last executing test programs: 6m0.262408825s ago: executing program 1 (id=161): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x4c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x88c7}, @NL80211_ATTR_FRAME={0x1c, 0x33, @data_frame={@msdu=@type10={{}, {}, @from_mac=@broadcast, @device_b}}}]}, 0x4c}, 0x1, 0x0, 0x4000}, 0x800) 6m0.207297173s ago: executing program 1 (id=163): r0 = syz_genetlink_get_family_id$nl802154(&(0x7f00000010c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000001140)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(0xffffffffffffffff, &(0x7f0000001200)={&(0x7f0000001080), 0xc, &(0x7f00000011c0)={&(0x7f0000001180)={0x34, r0, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x800) 6m0.013891598s ago: executing program 1 (id=165): r0 = accept4$llc(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x80400) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080)) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x20140c4, 0x0) umount2(&(0x7f0000000080)='./file0\x00', 0x5) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0xa800, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0xe) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x8, 0x8000000}) r3 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r3, &(0x7f0000000000)={{0x3, @default, 0x1}, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) ioctl$TCFLSH(r2, 0x540b, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r4, &(0x7f0000002bc0)=[{{&(0x7f0000000140)={0x2, 0x4622, @dev={0xac, 0x14, 0x14, 0x16}}, 0x10, 0x0, 0x0, &(0x7f0000000180)=[@ip_retopts={{0x14, 0x0, 0x7, {[@ra={0x94, 0x4, 0x1}]}}}], 0x18}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000280)="37b7d01e80f3b0920955c9735f8bc285395199912b2c3f70325b17cd8f1960ccb2839e9ad6b8e23f324a5df6134acab6b83a159320ee7a079edc7d3d42719a30564f422f1092e697ae3b6adbb136", 0x4e}, {&(0x7f0000000300)="da28adce8e8abfd56d518b2feb4ac630294a86471d54568ba9369bd1dc81d18bbfdccef37cb6faedd92be97c98220a81b34df351b75dcd13aff80b53ba4b22988db3ba60d12ce6d9e7c876816c2ddd9bdb4796f7c43830e607b16cd603346795b0b31d42dbfd808cf6211bf1778a703825afa1d5449d05268a501cac46ecfb832ca78db4a9000f0316414c5e9446e38c0bda97f76f9d762b9626ee6be638c4434ae237ddae8f7d6c94cd4c46af84954a63d9082e9c4096687fce9640d9284755438869e707b0a91dd87ffbb074d0", 0xce}, {&(0x7f0000000400)="e0c4d687796e38176be277e03746f9f5c15afd764a59d09a9433b39379d5ff44c957dd58326329557ebd29d55809dde8d3149157c8404fcb8d672ed59dc643efd150012ecc2de0c0d709bc0e4cae54c8c5ac8c5df4fc590ecd28b0185009c330fb40f1b45f74c48b3747383890167362e2ada5588004a93edc98ef98", 0x7c}, {&(0x7f0000000a00)="3509e0a3d1e794e0fdcdc8c3e6fa16a1715c56088fbbc8ae13662e09fc35c989219edfbc7c3567fd853f4359acddd7da426f1b9cd1cc632b585f85d56bcc388eafd78d136e6706414a1f26a1eb0b71501a258147d8dc795a5e", 0x59}], 0x4}}], 0x2, 0x44008004) write$binfmt_misc(r4, &(0x7f0000000300), 0xfdef) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$uinput_user_dev(r5, 0x0, 0x0) r6 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_int(r6, 0x29, 0x17, 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cast5)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r9 = accept4(r8, 0x0, 0x0, 0x800) sendmmsg$alg(r9, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3", 0x8}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000500)=""/89, 0x59}], 0x1}, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_KEY(r7, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x28, r10, 0x200, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x3, 0x1c}}}}, [@NL80211_ATTR_KEY={0x4}, @NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) ioctl$XFS_IOC_GETBMAP(r1, 0xc0205826, &(0x7f0000000000)={0x7, 0x3ff, 0x4, 0x5, 0xfffffff9}) 5m59.753909352s ago: executing program 1 (id=167): setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000280)={0x4000, 0x2}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(0xffffffffffffffff, 0x7b2, &(0x7f0000001680)={0x0, 0x1}) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1ec) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000006480)={0x2870, 0x40, 0x1, 0x7fffc, 0x4, {0x11}, [@nested={0x4, 0x48}, @nested={0x284c, 0x1, 0x0, 0x1, [@nested={0x2848, 0x10, 0x0, 0x1, [@nested={0x4, 0x8}, @nested={0x2840, 0xf, 0x0, 0x1, [@nested={0x1304, 0x118, 0x0, 0x1, [@nested={0x1113, 0x135, 0x0, 0x1, [@nested={0x4, 0xd5}, @generic="147f43865b8e15de46707c2205913b0f7bdada73957ede577c634ffb619949fd7d606fce7434446b8533fbc01447eb1c208a79f2b59f830d525c1f9e0bb6d22f64c3243b56a579dbc80fcdacae5293e9ae81da2d067abce1edad2428f248f27e43514c75a6584b3a428632b1e9fb5077bb29061d21af", @nested={0x4, 0x70}, @generic="cb397736ea43a1dd787371be8cc198f0e327f19bc20ffa51b0b1e03180ed", @nested={0x4, 0xae}, @nested={0x4, 0x157}, @generic="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", @typed={0x8, 0x11c, 0x0, 0x0, @ipv4=@rand_addr=0x64010101}, @generic="ea88a62e34597af0cacde0a936e5d8878658c3153963413cf13687a991deb922e71d01e496f8b4dcbf3bb5be49c63c48941fa042de8cb837a2c667f3879ed587e252215314536693d30b34195122bdf5a54da7b74c91fb6e63ccafc299e1eeffb6949f"]}, @typed={0x4, 0xa3}, @nested={0x14, 0x97, 0x0, 0x1, [@nested={0x4, 0x4e}, @typed={0x8, 0xca, 0x0, 0x0, @ipv4=@empty}, @nested={0x4, 0x10d}]}, @nested={0x14, 0x9e, 0x0, 0x1, [@nested={0x4, 0x10d}, @nested={0x4, 0xa2}, @typed={0x8, 0x57, 0x0, 0x0, @pid}]}, @nested={0xc, 0x8, 0x0, 0x1, [@typed={0x8, 0x3, 0x0, 0x0, @u32=0xffffff6b}]}, @nested={0x1a4, 0x141, 0x0, 0x1, [@generic="ab8541a96ce1e0ac0f570fc43ca84a2fcec7b92f526a4f6ececae90352f06000f4b4cbc7c671885350d17bc20a61e57b478fb1d7634724d1b2070e5de3cdd1476c22", @generic, @generic="a71923a73048a95c9c03f1f290916a68b1d5087510f49d4042aef636e1ece076cf3041e8eff175d77d91c0f97cc353edba0dff259a583ff85f034e790dc555acc1ca8901a731d1607d0c19faf3a8a23397c91f7d6ebc4d5c0f6c25d81deae27b", @generic="2f02a562477ab312a4f3b18a9fd809fafb86d79fd53dfdcc7c83abce4acb8f42a29214716900715ff102c09857a3330a6666c07dce324dea8e0e1fd08ed2da5c39c45330a56631cd991246696945c38da336b57b8ab7ea0b2d8014f56eb4345a4f22d9e446e33ad68253907ba0264d8a9635494fa7521e7e68b2b90a7edd856a", @generic="a554a35636250abf65c1cdac3d30414d56ff3fcb773b8a55e5737be93b519e499c7936ee37a22be907c5e76014b4ec79360ad626e41af8d80ecb2e722da473f293ca44402d3e5e80dd5bb6474021ebdd9971f2d9670418f7e143703293d91d2e531e726f6e93255f462f9e05104a05d5997cd77fd2dd", @typed={0x8, 0xf9, 0x0, 0x0, @ipv4=@broadcast}]}, @typed={0x4, 0x141}, @typed={0xa, 0xbc, 0x0, 0x0, @str='ramfs\x00'}]}, @nested={0x1538, 0x7a, 0x0, 0x1, [@generic="3ab0da9790de27d587b899508618b1ad8ed17e4a15303b488a4a9bc594629854c752ea7b08e936299713efad7d7433b7e756d48ccc7fdbb5196626765a80eb6fc27dcff7813250a7d58d24dc4620bc9af4bf5cf591577db26a1700328c999c157834d3c57d041feac6bca8abf233efe08db910f29ea2df", @generic="06fb515b1fb9d05efdbe8a79747d1999fce7f194bb4e19d3ca2cace87a773892292ba3df3632c05614d63aaf01c3e9ca31d62d22f85fca967a59af9f0eaa90cf97108d2935869ac2f90541272dd15bf3b187d8a25aaa929fac3b85bb99ecad76688d0a493b72abf59d2249baefa8a69c2d3fa889ca69f9bbc9f9753d739ffa4a817b4d626d5dc92fa27a360fd27af4498b472a56620cec0499a553e3b17281be7c7db0b7f0fdb37556843ef88860820f6a2f8bd03c5e5974173943cc", @generic="8f486851efab8bc765adf2b92ebafbc9e433b04f44a93df15f1b6524c633a2856fecdba6c2326a6fdd2c4634eb80d09d284e197574e3acec4de934d4fc77438c2f86be85a257d640ebcfefe1f907878d60adfb79317a2f8889e8ad741e6e03c65ec597b72b46319fc2a70796664449be2450851ff39fe9626f2bbc8fba643c97bf228133334fe1e49f9088b0c512dddcebfa3d281dd00203b887f0845d98aff5d7bce4c2c1bd46d9d45bd2f037f5e988762ab55a5c4f814cd3b96a21278317bef198bb1ab893f01b22fb07bf57342ce71a9b49c8dc612f80bcef2ef4d5f753be76e0565d51", @nested={0x131c, 0x139, 0x0, 0x1, [@nested={0x1317, 0xb0, 0x0, 0x1, [@nested={0x1220, 0xe6, 0x0, 0x1, [@generic="8a279ec740bd2a04da02ca83bec914926d65af1fb7121e77dfabfddc9f898cb578a467257c2cb7e780f1b86d6ec3ce513e3a160a579b3bb0cf11e3cc", @typed={0x8, 0x120, 0x0, 0x0, @pid}, @nested={0x11d8, 0x2, 0x0, 0x1, [@generic="5c714c21725d5faa12fac90a1a5d1802a6ad6bccebe637bc6408407d7a88a5fa326d", @typed={0x8, 0x1d, 0x0, 0x0, @ipv4=@local}, @typed={0x8, 0x11f, 0x0, 0x0, @ipv4=@rand_addr=0x64010101}, @typed={0x4, 0x70}, @nested={0x4, 0x25}, @generic="2548678ba1dc229c33f3c2753c0908339d1a51ed6f8a30a3d40fde111312a82a6a1f711e71faa59a58921f80d546d8bb818ac5e9b25227cbaa2284acc5a656f6aadc0de675473bcd67840d69ee5ed7e0e02508fac67ef8eeb2166609e15729e813d02a2ed031b10f82ab2a4907fab7a2963ee54ffe8d14dad7b86561620ef221ec4825dc8d3c33842f9a3300d4d0cd5ea09ae9492e5ab523915ee99d38434ce772e26889d9860a4915eb2107654b41830269204db1a0d2b152458a135ba4e80735d3df1dee58db75d189b188467edc6716fc39ab5f3e7c9e7ca92d2f18308b71a6533c1aca9f156d", @generic="3814deb8c7050ae292100058cb3bd3cd40455f9905a3ec73968dfa76b22cee77dcca8c0d3585e36cc20020179717151551b360b0a27b66bc561ce32e62bef25bea34092c15d6fc3b9b3aa6217b8a65384cce0a8cfe56973ca2bbcd31640856e5d3df117a6404dbffff5703387c3d4720e129641682b4a03c0400f0357e71c8c575237ab1686bf80b804ce685d3521d034eed67117982c247d22d37b6e518cc3c1ed3fa9c2fe35ae6c89b1351d4755807080a", @generic="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"]}]}, @generic="3c28c8675dec621b3c6e19b9e1dce2fb0ef8a04dd60544268977d8e64becf01bec59a6bfd7d4fa0d672d6ca606e6fabe9b9acce38b006ee5f21f856201de450d446dc44d230ca65d074461c4a5e451e9ff47cd355bbdbb0911bd0888e31417627f8e362a1b26722065081c3e6744c439a6b287c132f915d32cc023e549edbef85fc7a9a35fca5110e9096d47b5f9606e0221f42d96fe58af48fa434b822e5e6be18ebb3f2d13aa9c7cfec7199f51e073686d3e7dbc3632afdc91208aa6c533c2c8040d0107a046583b377df0a5f891018cfe315b8793ca183311aa7e7bd00a88e6b93f719457783afabd44163755d453e06f07"]}]}]}]}]}]}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x2870}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10010, 0x0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002800), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000001500)={0x28, 0x4000, 0x0, @my=0x1}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r3, 0x28, 0x2, &(0x7f0000000000)=0x3, 0x8) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) close_range(r4, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000000)='tracefs\x00', 0x121a052, 0x0) mount$fuseblk(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x24000, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) futex(&(0x7f000000cffc)=0x4, 0x11e, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r5, 0x1, 0x1c, 0x0, &(0x7f0000000200)=0x44) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2a05004, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x5, 0x4}) r6 = socket(0x26, 0x2, 0x6) ioctl$SIOCGETLINKNAME(r6, 0x89e0, 0x0) umount2(&(0x7f00000002c0)='./file0/file0\x00', 0xc) 5m56.25463704s ago: executing program 1 (id=187): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x20a, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x98, 0x0, &(0x7f0000000440)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}, @transaction_sg={0x40486311, {0x7ffffffe, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 5m55.937166482s ago: executing program 1 (id=194): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000f558000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c"], 0xfc}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) 5m55.582982894s ago: executing program 32 (id=194): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000f558000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c"], 0xfc}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) 8.079451809s ago: executing program 3 (id=2963): r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x1, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0) close(r1) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) (async) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000000c0)={{{@in6=@loopback, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@empty}}, &(0x7f00000001c0)=0xe8) (async) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r5) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x1826800, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@mmap}], [{@fowner_lt={'fowner<', r3}}, {@euid_lt={'euid<', r5}}, {@smackfsroot={'smackfsroot', 0x3d, '^/,\xe7'}}, {@seclabel}, {@subj_user={'subj_user', 0x3d, '/dev/snd/pcmC#D#p\x00'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '.\x00'}}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@smackfsroot={'smackfsroot', 0x3d, '/dev/snd/controlC#\x00'}}]}}) (async) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)=0x3) r6 = syz_open_dev$sndpcmp(&(0x7f0000000b00), 0x0, 0x14b000) (async) syz_open_dev$sndpcmp(&(0x7f0000000440), 0x2000000000, 0x204240) (async) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) (async) ptrace$getregset(0x4205, r7, 0x2, &(0x7f0000000380)={0x0}) (async) close(r6) 7.97020741s ago: executing program 3 (id=2965): ioctl$SIOCRSSCAUSE(0xffffffffffffffff, 0x89e1, 0x0) syz_usb_connect(0x0, 0x10b, 0x0, 0x0) syz_usb_connect$sierra_net(0x5, 0x3f, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x2, 0x2, 0x40, 0x2, 0x9, 0xd6}, {0x9, 0x5, 0xf, 0x2, 0x400, 0xaf, 0x0, 0x30}, {0x9, 0x5, 0xe, 0x3, 0x8, 0x0, 0x6, 0x2}}}}}}]}}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(r0, &(0x7f0000008340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)=[@timestamping={{0x14, 0x1, 0x25, 0x3}}], 0x18}}], 0x4000000000002a0, 0x40004000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x1, 0x7fff, 0x1, 0x2, 0x9, 0xa4, 0xffb, 0x7, 0xb69, 0xc1, 0x4, 0x1, 0x3, 0x5, 0x101, 0x1000, 0x9, 0x3, 0x3, 0x1, 0xfffffffa, 0x0, 0x6, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x762, 0x3, 0xd, 0xe, 0x2b12, 0x100, 0x6, 0x1c00, 0xb, 0x7, 0xbed4, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0x8, 0x5, 0x79b, 0x2, 0x1, 0x7f, 0x4, 0xa, 0x7, 0xf, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x2, 0x180000, 0x4007, 0x8b, 0x5, 0x2af, 0xf7, 0x5, 0x2, 0x6, 0x9, 0x4, 0x7, 0x4009, 0x0, 0x4, 0x100002, 0x8, 0x752, 0x0, 0x1005, 0x0, 0x10001, 0x2, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x8, 0x2, 0x84, 0x100, 0x5, 0x252, 0x81, 0xb, 0x5, 0x20006, 0x5, 0x2, 0xb, 0x2, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x3, 0x401, 0x66cd, 0x8, 0x8, 0x1, 0x1fc, 0xc5c, 0xffffffff]}}) poll(0x0, 0x0, 0x9) socketpair(0x9, 0x5, 0x7, &(0x7f0000000040)) syz_usb_connect$uac1(0x1, 0xe4, &(0x7f00000001c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd2, 0x3, 0x1, 0x9, 0x50, 0x81, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x8, 0xf9}, [@output_terminal={0x9, 0x24, 0x3, 0x4, 0x303, 0x2, 0x1, 0x64}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x80, 0x1, 0x4, 0x0, "fb7eeb01fdf1"}, @as_header={0x7, 0x24, 0x1, 0xd, 0x6, 0x1}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0xf9, 0x3, 0x5, 0x81, "65b0af", "93"}, @format_type_i_continuous={0xe, 0x24, 0x2, 0x1, 0x3, 0x1, 0x6, 0x7f, "926191", "7eb0b7"}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x8, 0x3, 0x8, 0x3, 'L'}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x1c, 0x2, 0x7, 0x6, "", "a4edeb"}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x5, 0x2, 0xa, {0x7, 0x25, 0x1, 0x1, 0x8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x7, 0x1, 0x5}, @as_header={0x7, 0x24, 0x1, 0x9, 0x4, 0x1001}, @format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x9ce, 0x5, 0x1, "dc98e2535b28d107c3"}, @as_header={0x7, 0x24, 0x1, 0x3, 0x5}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0xff, 0xc, 0x3, {0x7, 0x25, 0x1, 0x82, 0x40, 0x6}}}}}}}]}}, &(0x7f0000000480)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x110, 0xe, 0x6, 0x4, 0x40, 0x7}, 0xc, &(0x7f00000002c0)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x1a, 0xe, 0x1, 0x10}]}, 0x5, [{0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0xfcff}}, {0x64, &(0x7f0000000340)=@string={0x64, 0x3, "ccdfd4b8ada31b5248a6d401749320fc825bc87362a3411f503f0ef6ed7fccf279cd89e1968e932198a1fcf010d2e16a5667265196538bf6c2e9b3fef6c07f08314924e9d538b499494e844183226169084fdcd471b9d35f058384cb53ed62b941b7"}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x4ff}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x418}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x827}}]}) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000080)) 5.240625345s ago: executing program 0 (id=3000): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0}, 0x2020) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x800000, &(0x7f0000000180)={[{@nofavordynmods}, {@subsystem='net_cls'}, {@name={'name', 0x3d, '\\)*@%[-!