last executing test programs: 12.53955418s ago: executing program 1 (id=85): syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000100)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) syz_ublk_setup_queues(r2, r0, &(0x7f0000000140)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f00000001c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x40000, 0x1000002, 0x94}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="340000002400210400000000ffdbdf2564c00000060004000000000006000300000000000600030000000000060004000000000055abc07a5413c7edc2cef31593312375bd726c7e1af9a10fcf8f33df84c23a0f4c7536da619f6507623e232db8789448cf248853bed3c438f6da5c309592e6dc1e1d77667ab4967d97c2c34b31ffdcc0a303db7f658923aaaa190d8ebd813a72df7999ac95d8eba38ea04a5a5852a00cf98a21b0790cd32eb6b729733d57b4f56bb7"], 0x34}, 0x1, 0x0, 0x0, 0x20004000}, 0x20000040) truncate(&(0x7f0000000000)='./cgroup.net/devices.allow\x00', 0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) 12.220679688s ago: executing program 1 (id=87): setns(0xc9, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}}, 0x800) r3 = socket(0x2a, 0x2, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0x8915, 0x0) setns(0xc9, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}}, 0x800) (async) socket(0x2a, 0x2, 0x0) (async) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0x8915, 0x0) (async) 12.099843846s ago: executing program 1 (id=88): sendto$l2tp6(0xffffffffffffffff, &(0x7f0000000000)="b88c178a0483314f380c84d7211d4691157142084615499d14ce0bdceadbf9293457cf5df85d5e0987eafb3250b9aa8ec50a0f531bbad02c03046bad1e6a98ca3708affc533f88773e72a99d47599ec63242efbbc2451805a4e76b5154c07fc04498c4c872b9219233d53989", 0x6c, 0x812, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x44, r1, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@FOU_ATTR_PEER_V6={0x14, 0x9, @remote}, @FOU_ATTR_PEER_V6={0x14, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @FOU_ATTR_PEER_V4={0x8, 0x8, @multicast2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20044041) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240), r0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x68, r2, 0x20, 0x70bd29, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0x3, @link='syz0\x00'}}}, ["", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), r0) sendmsg$MPTCP_PM_CMD_REMOVE(r0, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x74, r3, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x14, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x34, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010101}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @remote}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x5}, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000500)={"1dc4a04d9c5c849267ee196f5df7c128", 0x0, 0x0, {0x10001, 0x9}, {0x2074aef1, 0x2}, 0x2, [0x7fffffffffffffff, 0x9, 0x3ff, 0x6, 0x9e9, 0x6, 0xb, 0x6, 0x8, 0x10000, 0x2, 0x7, 0x3, 0x3, 0xfff, 0xb3a]}) ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f0000000600)={{}, r4, 0x8, @unused=[0x6, 0xb0, 0x4, 0xfff], @name="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"}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001600)={'wlan1\x00', 0x0}) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x32) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r7, 0x4002f516, &(0x7f0000001640)={0x0, 0x4}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000016c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r0, &(0x7f0000001780)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001740)={&(0x7f0000001700)={0x20, r8, 0x300, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x4, 0x7a}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x40054) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001800), r0) sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f00000018c0)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001880)={&(0x7f0000001840)={0x2c, r9, 0x2, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x1) ioctl$KVM_CLEAR_DIRTY_LOG(r6, 0xc018aec0, &(0x7f0000001d00)={0x0, 0x80, 0x0, &(0x7f0000001900)=[0x1, 0x2, 0x9, 0x3, 0x4, 0x3, 0x3, 0xffffffff, 0x9, 0x1, 0x9, 0x8, 0x50, 0x0, 0x5, 0x328, 0x401, 0x1, 0x6, 0xa, 0x6, 0x9, 0x45b0, 0x0, 0xfffffffffffffffe, 0x6, 0x7ff, 0xb, 0x87, 0xffffffffffffffff, 0x6c7, 0x73, 0x1, 0x2, 0x10001, 0x7, 0x7, 0x100000001, 0x7f, 0x8, 0x0, 0x4, 0x80000000, 0x3, 0x582, 0xe, 0x5, 0x401, 0xfffffffffffffff9, 0x0, 0x1000, 0x7, 0x7, 0x5197, 0x5, 0x9, 0xffffffffffff0001, 0x5, 0x4, 0x3, 0x2, 0x6, 0xf, 0xb12b, 0x2, 0x4, 0x6, 0x0, 0x5, 0x9, 0x8, 0x9, 0x9, 0xdcf, 0x40, 0x0, 0x7, 0x5, 0x5, 0x0, 0x4, 0x1, 0xffffffff, 0x10, 0x100, 0x1009, 0x6, 0x3ff, 0x6, 0x2, 0x1, 0xfffffffffffffff9, 0xf84, 0x4, 0x18, 0xc8, 0x6, 0x6, 0x967d, 0x53b, 0x100, 0x7f, 0xdda, 0x7, 0x80000000, 0x22a3, 0x7, 0xb4, 0x7, 0x9, 0x2, 0x0, 0x0, 0x8, 0x80000000, 0x1, 0x7, 0x92, 0x7, 0x7, 0x9, 0x9, 0xffffffff80000000, 0x8001, 0x5d642858, 0x0, 0x101, 0x141f]}) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001d80), r0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000001dc0)={'wg2\x00', 0x0}) sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f00000043c0)={&(0x7f0000001d40)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000004380)={&(0x7f0000001e00)={0x254c, r10, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@ETHTOOL_A_EEE_ENABLED={0x5}, @ETHTOOL_A_EEE_ENABLED={0x5}, @ETHTOOL_A_EEE_MODES_OURS={0x11e0, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x1004, 0x5, "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"}, @ETHTOOL_A_BITSET_VALUE={0x77, 0x4, "eaa0d1ff946aa8c858b079d651006b25b4bd4e916fb07ec2d022363a5d5ab2ef233f581033a90f584570996636c501ccc228db011767539b58832b6a794c73291f8c49ca1ef1d0dd1ae5eec176e9fb7f8f35a8f15eea30f8163a26b8fb8cf9cabe5a7e155dd42cd93695f27c86fab3b9bea98d"}, @ETHTOOL_A_BITSET_VALUE={0x96, 0x4, "c318fa894172ee5d286be7220c22ef4de334bb338c201fe3a5971cf32636c226e086219ce1a65c36de6fb925ad1e123a1e7d8f97225042d605659583fde84678b9b53bf837e5e5976ff016f437d3425eaa9a4d1adfc6179a6654747b192761b2c79bcb0a0551b09c3f77a90e95ba9a24f94508445ff3d09df33965db3cf2e07fd18fc36bee706dca7aa1977542d8d2009f87"}, @ETHTOOL_A_BITSET_VALUE={0xc8, 0x4, "1743cbc72c13f329ea2b5ff1be5efdec2e57b66286510ceb79de20ac3da3f12335ea0f136fde397589804cae1f2a2f9f9e7f9b8416e4ae8c760cf8ef1d70df94b554deff933f04eaecf4dba2ff7ae74d26036b3006fe4ee5824a9e8794fb8ebe4e542cff988dd688b6dcc97113f082a558e1e78a1b28beb8bdfbfdfc64869f2acc720f7689524d8137191505ea1e0e16f2df073595ec0df94eb52273bfa25242080c46d333037eecb069cc3f9cda88b6599be6e4439f91cb0d73412bf63fb7f3b0aee9d0"}]}, @ETHTOOL_A_EEE_MODES_OURS={0x70, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x30, 0x4, "f3e16d79be0c56b46303b95f98d0109e60270db83c876750dfb5b3152d4130a11fd4d65334653339eed4fe0a"}, @ETHTOOL_A_BITSET_BITS={0x3c, 0x3, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\xfc\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffff9}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x256}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x6, 0x1}, @ETHTOOL_A_EEE_HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}]}, @ETHTOOL_A_EEE_MODES_OURS={0x125c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x1004, 0x4, "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"}, @ETHTOOL_A_BITSET_VALUE={0xeb, 0x4, "f6e5a37949351fdc3388630e4e66970be066fdf7a09e56102c9310abbc9763f3cebe96f4044d39476796c4770c19e4e5fc69317aee856e25e461d19666440fdc27537cbbe227f8c3fdfa94f10ac480b293aa470223092c9a0132b562f0b20bd924764c88af99a12e2f250ee0b5f7d34c27280f7aba360c49c306d6152e4b4b296770742f594ae3281c83e8acbdca36aab55ea22033e0ec9e4b5df8dec2ec6a09863a26aead8699c3c0315e24e56a4dc885a7320d098982d65decf5ca9852362acf451ca67d47563cb692d81bec1bd01d6bf7a478736cf933f0eca5d563b3ae2232070bb409dd0c"}, @ETHTOOL_A_BITSET_MASK={0x80, 0x5, "31e09e3be738f52a09e99204ada064d668dc36b9ae5fc126f9410199c233e4752e1dc986cefed8254e8a0bae6d6924a56e86571337f3b61f4c2ee63cbb339b70b99b6b7fe8f61ea5c3fe1b996ebf3631306b971f826a946e34b69065eeee2f07e94d18e988d2526d063fda95b181c02480a62ade9239129160faa602"}, @ETHTOOL_A_BITSET_BITS={0xe8, 0x3, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'fou\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xb3f}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'wlan1\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'syz0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xe}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '!\'[\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x14, 0x2, ' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x40}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x753}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x4}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}]}]}]}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x6, 0x9}]}, 0x254c}, 0x1, 0x0, 0x0, 0x4048811}, 0x44000) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r0, &(0x7f00000044c0)={&(0x7f0000004400)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000004480)={&(0x7f0000004440)={0x40, r8, 0x400, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x35}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x23}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x50}]}, 0x40}, 0x1, 0x0, 0x0, 0x44004}, 0x4000) sendmsg$MPTCP_PM_CMD_SET_FLAGS(0xffffffffffffffff, &(0x7f00000045c0)={&(0x7f0000004500)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000004580)={&(0x7f0000004540)={0x1c, r3, 0x105, 0x70bd2a, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x100080c4}, 0x20004001) r12 = syz_genetlink_get_family_id$tipc2(&(0x7f0000004640), r0) sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f0000004700)={&(0x7f0000004600)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000046c0)={&(0x7f0000004680)={0x18, r12, 0x8, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0xc6067394b97d2af5}, 0x80) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000004740)={0x4, 0x5, 0xdddd0000, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) r13 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_STATION(r13, &(0x7f0000004840)={&(0x7f0000004780)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000004800)={&(0x7f00000047c0)={0x30, r9, 0x8, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x80000001, 0xfffffffe}}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000041}, 0x20000010) sendmsg$BATADV_CMD_TP_METER_CANCEL(r13, &(0x7f0000004980)={&(0x7f0000004880)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000004940)={&(0x7f0000004900)={0x2c, 0x0, 0xe469b734d97d1f7c, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4002}, 0x840) 12.029894173s ago: executing program 1 (id=89): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x34, r1, 0x2799f5eec7981083, 0x170bd26, 0x25dfdbfc, {}, [@ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x20040080}, 0x80) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r2) ioctl$F2FS_IOC_GARBAGE_COLLECT(r0, 0x4004f506, &(0x7f0000000140)) sendmsg$IEEE802154_ASSOCIATE_REQ(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x34, r3, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xfffe}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x15}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x1}, @IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0x9}]}, 0x34}, 0x1, 0x0, 0x0, 0x4941}, 0x48050) 11.931896603s ago: executing program 1 (id=90): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000005c0)='./sys\x00', &(0x7f0000000600)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./sys/bus/pnp/devices/00:02/resources\x00', 0x2, 0x0) read$FUSE(r0, &(0x7f0000000680)={0x2020}, 0x2020) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc1105511, &(0x7f00000000c0)={{0xc, 0x0, 0xfffffffc, 0x0, 'syz1\x00'}, 0x0, [0x0, 0x100, 0x7ffc, 0x0, 0x3, 0x100000000, 0x0, 0x4, 0x8, 0x0, 0xc3, 0x7f, 0x1, 0x0, 0x8000000, 0x10000, 0x5, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x3, 0x100000000, 0xffffffffffffffff, 0x0, 0x5, 0x1, 0x4, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10000, 0x3, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0xfffffffe, 0x0, 0x6, 0xfffffdfffffffffe, 0x4, 0x804000, 0x0, 0xffffffff, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x401, 0xb4e, 0x20000000ffffffff, 0x2000000, 0xfffffffc, 0x1, 0x0, 0x0, 0xd87, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xdf9cd90, 0x8000200, 0x6, 0x5, 0x0, 0x0, 0x0, 0xbb, 0x200000, 0x0, 0x0, 0xfffffffe, 0x7, 0x7ffffffd, 0x3, 0x0, 0xffffffffffff2328, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8, 0x4, 0x0, 0x0, 0xb, 0xfffffffffffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff]}) ptrace(0x10, r1) capget(&(0x7f0000000000)={0x19980330, r1}, &(0x7f0000000040)={0x9, 0xfffffff1, 0x0, 0xfff, 0x5452af6e, 0x9}) ptrace$getregset(0x4205, r1, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) (async) mount(0x0, &(0x7f00000005c0)='./sys\x00', &(0x7f0000000600)='sysfs\x00', 0x0, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000640)='./sys/bus/pnp/devices/00:02/resources\x00', 0x2, 0x0) (async) read$FUSE(r0, &(0x7f0000000680)={0x2020}, 0x2020) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc1105511, &(0x7f00000000c0)={{0xc, 0x0, 0xfffffffc, 0x0, 'syz1\x00'}, 0x0, [0x0, 0x100, 0x7ffc, 0x0, 0x3, 0x100000000, 0x0, 0x4, 0x8, 0x0, 0xc3, 0x7f, 0x1, 0x0, 0x8000000, 0x10000, 0x5, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x3, 0x100000000, 0xffffffffffffffff, 0x0, 0x5, 0x1, 0x4, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10000, 0x3, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0xfffffffe, 0x0, 0x6, 0xfffffdfffffffffe, 0x4, 0x804000, 0x0, 0xffffffff, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x401, 0xb4e, 0x20000000ffffffff, 0x2000000, 0xfffffffc, 0x1, 0x0, 0x0, 0xd87, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xdf9cd90, 0x8000200, 0x6, 0x5, 0x0, 0x0, 0x0, 0xbb, 0x200000, 0x0, 0x0, 0xfffffffe, 0x7, 0x7ffffffd, 0x3, 0x0, 0xffffffffffff2328, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8, 0x4, 0x0, 0x0, 0xb, 0xfffffffffffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff]}) (async) ptrace(0x10, r1) (async) capget(&(0x7f0000000000)={0x19980330, r1}, &(0x7f0000000040)={0x9, 0xfffffff1, 0x0, 0xfff, 0x5452af6e, 0x9}) (async) ptrace$getregset(0x4205, r1, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28}) (async) 11.78763436s ago: executing program 1 (id=91): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000003c0)={0x10, 0x10, 0x0, 0x0, 0xfffffffc}, 0x10}], 0x1}, 0x20040000) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r4, 0xc138fd03, &(0x7f00000000c0)="0400000000000000000000003801000000000000000000000000000000000000000000000000000000000000000000006d79706f") (async) ioctl(r4, 0xc138fd03, &(0x7f00000000c0)="0400000000000000000000003801000000000000000000000000000000000000000000000000000000000000000000006d79706f") write(r4, &(0x7f0000000200)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00cache\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x001:0 1:1 1:2 64 0 default 0\x00', 0x42) ioctl(r4, 0xc138fd09, &(0x7f0000000280)="0400000000000000000000007a010000380100000100"/46) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000300), &(0x7f0000000340)=0x4) (async) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000300), &(0x7f0000000340)=0x4) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x5}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x404c044}, 0x0) 7.629020468s ago: executing program 0 (id=102): r0 = syz_usb_connect(0x0, 0x2b, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000408106050000010000000109021900010100803209040000010a00000007058102"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x2000000) 6.051221742s ago: executing program 2 (id=106): getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) madvise(&(0x7f000061f000/0x1000)=nil, 0x1000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) 5.839799952s ago: executing program 2 (id=107): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x400000000000004) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000140)=0x800, 0x4) creat(&(0x7f0000000240)='./file0\x00', 0x83) writev(r1, &(0x7f0000000180)=[{&(0x7f00000001c0)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="50000000130001002abd7000f8dbcf2504004f8008003300", @ANYRES32, @ANYBLOB="1800258014001c0020010000000000000000000000000001080013"], 0x50}], 0x1}, 0x8880) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x121403, 0x0) ioctl$BLKRRPART(r3, 0x125f, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) preadv2(r4, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x1, 0x3000, 0x1000004, 0x9) 5.731140258s ago: executing program 2 (id=108): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) syz_usb_connect$cdc_ncm(0x5, 0x6e, &(0x7f0000000180)=ANY=[@ANYBLOB="12012002020000102505a1a440000102030109025c0002010120080904000001020d0000052406000105240005000d240f01040000000100fafffa06241a0200320905"], &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0}) r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x4000000, &(0x7f0000000280)={0x2, 0x0, @remote}, 0x10) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='syscall\x00') mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) syz_usb_connect$uac1(0x3, 0x7d, &(0x7f00000000c0)=ANY=[@ANYBLOB="62c8776dce6f7505f7b43fee9ef5792028187394465410a19b160bd24f2b68b804611ed4008169452e8905aa345496d1e6335d2f2602c79af70b30186394a8e77242b0d91cbf53e90f7b33389bfe6ba05332ba2ec0c899611aac6fadfe7fd5c8ac5e3b34063f78e2e6d75c890b4c5f7d0e2414bd139c10939e1b17709393174c1dd8dca793fc", @ANYRES64=r1], 0x0) socket$can_bcm(0x1d, 0x2, 0x2) 4.515042215s ago: executing program 0 (id=109): mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000000)=0x40049, 0x4) syz_usb_connect$hid(0x5, 0x36, &(0x7f00000003c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0xeef, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x70, 0x1, "", [{{0x9, 0x4, 0x0, 0x1, 0xb, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x8009, 0xa, 0x1, {0x22, 0x2c}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x10, 0x7}}}}}]}}]}}, 0x0) 4.434582742s ago: executing program 2 (id=110): r0 = syz_open_dev$evdev(&(0x7f00000001c0), 0x2, 0x8000) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000080)={0xfe, 0x3, 0x0, 0x5, "00603c00009bb3c2ce0000806523120000001800f4ffffeafdff00"}) bind$pptp(0xffffffffffffffff, &(0x7f0000000040)={0x18, 0x2, {0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1e) 4.37363832s ago: executing program 2 (id=111): r0 = syz_usb_connect(0x2, 0x4b, &(0x7f0000000000)=ANY=[], 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r1, 0x0, 0x482, 0x0, &(0x7f0000000140)) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_control_io$uac1(r0, &(0x7f0000001680)={0x14, &(0x7f0000001600)={0x40, 0x2, 0x39, {0x39, 0x31, "37ded3fbc0e611eb5981a763e883e6fd4a2619d9ac9c9c5392465a0ce3e57dfa1d91acdd33cb7a70eba9ce8ab5c2c7c9c0e749cbd0ce49"}}, &(0x7f0000001640)={0x0, 0x3, 0x25, @string={0x25, 0x3, "70a056bd1ab519e710fe2f49e978855a7d6fb011cc36f232555669642fafb3d73fb1e7"}}}, &(0x7f0000001900)={0x44, &(0x7f00000016c0)={0x0, 0x14, 0x4b, "8153d45e10517c94e579d8ecae57a258db814e681a1dc58873d9a95ae4d8ce1329327f12a1758d11efb3e3ac4d637219080c95c772e989168793d7efbd95258a90a2c172d8844d6ce0a35c"}, &(0x7f0000001740)={0x0, 0xa, 0x1, 0x44}, &(0x7f0000001780)={0x0, 0x8, 0x1, 0xb}, &(0x7f00000017c0)={0x20, 0x81, 0x2, "c504"}, &(0x7f0000001800)={0x20, 0x82, 0x3, "b7833c"}, &(0x7f0000001840)={0x20, 0x83, 0x2, "52ab"}, &(0x7f0000001880)={0x20, 0x84, 0x4, "3576d075"}, &(0x7f00000018c0)={0x20, 0x85, 0x3, "30c64e"}}) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r2) mkdir(&(0x7f0000000100)='./cgroup/../file0\x00', 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140), 0x200002, 0x0) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f0000000500), 0x10) sendmsg$can_bcm(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="050000000300000000000000", @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}}, 0x0) read(r5, &(0x7f0000000600)=""/4096, 0x1000) openat$cgroup_int(r4, &(0x7f0000000180)='cpu.idle\x00', 0x2, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x405, 0x0, 0x0, {0x5}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x50}}, 0x4000010) sendmsg$NFT_BATCH(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xa}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x68}}, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./sys/block/ram0/queue/discard_max_bytes\x00', 0x1a1041, 0x171) write(r7, &(0x7f00000004c0)='1R', 0x2) write$cgroup_subtree(r7, &(0x7f0000000440)=ANY=[@ANYRES16=r3, @ANYRES8=r6], 0x27) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYRESOCT=r4, @ANYRES64=r3, @ANYBLOB="010000000000000000002f010000100001800a000200766c617c30000000140002800800010000000000080002"], 0x38}, 0x1, 0x0, 0x0, 0x86}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000240)=""/64) 1.42400544s ago: executing program 0 (id=115): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000440)={0x1, 0x0, @pic={0x6, 0x87, 0xe1, 0x81, 0x9, 0xd9, 0x40, 0x5, 0xfb, 0x5e, 0xc, 0x0, 0x41, 0x40, 0x1, 0x1}}) socket(0xa, 0x2, 0xffffffff) mkdir(&(0x7f0000000340)='./cgroup/../file0\x00', 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400), 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000740)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000780)=0x1, 0x12) write$cgroup_int(r6, &(0x7f00000007c0), 0x12) write$cgroup_pid(r4, &(0x7f0000000800), 0x12) accept$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000680)={[0x6e, 0xfffffffffffffff8, 0x3, 0x20, 0x3, 0x2, 0x106c, 0x102, 0x8000000000000, 0x1000000003, 0x0, 0x8, 0x10000, 0x6, 0x0, 0x8000], 0x1, 0x2c4210}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x8b1b, &(0x7f0000000300)={'wlan1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_clone(0x40000480, &(0x7f0000000000)="ff5ad09bafabc112b5dcb3fa0a64e5d21a45346ddb51cce3e457302cd28f9ecc13d9796845f79027d7834a23d4f15932394eaf244007f60e3644ce71bc07db89bafc07eca42d9a4867a2170e66fd78939e5d8a40d2f832f1488bcd5e7bb0cd9f82da2cc4eef04affe8e4c544d0b72611ba94bbed6ae7f1863b7a1a5c06b6100da77106168414020ed69d4a23f1dbc8f9e9c4d93d1df495efec273fc2f8efc4eb2fd48b7a92189016b6540110c0fa7fcca2e53138d3c06702507c2b11dc9a54ad0c158fe39339a166549b7e553bf4cd0e28e55736ddd50c396dc0587f9f6c13f4c59f53bed13ab05306108ebda6", 0xed, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000200)="6d2d499b6766cd39810f05b8b440795ab89f0af6763effa898f290b7319925a38aea09f88f0adcd85418b53ee4aeffb37f4c12531e56353d0d7ec42f728793d22facec17d64fce82fd9a056aa09b0099cc26e17f133c121e44b39da94390027a60b5196447d76add142683ec657e20b3c6ae76b78fc43dc383808391aef638c3f311e187d0a736dcd91d2d03a2635410c5f3692704643e60fdad9acb4778e5bddf1145386c9c70e7b30d6f855c38ae6e56d9be79b333b6d7307f3522c7c38d9f01422c7b742f4b832093") 1.250988327s ago: executing program 2 (id=117): r0 = syz_usb_connect(0x0, 0x2b, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000408106050000010000000109021900010100803209040000010a00000007058102"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x3000000) 1.12834058s ago: executing program 3 (id=118): mkdirat(0xffffffffffffff9c, &(0x7f0000005a00)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000005a40)='./trace\x00', &(0x7f0000005a80)='tracefs\x00', 0x0, 0x0) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000005ac0)='./trace/set_event\x00', 0xb02, 0x140) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000600)={&(0x7f0000000080)={0x54c, r2, 0x100, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8, 0x63}}}}, [@NL80211_ATTR_TID_CONFIG={0x74, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe8}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x8a}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xe5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x125}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x16}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x4b0, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xaa}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x49}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x34}]}, {0x3e4, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x3}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x3bc, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x9c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x8, 0x1, 0x7, 0x3, 0x8001, 0x6]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x50, 0x2, [{0x2, 0x6}, {0x1, 0x4}, {0x5, 0x4}, {0x6, 0x3}, {0x1}, {0x5, 0xa}, {0x3, 0x4}, {0x2, 0x5}, {0x5, 0x3}, {0x6}, {0x5, 0x3}, {0x6, 0x2}, {0x0, 0x2}, {0x6, 0x9}, {0x3, 0x8}, {0x0, 0x4}, {0x0, 0x4}, {0x1}, {0x6, 0x3}, {0x1, 0x6}, {0x3, 0x7}, {0x7, 0x4}, {0x4, 0x2}, {0x7, 0x1}, {0x5, 0x6}, {0x0, 0x2}, {0x2, 0x8}, {}, {0x2, 0x6}, {0x6}, {0x4, 0x9}, {0x1, 0x9}, {0x6, 0x8}, {0x1, 0x3}, {0x0, 0x6}, {0x6, 0x5}, {0x1, 0x7}, {0x6, 0x2}, {0x3, 0x4}, {0x1, 0x4}, {0x4, 0x1}, {0x0, 0x7}, {0x5, 0x4}, {0x7, 0x1c}, {0x0, 0x2}, {0x3, 0x9}, {0x1, 0x8}, {0x7, 0x5}, {0x6, 0x9}, {0x4, 0x6}, {0x2, 0x6}, {0x6, 0x1}, {0x0, 0x3}, {0x0, 0x2}, {0x7, 0x3}, {0x2, 0x1}, {0x2, 0x4}, {0x1, 0x2}, {}, {0x0, 0x8}, {0x1, 0x5}, {0x0, 0x3}, {0x3, 0x2}, {0x0, 0x3}, {0x1, 0x2}, {0x7, 0xa}, {0x7, 0x3}, {0x4}, {0x2, 0x3}, {0x7, 0x3}, {0x2, 0x1}, {0x1, 0x2}, {0x2, 0x3}, {0x3, 0x3}, {0x0, 0x5}, {0x5, 0xa}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x4, 0x5, 0x2, 0x3, 0x7, 0xfff7, 0x2b9e]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_2GHZ={0x78, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x8000, 0x4, 0x8e, 0x5df, 0x400, 0x8, 0xff]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x3, 0x8000, 0x2, 0xc, 0xf, 0x1, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x9, 0x4, 0x36, 0x9, 0x12, 0x6c, 0x44, 0x48, 0x9, 0xb, 0x30, 0x3a, 0x2, 0x2, 0x9, 0x6, 0x2, 0x1b, 0x24, 0x16, 0x1, 0x16, 0x30, 0x2, 0x18, 0x1, 0x0, 0x9, 0x12, 0x6c, 0x78]}]}, @NL80211_BAND_6GHZ={0x5c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x67, 0x4, 0x36, 0x30, 0x6c, 0xb, 0x5, 0x1, 0x17, 0x1b, 0x1b, 0x6c, 0x36, 0x5, 0x3, 0x1, 0xb, 0x16]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x26, 0x2, [{0x4, 0x8}, {0x0, 0x9}, {0x6, 0xa}, {0x2, 0x6}, {0x0, 0x6}, {0x2, 0x1}, {0x1, 0x2}, {0x5, 0x8}, {0x2, 0x8}, {0x0, 0x8}, {0x0, 0x8}, {0x0, 0x6}, {0x5, 0x1}, {0x0, 0x6}, {0x2, 0x4}, {0x1, 0x3}, {0x5, 0x7}, {0x6, 0x7}, {0x1, 0x2}, {0x4, 0x5}, {0x3, 0x1}, {0x6}, {0x0, 0x4}, {0x0, 0x4}, {0x5, 0x6}, {0x7, 0x4}, {0x3, 0x2}, {0x0, 0x5}, {0x7, 0x8}, {0x0, 0x9}, {0x2, 0x1}, {0x2}, {0x0, 0x2}, {0x3, 0x1}]}]}, @NL80211_BAND_5GHZ={0x8c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x7, 0x2, 0xfff, 0x8000, 0x22, 0x3ff, 0x4]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x7f73, 0x8a, 0x831, 0x8, 0x6, 0xd2, 0x5]}}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x18, 0x12, 0x60, 0x5, 0x4, 0x18, 0x2, 0x1, 0x36, 0x6, 0xb, 0x48, 0x16, 0x12, 0x30, 0x16, 0x4, 0x76, 0x36, 0x1b, 0x1, 0x12, 0x18, 0x4f, 0x3, 0x5, 0x1b, 0x6, 0x1, 0x48]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x1, 0x6, 0x3c04, 0x9, 0xfff8, 0x8, 0x4]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x7, 0x2, 0x5, 0x7, 0x7, 0x76d, 0x3]}}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x1b, 0x60, 0x6c, 0x2, 0x48]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x5}]}, @NL80211_BAND_2GHZ={0x30, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xf, 0x1, [0x24, 0x48, 0x0, 0x9, 0x1b, 0x12, 0x24, 0x12, 0x2, 0x1, 0x0]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0xa, 0x2, [{0x4, 0xa}, {0x1, 0xa}, {0x1, 0x8}, {0x3, 0x7}, {0x6, 0x5}, {0x2}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_5GHZ={0xd8, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x101, 0x5, 0x740, 0xf0ac, 0xb, 0xb, 0xb5]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xb, 0x2, 0x7, 0x3, 0x0, 0x8, 0x4a, 0x6]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x8, 0x2, [{0x1, 0x4}, {}, {0x7, 0x5}, {0x1, 0x1}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x8001, 0x7fff, 0xfff9, 0xfff, 0x8b, 0xaafc, 0x2]}}, @NL80211_TXRATE_HT={0x45, 0x2, [{0x7, 0x7}, {0x6, 0x8}, {0x2, 0x1}, {0x4, 0x1}, {0x4, 0x6}, {0x6, 0x9}, {0x1, 0xa}, {0x3, 0xa}, {0x7, 0x9}, {0x0, 0x7}, {0x4, 0x1}, {0x4, 0x8}, {0x7, 0x4}, {0x1, 0x6}, {0x1, 0x4}, {0x6, 0x4}, {0x1, 0x6}, {0x2, 0x2}, {0x0, 0x5}, {0x1, 0x3}, {0x4, 0x7}, {0x4, 0x5}, {0x2, 0x9}, {0x5, 0x4}, {0x4, 0x8}, {0x4, 0x7}, {0x6, 0x2}, {0x0, 0x2}, {0x2, 0x8}, {0x3, 0xa}, {0x1, 0x2}, {0x4, 0x3}, {0x3}, {0x4, 0x9}, {0x1, 0x9}, {0x0, 0x8}, {0x7, 0x8}, {0x7, 0xa}, {0x6, 0x3}, {0x5}, {0x2, 0x1}, {0x7, 0x5}, {0x4, 0x5}, {0x0, 0x7}, {0x4, 0x5}, {0x6, 0x6}, {0x4, 0x2}, {0x6, 0x6}, {0x0, 0x7}, {0x0, 0x4}, {0x5, 0x7}, {0x0, 0x2}, {0x3, 0x7}, {0x1}, {0x2}, {0x7, 0xa}, {0x1}, {0x7, 0x8}, {0x0, 0x7}, {0x6, 0x2}, {0x7, 0xa}, {0x4, 0x5}, {0x2, 0x9}, {0x5, 0x5}, {0x3, 0x3}]}, @NL80211_TXRATE_HT={0x35, 0x2, [{0x4, 0x4}, {0x2, 0x8}, {0x5}, {0x2, 0x1}, {0x6, 0x9}, {0x3, 0x5}, {0x4, 0x5}, {0x6, 0x1}, {0x4, 0x5}, {0x1, 0x5}, {0x0, 0x9}, {0x6, 0x1}, {0x6, 0x8}, {0x3, 0x8}, {0x0, 0x8}, {0x5, 0x3}, {0x3, 0x1}, {0x0, 0x1e}, {0x5, 0x5}, {0x1}, {0x3, 0x5}, {0x2, 0x9}, {0x2, 0x7}, {0x3}, {0x3, 0x1}, {0x6, 0x4}, {0x5, 0x8}, {0x0, 0x2}, {0x2, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x5, 0xa}, {0x2, 0xa}, {0x0, 0x7}, {0x5, 0x8}, {0x4, 0x9}, {0x5, 0x8}, {0x0, 0x8}, {0x5, 0x8}, {0x3, 0xa}, {0x5, 0xa}, {0x3, 0x2}, {0x7}, {0x0, 0x9}, {0x0, 0x4}, {0x0, 0x5}, {0x0, 0x5}, {0x2, 0xa}, {0x2, 0xa}]}]}, @NL80211_BAND_2GHZ={0xb4, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x16, 0x60, 0x30, 0x6, 0xb]}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x1, 0x3}, {0x2, 0x5}, {0x4, 0x8}, {0x1, 0x3}, {}, {0x3, 0x2}, {0x7, 0xa}, {0x3, 0x2}, {0x4, 0xa}, {0x6, 0xa}, {0x2, 0x2}, {0x5, 0x8}, {0x6, 0xa}, {0x7, 0x3}, {0x5, 0x8}, {0x2, 0x4}, {0x5, 0x6}, {0x4, 0xa}, {0x4, 0x9}, {0x3, 0x3}, {0x7, 0x5}, {0x0, 0x6}, {0x0, 0x4}, {0x0, 0x6}, {0x0, 0xa}, {0x0, 0x7}, {0x7, 0x6}, {0x1, 0x1}, {0x6, 0x4}, {0x1, 0x4}, {0x6, 0xa}, {}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4c, 0xa, 0x5, 0x68, 0x4, 0xff, 0x6, 0x7]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x7, 0xff, 0x4, 0x4, 0x800, 0x756, 0x3ff]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x24, 0x18, 0x12, 0xc, 0x30, 0x69, 0x12, 0x18, 0x16, 0x36, 0x4, 0x36, 0x4, 0x16, 0x36, 0x6c, 0x9, 0x16, 0x6, 0x2, 0x1, 0x18, 0x6, 0x12, 0x4]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x30, 0xc, 0x4, 0x6, 0x1b, 0x6c, 0x6c, 0x5, 0x30, 0xb, 0x6, 0xc, 0x1, 0x60, 0xc, 0x18, 0x30, 0x18, 0x2]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5c}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5d}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x15}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x6c}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x3e}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}]}]}, 0x54c}, 0x1, 0x0, 0x0, 0x1}, 0x20040000) 1.062325621s ago: executing program 0 (id=119): ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000040)={0xffffffffffffffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./debug\x00', &(0x7f0000000240)='debugfs\x00', 0x80, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./debug/split_huge_pages\x00', 0x1, 0x0) write$FUSE_STATX(r0, &(0x7f00000004c0)={0x130, 0xfffffffffffffffe, 0x0, {0x7, 0x0, 0x0, '\x00', {0x100, 0x8f, 0x7f, 0x10001, 0x0, 0x0, 0x6000, '\x00', 0x8, 0x0, 0x100000001, 0x81, {0x3, 0x7fffffff}, {0xc3, 0x8}, {0x4, 0xfffffff8}, {0x3, 0x4}, 0x3, 0x0, 0x6, 0x5}}}, 0x130) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendto$inet(r0, &(0x7f0000000600)="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", 0x1af, 0x51, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) r4 = syz_usb_connect(0x4, 0x57, &(0x7f0000000140)=ANY=[@ANYRES8=r3], 0x0) r5 = syz_ublk_setup_io_uring(0x5c40, 0x0, &(0x7f00000000c0), &(0x7f0000000100), 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, r5, 0x0) setitimer(0x2, &(0x7f0000000280)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f00000001c0), 0x4) ftruncate(r6, 0x1) mlockall(0x7) openat$fuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0xffffe000) mremap(&(0x7f0000a4e000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) remap_file_pages(&(0x7f00001f5000/0x2000)=nil, 0x2000, 0x1, 0x7fffdffffffffffe, 0x1) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_ep_write(r4, 0x81, 0x3, &(0x7f0000000180)="015500") syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000506000/0x400000)=nil) close(0x5) close(0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x1c4) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x8001, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd']) 959.520513ms ago: executing program 3 (id=120): r0 = dup(0xffffffffffffffff) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r0, 0x4068aea3, &(0x7f0000000000)) (async) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000080)={0x0, @in={{0x2, 0x4e21, @empty}}}, &(0x7f0000000140)=0x84) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000180)={r1, 0x1000, "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"}, &(0x7f00000011c0)=0x1008) getsockopt$inet_sctp_SCTP_PLPMTUD_PROBE_INTERVAL(r0, 0x84, 0x85, &(0x7f0000001200)={r2, @in={{0x2, 0x4e24, @remote}}, 0x40}, &(0x7f00000012c0)=0x90) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000001300)=@assoc_id=r3, &(0x7f0000001340)=0x4) (async) ioctl$VIDIOC_G_SELECTION(r0, 0xc040565e, &(0x7f0000001380)={0x1, 0x3, 0x6, {0x2a, 0x3, 0x6, 0x6}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000013c0)=@fd={0x200, 0xb, 0x4, 0x62000, 0x8, {}, {0x5, 0x2, 0x4, 0xfb, 0x3, 0x0, "633336d0"}, 0x3, 0x4, {0xffffffffffffffff}, 0x800, 0x0, r0}) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000001440)={r3}, 0x8) ioctl$XFS_IOC_SET_RESBLKS(r5, 0xc0105872, &(0x7f0000001480)={0x9}) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x1f, &(0x7f00000014c0)={r4, @in={{0x2, 0x4e20, @local}}, 0x2, 0xb}, &(0x7f0000001580)=0x90) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r7, 0x84, 0x5, &(0x7f00000015c0)={r8, @in={{0x2, 0x4e21, @broadcast}}}, 0x84) (async) r9 = syz_open_dev$sndctrl(&(0x7f0000001680), 0x3ff8, 0x800) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r9, 0xc10c5541, &(0x7f00000016c0)={0x100, 0x2, 0x1}) (async) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000001800)={{0x1, 0x1, 0x18, r9}, './file0\x00'}) ioctl$vim2m_VIDIOC_QBUF(r10, 0xc058560f, &(0x7f0000001940)=@multiplanar_userptr={0x0, 0x0, 0x4, 0x4, 0x7ff, {0x77359400}, {0x1, 0x0, 0x0, 0x4, 0x4, 0xbf, "c9045159"}, 0x9, 0x2, {&(0x7f00000018c0)=[{0x6, 0x8, {&(0x7f0000001840)}, 0x3}, {0x5, 0x8, {&(0x7f0000001880)}, 0x958}]}, 0x0, 0x0, r0}) (async) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r10, 0x84, 0x72, &(0x7f00000019c0)={r3, 0x6}, &(0x7f0000001a00)=0xc) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r10, 0x84, 0x70, &(0x7f0000001a40)={r12, @in6={{0xa, 0x4e21, 0x5, @mcast2, 0x1}}, [0x80, 0xfffffffffffffff9, 0x0, 0x96bf, 0x2, 0x10001, 0x1, 0xfff, 0x1, 0x3, 0x8000000000000001, 0x0, 0x1, 0xee]}, &(0x7f0000001b40)=0x100) (async) mount(&(0x7f0000001b80)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000001bc0)='./file0\x00', &(0x7f0000001c00)='ocfs2\x00', 0x100004, &(0x7f0000001c40)='\x00') (async) getsockopt$IP_SET_OP_GET_BYNAME(r7, 0x1, 0x53, &(0x7f0000001c80)={0x6, 0x7, 'syz1\x00'}, &(0x7f0000001cc0)=0x28) ioctl$AUTOFS_DEV_IOCTL_FAIL(r10, 0xc0189377, &(0x7f0000001d00)={{0x1, 0x1, 0x18, r7, {0x9, 0x4}}, './file0\x00'}) poll(&(0x7f0000001d40)=[{r6, 0x80}, {r13, 0x5140}, {r10, 0x21}, {r11, 0x4000}, {0xffffffffffffffff, 0x242}], 0x5, 0x4) (async) mincore(&(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f0000001d80)=""/134) ioctl$KVM_CAP_VM_DISABLE_NX_HUGE_PAGES(r0, 0x4068aea3, &(0x7f0000001e40)) write$binfmt_misc(r9, &(0x7f0000001ec0)="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", 0x1000) r14 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000002ec0), 0x48a40, 0x0) ioctl$VHOST_SET_VRING_BASE(r14, 0x4008af12, &(0x7f0000002f00)={0x0, 0x80000001}) (async) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000002f40)=0x7ff) (async) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000002f80)={0x1, 0xf88, 0x0, 0x1, 0x7fff, 0x1, 0xe, 0xd48a, r3}, 0x20) 877.800088ms ago: executing program 3 (id=121): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) (async) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, &(0x7f0000000200)="c421f910bbe88e0000440f20c0350a000000440f22c0420f0967470f2e8a00800000430fc73bc463395dfbfbc4e1f92b98738109db650f789887d79cc8b805000000b90d0000000fd9420f78b8a6160000", 0x51}], 0x1, 0x11, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) creat(&(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x166) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000002c0)={0x3, 0x7, 0x9}) link(&(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000380)='./file0\x00') (async) creat(&(0x7f0000000140)='./file0\x00', 0x49) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000180), 0x0) unlink(&(0x7f0000000000)='./file0\x00') (async) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) 632.277514ms ago: executing program 3 (id=122): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) (async) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000000)={0x200000000000001}, 0x8) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @dev, 0x5}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000140), 0x171}}], 0x400000000000172, 0x4000000) (async) sendmsg$inet(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x8080) (async) sendto$inet6(r1, &(0x7f00000001c0)=']', 0x1, 0x4000000, 0x0, 0x0) (async) preadv2(r0, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x1, 0x3000, 0x1000004, 0x9) 339.536119ms ago: executing program 0 (id=123): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000080)={0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000100)="0f01cb650f7410262e66f36d0f330f09660f3a0cb90000a6752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x31}], 0x1, 0x4498bda7e2139f37, 0x0, 0x0) (async, rerun: 32) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000240)={[{0x9, 0xfff, 0x7, 0x9e, 0x12, 0x8, 0x40, 0x4, 0x5, 0x1, 0x7, 0x0, 0x7fffffffffffffff}, {0x7ff, 0x1ff, 0x9, 0x18, 0x0, 0x81, 0x96, 0x43, 0x4, 0xbc, 0x10, 0x9, 0x3}, {0xd3, 0x80b0, 0x7, 0x2, 0x84, 0x9, 0xfc, 0x8, 0xe, 0x9, 0xe, 0x6, 0x4}]}) (rerun: 32) ioctl$VIDIOC_STREAMON(0xffffffffffffffff, 0x40045612, &(0x7f0000000000)=0xff2) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x3, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000300)={[0x0, 0x5, 0x40, 0x40, 0x0, 0x3, 0x2004cb, 0x4000000000000000, 0x2, 0x3, 0x0, 0x7, 0x0, 0x2, 0x9, 0x1], 0x80a0000, 0x450}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 58.979586ms ago: executing program 3 (id=124): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x34, r1, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x11}, 0x80000) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="997425bd7000fbdbdf25150000001400018001000100"/34], 0x28}, 0x1, 0x0, 0x0, 0x4000804}, 0x2400c000) 19.34413ms ago: executing program 3 (id=125): r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040a61b01000100000000010902200001010080320904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000540)={0x34, &(0x7f0000000140)=ANY=[@ANYRESHEX=r0, @ANYRES64=r0, @ANYRESOCT=r0, @ANYRESOCT=r0, @ANYRESOCT=r0, @ANYRES16=r0, @ANYRESOCT=r0, @ANYRES16=r0, @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$dvb_frontend(&(0x7f0000000100), 0x1, 0x802) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000640)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) socket$vsock_stream(0x28, 0x1, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 0s ago: executing program 0 (id=126): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000080), 0x10, &(0x7f0000000100)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x405, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x48}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000200), 0x10, &(0x7f0000000240)={&(0x7f0000000280)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWCHAIN={0x5c, 0x3, 0xa, 0x405, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_HOOK_DEV={0x14, 0x3, 'netdevsim0\x00'}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x84}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000380), 0x10, &(0x7f00000003c0)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x94, 0x6, 0xa, 0xc05, 0x0, 0x0, {0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x68, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_BASE={0x8}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x10}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x4}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x1}]}}}, {0x30, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8}, @NFTA_IMMEDIATE_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x1}]}]}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0xbc}}, 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000004c0)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r0, &(0x7f0000000500)={0x2c, &(0x7f0000000540)=ANY=[@ANYBLOB="20b52c020000065f"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000580), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f00000005c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000600)={0x0, &(0x7f0000000640)=[0x0], 0x0, 0x0, 0x0, 0x1}) setns(0xc9, 0x0) r4 = socket$netlink(0x10, 0x3, 0x12) setuid(0xee01) writev(r4, &(0x7f0000000700)=[{&(0x7f0000000740)="390000001100034700bb65e1c3e4ffff0100b2a1010000055600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000680)={0x0, 0x0, r3}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="340000001d000100000000488a0000000a0200000000000000000000150001"], 0x34}, 0x1, 0x0, 0x0, 0x4050}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.134' (ED25519) to the list of known hosts. [ 328.198872][ T5668] cgroup: Unknown subsys name 'net' [ 328.288388][ T5668] cgroup: Unknown subsys name 'cpuset' [ 328.297834][ T5668] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 329.930565][ T5668] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 332.353805][ T5680] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 332.359606][ T5680] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 332.361479][ T5680] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 332.365396][ T5680] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 332.367278][ T5680] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 332.413771][ T56] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 332.447150][ T4956] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 332.447518][ T4956] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 332.449201][ T4956] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 332.450113][ T4956] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 332.452319][ T4956] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 332.479175][ T5694] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 332.480292][ T5697] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 332.486388][ T5697] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 332.489080][ T5697] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 332.490774][ T5697] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 332.491463][ T5697] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 332.499533][ T5680] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 332.514041][ T56] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 332.521601][ T56] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 333.469135][ T5678] rdma_rxe: Failed to create IPv4 UDP tunnel [ 333.487083][ T5683] rxe_eth0 speed is unknown, defaulting to 1000 [ 333.501098][ T5683] rxe_eth0 speed is unknown, defaulting to 1000 [ 333.512899][ T5683] rxe_eth0 speed is unknown, defaulting to 1000 [ 333.569844][ T5685] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 333.572744][ T5682] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 333.867574][ T5683] infiniband rxe0: set active [ 333.868283][ T5683] infiniband rxe0: added rxe_eth0 [ 333.891709][ T5679] rxe_eth0 speed is unknown, defaulting to 1000 [ 333.897516][ T5683] smbdirect: ib_dev[rxe0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 333.897640][ T5683] smbdirect: ib_dev[rxe0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 333.897753][ T5683] smbdirect: ib_dev[rxe0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 333.975194][ T5683] RDS/IB: rxe0: added [ 333.975556][ T5683] smc: adding ib device rxe0 with port count 1 [ 333.975715][ T5683] smc: ib device rxe0 port 1 has no pnetid [ 334.014733][ T5679] rxe_eth0 speed is unknown, defaulting to 1000 [ 334.035178][ T5683] rxe_eth0 speed is unknown, defaulting to 1000 [ 334.386138][ T5683] rxe_eth0 speed is unknown, defaulting to 1000 [ 334.398707][ T5697] Bluetooth: hci0: command tx timeout [ 334.492556][ T5678] bridge0: port 1(bridge_slave_0) entered blocking state [ 334.493374][ T5678] bridge0: port 1(bridge_slave_0) entered disabled state [ 334.493599][ T5678] bridge_slave_0: entered allmulticast mode [ 334.517372][ T5678] bridge_slave_0: entered promiscuous mode [ 334.554615][ T5697] Bluetooth: hci1: command tx timeout [ 334.581035][ T5678] bridge0: port 2(bridge_slave_1) entered blocking state [ 334.581151][ T5678] bridge0: port 2(bridge_slave_1) entered disabled state [ 334.581282][ T5678] bridge_slave_1: entered allmulticast mode [ 334.583485][ T5678] bridge_slave_1: entered promiscuous mode [ 334.635097][ T5697] Bluetooth: hci2: command tx timeout [ 334.635593][ T5690] Bluetooth: hci3: command tx timeout [ 334.727730][ T5683] rxe_eth0 speed is unknown, defaulting to 1000 [ 334.753015][ T5678] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 334.769872][ T5682] bridge0: port 1(bridge_slave_0) entered blocking state [ 334.770263][ T5682] bridge0: port 1(bridge_slave_0) entered disabled state [ 334.770683][ T5682] bridge_slave_0: entered allmulticast mode [ 334.772566][ T5682] bridge_slave_0: entered promiscuous mode [ 334.805581][ T5678] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 334.825225][ T5682] bridge0: port 2(bridge_slave_1) entered blocking state [ 334.825612][ T5682] bridge0: port 2(bridge_slave_1) entered disabled state [ 334.826032][ T5682] bridge_slave_1: entered allmulticast mode [ 334.827942][ T5682] bridge_slave_1: entered promiscuous mode [ 334.910873][ T5685] bridge0: port 1(bridge_slave_0) entered blocking state [ 334.911062][ T5685] bridge0: port 1(bridge_slave_0) entered disabled state [ 334.911480][ T5685] bridge_slave_0: entered allmulticast mode [ 334.913969][ T5685] bridge_slave_0: entered promiscuous mode [ 334.953625][ T5678] team0: Port device team_slave_0 added [ 334.953855][ T5685] bridge0: port 2(bridge_slave_1) entered blocking state [ 334.954053][ T5685] bridge0: port 2(bridge_slave_1) entered disabled state [ 334.954185][ T5685] bridge_slave_1: entered allmulticast mode [ 334.962045][ T5685] bridge_slave_1: entered promiscuous mode [ 334.973467][ T5682] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 334.990462][ T5678] team0: Port device team_slave_1 added [ 335.035979][ T5682] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 335.063070][ T5685] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 335.108989][ T5685] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 335.133070][ T5678] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 335.133087][ T5678] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 335.133123][ T5678] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 335.183918][ T5682] team0: Port device team_slave_0 added [ 335.208938][ T5678] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 335.208957][ T5678] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 335.208985][ T5678] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 335.211416][ T5685] team0: Port device team_slave_0 added [ 335.213286][ T5682] team0: Port device team_slave_1 added [ 335.250304][ T5685] team0: Port device team_slave_1 added [ 335.300378][ T5683] rxe_eth0 speed is unknown, defaulting to 1000 [ 335.355667][ T5685] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 335.355686][ T5685] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 335.355714][ T5685] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 335.388266][ T5682] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 335.388318][ T5682] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 335.388392][ T5682] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 335.441205][ T5678] hsr_slave_0: entered promiscuous mode [ 335.449585][ T5678] hsr_slave_1: entered promiscuous mode [ 335.458160][ T5685] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 335.458202][ T5685] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 335.458269][ T5685] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 335.472735][ T5682] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 335.472776][ T5682] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 335.472856][ T5682] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 335.644726][ T5685] hsr_slave_0: entered promiscuous mode [ 335.645793][ T5685] hsr_slave_1: entered promiscuous mode [ 335.646605][ T5685] debugfs: 'hsr0' already exists in 'hsr' [ 335.646640][ T5685] Cannot create hsr debugfs directory [ 335.720695][ T5682] hsr_slave_0: entered promiscuous mode [ 335.721498][ T5682] hsr_slave_1: entered promiscuous mode [ 335.722025][ T5682] debugfs: 'hsr0' already exists in 'hsr' [ 335.722041][ T5682] Cannot create hsr debugfs directory [ 336.148385][ T5678] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 336.166570][ T5678] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 336.170525][ T5678] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 336.193857][ T5678] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 336.204265][ T5678] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 336.220275][ T5678] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 336.244253][ T5678] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 336.255949][ T5678] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 336.367770][ T5685] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 336.371703][ T5685] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 336.398258][ T5685] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 336.402345][ T5685] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 336.435973][ T5685] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 336.439078][ T5685] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 336.440037][ T5685] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 336.443532][ T5685] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 336.474738][ T5697] Bluetooth: hci0: command tx timeout [ 336.509608][ T5683] bridge0: port 1(bridge_slave_0) entered blocking state [ 336.509723][ T5683] bridge0: port 1(bridge_slave_0) entered disabled state [ 336.509847][ T5683] bridge_slave_0: entered allmulticast mode [ 336.512211][ T5683] bridge_slave_0: entered promiscuous mode [ 336.530493][ T5683] bridge0: port 2(bridge_slave_1) entered blocking state [ 336.530967][ T5683] bridge0: port 2(bridge_slave_1) entered disabled state [ 336.534163][ T5683] bridge_slave_1: entered allmulticast mode [ 336.540288][ T5683] bridge_slave_1: entered promiscuous mode [ 336.621219][ T5683] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 336.642056][ T5683] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 336.654332][ T5697] Bluetooth: hci1: command tx timeout [ 336.665260][ T5682] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 336.669157][ T5682] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 336.699157][ T5683] team0: Port device team_slave_0 added [ 336.700073][ T5682] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 336.703439][ T5682] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 336.717592][ T5697] Bluetooth: hci2: command tx timeout [ 336.717605][ T5690] Bluetooth: hci3: command tx timeout [ 336.720578][ T5683] team0: Port device team_slave_1 added [ 336.720826][ T5682] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 336.749857][ T5682] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 336.750988][ T5682] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 336.754204][ T5682] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 336.803901][ T5683] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 336.803920][ T5683] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 336.803948][ T5683] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 336.857799][ T5683] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 336.857817][ T5683] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 336.857844][ T5683] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 336.923600][ T5678] 8021q: adding VLAN 0 to HW filter on device bond0 [ 336.969484][ T5683] hsr_slave_0: entered promiscuous mode [ 336.970239][ T5683] hsr_slave_1: entered promiscuous mode [ 336.970976][ T5683] debugfs: 'hsr0' already exists in 'hsr' [ 336.970992][ T5683] Cannot create hsr debugfs directory [ 337.100186][ T5678] 8021q: adding VLAN 0 to HW filter on device team0 [ 337.153558][ T1456] bridge0: port 1(bridge_slave_0) entered blocking state [ 337.153690][ T1456] bridge0: port 1(bridge_slave_0) entered forwarding state [ 337.201838][ T1456] bridge0: port 2(bridge_slave_1) entered blocking state [ 337.201930][ T1456] bridge0: port 2(bridge_slave_1) entered forwarding state [ 337.236163][ T5685] 8021q: adding VLAN 0 to HW filter on device bond0 [ 337.299287][ T5682] 8021q: adding VLAN 0 to HW filter on device bond0 [ 337.318616][ T5685] 8021q: adding VLAN 0 to HW filter on device team0 [ 337.340048][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 337.340123][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 337.378269][ T5683] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 337.381714][ T5683] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 337.383438][ T5683] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 337.393084][ T5683] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 337.399609][ T5683] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 337.422763][ T5683] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 337.430554][ T5682] 8021q: adding VLAN 0 to HW filter on device team0 [ 337.443068][ T5683] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 337.453592][ T5683] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 337.462433][ T5702] bridge0: port 2(bridge_slave_1) entered blocking state [ 337.462534][ T5702] bridge0: port 2(bridge_slave_1) entered forwarding state [ 337.511681][ T5702] bridge0: port 1(bridge_slave_0) entered blocking state [ 337.511790][ T5702] bridge0: port 1(bridge_slave_0) entered forwarding state [ 337.562129][ T5702] bridge0: port 2(bridge_slave_1) entered blocking state [ 337.562241][ T5702] bridge0: port 2(bridge_slave_1) entered forwarding state [ 337.852927][ T5683] 8021q: adding VLAN 0 to HW filter on device bond0 [ 337.917827][ T5683] 8021q: adding VLAN 0 to HW filter on device team0 [ 337.945867][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 337.945978][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 337.984421][ T5706] bridge0: port 2(bridge_slave_1) entered blocking state [ 337.984601][ T5706] bridge0: port 2(bridge_slave_1) entered forwarding state [ 338.373535][ T5678] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 338.504055][ T5678] veth0_vlan: entered promiscuous mode [ 338.539721][ T5678] veth1_vlan: entered promiscuous mode [ 338.555718][ T5690] Bluetooth: hci0: command tx timeout [ 338.662115][ T5678] veth0_macvtap: entered promiscuous mode [ 338.681083][ T5678] veth1_macvtap: entered promiscuous mode [ 338.715062][ T5690] Bluetooth: hci1: command tx timeout [ 338.734153][ T5678] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 338.768088][ T5678] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 338.797700][ T5690] Bluetooth: hci2: command tx timeout [ 338.797737][ T5690] Bluetooth: hci3: command tx timeout [ 338.895274][ T34] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.964442][ T5685] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 338.985515][ T5711] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.985567][ T5711] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.040945][ T5682] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 339.076612][ T5822] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.110954][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 339.110987][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 339.233225][ T5822] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 339.233247][ T5822] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 339.256576][ T5685] veth0_vlan: entered promiscuous mode [ 339.292974][ T5683] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 339.293740][ T5685] veth1_vlan: entered promiscuous mode [ 339.334120][ T5682] veth0_vlan: entered promiscuous mode [ 339.344054][ T5678] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 339.404299][ T5682] veth1_vlan: entered promiscuous mode [ 339.480859][ T5685] veth0_macvtap: entered promiscuous mode [ 339.510161][ T5685] veth1_macvtap: entered promiscuous mode [ 339.579296][ T5685] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 339.596603][ T5683] veth0_vlan: entered promiscuous mode [ 339.618552][ T5685] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 339.637658][ T5682] veth0_macvtap: entered promiscuous mode [ 339.673360][ T5683] veth1_vlan: entered promiscuous mode [ 339.684912][ T5711] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.684961][ T5711] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.685001][ T5711] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.685039][ T5711] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.689956][ T5682] veth1_macvtap: entered promiscuous mode [ 339.825232][ T5682] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 339.860662][ T5682] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 339.933023][ T5683] veth0_macvtap: entered promiscuous mode [ 339.949638][ T1456] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 339.949660][ T1456] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 339.980614][ T5683] veth1_macvtap: entered promiscuous mode [ 340.015041][ T1456] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.015090][ T1456] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.065079][ T34] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.065132][ T34] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.065248][ T5711] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 340.065265][ T5711] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 340.140282][ T5683] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 340.180637][ T5683] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 340.186200][ T5850] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6'. [ 340.186883][ T5850] unsupported nlmsg_type 40 [ 340.236311][ T5850] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6'. [ 340.257277][ T5711] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.257646][ T5711] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.257691][ T5711] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 340.257706][ T5711] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 340.258282][ T1456] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.345048][ T5711] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.392882][ T5853] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 340.444897][ T14] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 340.444919][ T14] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 340.590969][ T14] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 340.590992][ T14] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 340.635067][ T5697] Bluetooth: hci0: command tx timeout [ 340.708457][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 340.708480][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 340.794967][ T5697] Bluetooth: hci1: command tx timeout [ 340.827360][ T5869] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8'. [ 340.874654][ T5697] Bluetooth: hci3: command tx timeout [ 340.876501][ T5697] Bluetooth: hci2: command tx timeout [ 340.950993][ T5873] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9'. [ 340.971703][ T5873] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9'. [ 341.117576][ T5880] MTD: Couldn't look up './file0': -15 [ 341.175084][ T5836] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 341.327425][ T5836] usb 1-1: New USB device found: idVendor=091e, idProduct=0003, bcdDevice=0.01 [ 341.330625][ T5836] usb 1-1: config 1 has an invalid descriptor of length 130, skipping remainder of the config [ 341.330739][ T5836] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 192, changing to 11 [ 341.330769][ T5836] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1344, setting to 1024 [ 341.330852][ T5836] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 341.332463][ T5836] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 341.332487][ T5836] usb 1-1: Product: syz [ 341.332502][ T5836] usb 1-1: Manufacturer: syz [ 341.419916][ T5871] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 341.432604][ T5836] garmin_gps 1-1:1.0: Garmin GPS usb/tty converter detected [ 341.452167][ T5836] garmin_gps ttyUSB0: garmin_write_bulk - usb_submit_urb(write bulk) failed with status = -8 [ 341.452695][ T5836] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -8 [ 341.489896][ T5886] netlink: 36 bytes leftover after parsing attributes in process `syz.3.14'. [ 341.615401][ T5763] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 341.722883][ T33] audit: type=1400 audit(1793974599.416:2): apparmor="STATUS" info="failed to unpack profile flags" error=-71 