last executing test programs: 25m31.611882318s ago: executing program 4 (id=1690): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x34, r0, 0x801, 0x400, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0x18, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "8c7680008eb15e768140acc49b"}]}]}, 0x34}}, 0x0) (fail_nth: 6) 25m31.356142874s ago: executing program 4 (id=1694): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x4c) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d05c164a534308", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f00000013c0)=0xc7f) recvmmsg(r1, &(0x7f0000004c00)=[{{0x0, 0x0, &(0x7f0000000240), 0x4000}, 0x2ca998c3}], 0x4000032, 0x40000021, 0x0) recvmsg$can_raw(r1, &(0x7f00000002c0)={&(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000340)=""/197, 0xc5}], 0x1}, 0x1) 25m30.253654194s ago: executing program 4 (id=1696): r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000140)={0x10000042}, 0x10) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0xee00, 0xee00}}, './file0\x00'}) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000240)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/91, 0x5b, 0x1, &(0x7f0000000180)=""/169, 0xa9}, &(0x7f0000000280)=0x40) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000000)={0x2042, 0xfffffffd}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r3, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) close(0x3) 25m30.11678312s ago: executing program 4 (id=1697): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ftruncate(0xffffffffffffffff, 0xc17a) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f00000000c0)=0x7, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x8, 0x4) socket$netlink(0x10, 0x3, 0x8000000004) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x8020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0x8, 0x72, 0x80000}, 0x20) writev(r4, &(0x7f0000000080), 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x10000, 0x0) ioctl$KDSKBENT(r5, 0x4b47, &(0x7f0000000140)={0xe0, 0x37, 0x9}) r6 = syz_open_dev$ptys(0xc, 0x3, 0x1) writev(r6, &(0x7f0000000280)=[{&(0x7f0000000180)="9aa9dc67066b0507e33abb54ed807e79dd36f4da766787bb94cd516366963b2d68606a307e0e5043def550e537770f68221a8aa4cd47f3effca8908aefd80075b694f315c396a8fc3d8dfb", 0x4b}], 0x1) syz_usb_connect(0x4, 0x2d, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000052e8e5100e000000000000002ec4dc6c02030109021b0001000009044400012eafb2000905"], 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x200040, 0x0) 25m26.849453429s ago: executing program 4 (id=1706): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000004c0)="cc", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000b80)="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", 0x390}], 0x1}}], 0x2, 0x4048884) close_range(r0, 0xffffffffffffffff, 0x2000000) 25m26.249592757s ago: executing program 4 (id=1711): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x34, r1, 0x5, 0x70bd28, 0x8, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @crypto_settings=[@NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0xc, 0x49, [0xfac08, 0xfac0a]}]]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x488c0) (fail_nth: 6) 25m25.147360614s ago: executing program 32 (id=1711): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x34, r1, 0x5, 0x70bd28, 0x8, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @crypto_settings=[@NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0xc, 0x49, [0xfac08, 0xfac0a]}]]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x488c0) (fail_nth: 6) 23.839180136s ago: executing program 5 (id=6266): syz_emit_vhci(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @empty, 0x4000006}, 0x1c) listen(r1, 0x6) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) accept(r0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r4, @ANYBLOB="010000000000fbdbdf25010000000800020000000000050005000000000008000300010000004800018005000200200000000600010002000000080006000a000000080003"], 0x84}}, 0x0) 22.898156179s ago: executing program 5 (id=6271): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$EVIOCGMTSLOTS(0xffffffffffffffff, 0x8040450a, &(0x7f0000001ac0)=""/4096) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000000)='source', 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mbind(&(0x7f00001fa000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x0) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) r3 = socket(0x1e, 0x1, 0x0) connect$tipc(r3, &(0x7f0000000040)=@id, 0x10) 20.433438612s ago: executing program 5 (id=6279): mq_open(&(0x7f0000001500)='#\x00', 0x40, 0x120, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a090a0000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000134000000140a03000000000000000000020000000900010073797a300000000008000340000000010900020073797a3100000000140000001100010000000000000000000000000a"], 0x98}}, 0x0) 19.972126551s ago: executing program 3 (id=6281): bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$packet(0x11, 0xa, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r0}, 0x18) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = shmget$private(0x0, 0x8000, 0x10, &(0x7f0000ff5000/0x8000)=nil) r5 = shmat(r4, &(0x7f0000ffc000/0x2000)=nil, 0x4000) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) shmdt(r5) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}, 0x0, 0x0, 0x43, 0x0, "0aaa8ff5a212a1bd3bbda613efd9c8b4965dca66db42f66a86e5781cf86717055a7c1d13e6507e5a774ef95f2fc1b947e03d5c8379123f2f1d34b0882e83d41b67cb9ff147c6d33a097d2269351b3ed3"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f00000012c0)={@in={{0x2, 0x4e21, @local}}, 0x0, 0x0, 0x35, 0x0, "0c9e089c1b4a04000bde79f04103c458187eb46c2d996aff287154e786455261c425a7519cc275d04e6205abd307a0c4fa3838bf399ad5bd35f21907c7988d1300"}, 0xd8) close(0x3) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r7) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x200000000000007a, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee0000"], &(0x7f00000002c0)='syzkaller\x00', 0x80000001, 0x0, 0x0, 0x0, 0x7a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) 19.515346817s ago: executing program 1 (id=6283): close(0xffffffffffffffff) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x3}, 0x0) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_usb_connect(0x5, 0x164, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000080)=0x80000003) r1 = dup2(r0, r0) read$FUSE(r1, &(0x7f00000063c0)={0x2020}, 0x2020) 17.89610408s ago: executing program 5 (id=6290): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_sctp(0xa, 0x801, 0x84) syz_open_dev$usbmon(&(0x7f0000000000), 0x2, 0x101800) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x2202, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c", 0x15) r6 = accept4(r5, 0x0, 0x0, 0x800) openat(r4, &(0x7f0000000180)='./file0\x00', 0x60880, 