&$*'}}, {@release_agent={'release_agent', 0x3d, './file0'}}], [{@euid_eq}, {@uid_gt={'uid>', r1}}]}) mount$cgroup(0x0, 0x0, 0x0, 0x10004, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') r3 = socket$nl_route(0x10, 0x3, 0x0) sendfile(r3, r2, 0x0, 0x8) 5.123116358s ago: executing program 0 (id=3001): r0 = shmget$private(0x0, 0x3000, 0x200, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000003000/0x2000)=nil, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) 5.039892689s ago: executing program 0 (id=3003): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fd7000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000003680)=@vmx={0x0, 0x0, 0x2080, {0x0, 0x0, {}, 0x0, 0x2}}) ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000000480)=@svm={0x1, 0x1, 0x1080, {0xe000}, {"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"}}) 4.897337578s ago: executing program 3 (id=3004): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) mlock(&(0x7f0000400000/0xc00000)=nil, 0xc00000) mremap(&(0x7f0000bfd000/0x400000)=nil, 0x400000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 4.767037988s ago: executing program 0 (id=3006): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x44, 0x2, 0x6, 0x3, 0x0, 0x0, {0xd}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x4800) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x38, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x10048047}, 0x4000050) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0x5, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000840}, 0x4800) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB='8\x00\x00\x00\n'], 0x38}, 0x1, 0x0, 0x0, 0x10048047}, 0x4000050) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3.935945118s ago: executing program 3 (id=3008): socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x4, 0x8031, 0xffffffffffffffff, 0x295eb000) r0 = socket(0x14, 0x2, 0x4) ioctl$NBD_SET_TIMEOUT(r0, 0x61e1, 0x8) 3.514789596s ago: executing program 2 (id=3011): r0 = syz_open_dev$usbfs(&(0x7f0000000480), 0x200, 0xa401) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000240)={0x20, 0xc, 0x0, 0x1ff}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.363130352s ago: executing program 2 (id=3012): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x30, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x1, [{0x2, 0x1}]}, @void, @void, @void, @void, @void, @void}, 0x2f) r4 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="e00000001000"], 0xe0}, 0x1, 0x0, 0x0, 0x48000}, 0x4040840) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000380)=@mgmt_frame=@assoc_resp={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val, @void}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_MGMT(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000500)={0x44, r6, 0x1, 0x0, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x11}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0xb}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_IE={0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x404c045}, 0x10) 3.185594918s ago: executing program 3 (id=3013): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6}]}) openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 2.395054265s ago: executing program 2 (id=3017): socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) socket$nl_netfilter(0x10, 0x3, 0xc) socket$igmp6(0xa, 0x3, 0x2) socket(0x10, 0x3, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = socket(0x14, 0x2, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x61d0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f00000003c0)={0x0, 0xfffffffffffffe69, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYRES32=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20040024}, 0x8040) 2.329610275s ago: executing program 4 (id=3018): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/comedi4\x00', 0x80600, 0x0) r1 = dup(r0) ioctl$KVM_CREATE_VCPU(r1, 0x6405, 0xfffffffffffffffc) 2.23229455s ago: executing program 4 (id=3019): r0 = signalfd(0xffffffffffffffff, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0x11, 0x4, @tid=r1}, &(0x7f0000000080)) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000040)="d8000000100081044e81f782db44b90402", 0x11}], 0x1}, 0x60044084) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) syz_80211_inject_frame(0x0, &(0x7f0000000040)=@ctrl_frame=@rts={{}, {0xa}, @device_b, @broadcast}, 0x10) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r5], 0x1c}}, 0x4008054) write$nci(r2, &(0x7f0000000240)=@NCI_OP_CORE_RESET_NTF={0x0, 0x1, 0x3, 0x0, 0x9, {0x45, 0x2, 0x20, 0x2, 0xf, 0x4}}, 0xc) write$nci(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="5001"], 0x14) read$FUSE(r0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) 1.161283211s ago: executing program 2 (id=3020): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/comedi4\x00', 0x80600, 0x0) r1 = dup(r0) ioctl$KVM_CREATE_VCPU(r1, 0x6410, 0xfffffffffffffffc) 866.435962ms ago: executing program 2 (id=3021): r0 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_SET_PROPERTY(r0, 0x40106f52, &(0x7f0000000000)={0x21, &(0x7f00000000c0)=[{0x11, '\x00', @data=0x6, 0x9}]}) ioctl$FE_READ_STATUS(r0, 0x80046f45, &(0x7f0000000040)) 767.175833ms ago: executing program 2 (id=3022): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0x30, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0) syz_80211_inject_frame(&(0x7f0000000040)=@device_b, &(0x7f0000000280)=ANY=[@ANYBLOB="50000000080211000001ffffffffffff0802110000000000000000000000000064000100000602020202020201010b"], 0x48) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, 0x0) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f00000021c0)=ANY=[@ANYBLOB="b00000000802110000010802110000000802110000001000000002"], 0x1e) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000440)=ANY=[@ANYBLOB="10000000080211000001080211000000080211000000200004a000000c0001"], 0x3c) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TDLS_OPER(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, r1, 0xfd39e943ccf1163b, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}, @NL80211_ATTR_MAC={0xa}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000010}, 0x50) 533.612384ms ago: executing program 4 (id=3023): r0 = syz_open_dev$sndpcmc(&(0x7f0000000180), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r0, 0xc2604110, &(0x7f0000000680)={0x3, [[0x7fff], [0x0, 0x100000], [0x100091]], '\x00', [{0x0, 0x102}], '\x00', 0x300}) 365.256257ms ago: executing program 4 (id=3024): openat$comedi(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/comedi4\x00', 0x80600, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0x640f, 0xfffffffffffffffc) 311.530959ms ago: executing program 4 (id=3025): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x800, 0x0) r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x2200, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4048aecb, &(0x7f0000000080)) close_range(r0, 0xffffffffffffffff, 0x0) 173.672254ms ago: executing program 0 (id=3026): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0503000000000000000007000000", @ANYRES32], 0x1c}}, 0x4) 97.073287ms ago: executing program 4 (id=3027): openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/devices\x00', 0x0, 0x0) io_setup(0x3, &(0x7f0000000140)=0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000100), 0x80000, 0x0) r1 = socket(0xa, 0x2, 0x3d) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x2028000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000000300)=""/102392, 0x18ff8) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0) mbind(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1, &(0x7f0000000000)=0x101, 0x29, 0x1) set_mempolicy_home_node(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0) r3 = syz_open_dev$video(&(0x7f0000000080), 0x5, 0x109380) read(r3, 0x0, 0x0) migrate_pages(0x0, 0x6, &(0x7f0000000200)=0x9811, &(0x7f0000000240)=0x9) r4 = socket(0xa, 0x3, 0x87) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000000)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x76}) ioctl$sock_inet6_tcp_SIOCINQ(r4, 0x8916, 0x0) r5 = getpid() tgkill(0xffffffffffffffff, r5, 0x1e) accept$alg(r1, 0x0, 0x0) capset(&(0x7f0000019300)={0x19980330, r5}, &(0x7f0000019340)={0x3bba00, 0x6, 0x7fffffff, 0x8, 0x7ff, 0x15f}) io_setup(0x2, &(0x7f0000000180)=0x0) io_submit(r6, 0x0, &(0x7f0000000940)) io_submit(r0, 0x1, &(0x7f0000000080)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x1}]) 3.062975ms ago: executing program 3 (id=3028): madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) 0s ago: executing program 0 (id=3029): socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x4, 0x8031, 0xffffffffffffffff, 0x295eb000) munmap(&(0x7f0000000000/0x2000)=nil, 0x2000) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket(0x14, 0x2, 0x4) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) kernel console output (not intermixed with test programs): rue grabbed [ 389.666760][T12106] vivid-000: Enable Output Scaler: true grabbed [ 389.720470][T12106] vivid-000: Tx RGB Quantization Range: Automatic grabbed [ 389.771113][T12106] vivid-000: Transmit Mode: HDMI grabbed [ 389.776894][T12106] vivid-000: Hotplug Present: 0x00000000 [ 389.816090][T12106] vivid-000: RxSense Present: 0x00000000 [ 389.840702][T12106] vivid-000: EDID Present: 0x00000000 [ 389.866266][T12106] vivid-000: ================== END STATUS ================== [ 389.905079][T12130] netlink: 340 bytes leftover after parsing attributes in process `syz.2.2328'. [ 389.907638][T12106] vivid-000: ================= START STATUS ================= [ 389.944428][T12106] vivid-000: Enable Output Cropping: true grabbed [ 389.961881][T12106] vivid-000: Enable Output Composing: true grabbed [ 389.981713][T12106] vivid-000: Enable Output Scaler: true grabbed [ 389.992768][T12130] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2328'. [ 390.001567][T12106] vivid-000: Tx RGB Quantization Range: Automatic grabbed [ 390.018529][T12106] vivid-000: Transmit Mode: HDMI grabbed [ 390.033348][T12106] vivid-000: Hotplug Present: 0x00000000 [ 390.062293][T12106] vivid-000: RxSense Present: 0x00000000 [ 390.085215][T12106] vivid-000: EDID Present: 0x00000000 [ 390.119426][T12106] vivid-000: ================== END STATUS ================== [ 390.137826][T12106] vivid-000: ================= START STATUS ================= [ 390.167856][T12106] vivid-000: Enable Output Cropping: true grabbed [ 390.185977][T12106] vivid-000: Enable Output Composing: true grabbed [ 390.212465][T12106] vivid-000: Enable Output Scaler: true grabbed [ 390.228963][T12106] vivid-000: Tx RGB Quantization Range: Automatic grabbed [ 390.256682][T12106] vivid-000: Transmit Mode: HDMI grabbed [ 390.270080][ T5828] Bluetooth: hci4: command tx timeout [ 390.287813][T12106] vivid-000: Hotplug Present: 0x00000000 [ 390.321942][T12106] vivid-000: RxSense Present: 0x00000000 [ 390.344092][T12106] vivid-000: EDID Present: 0x00000000 [ 390.366699][T12106] vivid-000: ================== END STATUS ================== [ 390.401665][T12106] vivid-000: ================= START STATUS ================= [ 390.417401][T12106] vivid-000: Enable Output Cropping: true grabbed [ 390.438829][T12106] vivid-000: Enable Output Composing: true grabbed [ 390.464675][T12106] vivid-000: Enable Output Scaler: true grabbed [ 390.495951][T12106] vivid-000: Tx RGB Quantization Range: Automatic grabbed [ 390.537667][T12106] vivid-000: Transmit Mode: HDMI grabbed [ 390.570456][T12106] vivid-000: Hotplug Present: 0x00000000 [ 390.576190][T12106] vivid-000: RxSense Present: 0x00000000 [ 390.618910][T12106] vivid-000: EDID Present: 0x00000000 [ 390.624409][T12106] vivid-000: ================== END STATUS ================== [ 390.676741][T12106] vivid-000: ================= START STATUS ================= [ 390.718142][T12106] vivid-000: Enable Output Cropping: true grabbed [ 390.748390][T12106] vivid-000: Enable Output Composing: true grabbed [ 390.798291][T12106] vivid-000: Enable Output Scaler: true grabbed [ 390.829440][T12106] vivid-000: Tx RGB Quantization Range: Automatic grabbed [ 390.844909][T12106] vivid-000: Transmit Mode: HDMI grabbed [ 390.857364][T12106] vivid-000: Hotplug Present: 0x00000000 [ 390.870233][T12106] vivid-000: RxSense Present: 0x00000000 [ 390.878477][T12153] netlink: 'syz.4.2335': attribute type 29 has an invalid length. [ 390.892374][T12106] vivid-000: EDID Present: 0x00000000 [ 390.903356][T12106] vivid-000: ================== END STATUS ================== [ 390.938981][T12106] vivid-000: ================= START STATUS ================= [ 391.005773][T12106] vivid-000: Enable Output Cropping: true grabbed [ 391.037570][T12158] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2336'. [ 391.047874][T12106] vivid-000: Enable Output Composing: true grabbed [ 391.047920][T12106] vivid-000: Enable Output Scaler: true grabbed [ 391.047952][T12106] vivid-000: Tx RGB Quantization Range: Automatic grabbed [ 391.047983][T12106] vivid-000: Transmit Mode: HDMI grabbed [ 391.048030][T12106] vivid-000: Hotplug Present: 0x00000000 [ 391.048061][T12106] vivid-000: RxSense Present: 0x00000000 [ 391.048085][T12106] vivid-000: EDID Present: 0x00000000 [ 391.048114][T12106] vivid-000: ================== END STATUS ================== [ 391.123952][T12106] vivid-000: ================= START STATUS ================= [ 391.151063][T12106] vivid-000: Enable Output Cropping: true grabbed [ 391.159653][T12106] vivid-000: Enable Output Composing: true grabbed [ 391.166960][T12106] vivid-000: Enable Output Scaler: true grabbed [ 391.183735][T12106] vivid-000: Tx RGB Quantization Range: Automatic grabbed [ 391.205466][T12106] vivid-000: Transmit Mode: HDMI grabbed [ 391.232554][T12106] vivid-000: Hotplug Present: 0x00000000 [ 391.238313][T12106] vivid-000: RxSense Present: 0x00000000 [ 391.276880][T12106] vivid-000: EDID Present: 0x00000000 [ 391.326741][T12106] vivid-000: ================== END STATUS ================== [ 391.368641][T12106] vivid-000: ================= START STATUS ================= [ 391.376922][T12106] vivid-000: Enable Output Cropping: true grabbed [ 391.405134][T12106] vivid-000: Enable Output Composing: true grabbed [ 391.424140][T12106] vivid-000: Enable Output Scaler: true grabbed [ 391.439460][T12106] vivid-000: Tx RGB Quantization Range: Automatic grabbed [ 391.459921][T12106] vivid-000: Transmit Mode: HDMI grabbed [ 391.474578][T12106] vivid-000: Hotplug Present: 0x00000000 [ 391.489771][T12106] vivid-000: RxSense Present: 0x00000000 [ 391.509153][T12106] vivid-000: EDID Present: 0x00000000 [ 391.514627][T12106] vivid-000: ================== END STATUS ================== [ 391.694348][T12173] random: crng reseeded on system resumption [ 391.784876][T12178] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2342'. [ 391.796954][T12180] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2344'. [ 392.058768][ T5892] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 392.136937][T12196] netlink: 340 bytes leftover after parsing attributes in process `syz.3.2348'. [ 392.151122][T12196] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2348'. [ 392.235651][ T5892] usb 1-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 392.264519][ T5892] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 392.297554][ T5892] usb 1-1: config 0 descriptor?? [ 392.321578][ T5892] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 392.528829][ T5892] gp8psk: usb in 128 operation failed. [ 392.547432][ T5892] gp8psk: usb in 137 operation failed. [ 392.556709][ T5892] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 392.577162][ T5892] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver) [ 392.596164][ T5892] usb 1-1: media controller created [ 392.636740][ T5892] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 392.686336][ T5892] gp8psk_fe: Frontend attached [ 392.706995][ T5892] usb 1-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 392.715873][ T5892] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 392.769926][ T5878] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 392.928784][ T5878] usb 3-1: Using ep0 maxpacket: 32 [ 392.941928][ T5878] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 392.968262][ T5878] usb 3-1: config 0 has no interface number 0 [ 392.974859][ T5878] usb 3-1: config 0 interface 12 has no altsetting 0 [ 392.986162][ T5878] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 392.995525][ T5878] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 393.006633][ T5878] usb 3-1: Product: syz [ 393.012058][ T5878] usb 3-1: Manufacturer: syz [ 393.016711][ T5878] usb 3-1: SerialNumber: syz [ 393.025499][ T5878] usb 3-1: config 0 descriptor?? [ 393.031494][ T5892] gp8psk: usb in 137 operation failed. [ 393.041221][ T5892] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected. [ 393.052645][ T5892] gp8psk: found Genpix USB device pID = 203 (hex) [ 393.064129][ T5892] usb 1-1: USB disconnect, device number 13 [ 393.165782][ T5892] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected. [ 393.358749][T12228] overlayfs: refusing to follow metacopy origin for (/file1) [ 393.370965][T12228] evm: overlay not supported [ 393.562324][T12238] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2360'. [ 393.733000][ T5899] usb 5-1: new full-speed USB device number 116 using dummy_hcd [ 393.794525][T12247] binder: 12246:12247 ioctl c0306201 2000000003c0 returned -14 [ 393.878938][ T10] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 393.891108][ T5899] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 393.899603][ T5899] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 393.909870][ T5899] usb 5-1: config 0 has no interface number 0 [ 393.916065][ T5899] usb 5-1: config 0 interface 41 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 393.929249][ T5899] usb 5-1: config 0 interface 41 has no altsetting 0 [ 393.938443][ T5899] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 393.948487][ T5899] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 393.958026][ T5899] usb 5-1: Product: syz [ 393.962763][ T5899] usb 5-1: Manufacturer: syz [ 393.967477][ T5899] usb 5-1: SerialNumber: syz [ 393.975115][ T5899] usb 5-1: config 0 descriptor?? [ 393.985491][ T5899] CoreChips 5-1:0.41: probe with driver CoreChips failed with error -22 [ 394.030893][ T10] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 394.040319][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 394.053930][ T10] usb 4-1: config 0 descriptor?? [ 394.064875][ T10] cp210x 4-1:0.0: cp210x converter detected [ 394.469563][ T10] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 394.680083][T12242] loop6: detected capacity change from 0 to 2640 [ 394.687429][T12242] buffer_io_error: 11 callbacks suppressed [ 394.687448][T12242] Buffer I/O error on dev loop6, logical block 0, async page read [ 394.701934][T12242] Buffer I/O error on dev loop6, logical block 0, async page read [ 394.711368][T12242] Buffer I/O error on dev loop6, logical block 0, async page read [ 394.723251][T12242] Buffer I/O error on dev loop6, logical block 0, async page read [ 394.731314][T12242] Buffer I/O error on dev loop6, logical block 0, async page read [ 394.744897][T12242] Buffer I/O error on dev loop6, logical block 0, async page read [ 394.756229][T12252] Buffer I/O error on dev loop6, logical block 0, lost async page write [ 394.764981][T12242] Buffer I/O error on dev loop6, logical block 1, async page read [ 394.773770][T12242] Dev loop6: unable to read RDB block 8 [ 394.780264][T12252] Buffer I/O error on dev loop6, logical block 0, lost async page write [ 394.789788][T12242] Buffer I/O error on dev loop6, logical block 3, async page read [ 394.797781][T12242] loop6: unable to read partition table [ 394.805147][T12242] loop_reread_partitions: partition scan of loop6 (3 ) failed (rc=-5) [ 394.825540][ T10] usb 4-1: cp210x converter now attached to ttyUSB0 [ 394.873518][T12254] sp0: Synchronizing with TNC [ 395.011106][ T10] usb 4-1: USB disconnect, device number 110 [ 395.024436][ T10] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 395.039046][ T10] cp210x 4-1:0.0: device disconnected [ 395.280172][ T5878] f81534 3-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 395.288845][ T5878] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71 [ 395.296203][ T5878] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 395.304194][ T5878] f81534 3-1:0.12: probe with driver f81534 failed with error -71 [ 395.316982][ T5878] usb 3-1: USB disconnect, device number 118 [ 395.849222][ T5892] usb 4-1: new full-speed USB device number 111 using dummy_hcd [ 395.870847][T12267] netlink: 'syz.2.2371': attribute type 6 has an invalid length. [ 395.986014][T12274] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2374'. [ 396.023182][ T5892] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 396.060600][ T5892] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 396.070978][ T5892] usb 4-1: config 0 interface 0 has no altsetting 0 [ 396.077656][ T5892] usb 4-1: New USB device found, idVendor=17ef, idProduct=60ee, bcdDevice= 0.00 [ 396.097758][ T5892] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.119776][ T5892] usb 4-1: config 0 descriptor?? [ 396.199521][ T5949] hid-generic 0000:0000:0000.0029: unknown main item tag 0x0 [ 396.221490][ T5949] hid-generic 0000:0000:0000.0029: hidraw0: HID v0.00 Device [syz1] on syz0 [ 396.428870][ T5949] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 396.521058][ T10] usb 5-1: USB disconnect, device number 116 [ 396.565015][ T5892] lenovo 0003:17EF:60EE.002A: hidraw1: USB HID v0.01 Device [HID 17ef:60ee] on usb-dummy_hcd.3-1/input0 [ 396.576372][ T5949] usb 1-1: device descriptor read/64, error -71 [ 396.585525][ T5933] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 396.768891][ T5933] usb 3-1: Using ep0 maxpacket: 32 [ 396.776099][ T5933] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 396.784792][ T5933] usb 3-1: config 0 has no interface number 0 [ 396.791289][ T5933] usb 3-1: config 0 interface 12 has no altsetting 0 [ 396.801528][ T5933] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 396.810772][ T5933] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 396.819374][ T5933] usb 3-1: Product: syz [ 396.824372][ T5933] usb 3-1: Manufacturer: syz [ 396.829189][ T5933] usb 3-1: SerialNumber: syz [ 396.836591][ T5933] usb 3-1: config 0 descriptor?? [ 396.859057][ T5949] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 396.988817][ T10] usb 5-1: new high-speed USB device number 117 using dummy_hcd [ 396.998828][ T5949] usb 1-1: device descriptor read/64, error -71 [ 397.109392][ T5949] usb usb1-port1: attempt power cycle [ 397.155886][ T10] usb 5-1: config 1 has an invalid interface number: 7 but max is 0 [ 397.164049][ T10] usb 5-1: config 1 has no interface number 0 [ 397.170548][ T10] usb 5-1: config 1 interface 7 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 397.181580][ T10] usb 5-1: config 1 interface 7 altsetting 0 bulk endpoint 0xF has invalid maxpacket 1024 [ 397.192820][ T10] usb 5-1: config 1 interface 7 altsetting 0 endpoint 0xE has an invalid bInterval 0, changing to 7 [ 397.207125][ T10] usb 5-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 397.216764][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.225065][ T10] usb 5-1: Product: syz [ 397.229427][ T10] usb 5-1: Manufacturer: syz [ 397.234622][ T10] usb 5-1: SerialNumber: syz [ 397.243391][T12292] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 397.251563][T12292] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 397.261853][ T10] usb 5-1: Error in usbnet_get_endpoints (-22) [ 397.378289][T12260] nvme_fabrics: missing parameter 'transport=%s' [ 397.385550][T12260] nvme_fabrics: missing parameter 'nqn=%s' [ 397.393514][ T5917] usb 4-1: USB disconnect, device number 111 [ 397.468383][T12292] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 397.469087][ T5949] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 397.479215][T12292] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 397.495936][ T10] usb 5-1: USB disconnect, device number 117 [ 397.511280][ T5949] usb 1-1: device descriptor read/8, error -71 [ 397.758925][ T5949] usb 1-1: new full-speed USB device number 17 using dummy_hcd [ 397.789649][ T5949] usb 1-1: device descriptor read/8, error -71 [ 397.899202][ T5949] usb usb1-port1: unable to enumerate USB device [ 397.954189][T12295] netlink: 'syz.3.2382': attribute type 29 has an invalid length. [ 398.093757][T12300] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2385'. [ 398.448900][ T5917] usb 5-1: new high-speed USB device number 118 using dummy_hcd [ 398.518861][ T5833] usb 4-1: new full-speed USB device number 112 using dummy_hcd [ 398.611502][ T5917] usb 5-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 398.621467][ T5917] usb 5-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 398.634907][ T5917] usb 5-1: config 0 interface 0 has no altsetting 0 [ 398.641665][ T5917] usb 5-1: New USB device found, idVendor=0079, idProduct=1843, bcdDevice= 0.00 [ 398.651283][ T5917] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 398.663997][ T5917] usb 5-1: config 0 descriptor?? [ 398.680489][ T5833] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 398.689078][ T5833] usb 4-1: config 0 has no interface number 0 [ 398.695504][ T5833] usb 4-1: config 0 interface 41 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 398.706842][ T5833] usb 4-1: config 0 interface 41 has no altsetting 0 [ 398.716724][ T5833] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 398.726675][ T5833] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.734908][ T5833] usb 4-1: Product: syz [ 398.740406][ T5833] usb 4-1: Manufacturer: syz [ 398.745194][ T5833] usb 4-1: SerialNumber: syz [ 398.753675][ T5833] usb 4-1: config 0 descriptor?? [ 398.770045][ T5833] CoreChips 4-1:0.41: probe with driver CoreChips failed with error -22 [ 398.883998][ T5917] hid_mf 0003:0079:1843.002B: hidraw1: USB HID v0.00 Device [HID 0079:1843] on usb-dummy_hcd.4-1/input0 [ 398.895997][ T5917] hid_mf 0003:0079:1843.002B: Force feedback for HJZ Mayflash game controller adapters by Marcel Hasler [ 399.081860][T12302] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 399.087470][ T5933] f81534 3-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 399.098431][T12305] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 399.111518][ T5933] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71 [ 399.115517][T12302] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 399.125256][ T5933] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 399.134265][T12305] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 399.144790][ T5933] f81534 3-1:0.12: probe with driver f81534 failed with error -71 [ 399.155424][ T5833] usb 5-1: USB disconnect, device number 118 [ 399.163451][ T5933] usb 3-1: USB disconnect, device number 119 [ 399.498636][ T5830] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 399.509655][ T5830] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 399.518788][ T5830] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 399.526872][ T5830] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 399.535593][ T5830] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 399.893078][T12317] chnl_net:caif_netlink_parms(): no params data found [ 400.083760][T12317] bridge0: port 1(bridge_slave_0) entered blocking state [ 400.091429][T12317] bridge0: port 1(bridge_slave_0) entered disabled state [ 400.099324][T12317] bridge_slave_0: entered allmulticast mode [ 400.109484][T12317] bridge_slave_0: entered promiscuous mode [ 400.119990][T12317] bridge0: port 2(bridge_slave_1) entered blocking state [ 400.127495][T12317] bridge0: port 2(bridge_slave_1) entered disabled state [ 400.140092][T12317] bridge_slave_1: entered allmulticast mode [ 400.149869][T12317] bridge_slave_1: entered promiscuous mode [ 400.217186][T12317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 400.229000][ T5878] usb 5-1: new high-speed USB device number 119 using dummy_hcd [ 400.242836][T12317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 400.294165][T12317] team0: Port device team_slave_0 added [ 400.305510][T12317] team0: Port device team_slave_1 added [ 400.351629][T12317] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 400.358635][T12317] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 400.386271][T12317] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 400.400682][T12317] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 400.408253][T12317] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 400.435559][T12317] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 400.447885][ T5878] usb 5-1: config 1 has an invalid interface number: 7 but max is 0 [ 400.456643][ T5878] usb 5-1: config 1 has no interface number 0 [ 400.463460][ T5878] usb 5-1: config 1 interface 7 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 400.488756][ T5878] usb 5-1: config 1 interface 7 altsetting 0 bulk endpoint 0xF has invalid maxpacket 1024 [ 400.508773][ T5878] usb 5-1: config 1 interface 7 altsetting 0 endpoint 0xE has an invalid bInterval 0, changing to 7 [ 400.531093][ T5878] usb 5-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 400.540427][ T5878] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 400.548560][ T5878] usb 5-1: Product: syz [ 400.553309][ T5878] usb 5-1: Manufacturer: syz [ 400.557946][ T5878] usb 5-1: SerialNumber: syz [ 400.570184][T12328] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 400.583942][T12328] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 400.595821][ T5878] usb 5-1: Error in usbnet_get_endpoints (-22) [ 400.604547][T12317] hsr_slave_0: entered promiscuous mode [ 400.615936][T12317] hsr_slave_1: entered promiscuous mode [ 400.813119][T12328] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 400.822780][T12328] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 400.832989][ T5833] usb 5-1: USB disconnect, device number 119 [ 400.908351][T12317] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.992678][T12317] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.054247][T12317] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.153611][T12317] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.341910][ T5833] usb 4-1: USB disconnect, device number 112 [ 401.392683][T12317] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 401.469902][T12317] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 401.493703][T12317] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 401.527333][T12317] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 401.631511][ T5830] Bluetooth: hci1: command tx timeout [ 401.741956][T12317] 8021q: adding VLAN 0 to HW filter on device bond0 [ 401.778061][T12317] 8021q: adding VLAN 0 to HW filter on device team0 [ 401.814039][ T1145] bridge0: port 1(bridge_slave_0) entered blocking state [ 401.821290][ T1145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 401.834120][T12377] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2408'. [ 401.857585][ T1145] bridge0: port 2(bridge_slave_1) entered blocking state [ 401.864849][ T1145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 402.128851][ T5892] usb 5-1: new full-speed USB device number 120 using dummy_hcd [ 402.200262][T12317] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 402.260344][ T5878] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 402.276015][T12317] veth0_vlan: entered promiscuous mode [ 402.292846][T12317] veth1_vlan: entered promiscuous mode [ 402.294718][ T5892] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 402.311664][ T5892] usb 5-1: config 0 has no interface number 0 [ 402.317827][ T5892] usb 5-1: config 0 interface 41 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 402.329291][ T5892] usb 5-1: config 0 interface 41 has no altsetting 0 [ 402.338320][ T5892] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 402.348369][ T5892] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 402.358258][ T5892] usb 5-1: Product: syz [ 402.362663][ T5892] usb 5-1: Manufacturer: syz [ 402.367809][ T5892] usb 5-1: SerialNumber: syz [ 402.372669][ T5917] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 402.386558][ T5892] usb 5-1: config 0 descriptor?? [ 402.396095][ T5892] CoreChips 5-1:0.41: probe with driver CoreChips failed with error -22 [ 402.426485][ T5878] usb 3-1: config 1 has an invalid interface number: 7 but max is 0 [ 402.439803][T12317] veth0_macvtap: entered promiscuous mode [ 402.449209][ T5878] usb 3-1: config 1 has no interface number 0 [ 402.455983][ T5878] usb 3-1: config 1 interface 7 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 402.466800][ T5878] usb 3-1: config 1 interface 7 altsetting 0 bulk endpoint 0xF has invalid maxpacket 1024 [ 402.471704][T12317] veth1_macvtap: entered promiscuous mode [ 402.484000][ T5878] usb 3-1: config 1 interface 7 altsetting 0 endpoint 0xE has an invalid bInterval 0, changing to 7 [ 402.501455][ T5878] usb 3-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 402.511486][ T5878] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 402.519297][ T5917] usb 4-1: device descriptor read/64, error -71 [ 402.525925][ T5878] usb 3-1: Product: syz [ 402.531002][ T5878] usb 3-1: Manufacturer: syz [ 402.535817][ T5878] usb 3-1: SerialNumber: syz [ 402.545432][T12384] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 402.553436][T12384] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 402.563398][T12317] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 402.568360][ T5878] usb 3-1: Error in usbnet_get_endpoints (-22) [ 402.601835][T12317] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 402.624239][ T1154] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.633826][ T1154] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.646485][ T1154] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.656869][ T1154] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.750180][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 402.758147][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 402.768759][ T5917] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 402.782978][T12384] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 402.793776][T12384] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 402.805333][ T5892] usb 3-1: USB disconnect, device number 120 [ 402.851643][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 402.860420][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 402.928967][ T5917] usb 4-1: device descriptor read/64, error -71 [ 403.022103][T12400] netlink: 'syz.0.2415': attribute type 29 has an invalid length. [ 403.039587][ T5917] usb usb4-port1: attempt power cycle [ 403.127925][T12404] netlink: 165 bytes leftover after parsing attributes in process `syz.0.2417'. [ 403.388954][ T5917] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 403.410157][ T5917] usb 4-1: device descriptor read/8, error -71 [ 403.459871][ T5833] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 403.620375][ T5833] usb 1-1: Using ep0 maxpacket: 8 [ 403.634237][ T5833] usb 1-1: config index 0 descriptor too short (expected 6427, got 27) [ 403.642860][ T5833] usb 1-1: config 0 has an invalid interface number: 21 but max is 0 [ 403.656880][ T5833] usb 1-1: config 0 has no interface number 0 [ 403.666165][ T5833] usb 1-1: config 0 interface 21 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 403.668957][ T5917] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 403.676702][ T5833] usb 1-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 403.702419][ T5833] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 403.714713][ T5833] usb 1-1: config 0 descriptor?? [ 403.718416][ T5830] Bluetooth: hci1: command tx timeout [ 403.750175][ T5917] usb 4-1: device descriptor read/8, error -71 [ 403.859473][ T5917] usb usb4-port1: unable to enumerate USB device [ 403.933932][T12408] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 403.939794][ T5833] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 403.953355][ T5917] usb 1-1: USB disconnect, device number 18 [ 404.100216][ T5833] usb 3-1: Using ep0 maxpacket: 16 [ 404.111184][ T5833] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 404.120387][ T5833] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 404.128392][ T5833] usb 3-1: Product: syz [ 404.133345][ T5833] usb 3-1: Manufacturer: syz [ 404.137967][ T5833] usb 3-1: SerialNumber: syz [ 404.147368][ T5833] r8152-cfgselector 3-1: Unknown version 0x0000 [ 404.153925][ T5833] r8152-cfgselector 3-1: config 0 descriptor?? [ 404.575740][ T5833] r8152-cfgselector 3-1: USB disconnect, device number 121 [ 404.778914][ T10] usb 1-1: new full-speed USB device number 19 using dummy_hcd [ 404.881552][ T29] usb 5-1: USB disconnect, device number 120 [ 404.932939][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 404.942622][ T10] usb 1-1: not running at top speed; connect to a high speed hub [ 404.954997][ T10] usb 1-1: config 6 has an invalid interface number: 150 but max is 0 [ 404.956206][T12443] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2426'. [ 404.967254][ T10] usb 1-1: config 6 has an invalid interface association descriptor of length 2, skipping [ 404.986522][ T10] usb 1-1: config 6 has no interface number 0 [ 404.993944][ T10] usb 1-1: config 6 interface 150 altsetting 3 endpoint 0x6 has an invalid bInterval 0, changing to 4 [ 405.005608][ T10] usb 1-1: config 6 interface 150 has no altsetting 0 [ 405.016779][ T10] usb 1-1: New USB device found, idVendor=12d1, idProduct=76d8, bcdDevice=5d.76 [ 405.026291][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 405.034936][ T10] usb 1-1: Product: syz [ 405.039518][ T10] usb 1-1: Manufacturer: syz [ 405.044606][ T10] usb 1-1: SerialNumber: syz [ 405.085696][T12445] netlink: 'syz.4.2427': attribute type 27 has an invalid length. [ 405.193223][T12445] bridge0: port 2(bridge_slave_1) entered disabled state [ 405.201090][T12445] bridge0: port 1(bridge_slave_0) entered disabled state [ 405.271705][ T10] usb 1-1: USB disconnect, device number 19 [ 405.365081][T12445] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 405.383553][T12445] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 405.430425][ T5833] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 405.546208][ T13] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.557465][ T13] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.576731][ T13] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.591941][ T5833] usb 3-1: config 1 has an invalid interface number: 7 