profile="unconfined" name="/" pid=5866 comm="syz.0.1" name="/" offset=48 [ 341.769161][ T5763] usb 2-1: not running at top speed; connect to a high speed hub [ 341.769200][ T5763] usb 2-1: New USB device found: idVendor=0000, idProduct=d970, bcdDevice=1.00 [ 341.770602][ T5763] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 341.770626][ T5763] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 6 [ 341.770683][ T5763] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.831819][ T5890] capability: warning: `syz.3.15' uses deprecated v2 capabilities in a way that may be insecure [ 341.833839][ T27] usb 1-1: USB disconnect, device number 2 [ 341.875222][ T27] garmin_gps 1-1:1.0: device disconnected [ 341.958165][ T5892] input: syz1 as /devices/virtual/input/input5 [ 342.010288][ T5763] usb 2-1: string descriptor 0 read error: -71 [ 342.010627][ T5763] uvcvideo 2-1:1.0: Found UVC 1.00 device (0000:d970) [ 342.010796][ T5763] uvcvideo 2-1:1.0: No streaming interface found for terminal 32770. [ 342.010816][ T5763] uvcvideo 2-1:1.0: No streaming interface found for terminal 1. [ 342.040699][ T5893] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 342.040783][ T5893] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 342.046330][ T5763] usb 2-1: USB disconnect, device number 2 [ 342.051171][ T5893] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 342.051193][ T5893] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 342.196004][ T33] audit: type=1400 audit(1793974599.896:3): apparmor="STATUS" info="failed to unpack profile capabilities" error=-71 profile="unconfined" name="f/o" pid=5891 comm="syz.3.16" name="f/o" offset=66 [ 342.198817][ T5896] 9p: Bad value for 'rfdno' [ 342.283822][ T5899] FAULT_INJECTION: forcing a failure. [ 342.283822][ T5899] name failslab, interval 1, probability 0, space 0, times 1 [ 342.283876][ T5899] CPU: 1 UID: 0 PID: 5899 Comm: syz.2.18 Not tainted syzkaller #0 PREEMPT(full) [ 342.283901][ T5899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 342.283925][ T5899] Call Trace: [ 342.283934][ T5899] [ 342.283943][ T5899] dump_stack_lvl+0xe8/0x150 [ 342.283991][ T5899] should_fail_ex+0x3eb/0x540 [ 342.284026][ T5899] should_failslab+0xa8/0x100 [ 342.284064][ T5899] __kmalloc_node_track_caller_noprof+0xf6/0x720 [ 342.284095][ T5899] ? rcu_is_watching+0x16/0xb0 [ 342.284128][ T5899] ? _RNvMs3_NtCswPamI0U300_11rust_binder6threadNtB5_11ThreadError7try_new+0x4c/0x3f0 [ 342.284161][ T5899] ? _RNvMs3_NtCswPamI0U300_11rust_binder6threadNtB5_11ThreadError7try_new+0x4c/0x3f0 [ 342.284197][ T5899] ? _RNvMs3_NtCswPamI0U300_11rust_binder6threadNtB5_11ThreadError7try_new+0x4c/0x3f0 [ 342.284231][ T5899] krealloc_node_align_noprof+0x19a/0x390 [ 342.284271][ T5899] _RNvMs3_NtCswPamI0U300_11rust_binder6threadNtB5_11ThreadError7try_new+0x4c/0x3f0 [ 342.284308][ T5899] _RNvMs4_NtCswPamI0U300_11rust_binder7processNtB5_7Process18get_current_thread+0x5e5/0x13f0 [ 342.284358][ T5899] ? kernel_text_address+0xa5/0xe0 [ 342.284379][ T5899] ? __kernel_text_address+0xd/0x30 [ 342.284398][ T5899] ? __pfx__RNvMs4_NtCswPamI0U300_11rust_binder7processNtB5_7Process18get_current_thread+0x10/0x10 [ 342.284424][ T5899] ? arch_stack_walk+0xfb/0x150 [ 342.284455][ T5899] _RNvCswPamI0U300_11rust_binder17rust_binder_ioctl+0x36b/0x3ec0 [ 342.284486][ T5899] ? stack_depot_save_flags+0x33/0x840 [ 342.284535][ T5899] ? __lock_acquire+0x747/0x2de0 [ 342.284565][ T5899] ? kasan_save_track+0x51/0x90 [ 342.284594][ T5899] ? kasan_save_track+0x3f/0x90 [ 342.284622][ T5899] ? kasan_save_free_info+0x40/0x50 [ 342.284655][ T5899] ? __kasan_slab_free+0x70/0x90 [ 342.284688][ T5899] ? kfree+0x1c7/0x650 [ 342.284710][ T5899] ? tomoyo_path_number_perm+0x4ba/0x5f0 [ 342.284748][ T5899] ? security_file_ioctl+0xc3/0x2a0 [ 342.284773][ T5899] ? __pfx__RNvCswPamI0U300_11rust_binder17rust_binder_ioctl+0x10/0x10 [ 342.284830][ T5899] ? kasan_quarantine_put+0xbb/0x1f0 [ 342.284858][ T5899] ? tomoyo_path_number_perm+0x219/0x5f0 [ 342.284886][ T5899] ? tomoyo_path_number_perm+0x219/0x5f0 [ 342.284914][ T5899] ? do_vfs_ioctl+0x116f/0x1530 [ 342.284942][ T5899] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 342.284977][ T5899] ? do_futex+0x3e7/0x4e0 [ 342.285015][ T5899] ? __fget_files+0x2a/0x420 [ 342.285038][ T5899] ? __fget_files+0x2a/0x420 [ 342.285059][ T5899] ? __fget_files+0x2a/0x420 [ 342.285082][ T5899] ? bpf_lsm_file_ioctl+0x9/0x20 [ 342.285106][ T5899] ? __pfx__RNvCswPamI0U300_11rust_binder17rust_binder_ioctl+0x10/0x10 [ 342.285132][ T5899] __se_sys_ioctl+0xfc/0x170 [ 342.285162][ T5899] do_syscall_64+0x16a/0x530 [ 342.285176][ T5899] ? trace_irq_disable+0x3b/0x140 [ 342.285196][ T5899] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.285213][ T5899] ? clear_bhb_loop+0x70/0xc0 [ 342.285233][ T5899] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.285249][ T5899] RIP: 0033:0x00007f40e179fb19 [ 342.285272][ T5899] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 342.285285][ T5899] RSP: 002b:00007f40e25b5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 342.285306][ T5899] RAX: ffffffffffffffda RBX: 00007f40e1a25fa0 RCX: 00007f40e179fb19 [ 342.285318][ T5899] RDX: 0000000000000000 RSI: 00000000c0306201 RDI: 0000000000000005 [ 342.285328][ T5899] RBP: 00007f40e1837b70 R08: 0000000000000000 R09: 0000000000000000 [ 342.285338][ T5899] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 342.285347][ T5899] R13: 00007f40e1a26038 R14: 00007f40e1a25fa0 R15: 00007ffd007cfaa8 [ 342.285371][ T5899] [ 342.594076][ T5899] capability: warning: `syz.2.18' uses 32-bit capabilities (legacy support in use) [ 342.599249][ T5899] program syz.2.18 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 342.794145][ T5903] ======================================================= [ 342.794145][ T5903] WARNING: The mand mount option has been deprecated and [ 342.794145][ T5903] and is ignored by this kernel. Remove the mand [ 342.794145][ T5903] option from the mount to silence this warning. [ 342.794145][ T5903] ======================================================= [ 342.794463][ T5903] tmpfs: Cannot change global quota limit on remount [ 343.297844][ T5925] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 343.359716][ T5931] input input6: cannot allocate more than FF_MAX_EFFECTS effects [ 343.444778][ T54] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 343.595019][ T54] usb 3-1: Using ep0 maxpacket: 32 [ 343.595156][ T27] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 343.596062][ T54] usb 3-1: New USB device found: idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 343.597532][ T54] usb 3-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 343.597581][ T54] usb 3-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 343.597608][ T54] usb 3-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 343.597720][ T54] usb 3-1: config 155 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 343.597740][ T54] usb 3-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 343.599918][ T54] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.599943][ T54] usb 3-1: Product: syz [ 343.599958][ T54] usb 3-1: Manufacturer: syz [ 343.599973][ T54] usb 3-1: SerialNumber: syz [ 343.633108][ T54] imon:imon_init_intf0: usb_submit_urb failed for intf0 (-90) [ 343.634350][ T54] imon 3-1:155.0: unable to initialize intf0, err -90 [ 343.744720][ T27] usb 1-1: Using ep0 maxpacket: 32 [ 343.746850][ T27] usb 1-1: New USB device found: idVendor=046d, idProduct=c31c, bcdDevice=0.40 [ 343.748190][ T27] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 343.748222][ T27] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 343.748261][ T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.754123][ T27] usb 1-1: config 0 descriptor?? [ 343.824316][ T27] hub 1-1:0.0: USB hub found [ 343.883335][ T5773] usb 3-1: USB disconnect, device number 2 [ 343.968464][ T5939] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 343.968491][ T5939] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 343.969616][ T5939] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 343.969631][ T5939] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 344.195885][ T54] rxe_eth0 speed is unknown, defaulting to 1000 [ 344.416140][ T5763] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 344.514836][ T5773] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 344.576292][ T5763] usb 2-1: Using ep0 maxpacket: 32 [ 344.577084][ T5763] usb 2-1: New USB device found: idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 344.581121][ T5763] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 344.581148][ T5763] usb 2-1: config 0 has no interface number 0 [ 344.581194][ T5763] usb 2-1: config 0 interface 184 has no altsetting 0 [ 344.583767][ T5763] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.583793][ T5763] usb 2-1: Product: syz [ 344.583809][ T5763] usb 2-1: Manufacturer: syz [ 344.583824][ T5763] usb 2-1: SerialNumber: syz [ 344.655420][ T5763] usb 2-1: config 0 descriptor?? [ 344.737109][ T5773] usb 4-1: New USB device found: idVendor=2b73, idProduct=0023, bcdDevice=0.40 [ 344.739895][ T5773] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 344.739920][ T5773] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 344.740014][ T5773] usb 4-1: config 1 interface 1 altsetting 1 has an invalid endpoint descriptor of length 4, skipping [ 344.740033][ T5773] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 344.740051][ T5773] usb 4-1: config 1 interface 1 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 344.744194][ T5773] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.744219][ T5773] usb 4-1: Product: syz [ 344.744234][ T5773] usb 4-1: Manufacturer: syz [ 344.744275][ T5773] usb 4-1: SerialNumber: syz [ 344.805000][ T54] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 344.968396][ T54] usb 3-1: not running at top speed; connect to a high speed hub [ 344.968435][ T54] usb 3-1: New USB device found: idVendor=0499, idProduct=1012, bcdDevice=2d.d1 [ 344.970104][ T54] usb 3-1: config 9 has an invalid interface number: 194 but max is 2 [ 344.970133][ T54] usb 3-1: config 9 has an invalid descriptor of length 1, skipping remainder of the config [ 344.970153][ T54] usb 3-1: config 9 has 1 interface, different from the descriptor's value: 3 [ 344.970202][ T54] usb 3-1: config 9 has no interface number 0 [ 344.970245][ T54] usb 3-1: config 9 interface 194 altsetting 0 endpoint 0x8 has an invalid bInterval 0, changing to 10 [ 344.970273][ T54] usb 3-1: config 9 interface 194 altsetting 0 endpoint 0x8 has invalid maxpacket 1024, setting to 64 [ 344.970302][ T54] usb 3-1: config 9 interface 194 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 344.974241][ T54] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.974265][ T54] usb 3-1: Product: 챭젳婓ꃥ⟆蠛譣蝤㝤ぉ⨁뚪吐䭴ﴃ뉫棈嘭祀劮匃㛧耒洚苷ᦝ陪ꩯḸ躁ឧᇻ㲓걨ﴣﳧ唣棇亦擖ൻᴡ癄㸭े螰㮿染魯통꬜蔇쌗⺌篩兮쀖챭禙촂廂ࣵ쿎 [ 344.974291][ T54] usb 3-1: Manufacturer: Б [ 344.974334][ T54] usb 3-1: SerialNumber: syz [ 345.106457][ T5958] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 345.140249][ T5773] usb 4-1: 1:1 : invalid UAC_AS_GENERAL desc [ 345.141218][ T5773] usb 4-1: 0:2 : does not exist [ 345.221403][ T5773] usb 4-1: USB disconnect, device number 3 [ 345.299159][ T5698] udevd[5698]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 345.323287][ T5763] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 345.323318][ T5763] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 345.360396][ T5965] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 345.362859][ T5965] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 345.390016][ T54] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 345.393769][ T54] usb 3-1: invalid MIDI in EP 0 [ 345.528037][ T5763] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -61 [ 345.528071][ T5763] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -61 [ 345.528093][ T5763] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 345.528578][ T5763] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -61 [ 345.615006][ T54] snd-usb-audio 3-1:9.194: probe with driver snd-usb-audio failed with error -22 [ 345.620772][ T54] usb 3-1: USB disconnect, device number 3 [ 345.689313][ T5704] udevd[5704]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:9.194/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 345.878740][ T5972] netlink: 'syz.3.35': attribute type 10 has an invalid length. [ 345.878768][ T5972] netlink: 55 bytes leftover after parsing attributes in process `syz.3.35'. [ 345.881092][ T5972] hsr_slave_0: left promiscuous mode [ 345.882568][ T5972] hsr_slave_1: left promiscuous mode [ 346.396341][ T27] hub 1-1:0.0: config failed, can't read hub descriptor (err -22) [ 346.404126][ T27] usbhid 1-1:0.0: can't add hid device: -71 [ 346.404233][ T27] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 346.445820][ T27] usb 1-1: USB disconnect, device number 3 [ 346.624832][ T54] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 346.777413][ T54] usb 3-1: New USB device found: idVendor=15f4, idProduct=0015, bcdDevice=d1.6e [ 346.778538][ T54] usb 3-1: config 54 has an invalid descriptor of length 0, skipping remainder of the config [ 346.780658][ T54] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.780683][ T54] usb 3-1: Product: syz [ 346.780697][ T54] usb 3-1: Manufacturer: syz [ 346.780721][ T54] usb 3-1: SerialNumber: syz [ 346.831136][ T54] dvb-usb: found a 'Hanftek UMT-010 DVB-T USB2.0' in warm state. [ 346.831545][ T54] dvb-usb: bulk message failed: -22 (3/0) [ 346.856460][ T54] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 346.862773][ T54] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 error while loading driver (-19) [ 346.862836][ T54] dvb_usb_umt_010 3-1:54.0: probe with driver dvb_usb_umt_010 failed with error -22 [ 347.022482][ T5988] netlink: 'syz.2.40': attribute type 83 has an invalid length. [ 347.034625][ T996] usb 3-1: USB disconnect, device number 4 [ 347.185968][ T5763] usb 2-1: USB disconnect, device number 3 [ 347.344674][ T5773] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 347.495191][ T5773] usb 4-1: New USB device found: idVendor=04d8, idProduct=0082, bcdDevice=1.00 [ 347.496568][ T5773] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 347.496600][ T5773] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 1024 [ 347.496619][ T5773] usb 4-1: config 1 interface 1 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 347.496636][ T5773] usb 4-1: config 1 interface 1 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 255 [ 347.496670][ T5773] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 347.502188][ T6014] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 347.557363][ T5763] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 347.713904][ T6014] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 347.722706][ T6014] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 347.731398][ T5763] usb 2-1: Using ep0 maxpacket: 32 [ 347.739244][ T5763] usb 2-1: New USB device found: idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 347.751418][ T5763] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 347.751448][ T5763] usb 2-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 347.751615][ T5763] usb 2-1: config 0 interface 0 has no altsetting 0 [ 347.784442][ T5763] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.784474][ T5763] usb 2-1: Product: syz [ 347.793907][ T5763] usb 2-1: Manufacturer: syz [ 347.793927][ T5763] usb 2-1: SerialNumber: syz [ 347.823577][ T5763] usb 2-1: config 0 descriptor?? [ 347.853992][ T6014] netlink: 'syz.3.48': attribute type 15 has an invalid length. [ 347.854014][ T6014] netlink: 666 bytes leftover after parsing attributes in process `syz.3.48'. [ 347.874749][ T996] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 348.025061][ T996] usb 3-1: Using ep0 maxpacket: 32 [ 348.027268][ T996] usb 3-1: New USB device found: idVendor=1b1c, idProduct=0c10, bcdDevice=0.00 [ 348.028795][ T996] usb 3-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 348.028910][ T996] usb 3-1: config 0 interface 0 has no altsetting 0 [ 348.028935][ T996] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 348.076965][ T996] usb 3-1: config 0 descriptor?? [ 348.176259][ T5773] ims_pcu 4-1:1.0: Failed to set line state, error: -71 [ 348.177863][ T5773] ims_pcu 4-1:1.0: probe with driver ims_pcu failed with error -71 [ 348.203170][ T5773] usb 4-1: USB disconnect, device number 4 [ 348.292674][ T996] usbhid 3-1:0.0: can't add hid device: -71 [ 348.292814][ T996] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 348.322061][ T996] usb 3-1: USB disconnect, device number 5 [ 348.333035][ T5763] gs_usb 2-1:0.0: Configuring for 34 interfaces [ 348.738591][ T6016] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 348.739798][ T6016] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 348.743549][ T6016] netlink: 'syz.1.49': attribute type 2 has an invalid length. [ 348.772086][ T5763] gs_usb 2-1:0.0: Disabling termination support for channel 0 (-EPROTO) [ 348.807310][ T5763] gs_usb 2-1:0.0: Couldn't get bit timing const for channel 1 (-EPROTO) [ 348.878170][ T5763] gs_usb 2-1:0.0: probe with driver gs_usb failed with error -71 [ 348.884232][ T6025] netlink: 'syz.2.53': attribute type 33 has an invalid length. [ 348.884251][ T6025] netlink: 152 bytes leftover after parsing attributes in process `syz.2.53'. [ 348.917412][ T5763] usb 2-1: USB disconnect, device number 4 [ 348.919568][ T6025] FAULT_INJECTION: forcing a failure. [ 348.919568][ T6025] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 348.919626][ T6025] CPU: 1 UID: 0 PID: 6025 Comm: syz.2.53 Tainted: G L syzkaller #0 PREEMPT(full) [ 348.919658][ T6025] Tainted: [L]=SOFTLOCKUP [ 348.919665][ T6025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 348.919678][ T6025] Call Trace: [ 348.919687][ T6025] [ 348.919696][ T6025] dump_stack_lvl+0xe8/0x150 [ 348.919736][ T6025] should_fail_ex+0x3eb/0x540 [ 348.919771][ T6025] _copy_from_user+0x2d/0xb0 [ 348.919802][ T6025] mtdchar_ioctl+0x742/0x1bc0 [ 348.919838][ T6025] ? __pfx_mtdchar_ioctl+0x10/0x10 [ 348.919878][ T6025] ? __lock_acquire+0x747/0x2de0 [ 348.919923][ T6025] ? tomoyo_path_number_perm+0x219/0x5f0 [ 348.919968][ T6025] ? __mutex_trylock_common+0x15f/0x270 [ 348.920005][ T6025] ? __pfx___mutex_trylock_common+0x10/0x10 [ 348.920041][ T6025] ? rcu_is_watching+0x16/0xb0 [ 348.920073][ T6025] ? trace_contention_end+0x3d/0x140 [ 348.920107][ T6025] ? __mutex_lock+0x305/0x15a0 [ 348.920130][ T6025] ? do_futex+0x3e7/0x4e0 [ 348.920163][ T6025] ? __asan_memcpy+0x40/0x70 [ 348.920199][ T6025] ? mtdchar_unlocked_ioctl+0xa1/0xd0 [ 348.920228][ T6025] ? __pfx___mutex_lock+0x10/0x10 [ 348.920261][ T6025] ? __fget_files+0x2a/0x420 [ 348.920290][ T6025] ? __fget_files+0x2a/0x420 [ 348.920324][ T6025] mtdchar_unlocked_ioctl+0xae/0xd0 [ 348.920352][ T6025] ? __pfx_mtdchar_unlocked_ioctl+0x10/0x10 [ 348.920380][ T6025] __se_sys_ioctl+0xfc/0x170 [ 348.920419][ T6025] do_syscall_64+0x16a/0x530 [ 348.920439][ T6025] ? trace_irq_disable+0x3b/0x140 [ 348.920467][ T6025] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.920500][ T6025] ? clear_bhb_loop+0x70/0xc0 [ 348.920529][ T6025] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.920556][ T6025] RIP: 0033:0x00007f40e179fb19 [ 348.920578][ T6025] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 348.920597][ T6025] RSP: 002b:00007f40e25b5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 348.920621][ T6025] RAX: ffffffffffffffda RBX: 00007f40e1a25fa0 RCX: 00007f40e179fb19 [ 348.920638][ T6025] RDX: 0000200000001500 RSI: 0000000000001269 RDI: 0000000000000007 [ 348.920654][ T6025] RBP: 00007f40e1837b70 R08: 0000000000000000 R09: 0000000000000000 [ 348.920668][ T6025] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 348.920681][ T6025] R13: 00007f40e1a26038 R14: 00007f40e1a25fa0 R15: 00007ffd007cfaa8 [ 348.920717][ T6025] [ 349.195158][ T54] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 349.356704][ T54] usb 4-1: Using ep0 maxpacket: 32 [ 349.357275][ T54] usb 4-1: New USB device found: idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 349.358550][ T54] usb 4-1: config 0 has an invalid interface number: 85 but max is 0 [ 349.358575][ T54] usb 4-1: config 0 has no interface number 0 [ 349.358617][ T54] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 349.358644][ T54] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 349.358672][ T54] usb 4-1: config 0 interface 85 has no altsetting 0 [ 349.363070][ T54] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.363095][ T54] usb 4-1: Product: syz [ 349.363111][ T54] usb 4-1: Manufacturer: syz [ 349.363127][ T54] usb 4-1: SerialNumber: syz [ 349.452453][ T54] usb 4-1: config 0 descriptor?? [ 349.604704][ T27] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 349.664290][ T6023] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 349.669649][ T6023] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 349.683581][ T6023] FAULT_INJECTION: forcing a failure. [ 349.683581][ T6023] name failslab, interval 1, probability 0, space 0, times 0 [ 349.683616][ T6023] CPU: 0 UID: 0 PID: 6023 Comm: syz.3.52 Tainted: G L syzkaller #0 PREEMPT(full) [ 349.683646][ T6023] Tainted: [L]=SOFTLOCKUP [ 349.683655][ T6023] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 349.683668][ T6023] Call Trace: [ 349.683677][ T6023] [ 349.683686][ T6023] dump_stack_lvl+0xe8/0x150 [ 349.683726][ T6023] should_fail_ex+0x3eb/0x540 [ 349.683761][ T6023] should_failslab+0xa8/0x100 [ 349.683800][ T6023] __kmalloc_cache_noprof+0x9e/0x600 [ 349.683831][ T6023] ? proc_thread_self_get_link+0xfc/0x190 [ 349.683855][ T6023] ? proc_thread_self_get_link+0xfc/0x190 [ 349.683881][ T6023] ? __task_pid_nr_ns+0x399/0x470 [ 349.683909][ T6023] proc_thread_self_get_link+0xfc/0x190 [ 349.683935][ T6023] ? __pfx_proc_thread_self_get_link+0x10/0x10 [ 349.683962][ T6023] pick_link+0x77d/0xfd0 [ 349.684004][ T6023] step_into_slowpath+0x58a/0x820 [ 349.684038][ T6023] ? __pfx_step_into_slowpath+0x10/0x10 [ 349.684072][ T6023] ? inode_permission+0x2b8/0x600 [ 349.684106][ T6023] link_path_walk+0xdcb/0x19c0 [ 349.684157][ T6023] path_lookupat+0xe4/0x8c0 [ 349.684203][ T6023] do_o_path+0x9f/0x210 [ 349.684250][ T6023] ? __pfx_do_o_path+0x10/0x10 [ 349.684290][ T6023] path_openat+0x196f/0x20f0 [ 349.684343][ T6023] do_file_open+0x23e/0x4a0 [ 349.684383][ T6023] ? __pfx_do_file_open+0x10/0x10 [ 349.684449][ T6023] ? _raw_spin_unlock+0x28/0x50 [ 349.684480][ T6023] ? alloc_fd+0x6af/0x760 [ 349.684521][ T6023] do_sys_openat2+0x115/0x200 [ 349.684548][ T6023] ? __se_sys_futex+0x3a8/0x450 [ 349.684583][ T6023] ? __pfx_do_sys_openat2+0x10/0x10 [ 349.684615][ T6023] ? rcu_is_watching+0x16/0xb0 [ 349.684675][ T6023] __x64_sys_openat+0x138/0x170 [ 349.684707][ T6023] do_syscall_64+0x16a/0x530 [ 349.684727][ T6023] ? trace_irq_disable+0x3b/0x140 [ 349.684756][ T6023] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.684780][ T6023] ? clear_bhb_loop+0x70/0xc0 [ 349.684808][ T6023] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.684831][ T6023] RIP: 0033:0x00007f0be7b9fb19 [ 349.684853][ T6023] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 349.684872][ T6023] RSP: 002b:00007f0be89f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 349.684897][ T6023] RAX: ffffffffffffffda RBX: 00007f0be7e25fa0 RCX: 00007f0be7b9fb19 [ 349.684914][ T6023] RDX: 00000000002c2482 RSI: 00002000000007c0 RDI: ffffffffffffff9c [ 349.684930][ T6023] RBP: 00007f0be7c37b70 R08: 0000000000000000 R09: 0000000000000000 [ 349.684944][ T6023] R10: 00000000000000c3 R11: 0000000000000246 R12: 0000000000000000 [ 349.684958][ T6023] R13: 00007f0be7e26038 R14: 00007f0be7e25fa0 R15: 00007ffd662df238 [ 349.684995][ T6023] [ 349.760669][ T27] usb 3-1: New USB device found: idVendor=0552, idProduct=5510, bcdDevice=0.00 [ 349.775193][ T5686] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 349.789663][ T27] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 349.789691][ T27] usb 3-1: Product: syz [ 349.789744][ T27] usb 3-1: Manufacturer: syz [ 349.944945][ T5686] usb 2-1: Using ep0 maxpacket: 32 [ 349.947578][ T5686] usb 2-1: New USB device found: idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 350.018138][ T6023] bpf: Bad value for 'uid' [ 350.029319][ T5686] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.029349][ T5686] usb 2-1: Product: syz [ 350.029391][ T5686] usb 2-1: Manufacturer: syz [ 350.029439][ T5686] usb 2-1: SerialNumber: syz [ 350.032429][ T54] appletouch 4-1:0.85: Geyser mode initialized. [ 350.056175][ T54] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.85/input/input9 [ 350.079255][ T5686] usb 2-1: config 0 descriptor?? [ 350.103415][ T5686] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 350.241803][ T5763] usb 4-1: USB disconnect, device number 5 [ 350.272528][ T5763] appletouch 4-1:0.85: input: appletouch disconnected [ 350.384624][ T54] usb 1-1: new low-speed USB device number 4 using dummy_hcd [ 350.408390][ T27] scsi host1: uas [ 350.514624][ T54] usb 1-1: device descriptor read/64, error -71 [ 350.595999][ C0] usb 3-1: stat urb: status -71 [ 350.596780][ T5763] usb 3-1: USB disconnect, device number 6 [ 350.607840][ T5763] scsi 1:0:0:0: tag#8 uas_zap_pending 0 uas-tag 1 inflight: CMD [ 350.608076][ T5763] scsi 1:0:0:0: tag#8 CDB: Inquiry 12 00 00 00 24 00 [ 350.694201][ T6033] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 350.700591][ T6033] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 350.764895][ T54] usb 1-1: new low-speed USB device number 5 using dummy_hcd [ 350.894714][ T54] usb 1-1: device descriptor read/64, error -71 [ 351.005201][ T54] usb usb1-port1: attempt power cycle [ 351.044627][ T27] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 351.196189][ T27] usb 4-1: New USB device found: idVendor=1e7d, idProduct=2cf6, bcdDevice=0.00 [ 351.197397][ T27] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 351.197458][ T27] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 351.197500][ T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.199837][ T27] usb 4-1: config 0 descriptor?? [ 351.344631][ T54] usb 1-1: new low-speed USB device number 6 using dummy_hcd [ 351.366733][ T54] usb 1-1: device descriptor read/8, error -71 [ 351.384625][ T4968] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 351.534604][ T4968] usb 3-1: Using ep0 maxpacket: 8 [ 351.536879][ T4968] usb 3-1: unable to get BOS descriptor or descriptor too short [ 351.536929][ T4968] usb 3-1: New USB device found: idVendor=046d, idProduct=08b7, bcdDevice=22.d5 [ 351.536993][ T4968] usb 3-1: too many configurations: 114, using maximum allowed: 8 [ 351.577617][ T4968] usb 3-1: New USB device strings: Mfr=11, Product=2, SerialNumber=3 [ 351.577656][ T4968] usb 3-1: Product: syz [ 351.577704][ T4968] usb 3-1: Manufacturer: syz [ 351.577721][ T4968] usb 3-1: SerialNumber: syz [ 351.580166][ T4968] usb 3-1: config 0 descriptor?? [ 351.619528][ T27] pyra 0003:1E7D:2CF6.0001: item fetching failed at offset 5/7 [ 351.620329][ T27] pyra 0003:1E7D:2CF6.0001: parse failed [ 351.620383][ T27] pyra 0003:1E7D:2CF6.0001: probe with driver pyra failed with error -22 [ 351.626940][ T54] usb 1-1: new low-speed USB device number 7 using dummy_hcd [ 351.648488][ T54] usb 1-1: device descriptor read/8, error -71 [ 351.755406][ T54] usb usb1-port1: unable to enumerate USB device [ 351.791311][ T6044] jffs2: notice: (6044) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 351.791461][ T6044] FAULT_INJECTION: forcing a failure. [ 351.791461][ T6044] name failslab, interval 1, probability 0, space 0, times 0 [ 351.791483][ T6044] CPU: 1 UID: 0 PID: 6044 Comm: syz.2.59 Tainted: G L syzkaller #0 PREEMPT(full) [ 351.791504][ T6044] Tainted: [L]=SOFTLOCKUP [ 351.791510][ T6044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 351.791520][ T6044] Call Trace: [ 351.791526][ T6044] [ 351.791532][ T6044] dump_stack_lvl+0xe8/0x150 [ 351.791562][ T6044] should_fail_ex+0x3eb/0x540 [ 351.791587][ T6044] ? __pfx_jffs2_alloc_inode+0x10/0x10 [ 351.791612][ T6044] should_failslab+0xa8/0x100 [ 351.791639][ T6044] ? __pfx_jffs2_alloc_inode+0x10/0x10 [ 351.791662][ T6044] kmem_cache_alloc_lru_noprof+0xa2/0x5f0 [ 351.791684][ T6044] ? jffs2_alloc_inode+0x28/0x40 [ 351.791707][ T6044] ? jffs2_alloc_inode+0x28/0x40 [ 351.791734][ T6044] ? __pfx_jffs2_alloc_inode+0x10/0x10 [ 351.791758][ T6044] jffs2_alloc_inode+0x28/0x40 [ 351.791782][ T6044] alloc_inode+0x6a/0x1b0 [ 351.791802][ T6044] iget_locked+0x12c/0x690 [ 351.791828][ T6044] jffs2_iget+0xac/0xcc0 [ 351.791849][ T6044] ? lockdep_hardirqs_on+0x7b/0x110 [ 351.791875][ T6044] ? irqentry_exit+0x2a0/0x9b0 [ 351.791900][ T6044] ? __pfx_jffs2_iget+0x10/0x10 [ 351.791932][ T6044] ? jffs2_do_fill_super+0x561/0xc60 [ 351.791959][ T6044] jffs2_do_fill_super+0x59d/0xc60 [ 351.791986][ T6044] ? __pfx_jffs2_fill_super+0x10/0x10 [ 351.792009][ T6044] mtd_get_sb+0x195/0x420 [ 351.792023][ T6044] ? __pfx_jffs2_fill_super+0x10/0x10 [ 351.792047][ T6044] ? __pfx_jffs2_fill_super+0x10/0x10 [ 351.792072][ T6044] get_tree_mtd+0x597/0x7d0 [ 351.792088][ T6044] ? __pfx_jffs2_fill_super+0x10/0x10 [ 351.792112][ T6044] ? __pfx_get_tree_mtd+0x10/0x10 [ 351.792135][ T6044] vfs_get_tree+0x92/0x2a0 [ 351.792162][ T6044] do_new_mount+0x325/0xb00 [ 351.792186][ T6044] ? __pfx_do_new_mount+0x10/0x10 [ 351.792208][ T6044] ? ns_capable+0x84/0xe0 [ 351.792230][ T6044] ? path_mount+0x647/0x1050 [ 351.792252][ T6044] ? user_path_at+0xd4/0x160 [ 351.792276][ T6044] __se_sys_mount+0x31d/0x420 [ 351.792301][ T6044] ? __pfx___se_sys_mount+0x10/0x10 [ 351.792332][ T6044] ? __x64_sys_mount+0x20/0xc0 [ 351.792355][ T6044] do_syscall_64+0x16a/0x530 [ 351.792369][ T6044] ? trace_irq_disable+0x3b/0x140 [ 351.792390][ T6044] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.792407][ T6044] ? clear_bhb_loop+0x70/0xc0 [ 351.792427][ T6044] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.792443][ T6044] RIP: 0033:0x00007f40e179fb19 [ 351.792459][ T6044] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 351.792472][ T6044] RSP: 002b:00007f40e25b5028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 351.792489][ T6044] RAX: ffffffffffffffda RBX: 00007f40e1a25fa0 RCX: 00007f40e179fb19 [ 351.792501][ T6044] RDX: 0000200000000300 RSI: 00002000000002c0 RDI: 0000200000000280 [ 351.792512][ T6044] RBP: 00007f40e1837b70 R08: 0000000000000000 R09: 0000000000000000 [ 351.792522][ T6044] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 351.792531][ T6044] R13: 00007f40e1a26038 R14: 00007f40e1a25fa0 R15: 00007ffd007cfaa8 [ 351.792556][ T6044] [ 351.887090][ T54] usb 4-1: USB disconnect, device number 6 [ 352.079985][ T4968] pwc: Logitech ViewPort AV 100 webcam detected. [ 352.102976][ T4968] pwc: Warning: more than 1 configuration available. [ 352.115275][ T4968] pwc: Failed to set LED on/off time (-71) [ 352.133774][ T4968] pwc: send_video_command error -71 [ 352.133937][ T4968] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 352.146344][ T4968] Philips webcam 3-1:0.0: probe with driver Philips webcam failed with error -71 [ 352.200465][ T4968] usb 3-1: USB disconnect, device number 7 [ 352.396795][ T5686] gspca_stk1135: reg_w 0x2ff err -71 [ 352.397883][ T5686] gspca_stk1135: serial bus timeout: status=0x00 [ 352.397901][ T5686] gspca_stk1135: Sensor write failed [ 352.397942][ T5686] gspca_stk1135: serial bus timeout: status=0x00 [ 352.397954][ T5686] gspca_stk1135: Sensor write failed [ 352.397994][ T5686] gspca_stk1135: serial bus timeout: status=0x00 [ 352.398006][ T5686] gspca_stk1135: Sensor read failed [ 352.398046][ T5686] gspca_stk1135: serial bus timeout: status=0x00 [ 352.398058][ T5686] gspca_stk1135: Sensor read failed [ 352.398066][ T5686] gspca_stk1135: Detected sensor type unknown (0x0) [ 352.398118][ T5686] gspca_stk1135: serial bus timeout: status=0x00 [ 352.398129][ T5686] gspca_stk1135: Sensor read failed [ 352.398168][ T5686] gspca_stk1135: serial bus timeout: status=0x00 [ 352.398188][ T5686] gspca_stk1135: Sensor read failed [ 352.398229][ T5686] gspca_stk1135: serial bus timeout: status=0x00 [ 352.398240][ T5686] gspca_stk1135: Sensor write failed [ 352.398280][ T5686] gspca_stk1135: serial bus timeout: status=0x00 [ 352.398291][ T5686] gspca_stk1135: Sensor write failed [ 352.398388][ T5686] stk1135 2-1:0.0: probe with driver stk1135 failed with error -71 [ 352.400669][ T5686] usb 2-1: USB disconnect, device number 5 [ 352.679438][ T6053] raw_sendmsg: syz.3.62 forgot to set AF_INET. Fix it! [ 352.934637][ T5763] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 353.074673][ T5763] usb 3-1: device descriptor read/64, error -71 [ 353.127121][ T6076] sg_write: data in/out 204764/136 bytes for SCSI command 0x0-- guessing data in; [ 353.127121][ T6076] program syz.1.68 not setting count and/or reply_len properly [ 353.338578][ T5763] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 353.474717][ T5763] usb 3-1: device descriptor read/64, error -71 [ 353.475105][ T5686] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 353.585695][ T5763] usb usb3-port1: attempt power cycle [ 353.605756][ T54] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 353.625427][ T5686] usb 2-1: New USB device found: idVendor=0a12, idProduct=0001, bcdDevice=0.00 [ 353.626582][ T5686] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 353.626600][ T5686] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 353.628635][ T5686] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.628653][ T5686] usb 2-1: Product: syz [ 353.628663][ T5686] usb 2-1: Manufacturer: syz [ 353.628674][ T5686] usb 2-1: SerialNumber: syz [ 353.757183][ T54] usb 1-1: Using ep0 maxpacket: 16 [ 353.759057][ T54] usb 1-1: New USB device found: idVendor=1d6b, idProduct=0101, bcdDevice=0.40 [ 353.760692][ T54] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 353.760717][ T54] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 353.776493][ T54] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.776567][ T54] usb 1-1: Product: syz [ 353.776610][ T54] usb 1-1: Manufacturer: syz [ 353.776656][ T54] usb 1-1: SerialNumber: syz [ 353.833600][ T54] usb 1-1: 0:2 : does not exist [ 353.843575][ T6076] syz.1.68 uses obsolete (PF_INET,SOCK_PACKET) [ 353.864968][ T6081] netlink: 12 bytes leftover after parsing attributes in process `syz.3.70'. [ 353.869572][ T6076] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 353.872234][ T6076] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 353.874422][ T6076] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 353.884405][ T6076] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 353.908951][ T5686] usb 2-1: USB disconnect, device number 6 [ 353.914963][ T5697] Bluetooth: hci4: CSR: Local version failed (-19) [ 353.985266][ T5763] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 354.013764][ T5763] usb 3-1: device descriptor read/8, error -71 [ 354.035960][ T54] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 354.101492][ T54] usb 1-1: USB disconnect, device number 8 [ 354.132898][ T5699] udevd[5699]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 354.264635][ T5763] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 354.286173][ T5763] usb 3-1: device descriptor read/8, error -71 [ 354.304655][ T5773] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 354.395407][ T5763] usb usb3-port1: unable to enumerate USB device [ 354.454657][ T5773] usb 4-1: Using ep0 maxpacket: 32 [ 354.455427][ T5773] usb 4-1: New USB device found: idVendor=534d, idProduct=0021, bcdDevice=0.40 [ 354.456305][ T5773] usb 4-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 354.458070][ T5773] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.458086][ T5773] usb 4-1: Product: syz [ 354.458097][ T5773] usb 4-1: Manufacturer: syz [ 354.458107][ T5773] usb 4-1: SerialNumber: syz [ 354.671866][ T6088] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 354.673575][ T6088] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 354.695516][ T5773] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 354.776096][ T5773] usb 4-1: USB disconnect, device number 7 [ 354.812636][ T6096] netlink: 4 bytes leftover after parsing attributes in process `syz.0.74'. [ 354.831956][ T5689] udevd[5689]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 354.841930][ T5763] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 355.004612][ T5763] usb 2-1: Using ep0 maxpacket: 32 [ 355.005444][ T5763] usb 2-1: New USB device found: idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 355.006666][ T5763] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 355.006696][ T5763] usb 2-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 355.006714][ T5763] usb 2-1: config 0 interface 0 has no altsetting 0 [ 355.008837][ T5763] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 355.008862][ T5763] usb 2-1: Product: syz [ 355.008876][ T5763] usb 2-1: Manufacturer: syz [ 355.008890][ T5763] usb 2-1: SerialNumber: syz [ 355.011197][ T5763] usb 2-1: config 0 descriptor?? [ 355.418241][ T5763] gs_usb 2-1:0.0: Configuring for 137 interfaces [ 355.514818][ T5773] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 355.665212][ T5773] usb 4-1: New USB device found: idVendor=0763, idProduct=1031, bcdDevice=0.40 [ 355.668679][ T5773] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 355.668707][ T5773] usb 4-1: Product: syz [ 355.668718][ T5773] usb 4-1: Manufacturer: syz [ 355.668747][ T5773] usb 4-1: SerialNumber: syz [ 355.819773][ T6090] FAULT_INJECTION: forcing a failure. [ 355.819773][ T6090] name fail_futex, interval 1, probability 0, space 0, times 1 [ 355.819811][ T6090] CPU: 1 UID: 0 PID: 6090 Comm: syz.1.72 Tainted: G L syzkaller #0 PREEMPT(full) [ 355.819843][ T6090] Tainted: [L]=SOFTLOCKUP [ 355.819853][ T6090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 355.819867][ T6090] Call Trace: [ 355.819876][ T6090] [ 355.819885][ T6090] dump_stack_lvl+0xe8/0x150 [ 355.819925][ T6090] should_fail_ex+0x3eb/0x540 [ 355.819960][ T6090] get_futex_key+0x1ab/0x1410 [ 355.820003][ T6090] ? rcu_is_watching+0x16/0xb0 [ 355.820035][ T6090] ? __pfx_get_futex_key+0x10/0x10 [ 355.820063][ T6090] ? kfree+0x4d/0x650 [ 355.820089][ T6090] ? import_iovec+0x73/0xa0 [ 355.820122][ T6090] futex_wake+0x119/0x5f0 [ 355.820150][ T6090] ? __pfx____sys_recvmsg+0x10/0x10 [ 355.820182][ T6090] ? __pfx_futex_wake+0x10/0x10 [ 355.820209][ T6090] ? lock_acquire+0x115/0x350 [ 355.820250][ T6090] do_futex+0x458/0x4e0 [ 355.820290][ T6090] ? __pfx_do_futex+0x10/0x10 [ 355.820335][ T6090] __se_sys_futex+0x3a8/0x450 [ 355.820378][ T6090] ? __pfx___se_sys_futex+0x10/0x10 [ 355.820440][ T6090] ? __x64_sys_futex+0x21/0xf0 [ 355.820480][ T6090] do_syscall_64+0x16a/0x530 [ 355.820502][ T6090] ? trace_irq_disable+0x3b/0x140 [ 355.820532][ T6090] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.820560][ T6090] ? clear_bhb_loop+0x70/0xc0 [ 355.820589][ T6090] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.820611][ T6090] RIP: 0033:0x00007f4f6bd9fb19 [ 355.820634][ T6090] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 355.820654][ T6090] RSP: 002b:00007f4f6cbd70e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 355.820679][ T6090] RAX: ffffffffffffffda RBX: 00007f4f6c025fa8 RCX: 00007f4f6bd9fb19 [ 355.820696][ T6090] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f4f6c025fac [ 355.820710][ T6090] RBP: 00007f4f6c025fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 355.820726][ T6090] R10: 00000000000000cb R11: 0000000000000246 R12: 0000000000000000 [ 355.820740][ T6090] R13: 00007f4f6c026038 R14: 00007ffd5fe1bbc0 R15: 00007ffd5fe1bca8 [ 355.820777][ T6090] [ 356.061677][ T5763] gs_usb 2-1:0.0: Disabling termination support for channel 0 (-EPROTO) [ 356.067816][ T5763] gs_usb 2-1:0.0: Couldn't get extended bit timing const for channel 0 (-EPROTO) [ 356.068527][ T5763] gs_usb 2-1:0.0: probe with driver gs_usb failed with error -71 [ 356.076644][ T5773] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 356.092032][ T5773] usb 4-1: unit 4 not found! [ 356.132168][ T5763] usb 2-1: USB disconnect, device number 7 [ 356.250744][ T5773] usb 4-1: USB disconnect, device number 8 [ 356.298261][ T5699] udevd[5699]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 356.564656][ T54] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 356.715234][ T54] usb 3-1: Using ep0 maxpacket: 16 [ 356.716755][ T54] usb 3-1: New USB device found: idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 356.716784][ T54] usb 3-1: too many configurations: 112, using maximum allowed: 8 [ 356.755021][ T54] usb 3-1: New USB device strings: Mfr=144, Product=246, SerialNumber=0 [ 356.755052][ T54] usb 3-1: Product: syz [ 356.755068][ T54] usb 3-1: Manufacturer: syz [ 356.763510][ T54] r8152-cfgselector 3-1: Unknown version 0x0000 [ 356.763536][ T54] r8152-cfgselector 3-1: config 0 descriptor?? [ 356.797894][ T54] cdc_acm 3-1:0.0: Zero length descriptor references [ 356.797925][ T54] cdc_acm 3-1:0.0: probe with driver cdc_acm failed with error -22 [ 357.261698][ T6126] comedi comedi1: fl512: I/O port conflict (0xfc000000,16) [ 357.804580][ T5763] usb 4-1: new low-speed USB device number 9 using dummy_hcd [ 357.808269][ T6140] jffs2: notice: (6140) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 357.959139][ T5763] usb 4-1: LPM exit latency is zeroed, disabling LPM. [ 357.959181][ T5763] usb 4-1: New USB device found: idVendor=19d2, idProduct=0412, bcdDevice=69.83 [ 357.960664][ T5763] usb 4-1: config 129 has an invalid interface number: 176 but max is 0 [ 357.960689][ T5763] usb 4-1: config 129 has no interface number 0 [ 357.960716][ T5763] usb 4-1: config 129 interface 176 has no altsetting 0 [ 357.964276][ T5763] usb 4-1: string descriptor 0 read error: -22 [ 357.964433][ T5763] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 358.040358][ T5763] option 4-1:129.176: GSM modem (1-port) converter detected [ 358.368915][ T5763] usb 4-1: USB disconnect, device number 9 [ 358.374112][ T5763] option 4-1:129.176: device disconnected [ 358.583275][ T6166] netlink: 'syz.0.92': attribute type 21 has an invalid length. [ 358.778982][ T6168] netlink: 32 bytes leftover after parsing attributes in process `syz.0.93'. [ 358.799695][ T6168] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 358.976940][ T33] audit: type=1800 audit(1793974616.666:4): pid=6171 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.94" name="file2" dev="overlay" ino=121 res=0 errno=-22 [ 359.244604][ T54] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 359.285345][ T4968] r8152-cfgselector 3-1: USB disconnect, device number 12 [ 359.297351][ T5686] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 359.394697][ T54] usb 1-1: Using ep0 maxpacket: 32 [ 359.395442][ T54] usb 1-1: New USB device found: idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 359.396578][ T54] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 359.396603][ T54] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 359.396624][ T54] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 359.396647][ T54] usb 1-1: config 1 has no interface number 0 [ 359.396690][ T54] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 359.396725][ T54] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 359.396769][ T54] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.445673][ T5686] usb 4-1: Using ep0 maxpacket: 16 [ 359.448738][ T5686] usb 4-1: New USB device found: idVendor=0547, idProduct=6801, bcdDevice=f3.70 [ 359.469300][ T54] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 359.476491][ T5686] usb 4-1: config 1 has an invalid interface number: 22 but max is 0 [ 359.476561][ T5686] usb 4-1: config 1 has no interface number 0 [ 359.476639][ T5686] usb 4-1: config 1 interface 22 has no altsetting 0 [ 359.528056][ T5686] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 359.528191][ T5686] usb 4-1: Product: syz [ 359.528227][ T5686] usb 4-1: Manufacturer: syz [ 359.528269][ T5686] usb 4-1: SerialNumber: syz [ 359.970485][ T54] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now attached [ 360.169001][ T6184] overlayfs: failed lookup in lower (newroot/16, name='file1', err=-40): overlapping layers [ 360.185809][ T33] audit: type=1800 audit(1793974617.886:5): pid=6184 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.94" name="file2" dev="overlay" ino=121 res=0 errno=-22 [ 360.194369][ T6188] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 360.226858][ T6188] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 360.247573][ T6187] overlayfs: failed lookup in lower (newroot/16, name='bus', err=-40): overlapping layers [ 360.251187][ T6185] overlayfs: failed lookup in lower (newroot/16, name='bus', err=-40): overlapping layers [ 360.251796][ T6186] overlayfs: failed lookup in lower (newroot/16, name='bus', err=-40): overlapping layers [ 361.036013][ T5833] snd_usb_pod 1-1:1.1: line6_send_raw_message_async_part: usb_submit_urb failed (-22) [ 361.164641][ T996] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 361.315365][ T996] usb 3-1: New USB device found: idVendor=10c4, idProduct=ea90, bcdDevice=0.80 [ 361.316569][ T996] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 361.316601][ T996] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 361.316651][ T996] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.319966][ T996] usb 3-1: config 0 descriptor?? [ 361.749603][ T996] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0 [ 361.749650][ T996] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0 [ 361.749680][ T996] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0 [ 361.749707][ T996] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0 [ 361.749733][ T996] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0 [ 361.749758][ T996] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0 [ 361.749777][ T996] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0 [ 361.817219][ T996] cp2112 0003:10C4:EA90.0002: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 361.941629][ T996] cp2112 0003:10C4:EA90.0002: Part Number: 0x00 Device Version: 0x00 [ 361.992571][ T5773] usb 1-1: USB disconnect, device number 9 [ 362.003377][ T5773] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 362.171726][ T6200] netlink: 12 bytes leftover after parsing attributes