0xc0) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) 17.545165273s ago: executing program 1 (id=6291): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000011c0)=ANY=[@ANYBLOB="12010001090003206d0414c340000000000109022400010000a0000904000001030101000921000800012203000905", @ANYRES64], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, &(0x7f0000001180)=ANY=[@ANYBLOB="00020c0000000c0002"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000280)={0x0, 0x17}, 0x0, 0x0, 0x0, 0x0}) 17.544280164s ago: executing program 3 (id=6292): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000100)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x2, 0x0, 0x0, 0x0, {[@sack_perm={0x4, 0x2}, @sack_perm={0x4, 0x2}, @exp_fastopen={0xfe, 0x6, 0xf989, "62be"}]}}}}}}}, 0x0) 16.623488743s ago: executing program 3 (id=6293): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000140)=[{0x20, 0x9, 0x0, 0xfffff034}, {0x6, 0x9, 0x0, 0x7fffffff}]}, 0x10) sendmmsg(r3, &(0x7f0000001c00), 0x400000000000159, 0x40840) 15.258683445s ago: executing program 2 (id=6297): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x2, 0x0, 0x0, 0x7, 0x8}, {0x12, 0x3, 0x0, 0x1, 0x8001, 0x3ff}, 0xa5, 0x4, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x0) r5 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000002340)=@newqdisc={0x38, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r7, {}, {0xfff2, 0xa}, {0x2}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x4000) sendmmsg$inet(r1, &(0x7f0000000d40)=[{{0x0, 0x0, &(0x7f0000001100)=[{&(0x7f00000012c0)="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", 0x198}], 0x1}}], 0x1, 0x0) 14.932973809s ago: executing program 2 (id=6298): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)={0x68, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x30, 0xe, {{{}, {}, @broadcast, @device_a, @random="13610680c4c9"}, 0x0, @default, 0x1, @void, @void, @val={0x3, 0x1, 0x7c}, @void, @void, @val={0x5, 0x3, {0x3, 0x1b, 0x6}}, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @beacon=[@NL80211_ATTR_PROBE_RESP={0x4}]]}, 0x68}}, 0x0) 14.371860231s ago: executing program 2 (id=6299): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x2}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) epoll_create(0x2) 14.209603129s ago: executing program 1 (id=6300): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000015000103000000001c0000000a"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r2], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x0) readv(r0, &(0x7f0000000040)=[{&(0x7f0000000540)=""/4114, 0x1012}], 0x1) 14.061192255s ago: executing program 5 (id=6301): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000180)=0x6f) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) read$dsp(r1, 0x0, 0x0) write$dsp(r0, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000"], 0x0) 12.100918241s ago: executing program 3 (id=6302): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_sctp(0xa, 0x801, 0x84) syz_open_dev$usbmon(&(0x7f0000000000), 0x2, 0x101800) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x2202, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = accept4(r5, 0x0, 0x0, 0x800) openat(r4, &(0x7f0000000180)='./file0\x00', 0x60880, 0xc0) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) 11.076166687s ago: executing program 5 (id=6306): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x61, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x18) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) syz_clone(0x42000000, 0x0, 0x0, 0x0, 0x0, 0x0) 10.950400039s ago: executing program 2 (id=6307): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x3}, 0x0) r2 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_usb_connect(0x5, 0x164, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000080)=0x80000003) r3 = dup2(r2, r2) read$FUSE(r3, &(0x7f00000063c0)={0x2020}, 0x2020) 9.773360419s ago: executing program 1 (id=6309): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x3}, 0x0) r2 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$evdev(0xffffffffffffffff, &(0x7f00000004c0)=[{{0x0, 0xea60}, 0x11, 0x1000, 0x2}], 0x18) write$char_usb(r3, &(0x7f0000000040), 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x103, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x5) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) ioctl$KVM_GET_VCPU_EVENTS(r7, 0x4048aecb, &(0x7f0000000080)) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, 0x0) r8 = dup2(r2, r2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r9 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r9, 0xc0285629, &(0x7f0000000080)={0x3, @win={{0x2}, 0x7, 0x0, &(0x7f0000000040)={{0x6, 0x0, 0x0, 0x4}}, 0x0, 0x0}}) read$FUSE(r8, &(0x7f00000063c0)={0x2020}, 0x2020) 9.59498991s ago: executing program 0 (id=6310): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x24, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x8, 0x11d, 0x0, 0x1, [{0x4}]}]}, 0x24}}, 0x0) 8.121472155s ago: executing program 0 (id=6311): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x2c, r0, 0x1, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x10, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "98ce2b874a858ddd"}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4020}, 0x4080) 6.861019787s ago: executing program 0 (id=6312): syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="bbbbbbbbbbbb0180c200000008060001"], 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) 6.281792357s ago: executing program 0 (id=6313): syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_pkt_type_change={{0x1d, 0xfffffffffffffdea}, {0x3, 0xc8, 0xd}}}, 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) keyctl$dh_compute(0x10, &(0x7f0000000100), 0x0, 0x0, 0x0) lstat(0x0, 0x0) alarm(0x101) 685.59879ms ago: executing program 1 (id=6314): socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x42, &(0x7f0000000100)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x2, 0x0, 0x0, 0x0, {[@sack_perm={0x4, 0x2}, @sack_perm={0x4, 0x2}, @exp_fastopen={0xfe, 0x6, 0xf989, "62be"}]}}}}}}}, 0x0) 685.344974ms ago: executing program 2 (id=6315): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) dup(0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000d40)=@newqdisc={0x3a8, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x378, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x2}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x64, 0x2, 0x3, 0x17, 0xd, 0x8, 0x1}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x2}, @TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x3a8}}, 0x0) 503.936421ms ago: executing program 0 (id=6316): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="10000000010401"], 0x14}, 0x1, 0x0, 0x0, 0x44000}, 0x4000) 263.758161ms ago: executing program 1 (id=6317): syz_io_uring_setup(0x5b8f, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = fsopen(&(0x7f0000000200)='ramfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f046bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000080)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil) r4 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$6lowpan_enable(r4, &(0x7f0000000100)='0', 0x1) r5 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) r6 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r7 = add_key$user(&(0x7f0000000080), &(0x7f0000000100)={'syz', 0x0}, &(0x7f00000001c0)="a6", 0x1, r6) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r6, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000140)=@keyring={'key_or_keyring:', r7}) keyctl$KEYCTL_MOVE(0x1e, r5, 0xffffffffffffffff, r6, 0x0) remap_file_pages(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0) chdir(&(0x7f00000000c0)='./bus\x00') openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 209.736209ms ago: executing program 3 (id=6318): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) 209.326813ms ago: executing program 2 (id=6319): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0xc008ae88, &(0x7f0000000300)=ANY=[@ANYBLOB="020000000000000082000040"]) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = socket$netlink(0x10, 0x3, 0x14) sendfile(r6, 0xffffffffffffffff, 0x0, 0x17) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) lremovexattr(&(0x7f0000000180)='./file0\x00', 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) write$FUSE_STATX(0xffffffffffffffff, &(0x7f0000000540)={0x130, 0x0, 0x0, {0x3, 0x6, 0x0, '\x00', {0x2000, 0x5, 0x7, 0xc07, 0x0, 0x0, 0xc000, '\x00', 0x1, 0x3ff, 0x0, 0x3, {0x0, 0x1}, {0x4, 0x800}, {0x961, 0x6a5ad1fb}, {0xfffffffffffffffe}, 0x80000000, 0xdc, 0x7e, 0xa}}}, 0x130) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x1, [{0x2, 0x1}]}, @void, @void, @void, @void, @void, @void}, 0x2f) nanosleep(0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) 97.412662ms ago: executing program 0 (id=6320): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x2, 0x0, 0x0, 0x7, 0x8}, {0x12, 0x3, 0x0, 0x1, 0x8001, 0x3ff}, 0xa5, 0x4, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00'}) dup3(r0, r1, 0x0) sendmmsg$inet(r1, &(0x7f0000000d40)=[{{0x0, 0x0, &(0x7f0000001100)=[{&(0x7f00000012c0)="c89339f96fa636ba2f527aaa37159cc815448e015b23284d531bdd25a86c02e88b8f962021a37fd9614193094b27b21bf40bc7b43441ae5179a127ea80e91899e1f10a7045c4412bb7997ff8838923521fe0754832209cd546f4ed81500298511e080ec7059b1c32c07fd26f721c6611b8cb344a3fd8f7a889c50a42881e09d4d7ee7ee6c308a13ae6436c858933dc99f71924b68ae0faf95b0afcd3533bcc32840737f434728a12e99aea5c4ee6a603636560b8d9de530d395181e440c1a025ff8d6f33062f14ba2403a178e32ff2d4ec5d0d2c83233b01a41103ef38daeed650987abebe0e8ba7effc07bb5dbbc9a38a11f082f2c99937942f017c37a59572f5069ca709702ef133aa9730ebb5b72687f6175906dbc32289108cc93e5c84284bc701a0629e12eca8c15e763acd011323b758fdb82a63665c906b176042a6c601b5428722c8f6b795a4effc0d4c9a4b4963ae30e77afa0b473d27f4938b1f081765f30aee60de80b1154e3afc3593cad6a146f1c4e954a6b7535f7c4f1baf0e7280ae8957eb14aecb29cc42be434b6a73840fb4668ab11c", 0x198}], 0x1}}], 0x1, 0x0) 0s ago: executing program 3 (id=6321): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000001340)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000002c0)='c!', 0x2}], 0x1}}], 0x1, 0x20000001) read$FUSE(r0, &(0x7f0000003000)={0x2020}, 0x2020) recvmsg(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000040)=""/29, 0x1d}], 0x1}, 0x100) sendmmsg$inet(r0, &(0x7f0000002f80)=[{{0x0, 0x0, &(0x7f0000002b40)=[{&(0x7f0000001240)="668546927ae520a8f3049a2f50ca1553a5e62dc469b5b2348ffe35a76a", 0x1d}], 0x1}}], 0x1, 0x0) kernel console output (not intermixed with test programs): -1: Manufacturer: syz [ 2070.196996][ T5948] usb 3-1: SerialNumber: syz [ 2070.212478][ T5948] usb 3-1: config 0 descriptor?? [ 2070.244515][ T5948] hub 3-1:0.145: bad descriptor, ignoring hub [ 2070.250878][T23706] usb 6-1: reset high-speed USB device number 32 using dummy_hcd [ 2070.259136][ T5948] hub 3-1:0.145: probe with driver hub failed with error -5 [ 2070.388205][ T5948] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.145/input/input199 [ 2070.509234][T23706] usb 6-1: device descriptor read/64, error -32 [ 2070.761066][T23706] usb 6-1: reset high-speed USB device number 32 using dummy_hcd [ 2070.919220][T23706] usb 6-1: device descriptor read/64, error -32 [ 2071.081161][T27475] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 2071.196478][T23706] usb 6-1: reset high-speed USB device number 32 using dummy_hcd [ 2071.254543][T23706] usb 6-1: device descriptor read/8, error -32 [ 2071.300459][T27482] netlink: 104 bytes leftover after parsing attributes in process `syz.1.5743'. [ 2071.674682][T23706] usb 6-1: reset high-speed USB device number 32 using dummy_hcd [ 2071.711268][T23706] usb 6-1: device descriptor read/8, error -32 [ 2071.828084][T23706] raw-gadget.0 gadget.5: failed to queue suspend event [ 2071.838684][T19762] usb 6-1: USB disconnect, device number 32 [ 2071.880587][T19762] raw-gadget.0 gadget.5: failed to queue reset event [ 2072.044623][T19762] raw-gadget.0 gadget.5: failed to queue resume event [ 2072.101969][ T9] usb 3-1: USB disconnect, device number 33 [ 2072.165132][T19762] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 2072.223939][ C0] raw-gadget.0 gadget.5: ignoring, device is not running [ 2072.240425][T19762] raw-gadget.0 gadget.5: failed to queue reset event [ 2072.318405][T19762] raw-gadget.0 gadget.5: failed to queue resume event [ 2072.355236][T27428] raw-gadget.0 gadget.5: failed to queue suspend event [ 2072.457122][T27428] raw-gadget.0 gadget.5: failed to queue disconnect event [ 2072.493328][T19762] usb 6-1: device descriptor read/64, error -32 [ 2072.759220][ T9] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 2072.909226][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 2073.010510][ T9] usb 3-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 2073.053985][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2073.109379][ T9] usb 3-1: Product: syz [ 2073.166564][T27500] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5749'. [ 2073.248028][ T9] usb 3-1: Manufacturer: syz [ 2073.299189][ T9] usb 3-1: SerialNumber: syz [ 2073.422025][ T9] usb 3-1: config 0 descriptor?? [ 2073.532580][ T9] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 2073.815745][T27509] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2073.831489][T27509] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2073.850618][T27510] netlink: 68 bytes leftover after parsing attributes in process `syz.0.5751'. [ 2074.333041][ T9] gspca_sonixj: reg_r err -110 [ 2074.337948][ T9] sonixj 3-1:0.0: probe with driver sonixj failed with error -110 [ 2075.798428][T27535] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5758'. [ 2076.529844][ T5923] usb 3-1: USB disconnect, device number 34 [ 2077.012356][T27555] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5760'. [ 