown main item tag 0x0 [ 102.826312][ T129] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 102.827231][ T5933] mcp2221 0003:04D8:00DD.0004: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 102.851790][ T129] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 102.864436][ T129] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 102.875002][ T129] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 102.887548][ T129] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 102.912010][ T129] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 102.921729][ T129] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 102.931953][ T129] usb 1-1: Product: syz [ 102.939912][ T129] usb 1-1: Manufacturer: syz [ 102.958771][ T129] cdc_wdm 1-1:1.0: skipping garbage [ 102.966162][ T129] cdc_wdm 1-1:1.0: skipping garbage [ 102.979931][ C0] usb 2-1: input irq status -75 received [ 102.982077][ T129] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 102.992275][ T129] cdc_wdm 1-1:1.0: Unknown control protocol [ 103.162267][ T129] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 103.177812][ T6048] cdc_wdm 1-1:1.0: Error submitting int urb - -90 [ 103.181892][ T24] usb 2-1: USB disconnect, device number 8 [ 103.184560][ T5833] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 103.201130][ T5933] usb 1-1: USB disconnect, device number 5 [ 103.224217][ T5833] usb 3-1: device descriptor read/8, error -71 [ 103.314062][ T129] usb 4-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 103.324263][ T129] usb 4-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 103.334237][ T129] usb 4-1: config 1 interface 0 has no altsetting 0 [ 103.343945][ T129] usb 4-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 103.353224][ T129] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.361225][ T129] usb 4-1: Product: syz [ 103.366068][ T129] usb 4-1: Manufacturer: syz [ 103.370693][ T129] usb 4-1: SerialNumber: syz [ 103.379017][ T6055] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 103.388530][ T6055] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 103.472462][ T5833] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 103.492932][ T5833] usb 3-1: device descriptor read/8, error -71 [ 103.602458][ T5833] usb usb3-port1: unable to enumerate USB device [ 103.806576][ T6059] netlink: 8 bytes leftover after parsing attributes in process `syz.1.41'. [ 103.844177][ T6057] kvm: pic: non byte write [ 104.174231][ T40] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 104.332341][ T40] usb 2-1: Using ep0 maxpacket: 32 [ 104.333446][ T5833] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 104.340511][ T40] usb 2-1: config 0 has an invalid interface number: 188 but max is 0 [ 104.353595][ T40] usb 2-1: config 0 has no interface number 0 [ 104.359723][ T40] usb 2-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 104.371842][ T40] usb 2-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 104.381087][ T40] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.389597][ T40] usb 2-1: Product: syz [ 104.394141][ T40] usb 2-1: Manufacturer: syz [ 104.398821][ T40] usb 2-1: SerialNumber: syz [ 104.406176][ T40] usb 2-1: config 0 descriptor?? [ 104.412869][ T6065] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 104.422762][ T129] (unnamed net_device) (uninitialized): Assigned a random MAC address: 4a:ff:a8:f5:21:b0 [ 104.444606][ T129] rtl8150 4-1:1.0: eth1: rtl8150 is detected [ 104.503628][ T5833] usb 1-1: Using ep0 maxpacket: 16 [ 104.511635][ T5833] usb 1-1: unable to get BOS descriptor or descriptor too short [ 104.521890][ T5833] usb 1-1: config index 0 descriptor too short (expected 43, got 26) [ 104.530798][ T5833] usb 1-1: config 9 has an invalid interface number: 129 but max is 0 [ 104.539676][ T5833] usb 1-1: config 9 has no interface number 0 [ 104.546281][ T5833] usb 1-1: config 9 interface 129 has no altsetting 0 [ 104.557625][ T5833] usb 1-1: New USB device found, idVendor=05ac, idProduct=0241, bcdDevice=d0.9c [ 104.567187][ T5833] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.575448][ T5833] usb 1-1: Product: syz [ 104.579865][ T5833] usb 1-1: Manufacturer: syz [ 104.584932][ T5833] usb 1-1: SerialNumber: syz [ 104.641331][ T6055] syz.3.40 uses obsolete (PF_INET,SOCK_PACKET) [ 104.654531][ T6065] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 104.827732][ T5833] usb 1-1: bad CDC descriptors [ 104.859384][ T5833] usb 1-1: USB disconnect, device number 6 [ 104.966129][ T6083] process 'syz.2.46' launched './file0' with NULL argv: empty string added [ 105.214090][ C1] usb 4-1: Rx status -71 [ 105.218557][ C1] usb 4-1: Rx status -71 [ 105.223072][ C1] usb 4-1: Rx status -71 [ 105.227550][ C1] usb 4-1: Rx status -71 [ 105.231972][ C1] usb 4-1: Rx status -71 [ 105.236467][ C1] usb 4-1: Rx status -71 [ 105.241049][ C1] usb 4-1: Rx status -71 [ 105.245628][ C1] usb 4-1: Rx status -71 [ 105.250280][ C1] usb 4-1: Rx status -71 [ 105.254939][ C1] usb 4-1: Rx status -71 [ 105.312287][ T129] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 105.414839][ T6091] IPv6: NLM_F_CREATE should be specified when creating new route [ 105.423404][ T6091] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 105.430835][ T6091] IPv6: NLM_F_CREATE should be set when creating new route [ 105.438252][ T6091] IPv6: NLM_F_CREATE should be set when creating new route [ 105.488706][ T129] usb 3-1: unable to get BOS descriptor or descriptor too short [ 105.497715][ T129] usb 3-1: not running at top speed; connect to a high speed hub [ 105.506949][ T129] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 105.518130][ T129] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 105.530977][ T129] usb 3-1: string descriptor 0 read error: -22 [ 105.537913][ T129] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 105.547114][ T129] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.576732][ T129] usb 3-1: 0:2 : does not exist [ 106.272409][ T24] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 106.291447][ T5493] usb 4-1: device reset failed [ 106.291931][ T40] asix 2-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 106.309405][ T40] asix 2-1:0.188 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 106.321240][ T40] asix 2-1:0.188: probe with driver asix failed with error -71 [ 106.352113][ T40] usb 2-1: USB disconnect, device number 9 [ 106.422628][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 106.427878][ C1] usb 4-1: eth1: intr status -71 [ 106.428043][ T5833] usb 4-1: USB disconnect, device number 8 [ 106.440574][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 106.459341][ T24] usb 1-1: New USB device found, idVendor=12ba, idProduct=0100, bcdDevice= 0.00 [ 106.469123][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.513282][ T24] usb 1-1: config 0 descriptor?? [ 106.922401][ T5833] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 107.023236][ T24] sony 0003:12BA:0100.0005: hidraw0: USB HID v0.02 Device [HID 12ba:0100] on usb-dummy_hcd.0-1/input0 [ 107.043396][ T24] sony 0003:12BA:0100.0005: failed to claim input [ 107.103505][ T5833] usb 4-1: Using ep0 maxpacket: 16 [ 107.113841][ T5833] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 107.152421][ T5833] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 107.184783][ T5833] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.229486][ T5833] usb 4-1: config 0 descriptor?? [ 107.234652][ T10] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 107.336835][ T129] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 107.361705][ T129] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5) [ 107.391646][ T129] usb 3-1: 5:0: failed to get current value for ch 1 (-22) [ 107.424461][ T10] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 107.433568][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 107.466023][ T129] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5) [ 107.467585][ T10] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 107.499387][ T10] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 107.519569][ T129] usb 3-1: USB disconnect, device number 12 [ 107.530930][ T10] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 107.546651][ T10] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 107.565902][ T10] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 107.582992][ T10] usb 2-1: Product: syz [ 107.607071][ T10] usb 2-1: Manufacturer: syz [ 107.638322][ T10] cdc_wdm 2-1:1.0: skipping garbage [ 107.652805][ T10] cdc_wdm 2-1:1.0: skipping garbage [ 107.670483][ T10] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 107.688243][ T5833] mcp2221 0003:04D8:00DD.0006: unknown main item tag 0x0 [ 107.706646][ T10] cdc_wdm 2-1:1.0: Unknown control protocol [ 107.713125][ T5833] mcp2221 0003:04D8:00DD.0006: unknown main item tag 0x0 [ 107.728778][ T5833] mcp2221 0003:04D8:00DD.0006: unknown main item tag 0x0 [ 107.743885][ T5833] mcp2221 0003:04D8:00DD.0006: unknown main item tag 0x0 [ 107.770722][ T5833] mcp2221 0003:04D8:00DD.0006: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 107.802143][ T10] usb 1-1: USB disconnect, device number 7 [ 107.864976][ T6110] cdc_wdm 2-1:1.0: Error submitting int urb - -90 [ 107.884733][ C0] usb 4-1: input irq status -75 received [ 107.893447][ T129] usb 2-1: USB disconnect, device number 10 [ 108.048273][ T6130] netlink: 348 bytes leftover after parsing attributes in process `syz.2.52'. [ 108.070741][ T6130] netlink: 20 bytes leftover after parsing attributes in process `syz.2.52'. [ 108.081024][ T6130] netlink: 4 bytes leftover after parsing attributes in process `syz.2.52'. [ 108.100196][ T10] usb 4-1: USB disconnect, device number 9 [ 108.452262][ T5897] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 108.634568][ T5897] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 108.683910][ T5897] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 108.699556][ T5897] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 108.732335][ T5897] usb 3-1: config 1 has no interface number 1 [ 108.738526][ T5897] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 108.767434][ T6155] netlink: 'syz.1.56': attribute type 1 has an invalid length. [ 108.774086][ T5897] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 108.797421][ T5897] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.823282][ T5897] usb 3-1: Product: syz [ 108.827568][ T5897] usb 3-1: Manufacturer: syz [ 108.833827][ T5897] usb 3-1: SerialNumber: syz [ 109.018596][ T6167] can0: slcan on ttyS3. [ 109.074102][ T6167] can0 (unregistered): slcan off ttyS3. [ 109.120561][ T6172] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.148750][ T6172] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.176951][ T6172] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.207311][ T6172] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.243138][ T5833] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 109.366213][ T5897] usb 3-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 109.382354][ T5897] usb 3-1: MIDIStreaming interface descriptor not found [ 109.436795][ T5833] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 109.466297][ T5833] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 109.489381][ T5897] usb 3-1: USB disconnect, device number 13 [ 109.503339][ T5833] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 109.549006][ T5833] usb 2-1: config 1 has no interface number 0 [ 109.572058][ T5833] usb 2-1: too many endpoints for config 1 interface 1 altsetting 1: 32, using maximum allowed: 30 [ 109.591155][ T5833] usb 2-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 109.634493][ T5996] udevd[5996]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 109.658772][ T5833] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 109.693949][ T5833] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.720850][ T5833] usb 2-1: Product: syz [ 109.731822][ T5833] usb 2-1: Manufacturer: syz [ 109.749415][ T5833] usb 2-1: SerialNumber: syz [ 109.972271][ T5897] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 110.062422][ T10] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 110.125353][ T5897] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 110.135555][ T5897] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 110.148893][ T5897] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 110.158549][ T5897] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.239211][ T10] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 110.248610][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.265882][ T10] usb 4-1: config 0 descriptor?? [ 110.387571][ T5897] usb 3-1: usb_control_msg returned -32 [ 110.393775][ T5897] usbtmc 3-1:16.0: can't read capabilities [ 110.750991][ T6220] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 110.760899][ T6220] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 110.802745][ T5897] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 110.866462][ T10] ath6kl: Failed to submit usb control message: -71 [ 110.873241][ T10] ath6kl: unable to send the bmi data to the device: -71 [ 110.880334][ T10] ath6kl: Unable to send get target info: -71 [ 110.894266][ T10] ath6kl: Failed to init ath6kl core: -71 [ 110.901240][ T10] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 110.921349][ T10] usb 4-1: USB disconnect, device number 10 [ 110.954147][ T5897] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 110.964411][ T5897] usb 1-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 110.974955][ T5897] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 110.984010][ T5897] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 7 [ 110.995121][ T5897] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9272, setting to 1024 [ 111.008939][ T5897] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 111.018090][ T5897] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 111.026162][ T5897] usb 1-1: Product: syz [ 111.030360][ T5897] usb 1-1: Manufacturer: syz [ 111.041957][ T5897] cdc_wdm 1-1:1.0: skipping garbage [ 111.047986][ T5897] cdc_wdm 1-1:1.0: skipping garbage [ 111.053557][ T5897] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22 [ 111.255684][ T10] usb 1-1: USB disconnect, device number 8 [ 111.672543][ T5926] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 111.994616][ T5833] cdc_mbim 2-1:1.1: probe with driver cdc_mbim failed with error -71 [ 112.014079][ T5833] usb 2-1: USB disconnect, device number 11 [ 112.063643][ T10] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 112.232331][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 