but max is 0 [ 405.598957][ T13] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.614719][ T5833] usb 3-1: config 1 has no interface number 0 [ 405.624977][ T5833] usb 3-1: config 1 interface 7 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 405.636394][ T5833] usb 3-1: config 1 interface 7 altsetting 0 bulk endpoint 0xF has invalid maxpacket 1024 [ 405.647012][ T5833] usb 3-1: config 1 interface 7 altsetting 0 endpoint 0xE has an invalid bInterval 0, changing to 7 [ 405.665044][ T5833] usb 3-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 405.695909][ T5833] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 405.717981][ T5833] usb 3-1: Product: syz [ 405.723996][ T5833] usb 3-1: Manufacturer: syz [ 405.728892][ T5833] usb 3-1: SerialNumber: syz [ 405.741359][T12448] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 405.750664][T12465] overlayfs: workdir and upperdir must be separate subtrees [ 405.760891][T12448] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 405.772849][ T5833] usb 3-1: Error in usbnet_get_endpoints (-22) [ 405.790216][ T5830] Bluetooth: hci1: command tx timeout [ 405.975365][T12448] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 405.984965][T12448] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 405.995897][ T5833] usb 3-1: USB disconnect, device number 122 [ 406.601612][T12478] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2440'. [ 406.901841][ T5833] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 406.992224][T12495] netlink: 'syz.0.2448': attribute type 29 has an invalid length. [ 407.040398][T12497] binder: 12496:12497 ioctl c0306201 2000000003c0 returned -14 [ 407.071046][ T5833] usb 3-1: Using ep0 maxpacket: 16 [ 407.080616][ T5833] usb 3-1: config 0 interface 0 has no altsetting 0 [ 407.087293][ T5833] usb 3-1: New USB device found, idVendor=058f, idProduct=9410, bcdDevice= 0.00 [ 407.098062][ T5833] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 407.117633][ T5830] Bluetooth: hci1: unexpected event 0x2f length: 509 > 260 [ 407.119716][ T5833] usb 3-1: config 0 descriptor?? [ 407.208903][ T5878] usb 4-1: new high-speed USB device number 117 using dummy_hcd [ 407.269829][ T12] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 407.357569][ T5833] usbhid 3-1:0.0: can't add hid device: -32 [ 407.364770][ T5833] usbhid 3-1:0.0: probe with driver usbhid failed with error -32 [ 407.381251][ T5878] usb 4-1: config 1 has an invalid interface number: 7 but max is 0 [ 407.390529][ T5878] usb 4-1: config 1 has no interface number 0 [ 407.396696][ T5878] usb 4-1: config 1 interface 7 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 407.408207][ T5878] usb 4-1: config 1 interface 7 altsetting 0 bulk endpoint 0xF has invalid maxpacket 1024 [ 407.419347][ T5878] usb 4-1: config 1 interface 7 altsetting 0 endpoint 0xE has an invalid bInterval 0, changing to 7 [ 407.434174][ T5878] usb 4-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 407.443658][ T5878] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 407.451894][ T5878] usb 4-1: Product: syz [ 407.456217][ T5878] usb 4-1: Manufacturer: syz [ 407.462947][ T5878] usb 4-1: SerialNumber: syz [ 407.474527][T12493] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 407.482478][T12493] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 407.493018][ T5878] usb 4-1: Error in usbnet_get_endpoints (-22) [ 407.696605][T12493] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 407.707051][T12493] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 407.723580][ T10] usb 4-1: USB disconnect, device number 117 [ 407.779009][ T5878] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 407.811154][ T5833] usb 3-1: USB disconnect, device number 123 [ 407.848922][T12512] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 407.860689][ T5830] Bluetooth: hci1: command tx timeout [ 407.861331][T12512] netlink: 'syz.2.2454': attribute type 10 has an invalid length. [ 407.878655][T12512] netlink: 232 bytes leftover after parsing attributes in process `syz.2.2454'. [ 407.949946][ T5878] usb 1-1: Using ep0 maxpacket: 8 [ 407.957084][ T5878] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 407.976079][ T5878] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 407.986836][T12517] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2456'. [ 408.003008][ T5878] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 408.016176][ T5878] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 408.029051][ T5878] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 408.042587][ T5878] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 408.052193][ T5878] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 408.315937][T12526] netlink: 'syz.3.2460': attribute type 29 has an invalid length. [ 408.379892][ T5917] usb 5-1: new high-speed USB device number 121 using dummy_hcd [ 408.563497][ T5917] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 408.578908][ T5917] usb 5-1: config 0 has no interface number 0 [ 408.602074][ T5917] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 408.619041][ T5917] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 408.632759][ T5917] usb 5-1: Product: syz [ 408.636997][ T5917] usb 5-1: Manufacturer: syz [ 408.643160][ T5917] usb 5-1: SerialNumber: syz [ 408.653928][ T5917] usb 5-1: config 0 descriptor?? [ 408.863782][ T5917] dvb_usb_ec168 5-1:0.1: probe with driver dvb_usb_ec168 failed with error -71 [ 408.888297][ T5917] usb 5-1: USB disconnect, device number 121 [ 409.030551][ T5878] usb 4-1: new high-speed USB device number 118 using dummy_hcd [ 409.192043][T12561] usbtmc 1-1:16.0: simple control status returned 80 [ 409.201551][ T5878] usb 4-1: config 1 has an invalid interface number: 7 but max is 0 [ 409.209956][ T5878] usb 4-1: config 1 has no interface number 0 [ 409.217094][ T5878] usb 4-1: config 1 interface 7 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 409.227121][ T5878] usb 4-1: config 1 interface 7 altsetting 0 bulk endpoint 0xF has invalid maxpacket 1024 [ 409.237541][ T5878] usb 4-1: config 1 interface 7 altsetting 0 endpoint 0xE has an invalid bInterval 0, changing to 7 [ 409.251808][ T5878] usb 4-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 409.261933][ T5878] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 409.270046][ T5878] usb 4-1: Product: syz [ 409.274365][ T5878] usb 4-1: Manufacturer: syz [ 409.279809][ T5878] usb 4-1: SerialNumber: syz [ 409.289738][T12549] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 409.297459][T12549] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 409.307662][ T5878] usb 4-1: Error in usbnet_get_endpoints (-22) [ 409.432042][T12563] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2474'. [ 409.520342][T12549] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 409.530981][T12549] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 409.541415][ T5917] usb 4-1: USB disconnect, device number 118 [ 409.738901][ T29] usb 5-1: new high-speed USB device number 122 using dummy_hcd [ 409.900685][ T29] usb 5-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 409.909998][ T29] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 409.920877][ T29] usb 5-1: config 0 descriptor?? [ 409.932265][ T29] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 409.988950][ T5917] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 410.136219][T12565] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 410.146906][ T5917] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 140, changing to 11 [ 410.158641][T12565] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 410.166798][ T5917] usb 3-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 410.178885][ T29] gp8psk: usb in 128 operation failed. [ 410.188874][ T5917] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 410.202349][ T29] gp8psk: usb in 137 operation failed. [ 410.204311][T12565] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 410.207947][ T29] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 410.225702][ T29] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver) [ 410.225757][ T29] usb 5-1: media controller created [ 410.243063][T12565] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 410.251245][ T5917] usb 3-1: config 0 descriptor?? [ 410.291626][ T29] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 410.316969][ T29] gp8psk_fe: Frontend attached [ 410.323968][ T29] usb 5-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 410.350138][ T29] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 410.430650][T12574] kvm: kvm [12572]: vcpu128, guest rIP: 0xfff0 Unhandled RDMSR(0x40000076) [ 410.551257][ T5833] usb 1-1: USB disconnect, device number 20 [ 410.629783][ T29] gp8psk: usb in 137 operation failed. [ 410.643015][ T29] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected. [ 410.668754][ T29] gp8psk: found Genpix USB device pID = 203 (hex) [ 410.696345][ T29] usb 5-1: USB disconnect, device number 122 [ 410.745944][T12583] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2483'. [ 410.765878][ T5917] hid-picolcd 0003:04D8:C002.002C: No report with id 0x11 found [ 410.815817][ T29] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected. [ 410.879380][ T5833] usb 3-1: USB disconnect, device number 124 [ 410.919520][ T24] usb 4-1: new full-speed USB device number 119 using dummy_hcd [ 411.090697][ T24] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 411.099002][ T24] usb 4-1: config 0 has no interface number 0 [ 411.105140][ T24] usb 4-1: config 0 interface 41 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 411.115117][ T24] usb 4-1: config 0 interface 41 has no altsetting 0 [ 411.124456][ T24] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 411.133715][ T5949] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 411.141470][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 411.149883][ T24] usb 4-1: Product: syz [ 411.154633][ T24] usb 4-1: Manufacturer: syz [ 411.160165][ T24] usb 4-1: SerialNumber: syz [ 411.167819][ T24] usb 4-1: config 0 descriptor?? [ 411.182255][ T24] CoreChips 4-1:0.41: probe with driver CoreChips failed with error -22 [ 411.311323][ T5949] usb 1-1: config 1 has an invalid interface number: 7 but max is 0 [ 411.319636][ T5949] usb 1-1: config 1 has no interface number 0 [ 411.325974][ T5949] usb 1-1: config 1 interface 7 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 411.338836][ T5949] usb 1-1: config 1 interface 7 altsetting 0 bulk endpoint 0xF has invalid maxpacket 1024 [ 411.349065][ T5949] usb 1-1: config 1 interface 7 altsetting 0 endpoint 0xE has an invalid bInterval 0, changing to 7 [ 411.363514][ T5949] usb 1-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 411.374658][ T5949] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 411.383341][ T5949] usb 1-1: Product: syz [ 411.387796][ T5949] usb 1-1: Manufacturer: syz [ 411.393427][ T5949] usb 1-1: SerialNumber: syz [ 411.404429][T12587] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 411.412040][T12587] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 411.426298][ T5949] usb 1-1: Error in usbnet_get_endpoints (-22) [ 411.631593][T12587] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 411.649308][T12587] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 411.665114][ T5878] usb 1-1: USB disconnect, device number 21 [ 411.728238][T12603] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2492'. [ 411.928852][ T5833] usb 5-1: new high-speed USB device number 123 using dummy_hcd [ 412.035343][ T5828] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 412.046722][ T5828] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 412.069296][ T5828] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 412.077677][ T5828] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 412.087988][ T5828] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 412.089300][ T5833] usb 5-1: Using ep0 maxpacket: 16 [ 412.111247][ T5833] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 412.149733][ T5833] usb 5-1: New USB device found, idVendor=172f, idProduct=0037, bcdDevice= 0.00 [ 412.169597][ T5833] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 412.211717][ T5833] usb 5-1: config 0 descriptor?? [ 412.345212][T12613] netlink: 'syz.0.2495': attribute type 29 has an invalid length. [ 412.643286][ T5833] waltop 0003:172F:0037.002D: unknown main item tag 0x0 [ 412.650615][ T5833] waltop 0003:172F:0037.002D: unknown main item tag 0x0 [ 412.657792][ T5833] waltop 0003:172F:0037.002D: unknown main item tag 0x0 [ 412.671654][ T1145] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.683851][ T5833] waltop 0003:172F:0037.002D: unknown main item tag 0x0 [ 412.691819][ T5833] waltop 0003:172F:0037.002D: unknown main item tag 0x0 [ 412.709420][ T5833] waltop 0003:172F:0037.002D: hidraw0: USB HID v0.00 Device [HID 172f:0037] on usb-dummy_hcd.4-1/input0 [ 412.723516][T12609] chnl_net:caif_netlink_parms(): no params data found [ 412.864727][ T1145] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.940231][T12631] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2501'. [ 413.023018][ T1145] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.040411][T12609] bridge0: port 1(bridge_slave_0) entered blocking state [ 413.051136][T12609] bridge0: port 1(bridge_slave_0) entered disabled state [ 413.058560][T12609] bridge_slave_0: entered allmulticast mode [ 413.078911][T12609] bridge_slave_0: entered promiscuous mode [ 413.089004][T12609] bridge0: port 2(bridge_slave_1) entered blocking state [ 413.096642][T12609] bridge0: port 2(bridge_slave_1) entered disabled state [ 413.104231][T12609] bridge_slave_1: entered allmulticast mode [ 413.114204][T12609] bridge_slave_1: entered promiscuous mode [ 413.153557][ T1145] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.187442][T12609] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 413.210518][T12609] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 413.256410][T12609] team0: Port device team_slave_0 added [ 413.266931][T12609] team0: Port device team_slave_1 added [ 413.319234][ T5833] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 413.347050][T12609] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 413.355646][T12609] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 413.382957][T12609] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 413.397074][T12609] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 413.405110][T12609] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 413.432256][T12609] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 413.480577][ T5833] usb 1-1: config 1 has an invalid interface number: 7 but max is 0 [ 413.489053][ T5833] usb 1-1: config 1 has no interface number 0 [ 413.495376][ T5833] usb 1-1: config 1 interface 7 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 413.510831][ T5833] usb 1-1: config 1 interface 7 altsetting 0 bulk endpoint 0xF has invalid maxpacket 1024 [ 413.523796][ T5833] usb 1-1: config 1 interface 7 altsetting 0 endpoint 0xE has an invalid bInterval 0, changing to 7 [ 413.537348][ T5833] usb 1-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 413.551001][ T5833] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 413.564667][ T5833] usb 1-1: Product: syz [ 413.569281][ T5833] usb 1-1: Manufacturer: syz [ 413.573971][ T5833] usb 1-1: SerialNumber: syz [ 413.589252][T12641] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 413.600270][T12641] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 413.612158][T12609] hsr_slave_0: entered promiscuous mode [ 413.622495][T12609] hsr_slave_1: entered promiscuous mode [ 413.628414][ T5833] usb 1-1: Error in usbnet_get_endpoints (-22) [ 413.634786][T12609] debugfs: 'hsr0' already exists in 'hsr' [ 413.634848][T12609] Cannot create hsr debugfs directory [ 413.669017][ T1145] bridge_slave_1: left allmulticast mode [ 413.674750][ T1145] bridge_slave_1: left promiscuous mode [ 413.689842][ T1145] bridge0: port 2(bridge_slave_1) entered disabled state [ 413.713995][ T5833] usb 4-1: USB disconnect, device number 119 [ 413.727585][ T1145] bridge_slave_0: left allmulticast mode [ 413.741264][ T1145] bridge_slave_0: left promiscuous mode [ 413.747499][ T1145] bridge0: port 1(bridge_slave_0) entered disabled state [ 413.837764][T12641] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 413.860622][T12641] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 413.891683][ T5949] usb 1-1: USB disconnect, device number 22 [ 414.100333][ T1145] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 414.113757][ T1145] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 414.124856][ T1145] bond0 (unregistering): Released all slaves [ 414.158896][ T5833] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 414.179209][ T5828] Bluetooth: hci3: command tx timeout [ 414.277507][ T1145] tipc: Left network mode [ 414.329006][ T5833] usb 4-1: Using ep0 maxpacket: 8 [ 414.348302][ T5833] usb 4-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=c4.6d [ 414.364512][ T5833] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 414.377741][ T5833] usb 4-1: Product: syz [ 414.382154][ T5833] usb 4-1: Manufacturer: syz [ 414.387052][ T5833] usb 4-1: SerialNumber: syz [ 414.395944][ T5833] usb 4-1: config 0 descriptor?? [ 414.423053][ T5833] gspca_main: sonixj-2.14.0 probing 0c45:614a [ 414.760474][ T5949] usb 5-1: USB disconnect, device number 123 [ 414.896132][ T1145] hsr_slave_0: left promiscuous mode [ 414.911874][ T1145] hsr_slave_1: left promiscuous mode [ 414.918520][ T1145] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 414.926835][ T1145] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 414.939280][ T1145] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 414.958817][ T1145] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 414.991450][ T1145] veth1_macvtap: left promiscuous mode [ 414.997233][ T1145] veth0_macvtap: left promiscuous mode [ 415.003696][ T1145] veth1_vlan: left promiscuous mode [ 415.009176][ T1145] veth0_vlan: left promiscuous mode [ 415.371884][ T1145] team0 (unregistering): Port device team_slave_1 removed [ 415.389366][ T1145] team0 (unregistering): Port device team_slave_0 removed [ 415.463551][ T5833] usb 5-1: new full-speed USB device number 124 using dummy_hcd [ 415.543367][T12675] netlink: 