2077.500690][T27562] FAULT_INJECTION: forcing a failure. [ 2077.500690][T27562] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2077.544549][T27562] CPU: 0 UID: 0 PID: 27562 Comm: syz.3.5763 Not tainted 6.16.0-rc5-syzkaller-00053-g8c2e52ebbe88 #0 PREEMPT(full) [ 2077.544585][T27562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2077.544595][T27562] Call Trace: [ 2077.544604][T27562] [ 2077.544616][T27562] dump_stack_lvl+0x189/0x250 [ 2077.544652][T27562] ? __pfx____ratelimit+0x10/0x10 [ 2077.544687][T27562] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2077.544712][T27562] ? __pfx__printk+0x10/0x10 [ 2077.544741][T27562] should_fail_ex+0x414/0x560 [ 2077.544767][T27562] _copy_to_user+0x31/0xb0 [ 2077.544786][T27562] simple_read_from_buffer+0xe1/0x170 [ 2077.544838][T27562] proc_fail_nth_read+0x1df/0x250 [ 2077.544864][T27562] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2077.544887][T27562] ? rw_verify_area+0x258/0x650 [ 2077.544905][T27562] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2077.544928][T27562] vfs_read+0x200/0x980 [ 2077.544949][T27562] ? __pfx___mutex_lock+0x10/0x10 [ 2077.544966][T27562] ? __pfx_vfs_read+0x10/0x10 [ 2077.544984][T27562] ? __fget_files+0x2a/0x420 [ 2077.545007][T27562] ? __fget_files+0x3a0/0x420 [ 2077.545027][T27562] ? __fget_files+0x2a/0x420 [ 2077.545055][T27562] ksys_read+0x145/0x250 [ 2077.545074][T27562] ? __pfx_ksys_read+0x10/0x10 [ 2077.545089][T27562] ? rcu_is_watching+0x15/0xb0 [ 2077.545111][T27562] ? do_syscall_64+0xbe/0x3b0 [ 2077.545130][T27562] do_syscall_64+0xfa/0x3b0 [ 2077.545143][T27562] ? lockdep_hardirqs_on+0x9c/0x150 [ 2077.545166][T27562] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2077.545182][T27562] ? clear_bhb_loop+0x60/0xb0 [ 2077.545200][T27562] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2077.545215][T27562] RIP: 0033:0x7f66e958d33c [ 2077.545230][T27562] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 2077.545244][T27562] RSP: 002b:00007f66ea47f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2077.545264][T27562] RAX: ffffffffffffffda RBX: 00007f66e97b5fa0 RCX: 00007f66e958d33c [ 2077.545276][T27562] RDX: 000000000000000f RSI: 00007f66ea47f0a0 RDI: 0000000000000004 [ 2077.545290][T27562] RBP: 00007f66ea47f090 R08: 0000000000000000 R09: 0000000000000000 [ 2077.545300][T27562] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2077.545308][T27562] R13: 0000000000000000 R14: 00007f66e97b5fa0 R15: 00007f66e98dfa28 [ 2077.545349][T27562] [ 2077.780439][ C0] vkms_vblank_simulate: vblank timer overrun [ 2078.099211][ T5923] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 2078.213142][T27574] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5765'. [ 2078.259382][ T5923] usb 2-1: Using ep0 maxpacket: 16 [ 2078.280987][ T5923] usb 2-1: config 0 has an invalid interface number: 68 but max is 0 [ 2078.289604][ T5923] usb 2-1: config 0 has no interface number 0 [ 2078.295869][ T5923] usb 2-1: config 0 interface 68 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2078.323144][ T5923] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=dc.c4 [ 2078.348269][ T5923] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2078.357790][ T5923] usb 2-1: Product: syz [ 2078.365277][ T5923] usb 2-1: Manufacturer: syz [ 2078.385157][ T5923] usb 2-1: SerialNumber: syz [ 2078.406931][ T5923] usb 2-1: config 0 descriptor?? [ 2078.430393][ T5923] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 2078.522477][T27582] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2078.533527][T27582] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2078.621622][ T1115] usb 2-1: Failed to submit usb control message: -71 [ 2078.629198][ T5923] usb 2-1: USB disconnect, device number 25 [ 2078.640545][ T1115] usb 2-1: unable to send the bmi data to the device: -71 [ 2078.649610][ T1115] usb 2-1: unable to get target info from device [ 2078.658458][ T1115] usb 2-1: could not get target info (-71) [ 2078.666908][ T1115] usb 2-1: could not probe fw (-71) [ 2078.726560][T27580] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5767'. [ 2079.231234][T27589] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2079.252916][T27589] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2079.309330][T27593] dvmrp0: entered allmulticast mode [ 2079.639361][ T5916] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 2079.801449][ T5916] usb 2-1: Using ep0 maxpacket: 32 [ 2079.831824][ T5916] usb 2-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 2079.842293][ T5916] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2079.954478][ T5916] usb 2-1: config 0 descriptor?? [ 2080.026669][ T5916] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 2080.519480][ T3096] usb 6-1: new full-speed USB device number 35 using dummy_hcd [ 2080.783725][ T3096] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 2080.816167][ T3096] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2080.852164][ T3096] usb 6-1: config 0 descriptor?? [ 2080.878426][T27618] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5778'. [ 2080.947477][T27618] netdevsim netdevsim2 netdevsim0: Device is already in use. [ 2081.442310][ T5923] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 2081.599383][ T5923] usb 3-1: device descriptor read/64, error -71 [ 2081.808241][ T5916] gspca_vc032x: I2c Bus Busy Wait 00 [ 2081.849192][ T5923] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 2082.079921][ T5923] usb 3-1: device descriptor read/64, error -71 [ 2082.120872][T27625] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2082.131823][T27625] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2082.222811][ T5923] usb usb3-port1: attempt power cycle [ 2082.699399][ T5923] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 2082.721677][ T5923] usb 3-1: device descriptor read/8, error -71 [ 2082.969481][ T5923] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 2083.001711][ T5923] usb 3-1: device descriptor read/8, error -71 [ 2083.088875][ T5916] gspca_vc032x: reg_w err -71 [ 2083.094296][ T5916] gspca_vc032x: I2c Bus Busy Wait 00 [ 2083.102960][ T5916] gspca_vc032x: I2c Bus Busy Wait 00 [ 2083.108709][ T5916] gspca_vc032x: I2c Bus Busy Wait 00 [ 2083.114567][ T5923] usb usb3-port1: unable to enumerate USB device [ 2083.121615][ T5916] gspca_vc032x: I2c Bus Busy Wait 00 [ 2083.127320][ T5916] gspca_vc032x: I2c Bus Busy Wait 00 [ 2083.135146][ T5916] gspca_vc032x: I2c Bus Busy Wait 00 [ 2083.140952][ T5916] gspca_vc032x: I2c Bus Busy Wait 00 [ 2083.146411][ T5916] gspca_vc032x: I2c Bus Busy Wait 00 [ 2083.152609][ T5916] gspca_vc032x: I2c Bus Busy Wait 00 [ 2083.158414][ T5916] gspca_vc032x: I2c Bus Busy Wait 00 [ 2083.164143][ T5916] gspca_vc032x: I2c Bus Busy Wait 00 [ 2083.169674][ T5916] gspca_vc032x: I2c Bus Busy Wait 00 [ 2083.175260][ T5916] gspca_vc032x: I2c Bus Busy Wait 00 [ 2083.180726][ T5916] gspca_vc032x: I2c Bus Busy Wait 00 [ 2083.186208][ T5916] gspca_vc032x: I2c Bus Busy Wait 00 [ 2083.191758][ T5916] gspca_vc032x: I2c Bus Busy Wait 00 [ 2083.197289][ T5916] gspca_vc032x: I2c Bus Busy Wait 00 [ 2083.202759][ T5916] gspca_vc032x: Unknown sensor... [ 2083.208026][ T5916] vc032x 2-1:0.0: probe with driver vc032x failed with error -22 [ 2083.219814][ T5916] usb 2-1: USB disconnect, device number 26 [ 2083.525603][ T3096] udl 6-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 2083.547184][ T3096] [drm:udl_init] *ERROR* Selecting channel failed [ 2083.596003][ T3096] [drm] Initialized udl 0.0.1 for 6-1:0.0 on minor 2 [ 2083.617932][ T3096] [drm] Initialized udl on minor 2 [ 2083.640252][ T3096] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 2083.661211][ T3096] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 2083.694109][ T24] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 2083.704527][ T3096] usb 6-1: USB disconnect, device number 35 [ 2083.724063][ T24] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 2084.523569][T27655] tipc: Started in network mode [ 2084.528483][T27655] tipc: Node identity , cluster identity 4711 [ 2084.546337][T27655] tipc: Failed to set node id, please configure manually [ 2084.562426][T27655] tipc: Enabling of bearer rejected, failed to enable media [ 2086.657798][T27687] netlink: 68 bytes leftover after parsing attributes in process `syz.1.5794'. [ 2087.381570][T27696] netlink: 68 bytes leftover after parsing attributes in process `syz.5.5796'. [ 2087.474782][T27697] tipc: Enabling of bearer rejected, failed to enable media [ 2088.108470][ T24] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 2088.814255][ T24] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2088.849161][ T24] usb 2-1: config 0 has no interfaces? [ 2088.864659][ T24] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2088.915055][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2089.023980][ T24] usb 2-1: config 0 descriptor?? [ 2090.704090][T27747] netlink: 68 bytes leftover after parsing attributes in process `syz.3.5808'. [ 2091.312605][ T9] usb 2-1: USB disconnect, device number 27 [ 2091.488991][T27754] netlink: 136 bytes leftover after parsing attributes in process `syz.1.5813'. [ 2092.017498][T27758] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 2092.955337][T27776] kvm: kvm [27775]: vcpu1, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x800 [ 2092.988554][T27776] kvm: kvm [27775]: vcpu1, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x0 [ 2093.044368][T27776] kvm: kvm [27775]: vcpu1, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x800 [ 2093.620801][T27783] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5817'. [ 2095.669173][T23706] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 2095.874106][T23706] usb 2-1: config 0 has no interfaces? [ 2095.972346][T23706] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 2096.009946][T23706] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2096.018234][T23706] usb 2-1: Product: syz [ 2096.042568][T23706] usb 2-1: Manufacturer: syz [ 2096.066544][T23706] usb 2-1: SerialNumber: syz [ 2096.118590][T23706] usb 2-1: config 0 descriptor?? [ 2096.452166][T27825] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2096.462015][T27825] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2096.479493][T27823] netlink: 76 bytes leftover after parsing attributes in process `syz.1.5828'. [ 2096.625514][T27844] netlink: 104 bytes leftover after parsing attributes in process `syz.3.5831'. [ 2096.928800][T27852] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5834'. [ 2098.349954][ T5916] usb 2-1: USB disconnect, device number 28 [ 2098.839185][T27875] tipc: Started in network mode [ 2098.847164][T27875] tipc: Node identity , cluster identity 4711 [ 2098.856443][T27875] tipc: Failed to set node id, please configure manually [ 2098.867472][T27875] tipc: Enabling of bearer rejected, failed to enable media [ 2099.867434][T27884] tipc: Started in network mode [ 2099.872777][T27884] tipc: Node identity , cluster identity 4711 [ 2099.879194][T27884] tipc: Failed to set node id, please configure manually [ 2099.886460][T27884] tipc: Enabling of bearer rejected, failed to enable media [ 2101.383057][T27901] netlink: 'syz.1.5841': attribute type 20 has an invalid length. [ 2103.064647][T27912] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5845'. [ 2106.109346][ T3096] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 2106.269440][ T3096] usb 3-1: Using ep0 maxpacket: 32 [ 2106.279408][ T3096] usb 3-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 2106.297397][ T3096] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2106.437442][ T3096] usb 3-1: config 0 descriptor?? [ 2106.511341][ T3096] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 2107.449228][T19762] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 2107.619144][T19762] usb 2-1: Using ep0 maxpacket: 32 [ 2107.653262][T19762] usb 2-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 2107.669382][T19762] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2107.720303][T19762] usb 2-1: config 0 descriptor?? [ 2107.771008][T19762] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 2108.341393][ T3096] gspca_vc032x: I2c Bus Busy Wait 00 [ 2109.580360][T19762] gspca_vc032x: I2c Bus Busy Wait 00 [ 2109.889690][ T3096] gspca_vc032x: reg_w err -110 [ 2109.894586][ T3096] gspca_vc032x: I2c Bus Busy Wait 00 [ 2109.902629][ T3096] gspca_vc032x: I2c Bus Busy Wait 00 [ 2109.908366][ T3096] gspca_vc032x: I2c Bus Busy Wait 00 [ 2109.915376][ T3096] gspca_vc032x: I2c Bus Busy Wait 00 [ 2109.931493][ T3096] gspca_vc032x: I2c Bus Busy Wait 00 [ 2109.946202][ T3096] gspca_vc032x: I2c Bus Busy Wait 00 [ 2109.993538][ T3096] gspca_vc032x: I2c Bus Busy Wait 00 [ 2109.999418][ T3096] gspca_vc032x: I2c Bus Busy Wait 00 [ 2110.005080][ T3096] gspca_vc032x: I2c Bus Busy Wait 00 [ 2110.011855][ T3096] gspca_vc032x: I2c Bus Busy Wait 00 [ 2110.017540][ T3096] gspca_vc032x: I2c Bus Busy Wait 00 [ 2110.025340][ T3096] gspca_vc032x: I2c Bus Busy Wait 00 [ 2110.046496][ T3096] gspca_vc032x: I2c Bus Busy Wait 00 [ 2110.052465][ T3096] gspca_vc032x: I2c Bus Busy Wait 00 [ 2110.058459][ T3096] gspca_vc032x: I2c Bus Busy Wait 00 [ 2110.064210][ T3096] gspca_vc032x: I2c Bus Busy Wait 00 [ 2110.070535][ T3096] gspca_vc032x: I2c Bus Busy Wait 00 [ 2110.075983][ T3096] gspca_vc032x: Unknown sensor... [ 2110.082852][ T3096] vc032x 3-1:0.0: probe with driver vc032x failed with error -22 [ 2110.617957][T27991] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5863'. [ 2110.852411][ T3096] usb 3-1: USB disconnect, device number 39 [ 2110.864393][T19762] gspca_vc032x: reg_w err -71 [ 2110.873682][T19762] gspca_vc032x: I2c Bus Busy Wait 00 [ 2110.882737][T19762] gspca_vc032x: I2c Bus Busy Wait 00 [ 2110.888242][T19762] gspca_vc032x: I2c Bus Busy Wait 00 [ 2110.914580][T19762] gspca_vc032x: I2c Bus Busy Wait 00 [ 2110.924857][T19762] gspca_vc032x: I2c Bus Busy Wait 00 [ 2110.965259][T19762] gspca_vc032x: I2c Bus Busy Wait 00 [ 2110.977879][T19762] gspca_vc032x: I2c Bus Busy Wait 00 [ 2110.986120][T19762] gspca_vc032x: I2c Bus Busy Wait 00 [ 2110.997929][T19762] gspca_vc032x: I2c Bus Busy Wait 00 [ 2111.005273][T19762] gspca_vc032x: I2c Bus Busy Wait 00 [ 2111.013776][T19762] gspca_vc032x: I2c Bus Busy Wait 00 [ 2111.021236][T19762] gspca_vc032x: I2c Bus Busy Wait 00 [ 2111.026725][T19762] gspca_vc032x: I2c Bus Busy Wait 00 [ 2111.035358][T19762] gspca_vc032x: I2c Bus Busy Wait 00 [ 2111.056352][T19762] gspca_vc032x: I2c Bus Busy Wait 00 [ 2111.062167][T19762] gspca_vc032x: I2c Bus Busy Wait 00 [ 2111.130466][T19762] gspca_vc032x: I2c Bus Busy Wait 00 [ 2111.162967][T19762] gspca_vc032x: Unknown sensor... [ 2111.177708][T19762] vc032x 2-1:0.0: probe with driver vc032x failed with error -22 [ 2111.221591][T19762] usb 2-1: USB disconnect, device number 29 [ 2112.822986][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 2112.829655][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 2112.939282][T23706] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 2113.099329][T23706] usb 6-1: Using ep0 maxpacket: 32 [ 2113.109804][T23706] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 2113.139752][T23706] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 2113.159341][T23706] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 2113.167972][T23706] usb 6-1: Product: syz [ 2113.179165][T23706] usb 6-1: Manufacturer: syz [ 2113.183807][T23706] usb 6-1: SerialNumber: syz [ 2113.379550][T23706] usb 6-1: config 0 descriptor?? [ 2113.546256][T28022] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 2113.558703][T23706] hub 6-1:0.0: bad descriptor, ignoring hub [ 2113.588592][T23706] hub 6-1:0.0: probe with driver hub failed with error -5 [ 2114.194355][T28022] usb 6-1: reset high-speed USB device number 36 using dummy_hcd [ 2114.408909][T28022] usb 6-1: device firmware changed [ 2114.415332][ T3096] usb 6-1: USB disconnect, device number 36 [ 2114.559621][ T3096] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 2114.709188][ T3096] usb 6-1: Using ep0 maxpacket: 32 [ 2114.717816][ T3096] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 2114.738815][ T3096] usb 6-1: string descriptor 0 read error: -22 [ 2114.745547][ T3096] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 2114.762353][ T3096] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 2114.811242][ T3096] usb 6-1: config 0 descriptor?? [ 2114.836056][T28035] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 2114.846537][ T3096] hub 6-1:0.0: bad descriptor, ignoring hub [ 2114.864976][ T3096] hub 6-1:0.0: probe with driver hub failed with error -5 [ 2115.013520][T28043] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5873'. [ 2115.131670][T28035] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2115.166397][T28035] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2115.683111][ T3096] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 2115.839885][ T3096] usb 2-1: Using ep0 maxpacket: 32 [ 2115.879718][ T3096] usb 2-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 2115.945433][ T3096] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2116.004592][ T3096] usb 2-1: config 0 descriptor?? [ 2116.046959][ T3096] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 2116.749779][ T5916] usb 6-1: USB disconnect, device number 37 [ 2117.422486][ T9] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 2117.732817][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 2117.783760][ T9] usb 6-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 2117.839419][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2117.877671][ T9] usb 6-1: Product: syz [ 2117.887815][ T9] usb 6-1: Manufacturer: syz [ 2117.900985][ T9] usb 6-1: SerialNumber: syz [ 2117.917389][ T3096] gspca_vc032x: I2c Bus Busy Wait 00 [ 2117.965622][ T9] usb 6-1: config 0 descriptor?? [ 2117.999173][ T9] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected [ 2118.023970][ T9] usb 6-1: Detected FT232H [ 2118.745548][ T9] ftdi_sio 6-1:0.0: GPIO initialisation failed: -71 [ 2118.756070][ T9] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 2118.835809][ T9] usb 6-1: USB disconnect, device number 38 [ 2118.879696][ T9] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 2118.924499][ T9] ftdi_sio 6-1:0.0: device disconnected [ 2119.439615][ T3096] gspca_vc032x: reg_w err -110 [ 2119.444487][ T3096] gspca_vc032x: I2c Bus Busy Wait 00 [ 2119.450059][ T3096] gspca_vc032x: I2c Bus Busy Wait 00 [ 2119.474000][ T3096] gspca_vc032x: I2c Bus Busy Wait 00 [ 2119.500912][ T3096] gspca_vc032x: I2c Bus Busy Wait 00 [ 2119.551733][ T3096] gspca_vc032x: I2c Bus Busy Wait 00 [ 2119.563494][ T9] usb 4-1: USB disconnect, device number 124 [ 2119.650788][ T3096] gspca_vc032x: I2c Bus Busy Wait 00 [ 2119.672687][ T3096] gspca_vc032x: I2c Bus Busy Wait 00 [ 2119.701879][ T3096] gspca_vc032x: I2c Bus Busy Wait 00 [ 2119.733634][ T3096] gspca_vc032x: I2c Bus Busy Wait 00 [ 2119.766290][ T3096] gspca_vc032x: I2c Bus Busy Wait 00 [ 2119.786162][ T3096] gspca_vc032x: I2c Bus Busy Wait 00 [ 2119.798779][ T3096] gspca_vc032x: I2c Bus Busy Wait 00 [ 2119.807817][ T3096] gspca_vc032x: I2c Bus Busy Wait 00 [ 2119.867329][ T3096] gspca_vc032x: I2c Bus Busy Wait 00 [ 2119.888522][ T3096] gspca_vc032x: I2c Bus Busy Wait 00 [ 2119.916796][ T3096] gspca_vc032x: I2c Bus Busy Wait 00 [ 2119.960229][ T3096] gspca_vc032x: I2c Bus Busy Wait 00 [ 2120.058132][ T3096] gspca_vc032x: Unknown sensor... [ 2120.081519][ T3096] vc032x 2-1:0.0: probe with driver vc032x failed with error -22 [ 2120.242020][ T3096] usb 2-1: USB disconnect, device number 30 [ 2120.519512][T12043] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2120.533689][T12043] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2120.545011][T12043] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2120.562459][T12043] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2120.575667][T12043] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2120.841569][T19762] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 2121.070906][T19762] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2121.139270][T19762] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2121.249320][T19762] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2121.257976][T19762] usb 3-1: Product: syz [ 2121.264681][T19762] usb 3-1: Manufacturer: syz [ 2121.271946][T19762] usb 3-1: SerialNumber: syz [ 2121.422772][ T1115] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2121.522243][T28091] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2121.576804][T28091] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2121.744797][ T1115] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2121.985695][T19762] cdc_ether 3-1:1.0: skipping garbage [ 2121.999969][T28100] chnl_net:caif_netlink_parms(): no params data found [ 2122.037446][T19762] cdc_ether 3-1:1.0: skipping garbage [ 2122.057985][T19762] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 2122.120062][T19762] usb 3-1: USB disconnect, device number 40 [ 2122.324712][T28116] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5889'. [ 2122.460880][ T1115] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2122.639414][T12043] Bluetooth: hci3: command tx timeout [ 2122.838662][ T1115] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2123.077198][T28127] netlink: 'syz.2.5892': attribute type 12 has an invalid length. [ 2124.051905][T28144] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5895'. [ 2124.699402][T28100] bridge0: port 1(bridge_slave_0) entered blocking state [ 2124.699524][T28100] bridge0: port 1(bridge_slave_0) entered disabled state [ 2124.699783][T28100] bridge_slave_0: entered allmulticast mode [ 2124.701815][T28100] bridge_slave_0: entered promiscuous mode [ 2124.716537][T28100] bridge0: port 2(bridge_slave_1) entered blocking state [ 2124.716637][T28100] bridge0: port 2(bridge_slave_1) entered disabled state [ 2124.716870][T28100] bridge_slave_1: entered allmulticast mode [ 2124.718443][T28100] bridge_slave_1: entered promiscuous mode [ 2124.720155][T12043] Bluetooth: hci3: command tx timeout [ 2124.986398][T28100] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2125.028268][T28100] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2125.290094][T23706] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 2125.449923][T23706] usb 6-1: Using ep0 maxpacket: 16 [ 2125.469500][T23706] usb 6-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 2125.479004][T23706] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2125.494400][T23706] usb 6-1: Product: syz [ 2125.502028][T23706] usb 6-1: Manufacturer: syz [ 2125.512505][T23706] usb 6-1: SerialNumber: syz [ 2125.530381][T23706] usb 6-1: config 0 descriptor?? [ 2125.541007][T23706] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected [ 2125.552293][T23706] usb 6-1: Detected FT232H [ 2125.925786][ T1115] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2125.938529][ T1115] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2125.958410][ T1115] bond0 (unregistering): Released all slaves [ 2126.020451][T28100] team0: Port device team_slave_0 added [ 2126.095953][T28100] team0: Port device team_slave_1 added [ 2126.161305][ T1115] : left promiscuous mode [ 2126.374565][T28100] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2126.449366][T28100] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2126.528197][T28100] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2126.718951][T28100] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2126.739210][ T9] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 2126.765518][T28100] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2126.799818][T12043] Bluetooth: hci3: command tx timeout [ 2126.821236][T28100] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2126.958174][T23706] ftdi_sio 6-1:0.0: GPIO initialisation failed: -71 [ 2126.976005][ T9] usb 3-1: config 0 has no interfaces? [ 2127.004812][ T9] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 2127.014635][T23706] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 2127.030892][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2127.072617][ T9] usb 3-1: Product: syz [ 2127.082720][T23706] usb 6-1: USB disconnect, device number 39 [ 2127.153825][ T9] usb 3-1: Manufacturer: syz [ 2127.161120][ T9] usb 3-1: SerialNumber: syz [ 2127.185175][T23706] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 2127.237300][ T9] usb 3-1: config 0 descriptor?? [ 2127.242659][T23706] ftdi_sio 6-1:0.0: device disconnected [ 2127.534206][T28172] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2127.544465][T28172] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2127.569266][T28172] netlink: 76 bytes leftover after parsing attributes in process `syz.2.5900'. [ 2127.916327][ T1115] hsr_slave_0: left promiscuous mode [ 2127.937328][T28191] netlink: 780 bytes leftover after parsing attributes in process `syz.0.5902'. [ 2127.967119][ T1115] hsr_slave_1: left promiscuous mode [ 2127.971085][T28191] net_ratelimit: 16 callbacks suppressed [ 2127.971107][T28191] openvswitch: netlink: Message has 4 unknown bytes. [ 2127.996163][ T1115] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2128.034040][T28191] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2128.037528][ T1115] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2128.112691][ T1115] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2128.133312][ T1115] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2128.298134][ T1115] veth1_macvtap: left promiscuous mode [ 2128.315779][ T1115] veth0_macvtap: left promiscuous mode [ 2128.879561][T12043] Bluetooth: hci3: command tx timeout [ 2129.172863][ T9] usb 3-1: USB disconnect, device number 41 [ 2130.971827][ T1115] team0 (unregistering): Port device team_slave_1 removed [ 2131.127149][ C1] vkms_vblank_simulate: vblank timer overrun [ 2131.389117][ T9] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 2131.493238][ T1115] team0 (unregistering): Port device team_slave_0 removed [ 2131.554208][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 2131.578096][ T9] usb 2-1: config 0 has an invalid interface number: 145 but max is 0 [ 2131.597264][ T9] usb 2-1: config 0 has no interface number 0 [ 2131.609000][ T9] usb 2-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 2131.626113][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2131.635442][ T9] usb 2-1: Product: syz [ 2131.640019][ T9] usb 2-1: Manufacturer: syz [ 2131.644900][ T9] usb 2-1: SerialNumber: syz [ 2131.683704][ T9] usb 2-1: config 0 descriptor?? [ 2131.717428][ T9] hub 2-1:0.145: bad descriptor, ignoring hub [ 2131.724593][ T9] hub 2-1:0.145: probe with driver hub failed with error -5 [ 2131.742662][ T9] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.145/input/input200 [ 2133.067825][T28100] hsr_slave_0: entered promiscuous mode [ 2133.082154][T28100] hsr_slave_1: entered promiscuous mode [ 2133.096820][T28100] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2133.109298][T28100] Cannot create hsr debugfs directory [ 2133.502693][T28241] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5910'. [ 2134.269348][ T3096] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 2134.423368][ T3096] usb 6-1: Using ep0 maxpacket: 16 [ 2134.457495][ T3096] usb 6-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 2134.480068][T19762] usb 2-1: reset high-speed USB device number 31 using dummy_hcd [ 2134.498073][ T3096] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2134.519120][T19762] usb 2-1: device reset