112.258630][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 112.269832][ T10] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 112.281525][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.294030][ T10] usb 1-1: config 0 descriptor?? [ 112.429902][ T129] usb 3-1: USB disconnect, device number 14 [ 112.600847][ T6241] lo speed is unknown, defaulting to 1000 [ 112.610189][ T6241] lo speed is unknown, defaulting to 1000 [ 112.631723][ T6241] lo speed is unknown, defaulting to 1000 [ 112.656917][ T6244] mkiss: ax0: crc mode is auto. [ 112.661391][ T6247] ªªªªªª: renamed from lo (while UP) [ 112.670209][ T30] kauditd_printk_skb: 5829 callbacks suppressed [ 112.670263][ T30] audit: type=1326 audit(1764406108.752:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6243 comm="syz.2.73" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe2d738f749 code=0x0 [ 112.702690][ T30] audit: type=1326 audit(1764406108.782:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6243 comm="syz.2.73" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe2d738f749 code=0x0 [ 112.733205][ T10] mcp2221 0003:04D8:00DD.0007: unknown main item tag 0x0 [ 112.740302][ T10] mcp2221 0003:04D8:00DD.0007: unknown main item tag 0x0 [ 112.767747][ T10] mcp2221 0003:04D8:00DD.0007: unknown main item tag 0x0 [ 112.782446][ T10] mcp2221 0003:04D8:00DD.0007: unknown main item tag 0x0 [ 112.795622][ T10] mcp2221 0003:04D8:00DD.0007: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 112.902442][ T6253] loop5: detected capacity change from 0 to 3375 [ 112.930043][ C0] usb 1-1: input irq status -75 received [ 112.939671][ T5838] Buffer I/O error on dev loop5, logical block 421, async page read [ 113.113835][ T10] ªªªªªª speed is unknown, defaulting to 1000 [ 113.120505][ T6241] infiniband sz1: set active [ 113.125853][ T6241] infiniband sz1: added ªªªªªª [ 113.143464][ T5897] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 113.143955][ T10] usb 1-1: USB disconnect, device number 9 [ 113.215473][ T6241] RDS/IB: sz1: added [ 113.224788][ T6241] smc: adding ib device sz1 with port count 1 [ 113.246849][ T6241] smc: ib device sz1 port 1 has no pnetid [ 113.261966][ T129] ªªªªªª speed is unknown, defaulting to 1000 [ 113.272797][ T6241] ªªªªªª speed is unknown, defaulting to 1000 [ 113.285962][ T5897] usb 2-1: device descriptor read/64, error -71 [ 113.448858][ T6241] ªªªªªª speed is unknown, defaulting to 1000 [ 113.485044][ T5841] Buffer I/O error on dev loop5, logical block 421, async page read [ 113.532345][ T5897] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 113.631027][ T6241] ªªªªªª speed is unknown, defaulting to 1000 [ 113.699910][ T5897] usb 2-1: device descriptor read/64, error -71 [ 113.814026][ T5897] usb usb2-port1: attempt power cycle [ 113.840626][ T6241] ªªªªªª speed is unknown, defaulting to 1000 [ 113.942271][ T10] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 114.053790][ T6259] binder: 6257:6259 unknown command 576 [ 114.060438][ T6259] binder: 6257:6259 ioctl c0306201 200000000480 returned -22 [ 114.073427][ T6259] binder: 6257:6259 unknown command 576 [ 114.079279][ T6259] binder: 6257:6259 ioctl c0306201 200000000480 returned -22 [ 114.087006][ T6259] binder: 6257:6259 unknown command 576 [ 114.095997][ T6259] binder: 6257:6259 ioctl c0306201 200000000480 returned -22 [ 114.103614][ T10] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 114.112359][ T6259] binder: 6257:6259 unknown command 576 [ 114.112373][ T10] usb 1-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 114.118560][ T6259] binder: 6257:6259 ioctl c0306201 200000000480 returned -22 [ 114.118687][ T6259] binder: 6257:6259 unknown command 576 [ 114.118704][ T6259] binder: 6257:6259 ioctl c0306201 200000000480 returned -22 [ 114.118800][ T6259] binder: 6257:6259 unknown command 576 [ 114.118816][ T6259] binder: 6257:6259 ioctl c0306201 200000000480 returned -22 [ 114.118909][ T6259] binder: 6257:6259 unknown command 576 [ 114.118924][ T6259] binder: 6257:6259 ioctl c0306201 200000000480 returned -22 [ 114.119022][ T6259] binder: 6257:6259 unknown command 576 [ 114.119038][ T6259] binder: 6257:6259 ioctl c0306201 200000000480 returned -22 [ 114.131721][ T10] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 114.138463][ T6259] binder: 6257:6259 unknown command 576 [ 114.142435][ T10] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 7 [ 114.151491][ T6259] binder: 6257:6259 ioctl c0306201 200000000480 returned -22 [ 114.155602][ T10] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9272, setting to 1024 [ 114.176072][ T5897] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 114.182439][ T6259] binder: 6257:6259 unknown command 576 [ 114.223229][ T5897] usb 2-1: device descriptor read/8, error -71 [ 114.235626][ T6259] binder: 6257:6259 ioctl c0306201 200000000480 returned -22 [ 114.261267][ T6259] binder: 6257:6259 unknown command 576 [ 114.267255][ T6259] binder: 6257:6259 ioctl c0306201 200000000480 returned -22 [ 114.275030][ T10] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 114.282264][ T6259] binder: 6257:6259 unknown command 576 [ 114.284181][ T10] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 114.290457][ T6259] binder: 6257:6259 ioctl c0306201 200000000480 returned -22 [ 114.297731][ T10] usb 1-1: Product: syz [ 114.297749][ T10] usb 1-1: Manufacturer: syz [ 114.315079][ T6259] binder: 6257:6259 unknown command 576 [ 114.317689][ T10] cdc_wdm 1-1:1.0: skipping garbage [ 114.320694][ T6259] binder: 6257:6259 ioctl c0306201 200000000480 returned -22 [ 114.329421][ T10] cdc_wdm 1-1:1.0: skipping garbage [ 114.339573][ T10] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22 [ 114.341020][ T6259] binder: 6257:6259 unknown command 576 [ 114.361153][ T6259] binder: 6257:6259 ioctl c0306201 200000000480 returned -22 [ 114.369808][ T6259] binder: 6257:6259 unknown command 576 [ 114.375518][ T6259] binder: 6257:6259 ioctl c0306201 200000000480 returned -22 [ 114.383087][ T6259] binder: 6257:6259 unknown command 576 [ 114.388669][ T6259] binder: 6257:6259 ioctl c0306201 200000000480 returned -22 [ 114.396286][ T6259] binder: 6257:6259 unknown command 576 [ 114.401916][ T6259] binder: 6257:6259 ioctl c0306201 200000000480 returned -22 [ 114.409490][ T6259] binder: 6257:6259 unknown command 576 [ 114.418750][ T6259] binder: 6257:6259 ioctl c0306201 200000000480 returned -22 [ 114.427507][ T6259] binder: 6257:6259 unknown command 576 [ 114.433138][ T6259] binder: 6257:6259 ioctl c0306201 200000000480 returned -22 [ 114.440691][ T6259] binder: 6257:6259 unknown command 576 [ 114.448073][ T6259] binder: 6257:6259 ioctl c0306201 200000000480 returned -22 [ 114.455722][ T6259] binder: 6257:6259 unknown command 576 [ 114.461298][ T6259] binder: 6257:6259 ioctl c0306201 200000000480 returned -22 [ 114.469619][ T6259] binder: 6257:6259 unknown command 576 [ 114.475311][ T6259] binder: 6257:6259 ioctl c0306201 200000000480 returned -22 [ 114.482917][ T5897] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 114.488761][ T6259] binder: 6257:6259 unknown command 576 [ 114.496469][ T6259] binder: 6257:6259 ioctl c0306201 200000000480 returned -22 [ 114.504185][ T6259] binder: 6257:6259 unknown command 576 [ 114.509824][ T6259] binder: 6257:6259 ioctl c0306201 200000000480 