'syz.0.2508': attribute type 29 has an invalid length. [ 415.651946][ T5833] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 415.661774][ T5833] usb 5-1: config 0 has no interface number 0 [ 415.668649][ T5833] usb 5-1: config 0 interface 41 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 415.703854][ T5833] usb 5-1: config 0 interface 41 has no altsetting 0 [ 415.715349][ T5833] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 415.743068][ T5833] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 415.781443][ T5833] usb 5-1: Product: syz [ 415.786352][ T5833] usb 5-1: Manufacturer: syz [ 415.791424][ T5833] usb 5-1: SerialNumber: syz [ 415.805787][ T5833] usb 5-1: config 0 descriptor?? [ 415.834584][ T5833] CoreChips 5-1:0.41: probe with driver CoreChips failed with error -22 [ 416.121001][ T1145] IPVS: stop unused estimator thread 0... [ 416.191350][T12609] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 416.249063][T12609] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 416.258882][ T5828] Bluetooth: hci3: command tx timeout [ 416.287621][T12609] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 416.347889][T12609] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 416.656909][T12609] 8021q: adding VLAN 0 to HW filter on device bond0 [ 416.719500][T12609] 8021q: adding VLAN 0 to HW filter on device team0 [ 416.759750][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 416.767079][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 416.831965][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 416.839319][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 417.210205][ T5878] usb 4-1: USB disconnect, device number 120 [ 417.521418][T12743] FAULT_INJECTION: forcing a failure. [ 417.521418][T12743] name failslab, interval 1, probability 0, space 0, times 0 [ 417.569284][T12609] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 417.579987][T12743] CPU: 1 UID: 0 PID: 12743 Comm: syz.3.2520 Tainted: G L syzkaller #0 PREEMPT(full) [ 417.580027][T12743] Tainted: [L]=SOFTLOCKUP [ 417.580036][T12743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 417.580049][T12743] Call Trace: [ 417.580057][T12743] [ 417.580066][T12743] dump_stack_lvl+0xe8/0x150 [ 417.580100][T12743] should_fail_ex+0x412/0x560 [ 417.580135][T12743] should_failslab+0xa8/0x100 [ 417.580162][T12743] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 417.580183][T12743] ? __alloc_skb+0x186/0x7d0 [ 417.580208][T12743] ? __alloc_skb+0x1d0/0x7d0 [ 417.580232][T12743] ? __local_bh_enable_ip+0xd0/0x130 [ 417.580263][T12743] __alloc_skb+0x1d0/0x7d0 [ 417.580294][T12743] alloc_skb_with_frags+0xca/0x890 [ 417.580327][T12743] ? save_netdev_trace_buffer+0x4f7/0x610 [ 417.580350][T12743] ? __lock_acquire+0x6b5/0x2cf0 [ 417.580382][T12743] sock_alloc_send_pskb+0x878/0x990 [ 417.580420][T12743] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 417.580449][T12743] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 417.580484][T12743] ? dev_get_by_index+0x22/0x2f0 [ 417.580504][T12743] ? dev_get_by_index+0x22/0x2f0 [ 417.580529][T12743] packet_sendmsg+0x33f2/0x5110 [ 417.580569][T12743] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 417.580601][T12743] ? __lock_acquire+0x6b5/0x2cf0 [ 417.580637][T12743] ? __lock_acquire+0x6b5/0x2cf0 [ 417.580675][T12743] ? __pfx_packet_sendmsg+0x10/0x10 [ 417.580716][T12743] ? __pfx_aa_sk_perm+0x10/0x10 [ 417.580744][T12743] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 417.580777][T12743] ? __pfx_packet_sendmsg+0x10/0x10 [ 417.580805][T12743] sock_sendmsg_nosec+0x18f/0x1d0 [ 417.580832][T12743] __sys_sendto+0x3ff/0x590 [ 417.580863][T12743] ? __pfx___sys_sendto+0x10/0x10 [ 417.580888][T12743] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 417.580931][T12743] ? __fget_files+0x3a0/0x420 [ 417.580970][T12743] ? ksys_write+0x242/0x270 [ 417.580993][T12743] ? __pfx_ksys_write+0x10/0x10 [ 417.581032][T12743] __x64_sys_sendto+0xde/0x100 [ 417.581062][T12743] do_syscall_64+0x14d/0xf80 [ 417.581093][T12743] ? trace_irq_disable+0x3b/0x150 [ 417.581123][T12743] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 417.581145][T12743] ? clear_bhb_loop+0x40/0x90 [ 417.581170][T12743] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 417.581189][T12743] RIP: 0033:0x7f231c19c629 [ 417.581209][T12743] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 417.581225][T12743] RSP: 002b:00007f231cf7f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 417.581248][T12743] RAX: ffffffffffffffda RBX: 00007f231c415fa0 RCX: 00007f231c19c629 [ 417.581263][T12743] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 417.581276][T12743] RBP: 00007f231cf7f090 R08: 00002000000001c0 R09: 0000000000000014 [ 417.581291][T12743] R10: 000000002004c860 R11: 0000000000000246 R12: 0000000000000001 [ 417.581304][T12743] R13: 00007f231c416038 R14: 00007f231c415fa0 R15: 00007fffe15f2b08 [ 417.581335][T12743] [ 417.935208][T12609] veth0_vlan: entered promiscuous mode [ 417.951862][T12609] veth1_vlan: entered promiscuous mode [ 418.002214][T12609] veth0_macvtap: entered promiscuous mode [ 418.015770][T12609] veth1_macvtap: entered promiscuous mode [ 418.046628][T12609] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 418.067741][T12609] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 418.139434][ T37] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.170310][ T37] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.206439][ T37] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.246042][ T37] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.289239][ T24] usb 5-1: USB disconnect, device number 124 [ 418.341694][ T5828] Bluetooth: hci3: command tx timeout [ 418.526762][T12761] netlink: 288 bytes leftover after parsing attributes in process `syz.4.2524'. [ 418.571503][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 418.618815][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 418.703922][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 418.737148][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 419.058403][T12783] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2528'. [ 419.359428][ T24] usb 3-1: new full-speed USB device number 125 using dummy_hcd [ 419.583299][ T24] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE4, changing to 0x84 [ 419.608743][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 95, setting to 64 [ 419.648851][ T24] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 419.681639][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 419.725165][ T24] usb 3-1: config 0 descriptor?? [ 419.749082][T12782] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 420.429130][ T5828] Bluetooth: hci3: command tx timeout [ 420.829424][ T24] ath6kl: Failed to submit usb control message: -110 [ 420.836566][ T24] ath6kl: unable to send the bmi data to the device: -110 [ 420.858764][ T24] ath6kl: Unable to send get target info: -110 [ 420.877460][ T24] ath6kl: Failed to init ath6kl core: -110 [ 420.905433][ T24] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 420.976202][T12843] input: syz0 as /devices/virtual/input/input41 [ 421.059847][ T5833] usb 5-1: new high-speed USB device number 125 using dummy_hcd [ 421.208780][ T5833] usb 5-1: Using ep0 maxpacket: 16 [ 421.217964][ T5833] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC6, changing to 0x86 [ 421.248778][ T5833] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 421.268769][ T5833] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 0 [ 421.271402][ T24] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 421.278552][ T5833] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 12592, setting to 1024 [ 421.278584][ T5833] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 421.312665][ T5833] usb 5-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 421.328778][ T5833] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 421.347142][ T5833] usb 5-1: Product: syz [ 421.351444][ T5833] usb 5-1: Manufacturer: syz [ 421.356094][ T5833] usb 5-1: SerialNumber: syz [ 421.371462][ T5833] usb 5-1: config 0 descriptor?? [ 421.378032][T12840] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 421.393997][ C0] port100 5-1:0.0: NFC: Urb failure (status -71) [ 421.401069][ T5833] port100 5-1:0.0: NFC: Could not get supported command types [ 421.468944][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 421.496606][ T24] usb 1-1: unable to get BOS descriptor or descriptor too short [ 421.507092][ T24] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 421.532771][ T24] usb 1-1: can't read configurations, error -71 [ 421.593631][ T5833] usb 5-1: USB disconnect, device number 125 [ 421.906664][T12854] netlink: 340 bytes leftover after parsing attributes in process `syz.3.2549'. [ 421.916735][T12854] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2549'. [ 422.047728][ T29] usb 3-1: USB disconnect, device number 125 [ 422.332436][T12873] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2557'. [ 422.672114][T12896] netlink: 340 bytes leftover after parsing attributes in process `syz.3.2566'. [ 422.689092][T12896] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2566'. [ 422.734155][T12898] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2567'. [ 422.771126][T12900] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2568'. [ 422.839120][ T5833] usb 5-1: new full-speed USB device number 126 using dummy_hcd [ 422.991030][ T5833] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 423.008812][ T5833] usb 5-1: config 0 has no interface number 0 [ 423.014977][ T5833] usb 5-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 423.034210][ T5833] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 423.050807][ T5833] usb 5-1: config 0 descriptor?? [ 423.069909][ T5833] usb 5-1: selecting invalid altsetting 1 [ 423.078395][ T5833] dvb_ttusb_budget: ttusb_init_controller: error [ 423.085313][ T5833] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 423.100150][ T24] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 423.154329][ T5833] DVB: Unable to find symbol cx22700_attach() [ 423.190775][ T5833] DVB: Unable to find symbol tda10046_attach() [ 423.197211][ T5833] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 423.277975][ T24] usb 1-1: New USB device found, idVendor=1b80, idProduct=e396, bcdDevice=a7.b1 [ 423.287445][ T24] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 423.296114][ T24] usb 1-1: Manufacturer: syz [ 423.305239][ T5878] usb 4-1: new high-speed USB device number 121 using dummy_hcd [ 423.314402][ T24] usb 1-1: config 0 descriptor?? [ 423.331292][ T5833] usb 5-1: USB disconnect, device number 126 [ 423.488302][ T5878] usb 4-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 423.508155][ T5878] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 423.516851][ T5878] usb 4-1: Product: syz [ 423.522117][ T5878] usb 4-1: Manufacturer: syz [ 423.526815][ T5878] usb 4-1: SerialNumber: syz [ 423.556989][ T24] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 423.572516][ T24] dvb_usb_af9015 1-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 423.590955][ T24] usb 1-1: USB disconnect, device number 25 [ 423.877206][T12923] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2578'. [ 423.950704][ T9] usb 3-1: new full-speed USB device number 126 using dummy_hcd [ 424.111790][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 424.123424][ T9] usb 3-1: not running at top speed; connect to a high speed hub [ 424.133795][ T9] usb 3-1: config 17 has an invalid interface number: 8 but max is 1 [ 424.143916][ T9] usb 3-1: config 17 has 1 interface, different from the descriptor's value: 2 [ 424.155319][ T9] usb 3-1: config 17 has no interface number 0 [ 424.161953][ T9] usb 3-1: config 17 interface 8 altsetting 6 endpoint 0x3 has an invalid bInterval 86, changing to 4 [ 424.175164][ T9] usb 3-1: config 17 interface 8 altsetting 6 endpoint 0x3 has invalid maxpacket 62603, setting to 1023 [ 424.186892][ T5833] usb 5-1: new full-speed USB device number 127 using dummy_hcd [ 424.195326][ T9] usb 3-1: config 17 interface 8 has no altsetting 0 [ 424.207372][ T9] usb 3-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=2c.ff [ 424.217245][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 424.225901][ T9] usb 3-1: Product: syz [ 424.230784][ T9] usb 3-1: Manufacturer: syz [ 424.235469][ T9] usb 3-1: SerialNumber: syz [ 424.351520][ T5833] usb 5-1: config 0 has an invalid interface number: 113 but max is 0 [ 424.370668][ T5833] usb 5-1: config 0 has no interface number 0 [ 424.376937][ T5833] usb 5-1: config 0 interface 113 altsetting 2 has an endpoint descriptor with address 0x14, changing to 0x4 [ 424.398797][ T5878] (unnamed net_device) (uninitialized): Assigned a random MAC address: fe:a9:5d:25:19:f8 [ 424.408986][ T5833] usb 5-1: config 0 interface 113 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 424.430432][ T5833] usb 5-1: config 0 interface 113 has no altsetting 0 [ 424.443803][ T5878] rtl8150 4-1:1.0: eth5: rtl8150 is detected [ 424.452549][ T5833] usb 5-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 424.473488][ T5833] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 424.479556][T12933] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2583'. [ 424.496538][ T5833] usb 5-1: Product: syz [ 424.511024][ T5833] usb 5-1: Manufacturer: syz [ 424.525867][ T5833] usb 5-1: SerialNumber: syz [ 424.537212][ T5833] usb 5-1: config 0 descriptor?? [ 424.573031][ C0] usb 5-1: NFC: Urb failure (status -71) [ 424.581240][ T5833] usb 5-1: NFC: Unable to get FW version [ 424.587983][ T5833] pn533_usb 5-1:0.113: probe with driver pn533_usb failed with error -90 [ 424.696280][T12939] netlink: 'syz.0.2585': attribute type 5 has an invalid length. [ 424.704654][T12939] netlink: 176 bytes leftover after parsing attributes in process `syz.0.2585'. [ 424.797659][T12925] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2579'. [ 424.861595][ T5833] usb 5-1: USB disconnect, device number 127 [ 425.713389][ C1] usb 4-1: eth5: intr status -71 [ 425.718033][ T5899] usb 4-1: USB disconnect, device number 121 [ 425.735493][ T5493] usb 4-1: device reset failed [ 425.764068][T12957] netlink: 'syz.4.2587': attribute type 29 has an invalid length. [ 425.857493][T12960] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2588'. [ 425.963215][T12962] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2589'. [ 426.156477][T12971] binder: 12970:12971 ioctl c0306201 2000000002c0 returned -22 [ 426.169750][T12975] binder: BINDER_SET_CONTEXT_MGR already set [ 426.178050][T12975] binder: 12970:12975 ioctl 4018620d 2000000000c0 returned -16 [ 426.340259][T12979] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2593'. [ 426.501367][T12990] openvswitch: netlink: Geneve opt len 1 is not a multiple of 4. [ 426.621110][ T24] usb 4-1: new high-speed USB device number 122 using dummy_hcd [ 426.650566][T12996] netlink: 'syz.0.2598': attribute type 29 has an invalid length. [ 426.711644][ T9] usb 3-1: selecting invalid altsetting 0 [ 426.717455][ T9] usb 3-1: 8:6 : no UAC_FORMAT_TYPE desc [ 426.744830][ T9] usb 3-1: selecting invalid altsetting 0 [ 426.795755][ T24] usb 4-1: device descriptor read/64, error -71 [ 426.874783][ T9] usb 3-1: USB disconnect, device number 126 [ 426.967183][T13009] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2603'. [ 427.050120][ T24] usb 4-1: new high-speed USB device number 123 using dummy_hcd [ 427.204372][ T24] usb 4-1: device descriptor read/64, error -71 [ 427.230709][T13015] netlink: 'syz.0.2606': attribute type 16 has an invalid length. [ 427.241787][T13015] netlink: 'syz.0.2606': attribute type 25 has an invalid length. [ 427.250001][T13015] netlink: 64094 bytes leftover after parsing attributes in process `syz.0.2606'. [ 427.320131][ T24] usb usb4-port1: attempt power cycle [ 427.668746][ T24] usb 4-1: new high-speed USB device number 124 using dummy_hcd [ 427.699725][ T24] usb 4-1: device descriptor read/8, error -71 [ 427.713335][T13033] netlink: 340 bytes leftover after parsing attributes in process `syz.2.2615'. [ 427.819606][ T9] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 427.888791][ T29] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 427.938959][ T24] usb 4-1: new high-speed USB device number 125 using dummy_hcd [ 427.971545][ T24] usb 4-1: device descriptor read/8, error -71 [ 427.990581][ T9] usb 5-1: config 1 has an invalid interface number: 7 but max is 0 [ 427.999088][ T9] usb 5-1: config 1 has no interface number 0 [ 428.005365][ T9] usb 5-1: config 1 interface 7 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 428.015444][ T9] usb 5-1: config 1 interface 7 altsetting 0 bulk endpoint 0xF has invalid maxpacket 1024 [ 428.030945][ T9] usb 5-1: config 1 interface 7 altsetting 0 endpoint 0xE has an invalid bInterval 0, changing to 7 [ 428.044280][ T9] usb 5-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 428.056044][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.064361][ T9] usb 5-1: Product: syz [ 428.068567][ T9] usb 5-1: Manufacturer: syz [ 428.070679][ T29] usb 1-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 428.073970][ T9] usb 5-1: SerialNumber: syz [ 428.089062][ T24] usb usb4-port1: unable to enumerate USB device [ 428.101272][T13025] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 428.106691][ T29] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.110787][T13025] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 428.120534][ T29] usb 1-1: Product: syz [ 428.128477][ T29] usb 1-1: Manufacturer: syz [ 428.133682][ T29] usb 1-1: SerialNumber: syz [ 428.151187][ T29] usb 1-1: config 0 descriptor?? [ 428.153400][ T9] usb 5-1: Error in usbnet_get_endpoints (-22) [ 428.170564][ T29] ch341 1-1:0.0: ch341-uart converter detected [ 428.350672][T13025] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 428.361484][T13025] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 428.373779][ T24] usb 5-1: USB disconnect, device number 2 [ 428.555275][T13056] netlink: 'syz.2.2626': attribute type 29 has an invalid length. [ 428.813342][T13067] pim6reg1: entered allmulticast mode [ 429.185966][T13081] dvmrp12: entered allmulticast mode [ 429.200662][T13031] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 429.221488][T13031] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 