in process `syz.0.100'. [ 362.214163][ T5686] gspca_main: touptek-2.14.0 probing 0547:6801 [ 362.225379][ T996] cp2112 0003:10C4:EA90.0002: error requesting SMBus config [ 362.247963][ T5686] usb 4-1: USB disconnect, device number 10 [ 362.286286][ T996] cp2112 0003:10C4:EA90.0002: probe with driver cp2112 failed with error -5 [ 362.332375][ T6204] jffs2: notice: (6204) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 362.354997][ T6204] jffs2: notice: (6204) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 362.417700][ T6204] jffs2: notice: (6204) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 362.672062][ T6211] netlink: 'syz.3.103': attribute type 1 has an invalid length. [ 362.672085][ T6211] netlink: 224 bytes leftover after parsing attributes in process `syz.3.103'. [ 362.824843][ T996] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 362.975425][ T996] usb 1-1: New USB device found: idVendor=0681, idProduct=0005, bcdDevice=1.00 [ 362.976686][ T996] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 362.976714][ T996] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 362.976753][ T996] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 363.037105][ T996] idmouse 1-1:1.0: Siemens ID Mouse FingerTIP Sensor Driver now attached [ 363.606812][ T6213] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 363.924771][ T996] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 363.965053][ T5773] usb 3-1: USB disconnect, device number 13 [ 364.056254][ T996] usb 4-1: device descriptor read/64, error -71 [ 364.286539][ T6224] netlink: 'syz.2.107': attribute type 28 has an invalid length. [ 364.286565][ T6224] netlink: 20 bytes leftover after parsing attributes in process `syz.2.107'. [ 364.295128][ T996] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 364.425858][ T996] usb 4-1: device descriptor read/64, error -71 [ 364.536346][ T996] usb usb4-port1: attempt power cycle [ 364.624666][ T5773] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 364.774780][ T5773] usb 3-1: Using ep0 maxpacket: 16 [ 364.778047][ T5773] usb 3-1: unable to get BOS descriptor or descriptor too short [ 364.778097][ T5773] usb 3-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=0.40 [ 364.779795][ T5773] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 364.779819][ T5773] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 364.779865][ T5773] usb 3-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 364.783386][ T5773] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.783411][ T5773] usb 3-1: Product: syz [ 364.783427][ T5773] usb 3-1: Manufacturer: syz [ 364.783466][ T5773] usb 3-1: SerialNumber: syz [ 364.904692][ T996] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 364.926503][ T996] usb 4-1: device descriptor read/8, error -71 [ 364.957716][ T5763] usb 1-1: USB disconnect, device number 10 [ 364.973840][ T5763] idmouse 1-1:1.0: disconnected [ 365.084033][ T6226] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 365.094326][ T6226] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 365.112581][ T5773] cdc_ncm 3-1:1.0: CDC Union missing and no IAD found [ 365.112666][ T5773] cdc_ncm 3-1:1.0: bind() failure [ 365.136743][ T5773] usb 3-1: USB disconnect, device number 14 [ 365.166094][ T996] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 365.185282][ T996] usb 4-1: device descriptor read/8, error -71 [ 365.295807][ T996] usb usb4-port1: unable to enumerate USB device [ 365.824700][ T5686] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 365.954628][ T5686] usb 1-1: device descriptor read/64, error -71 [ 365.974956][ T5773] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 366.104975][ T5773] usb 3-1: device descriptor read/64, error -71 [ 366.194661][ T5686] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 366.324600][ T5686] usb 1-1: device descriptor read/64, error -71 [ 366.345574][ T5773] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 366.436281][ T5686] usb usb1-port1: attempt power cycle [ 366.474709][ T5773] usb 3-1: device descriptor read/64, error -71 [ 366.585058][ T5773] usb usb3-port1: attempt power cycle [ 366.774909][ T5686] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 366.798352][ T5686] usb 1-1: device descriptor read/8, error -71 [ 366.924795][ T5773] usb 3-1: new full-speed USB device number 17 using dummy_hcd [ 366.945703][ T5773] usb 3-1: device descriptor read/8, error -71 [ 367.035686][ T5686] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 367.060170][ T5686] usb 1-1: device descriptor read/8, error -71 [ 367.169630][ T5686] usb usb1-port1: unable to enumerate USB device [ 367.184842][ T5773] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 367.205605][ T5773] usb 3-1: device descriptor read/8, error -71 [ 367.272778][ T6240] rxe_eth0 speed is unknown, defaulting to 1000 [ 367.314975][ T5773] usb usb3-port1: unable to enumerate USB device [ 368.842273][ T6249] warning: `syz.0.115' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 369.111728][ T6258] mmap: syz.0.119 (6258) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 369.174932][ T5773] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 369.335401][ T5773] usb 3-1: New USB device found: idVendor=0681, idProduct=0005, bcdDevice=1.00 [ 369.337028][ T5773] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 369.337056][ T5773] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 369.337096][ T5773] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 369.393570][ T5773] idmouse 3-1:1.0: Siemens ID Mouse FingerTIP Sensor Driver now attached [ 370.018835][ T6281] netlink: 16 bytes leftover after parsing attributes in process `syz.3.124'. [ 370.355469][ T4968] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 370.374679][ T5763] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 370.507305][ T4968] usb 4-1: New USB device found: idVendor=1ba6, idProduct=0001, bcdDevice=0.01 [ 370.509601][ T4968] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 370.509688][ T4968] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 370.576773][ T5763] usb 1-1: New USB device found: idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 370.578125][ T5763] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 370.584010][ T5763] usb 1-1: config 0 descriptor?? [ 370.801482][ T5763] udl 1-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 371.048395][ T5763] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 1 [ 371.048423][ T5763] [drm] Initialized udl on minor 1 [ 371.360584][ T4968] as10x_usb: device has been detected [ 371.361677][ T4968] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 371.363007][ T996] usb 3-1: USB disconnect, device number 19 [ 371.406341][ T996] idmouse 3-1:1.0: disconnected [ 371.433162][ T4968] usb 4-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 371.463629][ T6288] ------------[ cut here ]------------ [ 371.463644][ T6288] DEBUG_LOCKS_WARN_ON(lock->magic != lock) [ 371.463659][ T6288] WARNING: kernel/locking/mutex.c:625 at __mutex_lock+0x132a/0x15a0, CPU#1: syz.3.125/6288 [ 371.485688][ T6288] Modules linked in: [ 371.489668][ T6288] CPU: 1 UID: 0 PID: 6288 Comm: syz.3.125 Tainted: G L syzkaller #0 PREEMPT(full) [ 371.500599][ T6288] Tainted: [L]=SOFTLOCKUP [ 371.505100][ T6288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 371.515586][ T6288] RIP: 0010:__mutex_lock+0x1331/0x15a0 [ 371.521126][ T6288] Code: 4f e1 91 48 c1 e8 03 0f b6 04 18 84 c0 0f 85 46 02 00 00 83 3d c3 11 c0 05 00 75 13 48 8d 3d 86 10 c3 05 48 c7 c6 00 28 4d 8c <67> 48 0f b9 3a 90 e9 1d ee ff ff 90 0f 0b 90 e9 f0 f1 ff ff 90 0f [ 371.540816][ T6288] RSP: 0018:ffffc900066076a0 EFLAGS: 00010246 [ 371.546969][ T6288] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: 0000000000080000 [ 371.555047][ T6288] RDX: ffffc9000fde5000 RSI: ffffffff8c4d2800 RDI: ffffffff91e44ec0 [ 371.563697][ T6288] RBP: ffffc90006607840 R08: ffffffff91e14ff3 R09: 1ffffffff23c29fe [ 371.572591][ T6288] R10: dffffc0000000000 R11: fffffbfff23c29ff R12: ffff888066c2c010 [ 371.580664][ T6288] R13: 0000000000000000 R14: 1ffff92000cc0ee8 R15: 0000000000000000 [ 371.588761][ T6288] FS: 00007f0be89b56c0(0000) GS:ffff888123259000(0000) knlGS:0000000000000000 [ 371.597889][ T6288] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 371.604557][ T6288] CR2: 00007f0be89b4ff8 CR3: 0000000075a34000 CR4: 00000000003526f0 [ 371.612568][ T6288] Call Trace: [ 371.615920][ T6288] [ 371.618892][ T6288] ? __lock_acquire+0x747/0x2de0 [ 371.623878][ T6288] ? as102_stream_ctrl+0x27/0xc0 [ 371.628950][ T6288] ? trace_contention_end+0x3d/0x140 [ 371.634284][ T6288] ? __pfx___mutex_lock+0x10/0x10 [ 371.639469][ T6288] ? __mutex_lock+0x305/0x15a0 [ 371.644290][ T6288] ? __mutex_unlock_slowpath+0x731/0x900 [ 371.650000][ T6288] ? lock_acquire+0x115/0x350 [ 371.654785][ T6288] as102_stream_ctrl+0x27/0xc0 [ 371.659601][ T6288] __dvb_frontend_open+0x2e9/0xca0 [ 371.665403][ T6288] ? dvb_frontend_open+0x1ce/0x870 [ 371.670572][ T6288] ? down_read+0x2b9/0x320 [ 371.675670][ T6288] ? __pfx_dvb_frontend_open+0x10/0x10 [ 371.681210][ T6288] dvb_device_open+0x24f/0x340 [ 371.686074][ T6288] chrdev_open+0x4d9/0x600 [ 371.690532][ T6288] ? __pfx_chrdev_open+0x10/0x10 [ 371.695555][ T6288] ? fsnotify_open_perm_and_set_mode+0x135/0x6b0 [ 371.701919][ T6288] ? devcgroup_check_permission+0x31/0x8f0 [ 371.707857][ T6288] ? __pfx_chrdev_open+0x10/0x10 [ 371.712887][ T6288] do_dentry_open+0x80e/0x1360 [ 371.717743][ T6288] vfs_open_consume+0x4a/0x350 [ 371.722552][ T6288] ? path_openat+0x16e1/0x20f0 [ 371.727446][ T6288] path_openat+0x16fc/0x20f0 [ 371.732194][ T6288] do_file_open+0x23e/0x4a0 [ 371.736804][ T6288] ? __pfx_do_file_open+0x10/0x10 [ 371.741894][ T6288] ? _raw_spin_unlock+0x28/0x50 [ 371.746871][ T6288] ? alloc_fd+0x6af/0x760 [ 371.751252][ T6288] do_sys_openat2+0x115/0x200 [ 371.756424][ T6288] ? __pfx_do_sys_openat2+0x10/0x10 [ 371.761781][ T6288] ? kfree+0x4d/0x650 [ 371.765889][ T6288] __x64_sys_openat+0x138/0x170 [ 371.771424][ T6288] do_syscall_64+0x16a/0x530 [ 371.776655][ T6288] ? trace_irq_disable+0x3b/0x140 [ 371.781748][ T6288] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 371.787918][ T6288] ? clear_bhb_loop+0x70/0xc0 [ 371.792641][ T6288] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 371.798624][ T6288] RIP: 0033:0x00007f0be7b6034e [ 371.803423][ T6288] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 371.823157][ T6288] RSP: 002b:00007f0be89b4b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 371.831647][ T6288] RAX: ffffffffffffffda RBX: 00007f0be89b56c0 RCX: 00007f0be7b6034e [ 371.839875][ T6288] RDX: 0000000000000802 RSI: 00007f0be89b4c00 RDI: ffffffffffffff9c [ 371.848055][ T6288] RBP: 00007f0be89b4c00 R08: 0000000000000000 R09: 0000000000000000 [ 371.856128][ T6288] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 371.864143][ T6288] R13: 00007f0be7e26218 R14: 00007f0be7e26180 R15: 00007ffd662df238 [ 371.872866][ T6288] [ 371.876529][ T6288] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 371.883851][ T6288] CPU: 1 UID: 0 PID: 6288 Comm: syz.3.125 Tainted: G L syzkaller #0 PREEMPT(full) [ 371.894654][ T6288] Tainted: [L]=SOFTLOCKUP [ 371.899007][ T6288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 371.909098][ T6288] Call Trace: [ 371.912405][ T6288] [ 371.915362][ T6288] vpanic+0x26f/0x710 [ 371.919383][ T6288] panic+0xc5/0xd0 [ 371.923142][ T6288] ? __pfx_panic+0x10/0x10 [ 371.927627][ T6288] __warn+0x315/0x4c0 [ 371.931645][ T6288] ? __mutex_lock+0x132a/0x15a0 [ 371.936536][ T6288] ? __mutex_lock+0x132a/0x15a0 [ 371.941419][ T6288] __report_bug+0x276/0x570 [ 371.945953][ T6288] ? __mutex_lock+0x132a/0x15a0 [ 371.950831][ T6288] ? __pfx___report_bug+0x10/0x10 [ 371.955882][ T6288] ? __lock_acquire+0x747/0x2de0 [ 371.960842][ T6288] report_bug_entry+0x19b/0x290 [ 371.965711][ T6288] ? __mutex_lock+0x1331/0x15a0 [ 371.970612][ T6288] ? __mutex_lock+0x1336/0x15a0 [ 371.975497][ T6288] handle_bug+0xce/0x200 [ 371.979773][ T6288] exc_invalid_op+0x1a/0x50 [ 371.984303][ T6288] asm_exc_invalid_op+0x1a/0x20 [ 371.989180][ T6288] RIP: 0010:__mutex_lock+0x1331/0x15a0 [ 371.994721][ T6288] Code: 4f e1 91 48 c1 e8 03 0f b6 04 18 84 c0 0f 85 46 02 00 00 83 3d c3 11 c0 05 00 75 13 48 8d 3d 86 10 c3 05 48 c7 c6 00 28 4d 8c <67> 48 0f b9 3a 90 e9 1d ee ff ff 90 0f 0b 90 e9 f0 f1 ff ff 90 0f [ 372.014376][ T6288] RSP: 0018:ffffc900066076a0 EFLAGS: 00010246 [ 372.020510][ T6288] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: 0000000000080000 [ 372.028526][ T6288] RDX: ffffc9000fde5000 RSI: ffffffff8c4d2800 RDI: ffffffff91e44ec0 [ 372.036528][ T6288] RBP: ffffc90006607840 R08: ffffffff91e14ff3 R09: 1ffffffff23c29fe [ 372.044547][ T6288] R10: dffffc0000000000 R11: fffffbfff23c29ff R12: ffff888066c2c010 [ 372.052548][ T6288] R13: 0000000000000000 R14: 1ffff92000cc0ee8 R15: 0000000000000000 [ 372.060559][ T6288] ? __lock_acquire+0x747/0x2de0 [ 372.065543][ T6288] ? as102_stream_ctrl+0x27/0xc0 [ 372.070519][ T6288] ? trace_contention_end+0x3d/0x140 [ 372.075873][ T6288] ? __pfx___mutex_lock+0x10/0x10 [ 372.080927][ T6288] ? __mutex_lock+0x305/0x15a0 [ 372.085724][ T6288] ? __mutex_unlock_slowpath+0x731/0x900 [ 372.091388][ T6288] ? lock_acquire+0x115/0x350 [ 372.096103][ T6288] as102_stream_ctrl+0x27/0xc0 [ 372.100942][ T6288] __dvb_frontend_open+0x2e9/0xca0 [ 372.106106][ T6288] ? dvb_frontend_open+0x1ce/0x870 [ 372.111249][ T6288] ? down_read+0x2b9/0x320 [ 372.115702][ T6288] ? __pfx_dvb_frontend_open+0x10/0x10 [ 372.121185][ T6288] dvb_device_open+0x24f/0x340 [ 372.126027][ T6288] chrdev_open+0x4d9/0x600 [ 372.130493][ T6288] ? __pfx_chrdev_open+0x10/0x10 [ 372.135470][ T6288] ? fsnotify_open_perm_and_set_mode+0x135/0x6b0 [ 372.141825][ T6288] ? devcgroup_check_permission+0x31/0x8f0 [ 372.147662][ T6288] ? __pfx_chrdev_open+0x10/0x10 [ 372.152628][ T6288] do_dentry_open+0x80e/0x1360 [ 372.157424][ T6288] vfs_open_consume+0x4a/0x350 [ 372.162229][ T6288] ? path_openat+0x16e1/0x20f0 [ 372.167029][ T6288] path_openat+0x16fc/0x20f0 [ 372.171665][ T6288] do_file_open+0x23e/0x4a0 [ 372.176211][ T6288] ? __pfx_do_file_open+0x10/0x10 [ 372.181290][ T6288] ? _raw_spin_unlock+0x28/0x50 [ 372.186195][ T6288] ? alloc_fd+0x6af/0x760 [ 372.190566][ T6288] do_sys_openat2+0x115/0x200 [ 372.195275][ T6288] ? __pfx_do_sys_openat2+0x10/0x10 [ 372.200492][ T6288] ? kfree+0x4d/0x650 [ 372.204509][ T6288] __x64_sys_openat+0x138/0x170 [ 372.209391][ T6288] do_syscall_64+0x16a/0x530 [ 372.214044][ T6288] ? trace_irq_disable+0x3b/0x140 [ 372.219100][ T6288] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.225212][ T6288] ? clear_bhb_loop+0x70/0xc0 [ 372.230003][ T6288] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.235919][ T6288] RIP: 0033:0x00007f0be7b6034e [ 372.240702][ T6288] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 372.260325][ T6288] RSP: 002b:00007f0be89b4b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 372.268787][ T6288] RAX: ffffffffffffffda RBX: 00007f0be89b56c0 RCX: 00007f0be7b6034e [ 372.276815][ T6288] RDX: 0000000000000802 RSI: 00007f0be89b4c00 RDI: ffffffffffffff9c [ 372.284851][ T6288] RBP: 00007f0be89b4c00 R08: 0000000000000000 R09: 0000000000000000 [ 372.292847][ T6288] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 372.300857][ T6288] R13: 00007f0be7e26218 R14: 00007f0be7e26180 R15: 00007ffd662df238 [ 372.308874][ T6288] [ 372.312528][ T6288] Kernel Offset: disabled [ 372.316893][ T6288] Rebooting in 86400 seconds..