returned -22 [ 114.513065][ T5897] usb 2-1: device descriptor read/8, error -71 [ 114.517451][ T6259] binder: 6257:6259 unknown command 576 [ 114.531099][ T6259] binder: 6257:6259 ioctl c0306201 200000000480 returned -22 [ 114.538770][ T6259] binder: 6257:6259 unknown command 576 [ 114.544504][ T6259] binder: 6257:6259 ioctl c0306201 200000000480 returned -22 [ 114.552966][ T6259] binder: 6257:6259 unknown command 576 [ 114.558624][ T6259] binder: 6257:6259 ioctl c0306201 200000000480 returned -22 [ 114.566291][ T6259] binder: 6257:6259 unknown command 576 [ 114.572112][ T6259] binder: 6257:6259 ioctl c0306201 200000000480 returned -22 [ 114.574727][ T981] usb 1-1: USB disconnect, device number 10 [ 114.589506][ T6259] binder: 6257:6259 unknown command 576 [ 114.596156][ T6259] binder: 6257:6259 ioctl c0306201 200000000480 returned -22 [ 114.603845][ T6259] binder: 6257:6259 unknown command 576 [ 114.609667][ T6259] binder: 6257:6259 ioctl c0306201 200000000480 returned -22 [ 114.617963][ T6259] binder: 6257:6259 unknown command 576 [ 114.623777][ T6259] binder: 6257:6259 ioctl c0306201 200000000480 returned -22 [ 114.634148][ T6259] binder: 6257:6259 unknown command 576 [ 114.634969][ T5897] usb usb2-port1: unable to enumerate USB device [ 114.639732][ T6259] binder: 6257:6259 ioctl c0306201 200000000480 returned -22 [ 114.639854][ T6259] binder: 6257:6259 unknown command 576 [ 114.659492][ T6259] binder: 6257:6259 ioctl c0306201 200000000480 returned -22 [ 114.667291][ T6259] binder: 6257:6259 unknown command 576 [ 114.673027][ T6259] binder: 6257:6259 ioctl c0306201 200000000480 returned -22 [ 114.680520][ T6259] binder: 6257:6259 unknown command 576 [ 114.686204][ T6259] binder: 6257:6259 ioctl c0306201 200000000480 returned -22 [ 114.693947][ T6259] binder: 6257:6259 unknown command 576 [ 114.699532][ T6259] binder: 6257:6259 ioctl c0306201 200000000480 returned -22 [ 114.708090][ T6259] binder: 6257:6259 unknown command 576 [ 114.713868][ T6259] binder: 6257:6259 ioctl c0306201 200000000480 returned -22 [ 114.721357][ T6259] binder: 6257:6259 unknown command 576 [ 114.727006][ T6259] binder: 6257:6259 ioctl c0306201 200000000480 returned -22 [ 114.736579][ T6259] binder: 6257:6259 unknown command 576 [ 114.742225][ T6259] binder: 6257:6259 ioctl c0306201 200000000480 returned -22 [ 114.749815][ T6259] binder: 6257:6259 unknown command 576 [ 114.755449][ T6259] binder: 6257:6259 ioctl c0306201 200000000480 returned -22 [ 114.763086][ T6259] binder: 6257:6259 unknown command 576 [ 114.768643][ T6259] binder: 6257:6259 ioctl c0306201 200000000480 returned -22 [ 114.776365][ T6259] binder: 6257:6259 unknown command 576 [ 114.782072][ T6259] binder: 6257:6259 ioctl c0306201 200000000480 returned -22 [ 114.790493][ T6259] binder: 6257:6259 unknown command 576 [ 114.796126][ T6259] binder: 6257:6259 ioctl c0306201 200000000480 returned -22 [ 114.803746][ T6259] binder: 6257:6259 unknown command 576 [ 114.809298][ T6259] binder: 6257:6259 ioctl c0306201 200000000480 returned -22 [ 114.817164][ T6259] binder: 6257:6259 unknown command 576 [ 114.822787][ T6259] binder: 6257:6259 ioctl c0306201 200000000480 returned -22 [ 114.830289][ T6259] binder: 6257:6259 unknown command 576 [ 114.838048][ T6259] binder: 6257:6259 ioctl c0306201 200000000480 returned -22 [ 114.845649][ T6259] binder: 6257:6259 unknown command 576 [ 114.851218][ T6259] binder: 6257:6259 ioctl c0306201 200000000480 returned -22 [ 114.858799][ T6259] binder: 6257:6259 unknown command 576 [ 114.864415][ T6259] binder: 6257:6259 ioctl c0306201 200000000480 returned -22 [ 114.871877][ T6259] binder: 6257:6259 unknown command 576 [ 114.877483][ T6259] binder: 6257:6259 ioctl c0306201 200000000480 returned -22 [ 115.051414][ T6263] netlink: 20 bytes leftover after parsing attributes in process `syz.3.77'. [ 115.153869][ T6265] netlink: 44 bytes leftover after parsing attributes in process `syz.0.78'. [ 115.452478][ T10] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 115.602300][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 115.609451][ T10] usb 1-1: config 0 has an invalid interface number: 105 but max is 0 [ 115.618025][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 115.628418][ T10] usb 1-1: config 0 has no interface number 0 [ 115.636993][ T10] usb 1-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 115.646403][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.656722][ T10] usb 1-1: Product: syz [ 115.661001][ T10] usb 1-1: Manufacturer: syz [ 115.666228][ T10] usb 1-1: SerialNumber: syz [ 115.675483][ T10] usb 1-1: config 0 descriptor?? [ 115.995120][ T10] uvcvideo 1-1:0.105: Found UVC 0.00 device syz (046d:08f3) [ 116.024516][ T10] uvcvideo 1-1:0.105: No valid video chain found. [ 116.052634][ T5833] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 116.063923][ T10] usb 1-1: USB disconnect, device number 11 [ 116.172305][ T981] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 116.212282][ T5833] usb 3-1: device descriptor read/64, error -71 [ 116.282290][ T5897] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 116.322655][ T981] usb 4-1: Using ep0 maxpacket: 8 [ 116.331227][ T981] usb 4-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 116.343621][ T981] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.351913][ T981] usb 4-1: Product: syz [ 116.357381][ T981] usb 4-1: Manufacturer: syz [ 116.362014][ T981] usb 4-1: SerialNumber: syz [ 116.368961][ T981] usb 4-1: config 0 descriptor?? [ 116.379029][ T981] gspca_main: se401-2.14.0 probing 047d:5003 [ 116.392532][ T10] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 116.434336][ T5897] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 116.445485][ T5897] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1023 [ 116.457968][ T5897] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 116.462444][ T5833] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 116.467312][ T5897] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.483209][ T5897] usb 2-1: Product: syz [ 116.487416][ T5897] usb 2-1: Manufacturer: syz [ 116.492023][ T5897] usb 2-1: SerialNumber: syz [ 116.552322][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 116.559232][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 116.570403][ T10] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 116.582450][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.605292][ T5833] usb 3-1: device descriptor read/64, error -71 [ 116.612742][ T10] usb 1-1: config 0 descriptor?? [ 116.623876][ T981] gspca_se401: write req failed req 0x57 val 0x00 error -71 [ 116.642386][ T981] se401 4-1:0.0: probe with driver se401 failed with error -71 [ 116.662562][ T981] usb 4-1: USB disconnect, device number 12 [ 116.688022][ T6289] netlink: 'syz.3.85': attribute type 10 has an invalid length. [ 116.711087][ T6281] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 116.734108][ T5833] usb usb3-port1: attempt power cycle [ 116.744952][ T6289] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 117.031105][ T10] mcp2221 0003:04D8:00DD.0008: unknown main item tag 0x0 [ 117.038295][ T10] mcp2221 0003:04D8:00DD.0008: unknown main item tag 0x0 [ 117.045450][ T10] mcp2221 0003:04D8:00DD.0008: unknown main item tag 0x0 [ 117.054674][ T10] mcp2221 0003:04D8:00DD.0008: unknown main item tag 0x0 [ 117.062646][ T10] mcp2221 0003:04D8:00DD.0008: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 117.082351][ T5833] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 117.113057][ T5833] usb 3-1: device descriptor read/8, error -71 [ 117.142981][ T5933] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 117.229667][ C0] usb 1-1: input irq status -75 received [ 117.324115][ T5933] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 117.332930][ T5933] usb 4-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 117.333448][ T6281] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 117.343530][ T5933] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 117.359345][ T5933] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 7 [ 117.370460][ T5933] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9272, setting to 1024 [ 117.381850][ T5833] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 117.391849][ T5933] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 117.403072][ T5933] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 117.411324][ T5833] usb 3-1: device descriptor read/8, error -71 [ 117.417616][ T5933] usb 4-1: Product: syz [ 117.421812][ T5933] usb 4-1: Manufacturer: syz [ 117.436438][ T5933] cdc_wdm 4-1:1.0: skipping garbage [ 117.441807][ T5933] cdc_wdm 4-1:1.0: skipping garbage [ 117.443062][ T981] usb 1-1: USB disconnect, device number 12 [ 117.447242][ T5933] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22 [ 117.533702][ T5833] usb usb3-port1: unable to enumerate USB device [ 117.553559][ T5897] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 117.560186][ T5897] cdc_ncm 2-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 117.567997][ T5897] cdc_ncm 2-1:1.0: setting rx_max = 2048 [ 117.645891][ T40] usb 4-1: USB disconnect, device number 13 [ 117.844508][ T6299] netlink: 7064 bytes leftover after parsing attributes in process `syz.1.83'. [ 117.854179][ T6299] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 118.055065][ T5897] cdc_ncm 2-1:1.0: setting tx_max = 88 [ 118.090912][ T5897] cdc_ncm 2-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 118.108922][ T6301] netlink: 56 bytes leftover after parsing attributes in process `syz.0.88'. [ 118.117672][ T5897] usb 2-1: USB disconnect, device number 16 [ 118.144811][ T5897] cdc_ncm 2-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM (NO ZLP) [ 118.410411][ T6309] netlink: 4 bytes leftover after parsing attributes in process `syz.0.91'. [ 118.722407][ T5933] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 118.772325][ T40] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 118.862319][ T5933] usb 4-1: device descriptor read/64, error -71 [ 118.882484][ T10] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 118.945299][ T40] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 118.953910][ T40] usb 1-1: config 0 has no interface number 0 [ 118.960068][ T40] usb 1-1: config 0 interface 41 has no altsetting 0 [ 118.974637][ T40] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 118.984381][ T40] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.994164][ T40] usb 1-1: Product: syz [ 118.998367][ T40] usb 1-1: Manufacturer: syz [ 119.003064][ T40] usb 1-1: SerialNumber: syz [ 119.009905][ T40] usb 1-1: config 0 descriptor?? [ 119.034837][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 119.047295][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 119.064320][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 119.074650][ T10] usb 2-1: New USB device found, idVendor=7de0, idProduct=676e, bcdDevice=77.db [ 119.083798][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.095534][ T10] usb 2-1: config 0 descriptor?? [ 119.102309][ T5933] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 119.114898][ T10] rndis_host 2-1:0.0: skipping garbage [ 119.120445][ T10] usb 2-1: bad CDC descriptors [ 119.262416][ T5933] usb 4-1: device descriptor read/64, error -71 [ 119.311075][ T10] usb 2-1: USB disconnect, device number 17 [ 119.372971][ T5933] usb usb4-port1: attempt power cycle [ 119.392281][ T981] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 119.552338][ T981] usb 3-1: Using ep0 maxpacket: 16 [ 119.559443][ T981] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 119.571050][ T981] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 119.580321][ T981] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.590872][ T981] usb 3-1: config 0 descriptor?? [ 119.621838][ T6316] binder: 6315:6316 ioctl c058565d 200000000540 returned -22 [ 119.631672][ T40] CoreChips 1-1:0.41: probe with driver CoreChips failed with error -71 [ 119.655941][ T40] usb 1-1: USB disconnect, device number 13 [ 119.712697][ T5933] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 119.733149][ T5933] usb 4-1: device descriptor read/8, error -71 [ 119.982337][ T5933] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 120.002902][ T5933] usb 4-1: device descriptor read/8, error -71 [ 120.006894][ T981] mcp2221 0003:04D8:00DD.0009: unknown main item tag 0x0 [ 120.016731][ T981] mcp2221 0003:04D8:00DD.0009: unknown main item tag 0x0 [ 120.023877][ T981] mcp2221 0003:04D8:00DD.0009: unknown main item tag 0x0 [ 120.031581][ T981] mcp2221 0003:04D8:00DD.0009: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 120.122298][ T40] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 120.132520][ T5933] usb usb4-port1: unable to enumerate USB device [ 120.205850][ C1] usb 3-1: input irq status -75 received [ 120.278764][ T40] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 120.292022][ T40] usb 2-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 120.302718][ T40] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 120.311724][ T40] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 7 [ 120.324608][ T40] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9272, setting to 1024 [ 120.338646][ T40] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 120.348206][ T40] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 120.356278][ T40] usb 2-1: Product: syz [ 120.360865][ T40] usb 2-1: Manufacturer: syz [ 120.373770][ T40] cdc_wdm 2-1:1.0: skipping garbage [ 120.379054][ T40] cdc_wdm 2-1:1.0: skipping garbage [ 120.384576][ T40] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 120.406788][ T5933] usb 3-1: USB disconnect, device number 19 [ 120.532300][ T5926] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 120.583622][ T10] usb 2-1: USB disconnect, device number 18 [ 120.683826][ T5926] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 120.693723][ T5926] usb 1-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 120.702929][ T5926] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.713453][ T5926] usb 1-1: config 0 descriptor?? [ 121.029759][ T6334] openvswitch: netlink: Flow key attr not present in new flow. [ 121.243540][ T6339] sp0: Synchronizing with TNC [ 121.252092][ T6339] sp0: Found TNC [ 121.258981][ T6338] [U] è` [ 121.282302][ T40] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 121.380185][ T5926] usbhid 1-1:0.0: can't add hid device: -71 [ 121.394240][ T5926] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 121.406452][ T5926] usb 1-1: USB disconnect, device number 14 [ 121.432581][ T40] usb 3-1: Using ep0 maxpacket: 32 [ 121.441224][ T40] usb 3-1: config 0 has an invalid interface number: 35 but max is 0 [ 121.469702][ T40] usb 3-1: config 0 has no interface number 0 [ 121.494789][ T40] usb 3-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 121.511260][ T40] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.531310][ T40] usb 3-1: Product: syz [ 121.535961][ T40] usb 3-1: Manufacturer: syz [ 121.540610][ T40] usb 3-1: SerialNumber: syz [ 121.565210][ T40] usb 3-1: config 0 descriptor?? [ 121.567095][ T6349] 9pnet_fd: Insufficient options for proto=fd [ 121.785096][ T40] radio-si470x 3-1:0.35: this is not a si470x device. [ 121.823323][ T40] radio-raremono 3-1:0.35: this is not Thanko's Raremono. [ 121.841090][ T40] usb 3-1: USB disconnect, device number 20 [ 121.892313][ T981] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 121.952098][ T6356] Device name not specified. [ 121.952098][ T6356] [ 122.052409][ T981] usb 4-1: Using ep0 maxpacket: 16 [ 122.059637][ T981] usb 4-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 122.069727][ T981] usb 4-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 122.079848][ T981] usb 4-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 122.094674][ T981] usb 4-1: config 1 interface 0 has no altsetting 0 [ 122.114025][ T981] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 122.123714][ T981] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.131774][ T981] usb 4-1: Product: syz [ 122.136148][ T981] usb 4-1: Manufacturer: syz [ 122.140764][ T981] usb 4-1: SerialNumber: syz [ 122.282282][ T129] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 122.362072][ T981] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 18 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 122.435746][ T129] usb 1-1: Using ep0 maxpacket: 16 [ 122.450830][ T129] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 122.472514][ T129] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 122.485706][ T129] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.510868][ T129] usb 1-1: config 0 descriptor?? [ 122.627506][ T6353] usblp0:failed reading printer status (-32) [ 122.722744][ T981] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 122.905127][ T981] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 122.914237][ T981] usb 3-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 122.936751][ T981] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 122.960518][ T129] mcp2221 0003:04D8:00DD.000A: unknown main item tag 0x0 [ 122.972464][ T981] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 7 [ 122.984514][ T981] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9272, setting to 1024 [ 122.998679][ T129] mcp2221 0003:04D8:00DD.000A: unknown main item tag 0x0 [ 123.007592][ T129] mcp2221 0003:04D8:00DD.000A: unknown main item tag 0x0 [ 123.017109][ T981] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 123.028410][ T129] mcp2221 0003:04D8:00DD.000A: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 123.052318][ T981] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 123.060448][ T981] usb 3-1: Product: syz [ 123.066314][ T981] usb 3-1: Manufacturer: syz [ 123.079899][ T981] cdc_wdm 3-1:1.0: skipping garbage [ 123.086068][ T981] cdc_wdm 3-1:1.0: skipping garbage [ 123.091428][ T981] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22 [ 123.119180][ T6378] netlink: 180 bytes leftover after parsing attributes in process `syz.1.116'. [ 123.154877][ C1] usb 1-1: input irq status -75 received [ 123.206767][ T6379] netlink: 8 bytes leftover after parsing attributes in process `syz.1.116'. [ 123.299459][ T10] usb 3-1: USB disconnect, device number 21 [ 123.358227][ T5926] usb 1-1: USB disconnect, device number 15 [ 123.368172][ T6382] input: syz0 as /devices/virtual/input/input7 [ 123.424018][ T6383] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.438073][ T6383] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.692459][ T10] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 123.842282][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 123.858196][ T10] usb 2-1: config 24 has an invalid interface number: 116 but max is 1 [ 123.892930][ T10] usb 2-1: config 24 has an invalid interface number: 57 but max is 1 [ 123.911455][ T10] usb 2-1: config 24 has no interface number 0 [ 123.925322][ T10] usb 2-1: config 24 has no interface number 1 [ 123.950128][ T10] usb 2-1: config 24 interface 116 has no altsetting 0 [ 123.979996][ T10] usb 2-1: New USB device found, idVendor=06f8, idProduct=3002, bcdDevice=25.20 [ 124.009879][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.028607][ T10] usb 2-1: Product: syz [ 124.037583][ T10] usb 2-1: Manufacturer: syz [ 124.051725][ T10] usb 2-1: SerialNumber: syz [ 124.348812][ T6385] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 124.385297][ T6385] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 124.422706][ T10] usb 2-1: USB disconnect, device number 19 [ 124.439725][ T6413] netlink: 16 bytes leftover after parsing attributes in process `syz.3.125'. [ 124.542963][ T5833] usb 3-1: new full-speed USB device number 22 using dummy_hcd [ 124.714073][ T5833] usb 3-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 124.728592][ T6421] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2107136741 (134856751424 ns) > initial count (31747348608 ns). Using initial count to start timer. [ 124.742237][ T5833] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 124.783153][ T5833] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 124.802255][ T5833] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 124.811382][ T5833] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.825449][ T6406] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 124.988243][ T6423] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 124.996526][ T6423] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 125.021898][ T6423] syzkaller1: entered promiscuous mode [ 125.027591][ T6423] syzkaller1: entered allmulticast mode [ 125.054623][ T5833] aiptek 3-1:17.0: Aiptek using 400 ms programming speed [ 125.085877][ T5833] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:17.0/input/input8 [ 125.157850][ T5833] usb 3-1: USB disconnect, device number 22 [ 125.163918][ C0] aiptek 3-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 125.229102][ T6427] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.255749][ T6427] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.283210][ T5933] usb 4-1: USB disconnect, device number 18 [ 125.295420][ T5933] usblp0: removed [ 125.325258][ T129] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 125.492851][ T129] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 125.501532][ T129] usb 2-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 125.522901][ T129] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 125.531960][ T129] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 7 [ 125.562236][ T129] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9272, setting to 1024 [ 125.584524][ T129] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 125.602406][ T129] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 125.620892][ T129] usb 2-1: Product: syz [ 125.632374][ T129] usb 2-1: Manufacturer: syz [ 125.665895][ T129] cdc_wdm 2-1:1.0: skipping garbage [ 125.671173][ T129] cdc_wdm 2-1:1.0: skipping garbage [ 125.691588][ T6429] netlink: 'syz.0.130': attribute type 21 has an invalid length. [ 125.702300][ T129] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 125.734092][ T6429] IPv6: NLM_F_CREATE should be specified when creating new route [ 125.742866][ T6429] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 125.750146][ T6429] IPv6: NLM_F_CREATE should be set when creating new route [ 125.757541][ T6429] IPv6: NLM_F_CREATE should be set when creating new route [ 125.764834][ T6429] IPv6: NLM_F_CREATE should be set when creating new route [ 125.879783][ T5833] usb 2-1: USB disconnect, device number 20 [ 126.287036][ T6450] Zero length message leads to an empty skb [ 126.433718][ T1041] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.542286][ T5833] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 126.628115][ T1041] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.682424][ T5833] usb 4-1: device descriptor read/64, error -71 [ 126.687757][ T5918] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 126.710902][ T1041] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.760780][ T6458] Bluetooth: MGMT ver 1.23 [ 126.788723][ T1041] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.799870][ T6458] netlink: 'syz.1.142': attribute type 1 has an invalid length. [ 126.808907][ T6458] netlink: 224 bytes leftover after parsing attributes in process `syz.1.142'. [ 126.829796][ T6458] block nbd0: not configured, cannot reconfigure [ 126.856406][ T5918] usb 1-1: New USB device found, idVendor=2040, idProduct=9301, bcdDevice=5b.81 [ 126.888702][ T5830] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 126.898337][ T5830] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 126.906117][ T5830] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 126.918768][ T5918] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 126.928140][ T5830] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 126.932285][ T5833] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 126.943926][ T5830] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 126.963057][ T5918] usb 1-1: SerialNumber: syz [ 126.977466][ T5918] usb 1-1: config 0 descriptor?? [ 127.000516][ T6462] af_packet: tpacket_rcv: packet too big, clamped from 24 to 0. macoff=72 [ 127.001600][ T5918] dvb-usb: found a 'Hauppauge WinTV-NOVA-T usb2' in warm state. [ 127.017718][ T5918] dvb-usb: bulk message failed: -22 (3/0) [ 127.029224][ T5918] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 127.039167][ T5918] dvbdev: DVB: registering new adapter (Hauppauge WinTV-NOVA-T usb2) [ 127.047564][ T5918] usb 1-1: media controller created [ 127.053471][ T5918] dvb-usb: bulk message failed: -22 (5/0) [ 127.059291][ T5918] dvb-usb: MAC address reading failed. [ 127.068377][ T5918] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 127.082856][ T5833] usb 4-1: device descriptor read/64, error -71 [ 127.088091][ T5918] dvb-usb: bulk message failed: -22 (6/0) [ 127.096805][ T5918] dvb-usb: bulk message failed: -22 (6/0) [ 127.102762][ T5918] dvb-usb: no frontend was attached by 'Hauppauge WinTV-NOVA-T usb2' [ 127.116870][ T5918] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input9 [ 127.130987][ T5918] dvb-usb: schedule remote query interval to 100 msecs. [ 127.141678][ T5918] dvb-usb: Hauppauge WinTV-NOVA-T usb2 successfully initialized and connected. [ 127.208554][ T5833] usb usb4-port1: attempt power cycle [ 127.221355][ T6459] ªªªªªª speed is unknown, defaulting to 1000 [ 127.244211][ T5918] dvb-usb: bulk message failed: -22 (2/0) [ 127.250152][ T5918] dvb-usb: error while querying for an remote control event. [ 127.260655][ T1041] bridge_slave_1: left allmulticast mode [ 127.276554][ T1041] bridge_slave_1: left promiscuous mode [ 127.300627][ T1041] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.355144][ T1041] bridge_slave_0: left allmulticast mode [ 127.368388][ T1041] bridge_slave_0: left promiscuous mode [ 127.381582][ T1041] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.403280][ T5918] dvb-usb: bulk message failed: -22 (2/0) [ 127.409109][ T5918] dvb-usb: error while querying for an remote control event. [ 127.535059][ T5918] dvb-usb: bulk message failed: -22 (2/0) [ 127.541651][ T5918] dvb-usb: error while querying for an remote control event. [ 127.565770][ T5833] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 127.613365][ T5833] usb 4-1: device descriptor read/8, error -71 [ 127.672439][ T129] dvb-usb: bulk message failed: -22 (2/0) [ 127.681697][ T129] dvb-usb: error while querying for an remote control event. [ 127.722311][ T10] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 127.825373][ T129] dvb-usb: bulk message failed: -22 (2/0) [ 127.836788][ T129] dvb-usb: error while querying for an remote control event. [ 127.863528][ T5833] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 127.896919][ T5833] usb 4-1: device descriptor read/8, error -71 [ 127.906831][ T10] usb 2-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 127.927639][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.936410][ T10] usb 2-1: Product: syz [ 127.955170][ T10] usb 2-1: Manufacturer: syz [ 127.959882][ T10] usb 2-1: SerialNumber: syz [ 127.963265][ T129] dvb-usb: bulk message failed: -22 (2/0) [ 127.971117][ T129] dvb-usb: error while querying for an remote control event. [ 127.979486][ T10] usb 2-1: config 0 descriptor?? [ 127.995277][ T10] i2c-tiny-usb 2-1:0.0: version 6d.cc found at bus 002 address 021 [ 128.034520][ T5833] usb usb4-port1: unable to enumerate USB device [ 128.078304][ T1041] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 128.090206][ T1041] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 128.101634][ T1041] bond0 (unregistering): Released all slaves [ 128.102538][ T129] dvb-usb: bulk message failed: -22 (2/0) [ 128.114065][ T129] dvb-usb: error while querying for an remote control event. [ 128.222288][ T129] dvb-usb: bulk message failed: -22 (2/0) [ 128.228171][ T129] dvb-usb: error while querying for an remote control event. [ 128.342794][ T129] dvb-usb: bulk message failed: -22 (2/0) [ 128.348817][ T129] dvb-usb: error while querying for an remote control event. [ 128.430415][ T1041] ------------[ cut here ]------------ [ 128.439772][ T1041] Have pending ack frames! [ 128.444325][ T1041] WARNING: net/mac80211/main.c:1712 at 0x0, CPU#0: kworker/u8:6/1041 [ 128.453323][ T1041] Modules linked in: [ 128.457467][ T1041] CPU: 0 UID: 0 PID: 1041 Comm: kworker/u8:6 Not tainted syzkaller #0 PREEMPT(full) [ 128.467741][ T1041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 128.472467][ T129] dvb-usb: bulk message failed: -22 (2/0) [ 128.477915][ T1041] Workqueue: netns cleanup_net [ 128.488480][ T1041] RIP: 0010:ieee80211_free_ack_frame+0x14/0x40 [ 128.494880][ T129] dvb-usb: error while querying for an remote control event. [ 128.502348][ T1041] Code: 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 53 48 89 f3 e8 83 3e f2 f6 48 8d 3d 5c ae 03 05 <67> 48 0f b9 3a 31 ff 48 89 de ba 02 00 00 00 e8 b8 68 69 fe 31 c0 [ 128.522104][ T1041] RSP: 0018:ffffc900040af5b0 EFLAGS: 00010293 [ 128.528342][ T1041] RAX: ffffffff8acfb4ad RBX: ffff888031b12a00 RCX: ffff888026ad9e80 [ 128.536801][ T1041] RDX: 0000000000000000 RSI: ffff888031b12a00 RDI: ffffffff8fd36310 [ 128.545133][ T1041] RBP: ffffc900040af6b8 R08: ffffc900040af62f R09: 0000000000000000 [ 128.553529][ T1041] R10: ffffc900040af620 R11: ffffffff8acfb4a0 R12: ffffc900040af620 [ 128.561539][ T1041] R13: ffff88805a6a39f0 R14: ffff88807aafaff8 R15: 0000000000000001 [ 128.570685][ T1041] FS: 0000000000000000(0000) GS:ffff888125a03000(0000) knlGS:0000000000000000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 128.580806][ T1041] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 128.587868][ T1041] CR2: 00007ffd08668ff8 CR3: 000000007c8e6000 CR4: 00000000003526f0 [ 128.596247][ T1041] Call Trace: [ 128.599559][ T1041] [ 128.602864][ T1041] idr_for_each+0x1b5/0x290 [ 128.607749][ T1041] ? kasan_quarantine_put+0xdd/0x220 [ 128.612313][ T129] dvb-usb: bulk message failed: -22 (2/0) [ 128.613584][ T1041] ? __pfx_ieee80211_free_ack_frame+0x10/0x10 [ 128.625351][ T1041] ? __pfx_idr_for_each+0x10/0x10 [ 128.630730][ T1041] ? kfree+0x1c0/0x660 [ 128.634922][ T1041] ieee80211_free_hw+0x44/0x3d0 [ 128.639847][ T1041] mac80211_hwsim_del_radio+0x2de/0x460 [ 128.645491][ T1041] ? __pfx_mac80211_hwsim_del_radio+0x10/0x10 [ 128.651622][ T1041] hwsim_exit_net+0xef4/0xfb0 [ 128.656448][ T1041] ? hwsim_exit_net+0x333/0xfb0 [ 128.662104][ T1041] ? __pfx_hwsim_exit_net+0x10/0x10 [ 128.668087][ T1041] ? __ip_vs_dev_cleanup_batch+0x238/0x260 [ 128.674119][ T1041] ops_undo_list+0x49a/0x990 [ 128.678760][ T1041] ? __pfx_ops_undo_list+0x10/0x10 [ 128.683975][ T1041] ? do_raw_spin_unlock+0x122/0x240 [ 128.689247][ T1041] cleanup_net+0x4d8/0x7a0 [ 128.693750][ T1041] ? __pfx_cleanup_net+0x10/0x10 [ 128.698729][ T1041] ? _raw_spin_unlock_irq+0x23/0x50 [ 128.704039][ T1041] ? process_one_work+0x868/0x15a0 [ 128.704400][ T129] dvb-usb: error while querying for an remote control event. [ 128.709180][ T1041] process_one_work+0x93a/0x15a0 [ 128.721595][ T1041] ? __pfx_process_one_work+0x10/0x10 [ 128.727079][ T1041] ? assign_work+0x3a1/0x410 [ 128.731713][ T1041] worker_thread+0x9b0/0xee0 [ 128.736478][ T1041] kthread+0x711/0x8a0 [ 128.740594][ T1041] ? __pfx_worker_thread+0x10/0x10 [ 128.745797][ T1041] ? __pfx_kthread+0x10/0x10 [ 128.750422][ T1041] ? _raw_spin_unlock_irq+0x23/0x50 [ 128.755767][ T1041] ? lockdep_hardirqs_on+0x98/0x140 [ 128.761796][ T1041] ? __pfx_kthread+0x10/0x10 [ 128.767553][ T1041] ret_from_fork+0x599/0xb30 [ 128.772279][ T1041] ? __pfx_ret_from_fork+0x10/0x10 [ 128.777457][ T1041] ? __switch_to_asm+0x39/0x70 [ 128.782326][ T1041] ? __switch_to_asm+0x33/0x70 [ 128.787152][ T1041] ? __pfx_kthread+0x10/0x10 [ 128.791768][ T1041] ret_from_fork_asm+0x1a/0x30 [ 128.796619][ T1041] [ 128.799666][ T1041] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 128.807018][ T1041] CPU: 0 UID: 0 PID: 1041 Comm: kworker/u8:6 Not tainted syzkaller #0 PREEMPT(full) [ 128.816517][ T1041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 128.826603][ T1041] Workqueue: netns cleanup_net [ 128.831396][ T1041] Call Trace: [ 128.834678][ T1041] [ 128.837616][ T1041] dump_stack_lvl+0x99/0x250 [ 128.842221][ T1041] ? __asan_memcpy+0x40/0x70 [ 128.846830][ T1041] ? __pfx_dump_stack_lvl+0x10/0x10 [ 128.852030][ T1041] ? __pfx__printk+0x10/0x10 [ 128.856645][ T1041] vpanic+0x237/0x6d0 [ 128.860641][ T1041] ? __pfx_vpanic+0x10/0x10 [ 128.865155][ T1041] ? is_bpf_text_address+0x292/0x2b0 [ 128.870455][ T1041] ? is_bpf_text_address+0x26/0x2b0 [ 128.875690][ T1041] panic+0xb9/0xc0 [ 128.879423][ T1041] ? __pfx_panic+0x10/0x10 [ 128.883906][ T1041] ? ret_from_fork_asm+0x1a/0x30 [ 128.888861][ T1041] __warn+0x317/0x4b0 [ 128.892856][ T1041] __report_bug+0x288/0x500 [ 128.897385][ T1041] ? __pfx___report_bug+0x10/0x10 [ 128.902436][ T1041] ? mac80211_hwsim_del_radio+0x2c7/0x460 [ 128.908193][ T1041] ? hwsim_exit_net+0xef4/0xfb0 [ 128.913061][ T1041] ? ops_undo_list+0x49a/0x990 [ 128.917843][ T1041] ? cleanup_net+0x4d8/0x7a0 [ 128.922446][ T1041] ? process_one_work+0x93a/0x15a0 [ 128.927573][ T1041] ? worker_thread+0x9b0/0xee0 [ 128.932351][ T1041] ? kthread+0x711/0x8a0 [ 128.936612][ T1041] ? ret_from_fork_asm+0x1a/0x30 [ 128.941561][ T1041] report_bug_entry+0x16a/0x220 [ 128.946429][ T1041] ? ieee80211_free_ack_frame+0x14/0x40 [ 128.951994][ T1041] ? ieee80211_free_ack_frame+0x19/0x40 [ 128.957558][ T1041] handle_bug+0xca/0x200 [ 128.961809][ T1041] exc_invalid_op+0x1a/0x50 [ 128.966320][ T1041] asm_exc_invalid_op+0x1a/0x20 [ 128.971174][ T1041] RIP: 0010:ieee80211_free_ack_frame+0x14/0x40 [ 128.977348][ T1041] Code: 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 53 48 89 f3 e8 83 3e f2 f6 48 8d 3d 5c ae 03 05 <67> 48 0f b9 3a 31 ff 48 89 de ba 02 00 00 00 e8 b8 68 69 fe 31 c0 [ 128.996958][ T1041] RSP: 0018:ffffc900040af5b0 EFLAGS: 00010293 [ 129.003043][ T1041] RAX: ffffffff8acfb4ad RBX: ffff888031b12a00 RCX: ffff888026ad9e80 [ 129.011033][ T1041] RDX: 0000000000000000 RSI: ffff888031b12a00 RDI: ffffffff8fd36310 [ 129.019039][ T1041] RBP: ffffc900040af6b8 R08: ffffc900040af62f R09: 0000000000000000 [ 129.027016][ T1041] R10: ffffc900040af620 R11: ffffffff8acfb4a0 R12: ffffc900040af620 [ 129.034994][ T1041] R13: ffff88805a6a39f0 R14: ffff88807aafaff8 R15: 0000000000000001 [ 129.042978][ T1041] ? __pfx_ieee80211_free_ack_frame+0x10/0x10 [ 129.049064][ T1041] ? ieee80211_free_ack_frame+0xd/0x40 [ 129.054544][ T1041] idr_for_each+0x1b5/0x290 [ 129.059064][ T1041] ? kasan_quarantine_put+0xdd/0x220 [ 129.064365][ T1041] ? __pfx_ieee80211_free_ack_frame+0x10/0x10 [ 129.070470][ T1041] ? __pfx_idr_for_each+0x10/0x10 [ 129.075534][ T1041] ? kfree+0x1c0/0x660 [ 129.079627][ T1041] ieee80211_free_hw+0x44/0x3d0 [ 129.084501][ T1041] mac80211_hwsim_del_radio+0x2de/0x460 [ 129.090070][ T1041] ? __pfx_mac80211_hwsim_del_radio+0x10/0x10 [ 129.096163][ T1041] hwsim_exit_net+0xef4/0xfb0 [ 129.100858][ T1041] ? hwsim_exit_net+0x333/0xfb0 [ 129.105721][ T1041] ? __pfx_hwsim_exit_net+0x10/0x10 [ 129.110941][ T1041] ? __ip_vs_dev_cleanup_batch+0x238/0x260 [ 129.116764][ T1041] ops_undo_list+0x49a/0x990 [ 129.121378][ T1041] ? __pfx_ops_undo_list+0x10/0x10 [ 129.126510][ T1041] ? do_raw_spin_unlock+0x122/0x240 [ 129.131741][ T1041] cleanup_net+0x4d8/0x7a0 [ 129.136176][ T1041] ? __pfx_cleanup_net+0x10/0x10 [ 129.141131][ T1041] ? _raw_spin_unlock_irq+0x23/0x50 [ 129.146348][ T1041] ? process_one_work+0x868/0x15a0 [ 129.151477][ T1041] process_one_work+0x93a/0x15a0 [ 129.156451][ T1041] ? __pfx_process_one_work+0x10/0x10 [ 129.161863][ T1041] ? assign_work+0x3a1/0x410 [ 129.166488][ T1041] worker_thread+0x9b0/0xee0 [ 129.171121][ T1041] kthread+0x711/0x8a0 [ 129.175210][ T1041] ? __pfx_worker_thread+0x10/0x10 [ 129.180335][ T1041] ? __pfx_kthread+0x10/0x10 [ 129.184938][ T1041] ? _raw_spin_unlock_irq+0x23/0x50 [ 129.190149][ T1041] ? lockdep_hardirqs_on+0x98/0x140 [ 129.195361][ T1041] ? __pfx_kthread+0x10/0x10 [ 129.199964][ T1041] ret_from_fork+0x599/0xb30 [ 129.204571][ T1041] ? __pfx_ret_from_fork+0x10/0x10 [ 129.209704][ T1041] ? __switch_to_asm+0x39/0x70 [ 129.214489][ T1041] ? __switch_to_asm+0x33/0x70 [ 129.219260][ T1041] ? __pfx_kthread+0x10/0x10 [ 129.223857][ T1041] ret_from_fork_asm+0x1a/0x30 [ 129.228642][ T1041] [ 129.232018][ T1041] Kernel Offset: disabled [ 129.236368][ T1041] Rebooting in 86400 seconds..