429.244029][ T29] ch341-uart ttyUSB0: break control not supported, using simulated break [ 429.248587][T13031] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 429.279282][T13031] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 429.288319][ T29] usb 1-1: ch341-uart converter now attached to ttyUSB0 [ 429.562728][T13096] __nla_validate_parse: 3 callbacks suppressed [ 429.562750][T13096] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2644'. [ 429.588801][ T9] usb 3-1: new high-speed USB device number 127 using dummy_hcd [ 429.716772][T13101] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2645'. [ 429.750480][ T9] usb 3-1: config 1 has an invalid interface number: 7 but max is 0 [ 429.768915][ T9] usb 3-1: config 1 has no interface number 0 [ 429.775137][ T9] usb 3-1: config 1 interface 7 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 429.787717][ T9] usb 3-1: config 1 interface 7 altsetting 0 bulk endpoint 0xF has invalid maxpacket 1024 [ 429.808501][ T9] usb 3-1: config 1 interface 7 altsetting 0 endpoint 0xE has an invalid bInterval 0, changing to 7 [ 429.825152][ T9] usb 3-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 429.834810][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 429.843200][ T9] usb 3-1: Product: syz [ 429.847526][ T9] usb 3-1: Manufacturer: syz [ 429.853370][ T9] usb 3-1: SerialNumber: syz [ 429.864588][T13083] raw-gadget.4 gadget.2: fail, usb_ep_enable returned -22 [ 429.872960][T13083] raw-gadget.4 gadget.2: fail, usb_ep_enable returned -22 [ 429.887951][ T9] usb 3-1: Error in usbnet_get_endpoints (-22) [ 430.093377][T13083] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 430.102372][T13083] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 430.113011][ T9] usb 3-1: USB disconnect, device number 127 [ 430.248891][ T5899] usb 4-1: new high-speed USB device number 126 using dummy_hcd [ 430.413601][ T5899] usb 4-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.05 [ 430.423351][ T5899] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 430.431485][ T5899] usb 4-1: Product: syz [ 430.435972][ T5899] usb 4-1: Manufacturer: syz [ 430.440803][ T5899] usb 4-1: SerialNumber: syz [ 430.447953][ T5899] usb 4-1: config 0 descriptor?? [ 430.458983][ T5899] go7007 4-1:0.0: probe with driver go7007 failed with error -12 [ 430.655763][ T9] usb 4-1: USB disconnect, device number 126 [ 430.728526][ T5899] usb 1-1: USB disconnect, device number 26 [ 430.755756][ T5899] ch341-uart ttyUSB0: ch341-uart converter now disconnected from ttyUSB0 [ 430.779665][ T5899] ch341 1-1:0.0: device disconnected [ 430.968941][ T29] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 431.036015][T13132] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2658'. [ 431.122923][T13136] netlink: 340 bytes leftover after parsing attributes in process `syz.0.2660'. [ 431.132904][T13136] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2660'. [ 431.139965][ T29] usb 3-1: Using ep0 maxpacket: 8 [ 431.151754][ T29] usb 3-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=c4.6d [ 431.162603][ T29] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 431.172013][ T29] usb 3-1: Product: syz [ 431.176356][ T29] usb 3-1: Manufacturer: syz [ 431.181910][ T29] usb 3-1: SerialNumber: syz [ 431.199911][ T29] usb 3-1: config 0 descriptor?? [ 431.212648][ T29] gspca_main: sonixj-2.14.0 probing 0c45:614a [ 431.324362][T13142] vfat: Unknown parameter 'discard7WI[lǒ wp0UmCsY' [ 431.548841][ T9] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 431.713039][ T9] usb 5-1: config 1 has an invalid interface number: 7 but max is 0 [ 431.735897][ T9] usb 5-1: config 1 has no interface number 0 [ 431.754692][ T9] usb 5-1: config 1 interface 7 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 431.765058][ T9] usb 5-1: config 1 interface 7 altsetting 0 bulk endpoint 0xF has invalid maxpacket 1024 [ 431.775996][ T9] usb 5-1: config 1 interface 7 altsetting 0 endpoint 0xE has an invalid bInterval 0, changing to 7 [ 431.792042][ T9] usb 5-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 431.801622][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 431.810315][ T9] usb 5-1: Product: syz [ 431.814611][ T9] usb 5-1: Manufacturer: syz [ 431.820048][ T9] usb 5-1: SerialNumber: syz [ 431.840186][T13140] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 431.847975][T13140] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 431.867892][ T9] usb 5-1: Error in usbnet_get_endpoints (-22) [ 432.088619][T13140] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 432.097705][T13140] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 432.114877][ T9] usb 5-1: USB disconnect, device number 3 [ 432.165127][T13169] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2673'. [ 432.349049][ T24] usb 4-1: new high-speed USB device number 127 using dummy_hcd [ 432.512420][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 432.523492][ T24] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 432.533205][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 432.540188][ T9] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 432.550156][ T24] usb 4-1: config 0 descriptor?? [ 432.702203][ T9] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 432.711387][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 432.723870][ T9] usb 1-1: config 0 descriptor?? [ 432.746907][ T9] cp210x 1-1:0.0: cp210x converter detected [ 432.766820][T13167] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 432.778889][ T24] usbhid 4-1:0.0: can't add hid device: -71 [ 432.784962][ T24] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 432.799247][T13167] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 432.820478][ T24] usb 4-1: USB disconnect, device number 127 [ 433.151774][ T9] cp210x 1-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 433.372027][ T9] usb 1-1: cp210x converter now attached to ttyUSB0 [ 433.567301][ T9] usb 1-1: USB disconnect, device number 27 [ 433.579869][ T9] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 433.590965][ T9] cp210x 1-1:0.0: device disconnected [ 433.748108][ T24] usb 3-1: USB disconnect, device number 2 [ 433.829502][T13198] netlink: 340 bytes leftover after parsing attributes in process `syz.2.2685'. [ 433.839037][T13198] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2685'. [ 433.929048][ T29] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 434.099994][ T29] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 434.114549][ T29] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 434.161419][ T29] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 434.171297][ T29] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 434.184642][ T29] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 434.193953][ T29] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 434.221064][ T29] usb 4-1: config 0 descriptor?? [ 434.546618][T13227] netlink: 'syz.0.2697': attribute type 29 has an invalid length. [ 434.673344][ T29] plantronics 0003:047F:FFFF.002E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 434.974559][ T5833] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 435.140818][ T5833] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 435.153163][ T5833] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 435.163466][ T30] audit: type=1326 audit(1771525411.061:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13261 comm="syz.0.2709" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9652b9c629 code=0x0 [ 435.193985][ T5833] usb 5-1: config 0 descriptor?? [ 435.202007][ T5833] cp210x 5-1:0.0: cp210x converter detected [ 435.486103][ T9] usb 4-1: USB disconnect, device number 2 [ 435.594297][T13282] 9pnet: Found fid 0 not clunked [ 435.624940][ T5833] cp210x 5-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 435.755943][T13288] netlink: 9 bytes leftover after parsing attributes in process `syz.2.2718'. [ 435.767106][T13288] gretap0: entered promiscuous mode [ 435.781099][T13288] netlink: 5 bytes leftover after parsing attributes in process `syz.2.2718'. [ 435.790458][T13288] 0{X: renamed from gretap0 [ 435.797575][T13288] 0{X: left promiscuous mode [ 435.803250][T13288] 0{X: entered allmulticast mode [ 435.814336][T13288] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 435.848968][ T5833] usb 5-1: cp210x converter now attached to ttyUSB0 [ 436.045766][ T5833] usb 5-1: USB disconnect, device number 4 [ 436.069076][ T5833] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 436.106134][ T5833] cp210x 5-1:0.0: device disconnected [ 436.158339][T13298] netlink: 340 bytes leftover after parsing attributes in process `syz.0.2723'. [ 436.168390][T13298] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2723'. [ 436.513176][T13324] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2733'. [ 436.665104][T13331] 9p: Bad value for 'wfdno' [ 436.671985][T13329] netlink: 340 bytes leftover after parsing attributes in process `syz.4.2736'. [ 436.687667][T13331] 9p: Bad value for 'wfdno' [ 436.694684][T13331] 9p: Bad value for 'wfdno' [ 436.699243][ T5833] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 436.700898][T13329] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2736'. [ 436.751353][T13335] hfs: can't find a HFS filesystem on dev nbd0 [ 436.858968][ T5833] usb 4-1: Using ep0 maxpacket: 32 [ 436.866962][ T5833] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 436.881372][T13341] sp0: Synchronizing with TNC [ 436.887760][ T5833] usb 4-1: config 0 has no interface number 0 [ 436.897592][ T5833] usb 4-1: config 0 interface 12 has no altsetting 0 [ 436.919892][ T5833] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 436.929621][ T5833] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 436.937671][ T5833] usb 4-1: Product: syz [ 436.943163][ T5833] usb 4-1: Manufacturer: syz [ 436.947822][ T5833] usb 4-1: SerialNumber: syz [ 436.971041][ T5833] usb 4-1: config 0 descriptor?? [ 436.984249][ T5833] f81534 4-1:0.12: required endpoints missing [ 437.036606][T13345] netlink: 'syz.4.2741': attribute type 178 has an invalid length. [ 437.111925][T13349] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2743'. [ 437.308802][ T5833] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 437.480937][ T5833] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 437.491560][ T5833] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 437.503666][ T5833] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 437.516902][ T5833] usb 1-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 437.526748][ T5833] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 437.534982][ T5833] usb 1-1: Product: syz [ 437.539566][ T5833] usb 1-1: Manufacturer: syz [ 437.544451][ T5833] usb 1-1: SerialNumber: syz [ 437.552735][ T5833] usb 1-1: config 0 descriptor?? [ 437.558990][T13347] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 437.566928][T13347] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 437.576824][ T5833] usb 1-1: ucan: probing device on interface #0 [ 437.675092][T13339] [U] ` [ 438.092841][T13373] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 438.199421][ T5833] ucan 1-1:0.0 can0: registered device [ 438.390738][ T5833] ucan 1-1:0.0 can0: firmware string: unknown [ 438.405474][ T5833] usb 1-1: USB disconnect, device number 28 [ 438.411842][ T5878] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 438.572134][ T5878] usb 3-1: unable to get BOS descriptor or descriptor too short [ 438.590650][ T5878] usb 3-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 438.616591][ T5878] usb 3-1: string descriptor 0 read error: -22 [ 438.635789][ T5878] usb 3-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=26.db [ 438.645140][ T5878] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 438.830993][ T5878] usb 3-1: reset high-speed USB device number 3 using dummy_hcd [ 439.139120][ T24] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 439.296777][ T24] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 439.306852][ T24] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0xD has invalid maxpacket 0 [ 439.316843][ T24] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 439.332916][ T24] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 439.342847][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 439.350923][ T24] usb 5-1: SerialNumber: syz [ 439.484482][ T5833] usb 4-1: USB disconnect, device number 3 [ 439.534373][ T5878] usb 3-1: USB disconnect, device number 3 [ 439.572914][ T24] usbtest 5-1:1.0: Linux user mode ISO test driver [ 439.587103][ T24] usbtest 5-1:1.0: high-speed {control bulk-in bulk-out} tests (+alt) [ 439.620489][ T24] usb 5-1: USB disconnect, device number 5 [ 439.658893][ T29] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 439.678947][ T5878] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 439.758547][T13429] lo: entered promiscuous mode [ 439.774862][T13429] syzkaller1: entered promiscuous mode [ 439.781718][T13429] syzkaller1: entered allmulticast mode [ 439.818885][ T29] usb 1-1: Using ep0 maxpacket: 32 [ 439.827325][ T29] usb 1-1: config 11 has an invalid interface number: 212 but max is 0 [ 439.836857][ T29] usb 1-1: config 11 has no interface number 0 [ 439.844970][ T29] usb 1-1: config 11 interface 212 altsetting 0 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 439.856825][T13428] lo: left promiscuous mode [ 439.858347][ T5878] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 439.874457][ T5878] usb 3-1: New USB device found, idVendor=1a34, idProduct=f705, bcdDevice= 0.00 [ 439.875625][ T29] usb 1-1: New USB device found, idVendor=0bb4, idProduct=0a36, bcdDevice=a0.6d [ 439.884999][ T5878] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 439.897030][ T29] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 439.909907][ T5878] usb 3-1: config 0 descriptor?? [ 439.916177][ T29] usb 1-1: Product: syz [ 439.930793][ T29] usb 1-1: Manufacturer: syz [ 439.937261][ T29] usb 1-1: SerialNumber: syz [ 440.077622][T13434] netlink: 340 bytes leftover after parsing attributes in process `syz.3.2770'. [ 440.087318][T13434] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2770'. [ 440.171397][T13423] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 440.197652][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.219515][T13423] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 440.247998][ T5899] usb 1-1: USB disconnect, device number 29 [ 440.353415][ T5878] acrux 0003:1A34:F705.002F: unexpected long global item [ 440.369526][ T5878] acrux 0003:1A34:F705.002F: parse failed [ 440.382352][ T5878] acrux 0003:1A34:F705.002F: probe with driver acrux failed with error -22 [ 440.564166][ T5899] usb 3-1: USB disconnect, device number 4 [ 440.953787][T13458] binder: 13457:13458 ioctl ae9a 0 returned -22 [ 441.160710][T13466] tmpfs: Bad value for 'mpol' [ 441.170470][T13468] __nla_validate_parse: 1 callbacks suppressed [ 441.170493][T13468] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2786'. [ 441.274396][T13470] netlink: 'syz.0.2787': attribute type 29 has an invalid length. [ 441.661694][ T30] audit: type=1800 audit(1771525417.551:47): pid=13477 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2784" name="/" dev="fuse" ino=4 res=0 errno=0 [ 441.838794][ T5892] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 442.000676][ T5892] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 442.017678][ T5892] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 442.040152][ T5892] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 442.062427][ T5892] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 442.075138][ T5892] usb 5-1: New USB device found, idVendor=0451, idProduct=3410, bcdDevice=ef.1e [ 442.085677][ T5892] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 442.095065][ T5892] usb 5-1: Product: syz [ 442.100527][ T5892] usb 5-1: Manufacturer: syz [ 442.105240][ T5892] usb 5-1: SerialNumber: syz [ 442.115718][ T5892] usb 5-1: config 0 descriptor?? [ 442.128844][ T5892] ti_usb_3410_5052 5-1:0.0: TI USB 3410 1 port adapter converter detected [ 442.143644][ T5892] usb 5-1: TI USB 3410 1 port adapter converter now attached to ttyUSB0 [ 442.158753][ T24] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 442.322894][ T24] usb 1-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 442.353104][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 442.378958][ T24] usb 1-1: Product: syz [ 442.380005][T13502] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2800'. [ 442.383179][ T24] usb 1-1: Manufacturer: syz [ 442.406712][ T5892] usb 5-1: USB disconnect, device number 6 [ 442.418106][ T24] usb 1-1: SerialNumber: syz [ 442.430230][ T5892] ti_usb_3410_5052_1 ttyUSB0: TI USB 3410 1 port adapter converter now disconnected from ttyUSB0 [ 442.458171][ T24] hub 1-1:24.0: bad descriptor, ignoring hub [ 442.466754][ T5892] ti_usb_3410_5052 5-1:0.0: device disconnected [ 442.473389][ T24] hub 1-1:24.0: probe with driver hub failed with error -5 [ 442.559398][T13510] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2799'. [ 442.674278][ T24] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 442.694809][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 442.729534][ T24] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 442.748390][ T24] usb 1-1: media controller created [ 442.783309][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 442.940159][ T24] DVB: Unable to find symbol dib7000p_attach() [ 442.956729][ T24] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 442.983588][ T5878] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 443.059264][ T24] rc_core: IR keymap rc-dib0700-rc5 not found [ 443.065415][ T24] Registered IR keymap rc-empty [ 443.099506][ T24] dvb-usb: could not initialize remote control. [ 443.105830][ T24] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 443.155002][ T5878] usb 3-1: config 0 has an invalid interface number: 111 but max is 0 [ 443.189649][ T5878] usb 3-1: config 0 has no interface number 0 [ 443.201157][ T5878] usb 3-1: New USB device found, idVendor=05a9, idProduct=8065, bcdDevice=41.96 [ 443.211677][ T5878] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 443.231101][ T5878] usb 3-1: config 0 descriptor?? [ 443.253634][ T5878] gspca_main: ov534_9-2.14.0 probing 05a9:8065 [ 443.646291][T13551] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 443.889468][ T5899] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 443.908463][T13564] fuseblk: Unknown parameter 'S fd' [ 443.929648][T13567] fuseblk: Unknown parameter 'S fd' [ 444.070263][ T5899] usb 5-1: Using ep0 maxpacket: 8 [ 444.085722][ T5899] usb 5-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=c4.6d [ 444.111351][ T5899] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 444.131123][ T5899] usb 5-1: Product: syz [ 444.140954][ T5899] usb 5-1: Manufacturer: syz [ 444.145708][ T5899] usb 5-1: SerialNumber: syz [ 444.162348][ T5899] usb 5-1: config 0 descriptor?? [ 444.180557][ T5899] gspca_main: sonixj-2.14.0 probing 0c45:614a [ 444.562269][T13513] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 444.573127][T13513] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 444.642388][ T5878] gspca_ov534_9: reg_w failed -71 [ 444.931448][ T9] usb 1-1: USB disconnect, device number 30 [ 444.940208][ T5878] gspca_ov534_9: Unknown sensor 0000 [ 444.940321][ T5878] ov534_9 3-1:0.111: probe with driver ov534_9 failed with error -22 [ 444.987215][ T5878] usb 3-1: USB disconnect, device number 5 [ 445.028342][ T9] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 445.295021][T13602] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 445.348865][ T9] usb 1-1: new full-speed USB device number 31 using dummy_hcd [ 445.392736][T13606] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2820'. [ 445.510546][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 445.523046][ T9] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 445.532518][ T9] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 445.540865][ T9] usb 1-1: Product: syz [ 445.545193][ T9] usb 1-1: Manufacturer: syz [ 445.551211][ T9] usb 1-1: SerialNumber: syz [ 445.560971][ T9] usb 1-1: config 0 descriptor?? [ 445.606583][ T9] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 445.642981][ T5839] udevd[5839]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 445.774511][T13594] netlink: 'syz.0.2814': attribute type 8 has an invalid length. [ 445.793899][T13594] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 445.804740][T13594] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 445.869743][ T9] usb 1-1: USB disconnect, device number 31 [ 445.887094][T13615] loop8: detected capacity change from 0 to 1 [ 445.896046][T13615] Dev loop8: unable to read RDB block 1 [ 445.904076][T13615] loop8: unable to read partition table [ 445.913013][T13615] loop8: partition table beyond EOD, truncated [ 445.919847][T13615] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 445.943958][ T29] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 446.119227][ T29] usb 3-1: Using ep0 maxpacket: 32 [ 446.126931][ T29] usb 3-1: config 0 has an invalid interface number: 145 but max is 1 [ 446.140743][ T29] usb 3-1: config 0 has an invalid interface number: 43 but max is 1 [ 446.149684][ T29] usb 3-1: config 0 has no interface number 0 [ 446.155820][ T29] usb 3-1: config 0 has no interface number 1 [ 446.163815][ T29] usb 3-1: config 0 interface 43 altsetting 250 bulk endpoint 0xF has invalid maxpacket 1023 [ 446.174560][ T29] usb 3-1: config 0 interface 43 altsetting 250 has a duplicate endpoint with address 0x2, skipping [ 446.197954][ T29] usb 3-1: config 0 interface 43 altsetting 250 has an endpoint descriptor with address 0xCE, changing to 0x8E [ 446.211879][ T29] usb 3-1: config 0 interface 43 altsetting 250 endpoint 0x8E has an invalid bInterval 180, changing to 11 [ 446.225006][ T29] usb 3-1: config 0 interface 43 altsetting 250 endpoint 0x8E has invalid maxpacket 16902, setting to 1024 [ 446.238911][ T29] usb 3-1: config 0 interface 43 altsetting 250 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 446.254207][ T29] usb 3-1: config 0 interface 145 has no altsetting 0 [ 446.273069][ T29] usb 3-1: config 0 interface 43 has no altsetting 0 [ 446.283361][ T29] usb 3-1: New USB device found, idVendor=06cd, idProduct=0104, bcdDevice=c8.6a [ 446.292815][ T29] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 446.301135][ T29] usb 3-1: Product: syz [ 446.305541][ T29] usb 3-1: Manufacturer: syz [ 446.311134][ T29] usb 3-1: SerialNumber: syz [ 446.327870][ T29] usb 3-1: config 0 descriptor?? [ 446.518799][ T5892] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 446.548160][ T29] keyspan_pda 3-1:0.145: required endpoints missing [ 446.573425][ T29] keyspan_pda 3-1:0.43: Keyspan PDA converter detected [ 446.604745][ T29] usb 3-1: Keyspan PDA converter now attached to ttyUSB0 [ 446.631245][ T29] usb 3-1: USB disconnect, device number 6 [ 446.659686][ T29] keyspan_pda ttyUSB0: Keyspan PDA converter now disconnected from ttyUSB0 [ 446.689336][ T9] usb 5-1: USB disconnect, device number 7 [ 446.690329][ T29] keyspan_pda 3-1:0.43: device disconnected [ 446.710020][ T5892] usb 4-1: config 0 has an invalid interface number: 111 but max is 0 [ 446.732758][ T5892] usb 4-1: config 0 has no interface number 0 [ 446.749407][ T5892] usb 4-1: New USB device found, idVendor=05a9, idProduct=8065, bcdDevice=41.96 [ 446.773486][ T5892] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 446.810552][ T5892] usb 4-1: config 0 descriptor?? [ 446.841858][ T5892] gspca_main: ov534_9-2.14.0 probing 05a9:8065 [ 447.210678][T13651] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2831'. [ 447.326934][T13656] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2833'. [ 447.786655][T13671] loop8: detected capacity change from 0 to 1 [ 447.794871][T13671] Dev loop8: unable to read RDB block 1 [ 447.800675][T13671] loop8: unable to read partition table [ 447.806700][T13671] loop8: partition table beyond EOD, truncated [ 447.815167][T13671] loop_reread_partitions: partition scan of loop8 (被x^>  ) failed (rc=-5) [ 447.848830][ T5917] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 447.944937][T13675] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2843'. [ 448.008738][ T5917] usb 3-1: Using ep0 maxpacket: 8 [ 448.027994][ T5917] usb 3-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=c4.6d [ 448.048818][ T5917] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 448.056934][ T5917] usb 3-1: Product: syz [ 448.100499][ T5917] usb 3-1: Manufacturer: syz [ 448.105204][ T5917] usb 3-1: SerialNumber: syz [ 448.132864][ T5917] usb 3-1: config 0 descriptor?? [ 448.147422][T13621] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 448.171222][ T5917] gspca_main: sonixj-2.14.0 probing 0c45:614a [ 448.178019][T13621] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 448.233506][T13682] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2845'. [ 448.335329][ T5892] gspca_ov534_9: reg_w failed -71 [ 448.392429][T13684] netlink: 'syz.0.2846': attribute type 29 has an invalid length. [ 448.648743][ T5892] gspca_ov534_9: Unknown sensor 0000 [ 448.648871][ T5892] ov534_9 4-1:0.111: probe with driver ov534_9 failed with error -22 [ 448.665920][ T5892] usb 4-1: USB disconnect, device number 4 [ 448.777537][T13677] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 449.159340][T13702] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 449.171316][T13702] overlayfs: missing 'lowerdir' [ 449.185113][ T5917] usb 3-1: USB disconnect, device number 7 [ 449.642948][T13714] loop8: detected capacity change from 0 to 1 [ 449.654088][T13714] Dev loop8: unable to read RDB block 1 [ 449.660829][T13714] loop8: unable to read partition table [ 449.667813][T13714] loop8: partition table beyond EOD, truncated [ 449.674129][T13714] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 449.997712][T13722] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2861'. [ 450.018013][T13722] tipc: Invalid UDP bearer configuration [ 450.018072][T13722] tipc: Enabling of bearer rejected, failed to enable media [ 450.062619][T13725] netlink: 340 bytes leftover after parsing attributes in process `syz.2.2862'. [ 450.088979][T13725] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2862'. [ 450.129108][T13729] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2863'. [ 450.308188][T13737] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2867'. [ 450.635887][T13752] netlink: 'syz.2.2873': attribute type 29 has an invalid length. [ 450.671261][T13754] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.2870'. [ 450.749730][ T30] audit: type=1800 audit(1771525426.641:48): pid=13746 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.0.2870" name="/newroot/136/pids.events" dev="tmpfs" ino=724 res=0 errno=0 [ 451.077772][ T5828] Bluetooth: hci3: unexpected event 0x2f length: 509 > 260 [ 451.495896][T13780] netlink: 'syz.0.2884': attribute type 29 has an invalid length. [ 451.710810][ T9] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 451.874247][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 451.886630][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 451.898426][ T9] usb 5-1: New USB device found, idVendor=1532, idProduct=010e, bcdDevice= 0.00 [ 451.908016][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 451.920258][ T9] usb 5-1: config 0 descriptor?? [ 451.928786][ T5899] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 452.080564][ T5899] usb 1-1: config 0 has an invalid interface number: 207 but max is 0 [ 452.088995][ T5899] usb 1-1: config 0 has no interface number 0 [ 452.097612][ T5899] usb 1-1: New USB device found, idVendor=0421, idProduct=00ab, bcdDevice=b3.9a [ 452.106989][ T5899] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 452.115323][ T5899] usb 1-1: Product: syz [ 452.120174][ T5899] usb 1-1: Manufacturer: syz [ 452.125259][ T5899] usb 1-1: SerialNumber: syz [ 452.129991][ T5892] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 452.143503][ T5899] usb 1-1: config 0 descriptor?? [ 452.153075][ T5899] usb 1-1: bad CDC descriptors [ 452.159139][ T5899] cdc_acm 1-1:0.207: Zero length descriptor references [ 452.166241][ T5899] cdc_acm 1-1:0.207: probe with driver cdc_acm failed with error -22 [ 452.281129][ T5892] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 452.291608][ T5892] usb 3-1: New USB device found, idVendor=0471, idProduct=0303, bcdDevice=e5.df [ 452.300846][ T5892] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 452.312642][ T5892] usb 3-1: config 0 descriptor?? [ 452.322284][ T5892] pwc: Philips PCA646VC USB webcam detected. [ 452.351113][T13777] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 452.361221][T13777] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 452.371349][ T5899] usb 1-1: USB disconnect, device number 32 [ 452.384201][ T9] razer 0003:1532:010E.0030: item fetching failed at offset 5/7 [ 452.396028][ T9] razer 0003:1532:010E.0030: probe with driver razer failed with error -22 [ 452.523371][T13805] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 452.534606][T13805] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 452.544527][ T5892] pwc: send_video_command error -71 [ 452.551484][ T5892] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 452.559412][ T5892] Philips webcam 3-1:0.0: probe with driver Philips webcam failed with error -71 [ 452.577521][ T5892] usb 3-1: USB disconnect, device number 8 [ 452.597710][ T24] usb 5-1: USB disconnect, device number 8 [ 452.702023][T13808] netlink: 'syz.3.2895': attribute type 29 has an invalid length. [ 452.799057][T13812] __nla_validate_parse: 3 callbacks suppressed [ 452.799077][T13812] netlink: 188 bytes leftover after parsing attributes in process `syz.3.2897'. [ 453.072116][T13821] faux_driver vgem: [drm] Unknown color mode 181; guessing buffer size. [ 453.327449][T13833] netlink: 'syz.0.2907': attribute type 11 has an invalid length. [ 453.335697][T13833] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2907'. [ 453.424849][T13840] netlink: 6 bytes leftover after parsing attributes in process `syz.4.2909'. [ 453.463026][T13840] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 453.478844][ T5899] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 453.638976][ T5899] usb 3-1: Using ep0 maxpacket: 32 [ 453.650523][ T5899] usb 3-1: config 0 interface 0 has no altsetting 0 [ 453.673704][ T5899] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 453.686617][ T5899] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 453.696896][ T5899] usb 3-1: Product: syz [ 453.701650][ T5899] usb 3-1: Manufacturer: syz [ 453.709057][ T5828] Bluetooth: hci2: unexpected event 0x2f length: 509 > 260 [ 453.709182][ T5899] usb 3-1: SerialNumber: syz [ 453.732111][ T5899] usb 3-1: config 0 descriptor?? [ 453.767442][T13854] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2916'. [ 453.790787][ T30] audit: type=1326 audit(1771525429.681:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13849 comm="syz.4.2914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06b839c629 code=0x7ffc0000 [ 453.820424][ T30] audit: type=1326 audit(1771525429.681:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13849 comm="syz.4.2914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06b839c629 code=0x7ffc0000 [ 453.875222][ T30] audit: type=1326 audit(1771525429.681:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13849 comm="syz.4.2914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f06b839c629 code=0x7ffc0000 [ 453.934749][ T30] audit: type=1326 audit(1771525429.821:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13849 comm="syz.4.2914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f06b833da19 code=0x7ffc0000 [ 453.963784][ T30] audit: type=1326 audit(1771525429.821:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13849 comm="syz.4.2914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f06b833da19 code=0x7ffc0000 [ 454.091978][ T30] audit: type=1326 audit(1771525429.821:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13849 comm="syz.4.2914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f06b833da19 code=0x7ffc0000 [ 454.116566][ T30] audit: type=1326 audit(1771525429.821:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13849 comm="syz.4.2914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f06b833da19 code=0x7ffc0000 [ 454.163185][ T5899] gs_usb 3-1:0.0: Configuring for 1 interfaces [ 454.179034][ T30] audit: type=1326 audit(1771525429.821:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13849 comm="syz.4.2914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f06b833da19 code=0x7ffc0000 [ 454.259073][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 454.372090][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 454.478944][ T5917] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 454.598817][ T30] audit: type=1326 audit(1771525429.821:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13849 comm="syz.4.2914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f06b833da19 code=0x7ffc0000 [ 454.700567][ T5917] usb 4-1: Using ep0 maxpacket: 32 [ 454.724352][ T5917] usb 4-1: New USB device found, idVendor=0ac8, idProduct=c301, bcdDevice=82.d5 [ 454.754253][ T5917] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 454.774594][ T5917] usb 4-1: Product: syz [ 454.783201][ T5917] usb 4-1: Manufacturer: syz [ 454.788066][ T5917] usb 4-1: SerialNumber: syz [ 454.806471][ T5917] usb 4-1: config 0 descriptor?? [ 454.818065][ T5917] hub 4-1:0.0: bad descriptor, ignoring hub [ 454.833150][T13829] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2905'. [ 454.845449][T13868] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2921'. [ 454.855930][ T5917] hub 4-1:0.0: probe with driver hub failed with error -5 [ 454.865572][ T29] usb 3-1: USB disconnect, device number 9 [ 454.892003][ T5917] gspca_main: vc032x-2.14.0 probing 0ac8:c301 [ 454.939864][ T24] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 455.014880][T13857] openvswitch: netlink: Key type 243 is out of range max 32 [ 455.034332][ T5917] gspca_vc032x: reg_w err -71 [ 455.049548][ T5917] gspca_vc032x: I2c Bus Busy Wait 00 [ 455.055275][ T5917] gspca_vc032x: I2c Bus Busy Wait 00 [ 455.060709][ T5917] gspca_vc032x: I2c Bus Busy Wait 00 [ 455.068705][ T5917] gspca_vc032x: I2c Bus Busy Wait 00 [ 455.074121][ T5917] gspca_vc032x: I2c Bus Busy Wait 00 [ 455.084591][ T5917] gspca_vc032x: I2c Bus Busy Wait 00 [ 455.098867][ T5917] gspca_vc032x: I2c Bus Busy Wait 00 [ 455.104518][ T5917] gspca_vc032x: I2c Bus Busy Wait 00 [ 455.109963][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 455.115147][ T5917] gspca_vc032x: I2c Bus Busy Wait 00 [ 455.125412][ T5917] gspca_vc032x: I2c Bus Busy Wait 00 [ 455.135482][ T24] usb 1-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=c4.6d [ 455.145533][ T5917] gspca_vc032x: I2c Bus Busy Wait 00 [ 455.155005][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 455.163218][ T5917] gspca_vc032x: I2c Bus Busy Wait 00 [ 455.173375][ T5917] gspca_vc032x: I2c Bus Busy Wait 00 [ 455.184659][ T24] usb 1-1: Product: syz [ 455.193160][ T24] usb 1-1: Manufacturer: syz [ 455.197923][ T5917] gspca_vc032x: I2c Bus Busy Wait 00 [ 455.203460][ T24] usb 1-1: SerialNumber: syz [ 455.208229][ T5917] gspca_vc032x: I2c Bus Busy Wait 00 [ 455.215810][ T5917] gspca_vc032x: I2c Bus Busy Wait 00 [ 455.223717][ T24] usb 1-1: config 0 descriptor?? [ 455.230563][ T5917] gspca_vc032x: I2c Bus Busy Wait 00 [ 455.236320][ T5917] gspca_vc032x: I2c Bus Busy Wait 00 [ 455.242601][ T5917] gspca_vc032x: I2c Bus Busy Wait 00 [ 455.245436][ T24] gspca_main: sonixj-2.14.0 probing 0c45:614a [ 455.257726][ T5917] gspca_vc032x: Unknown sensor... [ 455.263038][ T5917] vc032x 4-1:0.0: probe with driver vc032x failed with error -22 [ 455.309851][ T5917] usb 4-1: USB disconnect, device number 5 [ 455.751467][T13888] binder_alloc: 13887: binder_alloc_buf size 8 failed, no address space [ 455.774312][T13888] binder_alloc: allocated: 4096 (num: 1 largest: 4096), free: 0 (num: 0 largest: 0) [ 455.799434][T13888] binder: 13887:13888 ioctl c0306201 2000000001c0 returned -14 [ 455.969831][T13898] input: syz0 as /devices/virtual/input/input47 [ 456.073033][ T24] gspca_sonixj: reg_r err -71 [ 456.081942][ T24] sonixj 1-1:0.0: probe with driver sonixj failed with error -71 [ 456.115451][ T24] usb 1-1: USB disconnect, device number 33 [ 456.418908][ T30] kauditd_printk_skb: 64 callbacks suppressed [ 456.418929][ T30] audit: type=1326 audit(1771525432.301:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13913 comm="syz.2.2932" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f52f539c629 code=0x0 [ 456.808768][ T5899] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 456.888795][ T5917] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 456.960335][ T5899] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 456.970494][ T5899] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 456.983050][ T5899] usb 4-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 456.992650][ T5899] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 457.001834][ T5899] usb 4-1: Product: syz [ 457.006173][ T5899] usb 4-1: Manufacturer: syz [ 457.010996][ T5899] usb 4-1: SerialNumber: syz [ 457.026435][ T5899] usb 4-1: config 0 descriptor?? [ 457.033652][T13922] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 457.049003][T13922] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 457.064307][ T5917] usb 1-1: config 1 has an invalid interface number: 7 but max is 0 [ 457.073076][ T5917] usb 1-1: config 1 has no interface number 0 [ 457.079307][ T5917] usb 1-1: config 1 interface 7 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 457.089496][ T5917] usb 1-1: config 1 interface 7 altsetting 0 bulk endpoint 0xF has invalid maxpacket 1024 [ 457.099656][ T5917] usb 1-1: config 1 interface 7 altsetting 0 endpoint 0xE has an invalid bInterval 0, changing to 7 [ 457.119506][ T5917] usb 1-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 457.132103][ T5917] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 457.141795][ T5917] usb 1-1: Product: syz [ 457.146018][ T5917] usb 1-1: Manufacturer: syz [ 457.150772][ T5917] usb 1-1: SerialNumber: syz [ 457.164814][T13925] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 457.164961][T13925] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 457.170906][ T5917] usb 1-1: Error in usbnet_get_endpoints (-22) [ 457.270097][T13922] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 457.281151][T13922] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 457.291694][T13922] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 457.306421][T13922] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 457.384731][ T5828] Bluetooth: hci3: link tx timeout [ 457.392699][ T5828] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 457.442024][T13935] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 457.451905][T13935] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 457.528768][ T5917] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 457.691249][ T5917] usb 5-1: Using ep0 maxpacket: 32 [ 457.698396][ T5917] usb 5-1: config 0 has an invalid interface number: 12 but max is 0 [ 457.707180][ T5917] usb 5-1: config 0 has no interface number 0 [ 457.717091][ T5917] usb 5-1: config 0 interface 12 has no altsetting 0 [ 457.727348][ T5899] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 457.732268][ T5917] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 457.744598][ T5917] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 457.754138][ T5917] usb 5-1: Product: syz [ 457.759311][ T5917] usb 5-1: Manufacturer: syz [ 457.764032][ T5917] usb 5-1: SerialNumber: syz [ 457.774413][ T5917] usb 5-1: config 0 descriptor?? [ 457.787811][ T5917] f81534 5-1:0.12: required endpoints missing [ 457.836078][ T30] audit: type=1326 audit(1771525433.721:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13944 comm="syz.2.2944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52f539c629 code=0x7ffc0000 [ 457.863545][ T30] audit: type=1326 audit(1771525433.721:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13944 comm="syz.2.2944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52f539c629 code=0x7ffc0000 [ 457.886853][ T30] audit: type=1326 audit(1771525433.721:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13944 comm="syz.2.2944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52f539c629 code=0x7ffc0000 [ 457.892074][T13945] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2944'. [ 457.915784][ T30] audit: type=1326 audit(1771525433.721:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13944 comm="syz.2.2944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52f539c629 code=0x7ffc0000 [ 457.928439][T13922] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 457.953055][ T30] audit: type=1326 audit(1771525433.721:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13944 comm="syz.2.2944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f52f535cece code=0x7ffc0000 [ 457.977327][ T30] audit: type=1326 audit(1771525433.751:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13944 comm="syz.2.2944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52f539c629 code=0x7ffc0000 [ 457.979597][T13922] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 458.002802][ T30] audit: type=1326 audit(1771525433.751:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13944 comm="syz.2.2944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52f539c629 code=0x7ffc0000 [ 458.031732][ T5899] dm9601 4-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 458.041967][ T30] audit: type=1326 audit(1771525433.751:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13944 comm="syz.2.2944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52f539c629 code=0x7ffc0000 [ 458.067188][ T30] audit: type=1326 audit(1771525433.751:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13944 comm="syz.2.2944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f52f539c629 code=0x7ffc0000 [ 458.083783][ T5899] usb 4-1: USB disconnect, device number 6 [ 458.558800][ T5899] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 458.710481][ T5899] usb 3-1: config 0 has an invalid interface number: 128 but max is 0 [ 458.719059][ T5899] usb 3-1: config 0 has no interface number 0 [ 458.728915][ T5899] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 458.738376][ T5899] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 458.751214][ T5899] usb 3-1: Product: syz [ 458.757442][ T5899] usb 3-1: Manufacturer: syz [ 458.762592][ T5899] usb 3-1: SerialNumber: syz [ 458.771262][ T5899] usb 3-1: config 0 descriptor?? [ 459.083172][ T5899] usb 3-1: Firmware version (0.0) predates our first public release. [ 459.105951][ T5899] usb 3-1: Please update to version 0.2 or newer [ 459.175543][ T5899] usb 3-1: USB disconnect, device number 10 [ 459.472030][ T5828] Bluetooth: hci3: command 0x0406 tx timeout [ 459.652034][ T5917] usb 1-1: USB disconnect, device number 34 [ 459.748798][ T5899] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 459.818807][ T24] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 459.898805][ T5899] usb 3-1: Using ep0 maxpacket: 8 [ 459.907238][ T5899] usb 3-1: config 0 has an invalid interface number: 52 but max is 0 [ 459.915585][ T5899] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 459.925908][ T5899] usb 3-1: config 0 has no interface number 0 [ 459.932110][ T5899] usb 3-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 459.943350][ T5899] usb 3-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 459.957099][ T5899] usb 3-1: config 0 interface 52 has no altsetting 0 [ 459.965172][ T5899] usb 3-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 459.974437][ T5899] usb 3-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 459.982894][ T5899] usb 3-1: Manufacturer: syz [ 459.989783][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 459.991626][ T5899] usb 3-1: config 0 descriptor?? [ 460.003080][ T24] usb 4-1: unable to get BOS descriptor or descriptor too short [ 460.016814][ T24] usb 4-1: config 1 interface 0 altsetting 18 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 460.033618][ T24] usb 4-1: config 1 interface 0 has no altsetting 0 [ 460.042926][ T24] usb 4-1: New USB device found, idVendor=0c45, idProduct=5112, bcdDevice= 0.40 [ 460.052347][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 460.061086][ T24] usb 4-1: Product: syz [ 460.065367][ T24] usb 4-1: Manufacturer: syz [ 460.070302][ T24] usb 4-1: SerialNumber: syz [ 460.118846][ T5917] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 460.212414][ T5899] input: syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.52/input/input48 [ 460.268832][ T5917] usb 1-1: Using ep0 maxpacket: 8 [ 460.283773][ T5917] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 460.298776][ T5917] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 460.323032][ T5917] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 460.343115][ T5917] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 460.356652][ T5917] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 460.370214][ T5917] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 460.381584][ T5949] usb 5-1: USB disconnect, device number 9 [ 460.415705][ T5917] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 460.437081][ T5899] usb 3-1: USB disconnect, device number 11 [ 460.443161][ C0] synaptics_usb 3-1:0.52: synusb_irq - usb_submit_urb failed with result: -19 [ 460.450411][ T24] usbhid 4-1:1.0: can't add hid device: -71 [ 460.479252][ T24] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 460.510380][ T24] usb 4-1: USB disconnect, device number 7 [ 460.706423][T13989] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 460.721522][T13989] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 460.813738][ T5830] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 461.198785][ T24] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 461.374269][T14008] usb usb5: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 461.390078][T14008] usbtmc 1-1:16.0: simple control status returned f0 [ 461.392291][ T24] usb 4-1: config 1 has an invalid interface number: 7 but max is 0 [ 461.419881][ T24] usb 4-1: config 1 has no interface number 0 [ 461.431650][ T24] usb 4-1: config 1 interface 7 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 461.456605][ T24] usb 4-1: config 1 interface 7 altsetting 0 bulk endpoint 0xF has invalid maxpacket 1024 [ 461.472971][ T24] usb 4-1: config 1 interface 7 altsetting 0 endpoint 0xE has an invalid bInterval 0, changing to 7 [ 461.490400][ T24] usb 4-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 461.518794][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 461.527096][ T24] usb 4-1: Product: syz [ 461.537199][ T24] usb 4-1: Manufacturer: syz [ 461.557414][ T24] usb 4-1: SerialNumber: syz [ 461.577982][T14007] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 461.586644][T14007] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 461.595347][ T5878] usb 1-1: USB disconnect, device number 35 [ 461.629038][ T24] usb 4-1: Error in usbnet_get_endpoints (-22) [ 461.737238][T14039] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2976'. [ 461.780099][T14039] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2976'. [ 461.919632][T14042] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 461.928510][T14042] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 462.084187][T14048] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2980'. [ 463.739669][T14091] cgroup: Invalid name [ 464.005298][ T5878] usb 4-1: USB disconnect, device number 8 [ 465.697808][T14127] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 465.732466][ T5917] wlan1: authenticate with 08:02:11:00:00:00 (local address=08:02:11:00:00:01) [ 465.760673][ T5917] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 465.786546][ T13] wlan1: authenticated [ 465.787686][T14130] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 465.811283][ T13] wlan1: associate with 08:02:11:00:00:00 (try 1/3) [ 465.823808][ T12] wlan1: RX AssocResp from 08:02:11:00:00:00 (capab=0x1 status=0 aid=1) [ 465.832647][ T12] wlan1: associated [ 465.873012][ T30] kauditd_printk_skb: 64 callbacks suppressed [ 465.873032][ T30] audit: type=1326 audit(1771525441.761:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14132 comm="syz.3.3013" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f231c19c629 code=0x0 [ 465.903207][T14130] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 466.869564][T14152] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 467.294540][T14161] lec0: mtu less than device minimum [ 467.309169][T14161] lec:lec_atm_send: lec0: change_mtu to 0 failed [ 467.492648][T14145] lec:lec_atm_close: lec0: Shut down! [ 467.721058][T14151] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 468.096290][T14175] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 468.297223][T14179] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 468.416766][T14179] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 468.447850][T14179] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 468.499228][ T5899] lec:lec_start_xmit: lec0:No lecd attached [ 468.677508][T14105] Set syz1 is full, maxelem 65536 reached [ 468.981962][ T13] ------------[ cut here ]------------ [ 468.987502][ T13] !sta [ 468.987530][ T13] WARNING: net/mac80211/mlme.c:4504 at ieee80211_mgd_probe_ap_send+0x497/0x560, CPU#1: kworker/u8:1/13 [ 469.001580][ T13] Modules linked in: [ 469.006570][ T13] CPU: 1 UID: 0 PID: 13 Comm: kworker/u8:1 Tainted: G L syzkaller #0 PREEMPT(full) [ 469.018206][ T13] Tainted: [L]=SOFTLOCKUP [ 469.023227][ T13] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 469.033519][ T13] Workqueue: events_unbound cfg80211_wiphy_work [ 469.040229][ T13] RIP: 0010:ieee80211_mgd_probe_ap_send+0x497/0x560 [ 469.046960][ T13] Code: 4c 89 fe 48 83 c4 18 5b 41 5c 41 5d 41 5e 41 5f 5d e9 2d d1 6c f6 e8 28 dc 80 f6 90 0f 0b 90 e9 3a fc ff ff e8 1a dc 80 f6 90 <0f> 0b 90 e9 d3 fc ff ff e8 0c dc 80 f6 90 0f 0b 90 e9 3c ff ff ff [ 469.066725][ T13] RSP: 0018:ffffc90000127aa0 EFLAGS: 00010293 [ 469.072927][ T13] RAX: ffffffff8b451676 RBX: ffff88803342cdc0 RCX: ffff88801daddac0 [ 469.080987][ T13] RDX: 0000000000000000 RSI: ffffffff8e287ccb RDI: ffff88801daddac0 [ 469.089374][ T13] RBP: 0000000000000001 R08: ffff88801daddac0 R09: 000000000000000c [ 469.097406][ T13] R10: 000000000000000c R11: 0000000000000000 R12: ffff88803342eae2 [ 469.105604][ T13] R13: dffffc0000000000 R14: 0000000000000002 R15: ffff88803342dd40 [ 469.113775][ T13] FS: 0000000000000000(0000) GS:ffff888125102000(0000) knlGS:0000000000000000 [ 469.123325][ T13] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 469.130305][ T13] CR2: 00007fb52c013000 CR3: 0000000076012000 CR4: 00000000003526f0 [ 469.138440][ T13] Call Trace: [ 469.142073][ T13] [ 469.145071][ T13] cfg80211_wiphy_work+0x2ab/0x4a0 [ 469.150393][ T13] ? process_one_work+0x87c/0x1650 [ 469.155567][ T13] process_one_work+0x949/0x1650 [ 469.161035][ T13] ? __pfx_process_one_work+0x10/0x10 [ 469.166487][ T13] ? do_raw_spin_lock+0x12b/0x2f0 [ 469.171878][ T13] worker_thread+0xb46/0x1140 [ 469.177033][ T13] kthread+0x388/0x470 [ 469.181284][ T13] ? __pfx_worker_thread+0x10/0x10 [ 469.186456][ T13] ? __pfx_kthread+0x10/0x10 [ 469.191566][ T13] ret_from_fork+0x51e/0xb90 [ 469.196263][ T13] ? __pfx_ret_from_fork+0x10/0x10 [ 469.201492][ T13] ? __switch_to+0xc7d/0x1450 [ 469.206307][ T13] ? __pfx_kthread+0x10/0x10 [ 469.211027][ T13] ret_from_fork_asm+0x1a/0x30 [ 469.215867][ T13] [ 469.219013][ T13] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 469.226342][ T13] CPU: 1 UID: 0 PID: 13 Comm: kworker/u8:1 Tainted: G L syzkaller #0 PREEMPT(full) [ 469.237260][ T13] Tainted: [L]=SOFTLOCKUP [ 469.241614][ T13] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 469.251693][ T13] Workqueue: events_unbound cfg80211_wiphy_work [ 469.258049][ T13] Call Trace: [ 469.261356][ T13] [ 469.264400][ T13] vpanic+0x56c/0xa60 [ 469.268410][ T13] ? __pfx__printk+0x10/0x10 [ 469.273022][ T13] ? __pfx_vpanic+0x10/0x10 [ 469.277552][ T13] ? is_bpf_text_address+0x292/0x2b0 [ 469.282873][ T13] ? is_bpf_text_address+0x26/0x2b0 [ 469.288105][ T13] panic+0xc5/0xd0 [ 469.291873][ T13] ? __pfx_panic+0x10/0x10 [ 469.296338][ T13] ? ret_from_fork_asm+0x1a/0x30 [ 469.301442][ T13] __warn+0x315/0x4f0 [ 469.305469][ T13] ? ieee80211_mgd_probe_ap_send+0x497/0x560 [ 469.311480][ T13] ? ieee80211_mgd_probe_ap_send+0x497/0x560 [ 469.317493][ T13] __report_bug+0x29a/0x540 [ 469.322034][ T13] ? lockdep_hardirqs_on+0x7a/0x110 [ 469.327371][ T13] ? ieee80211_mgd_probe_ap_send+0x497/0x560 [ 469.333380][ T13] ? __pfx___report_bug+0x10/0x10 [ 469.338446][ T13] ? __lock_acquire+0x6b5/0x2cf0 [ 469.343415][ T13] ? nla_put+0xd0/0x150 [ 469.347595][ T13] ? ieee80211_mgd_probe_ap_send+0x497/0x560 [ 469.353589][ T13] report_bug+0x16a/0x220 [ 469.357953][ T13] ? ieee80211_mgd_probe_ap_send+0x497/0x560 [ 469.363957][ T13] ? ieee80211_mgd_probe_ap_send+0x499/0x560 [ 469.369957][ T13] handle_bug+0x98/0x200 [ 469.374217][ T13] exc_invalid_op+0x1a/0x50 [ 469.378744][ T13] asm_exc_invalid_op+0x1a/0x20 [ 469.383615][ T13] RIP: 0010:ieee80211_mgd_probe_ap_send+0x497/0x560 [ 469.390228][ T13] Code: 4c 89 fe 48 83 c4 18 5b 41 5c 41 5d 41 5e 41 5f 5d e9 2d d1 6c f6 e8 28 dc 80 f6 90 0f 0b 90 e9 3a fc ff ff e8 1a dc 80 f6 90 <0f> 0b 90 e9 d3 fc ff ff e8 0c dc 80 f6 90 0f 0b 90 e9 3c ff ff ff [ 469.409854][ T13] RSP: 0018:ffffc90000127aa0 EFLAGS: 00010293 [ 469.415944][ T13] RAX: ffffffff8b451676 RBX: ffff88803342cdc0 RCX: ffff88801daddac0 [ 469.423938][ T13] RDX: 0000000000000000 RSI: ffffffff8e287ccb RDI: ffff88801daddac0 [ 469.431929][ T13] RBP: 0000000000000001 R08: ffff88801daddac0 R09: 000000000000000c [ 469.439960][ T13] R10: 000000000000000c R11: 0000000000000000 R12: ffff88803342eae2 [ 469.448036][ T13] R13: dffffc0000000000 R14: 0000000000000002 R15: ffff88803342dd40 [ 469.456038][ T13] ? ieee80211_mgd_probe_ap_send+0x496/0x560 [ 469.462055][ T13] cfg80211_wiphy_work+0x2ab/0x4a0 [ 469.467195][ T13] ? process_one_work+0x87c/0x1650 [ 469.472326][ T13] process_one_work+0x949/0x1650 [ 469.477303][ T13] ? __pfx_process_one_work+0x10/0x10 [ 469.482700][ T13] ? do_raw_spin_lock+0x12b/0x2f0 [ 469.487760][ T13] worker_thread+0xb46/0x1140 [ 469.492482][ T13] kthread+0x388/0x470 [ 469.496581][ T13] ? __pfx_worker_thread+0x10/0x10 [ 469.501719][ T13] ? __pfx_kthread+0x10/0x10 [ 469.506331][ T13] ret_from_fork+0x51e/0xb90 [ 469.510963][ T13] ? __pfx_ret_from_fork+0x10/0x10 [ 469.516098][ T13] ? __switch_to+0xc7d/0x1450 [ 469.520811][ T13] ? __pfx_kthread+0x10/0x10 [ 469.525467][ T13] ret_from_fork_asm+0x1a/0x30 [ 469.530285][ T13] [ 469.533924][ T13] Kernel Offset: disabled [ 469.538515][ T13] Rebooting in 86400 seconds..