changed ep0 maxpacket size! [ 2134.539281][ T3096] usb 6-1: Product: syz [ 2134.543145][T19762] usb 2-1: USB disconnect, device number 31 [ 2134.553255][ T3096] usb 6-1: Manufacturer: syz [ 2134.575746][ T3096] usb 6-1: SerialNumber: syz [ 2134.669242][ T3096] usb 6-1: config 0 descriptor?? [ 2134.706264][ T3096] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected [ 2134.744233][ T3096] usb 6-1: Detected FT232H [ 2135.051860][T19762] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 2135.260241][T19762] usb 2-1: Using ep0 maxpacket: 32 [ 2135.313290][T19762] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 2135.377129][T19762] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 2135.438443][T19762] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 2135.506819][T19762] usb 2-1: Product: syz [ 2135.542982][T19762] usb 2-1: Manufacturer: syz [ 2135.571548][T19762] usb 2-1: SerialNumber: syz [ 2135.594412][T19762] usb 2-1: config 0 descriptor?? [ 2135.657175][T28254] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 2135.675157][T19762] hub 2-1:0.0: bad descriptor, ignoring hub [ 2135.732649][T19762] hub 2-1:0.0: probe with driver hub failed with error -5 [ 2135.842878][ T3096] ftdi_sio 6-1:0.0: GPIO initialisation failed: -71 [ 2135.895599][ T3096] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 2135.991723][ T3096] usb 6-1: USB disconnect, device number 40 [ 2136.037379][ T3096] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 2136.102517][ T3096] ftdi_sio 6-1:0.0: device disconnected [ 2136.184873][T28273] netlink: 68 bytes leftover after parsing attributes in process `syz.2.5915'. [ 2136.212994][T28274] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2136.255770][T28274] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2136.290681][T28273] dummy0: entered promiscuous mode [ 2136.297660][T28273] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 2136.323569][T28273] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 2136.330938][T28254] usb 2-1: reset high-speed USB device number 32 using dummy_hcd [ 2136.343295][T28273] dummy0: left promiscuous mode [ 2136.387161][T28100] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 2136.403740][T28100] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 2136.420493][T28100] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 2136.439845][T28100] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 2136.515879][T28254] usb 2-1: device firmware changed [ 2136.527260][ T5916] usb 2-1: USB disconnect, device number 32 [ 2136.661849][T28100] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2136.680990][ T5916] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 2136.724709][T28100] 8021q: adding VLAN 0 to HW filter on device team0 [ 2136.743928][ T1115] bridge0: port 1(bridge_slave_0) entered blocking state [ 2136.751248][ T1115] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2136.773728][ T1115] bridge0: port 2(bridge_slave_1) entered blocking state [ 2136.781026][ T1115] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2136.871787][ T5916] usb 2-1: Using ep0 maxpacket: 32 [ 2136.904393][ T5916] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 2136.946237][ T5916] usb 2-1: string descriptor 0 read error: -22 [ 2136.967385][ T5916] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 2136.993986][ T5916] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 2137.021543][ T5916] usb 2-1: config 0 descriptor?? [ 2137.032677][T28100] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2137.056610][T28268] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 2137.095008][ T5916] hub 2-1:0.0: bad descriptor, ignoring hub [ 2137.111307][ T5916] hub 2-1:0.0: probe with driver hub failed with error -5 [ 2137.230659][T28100] veth0_vlan: entered promiscuous mode [ 2137.262336][T28100] veth1_vlan: entered promiscuous mode [ 2137.445140][T19762] usb 2-1: USB disconnect, device number 33 [ 2137.472683][T28100] veth0_macvtap: entered promiscuous mode [ 2137.544554][T28100] veth1_macvtap: entered promiscuous mode [ 2137.567560][T28309] tipc: Started in network mode [ 2137.572997][T28309] tipc: Node identity , cluster identity 4711 [ 2137.579720][T28309] tipc: Failed to set node id, please configure manually [ 2137.904497][T28317] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5923'. [ 2138.219421][T28309] tipc: Enabling of bearer rejected, failed to enable media [ 2138.287740][T28100] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2138.349384][ T9] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 2138.405620][T28100] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2138.441620][T28100] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2138.479524][T28100] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2138.508944][T28100] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2138.529327][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 2138.539163][ T9] usb 3-1: config 0 has an invalid interface number: 145 but max is 0 [ 2138.559373][ T9] usb 3-1: config 0 has no interface number 0 [ 2138.596222][T28100] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2138.609245][ T9] usb 3-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 2138.618524][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2138.651710][ T9] usb 3-1: Product: syz [ 2138.693471][ T9] usb 3-1: Manufacturer: syz [ 2138.698407][ T9] usb 3-1: SerialNumber: syz [ 2138.736097][ T9] usb 3-1: config 0 descriptor?? [ 2138.791737][ T9] hub 3-1:0.145: bad descriptor, ignoring hub [ 2138.810204][ T9] hub 3-1:0.145: probe with driver hub failed with error -5 [ 2138.853283][ T9] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.145/input/input201 [ 2139.719391][T14349] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2139.791607][T14349] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2140.027697][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2140.063959][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2140.622527][T28349] netlink: 56 bytes leftover after parsing attributes in process `syz.3.5882'. [ 2140.689834][T28349] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5882'. [ 2141.228238][ T3096] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 2141.249543][ T5923] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 2141.253547][T27468] usb 3-1: USB disconnect, device number 42 [ 2141.463413][ T3096] usb 2-1: Using ep0 maxpacket: 16 [ 2141.485419][ T5923] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2141.497431][ T3096] usb 2-1: config 0 has an invalid interface number: 80 but max is 0 [ 2141.510602][ T5923] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2141.529437][ T3096] usb 2-1: config 0 has no interface number 0 [ 2141.540338][ T5923] usb 6-1: config 0 descriptor?? [ 2141.547424][ T3096] usb 2-1: config 0 interface 80 altsetting 254 has an invalid descriptor for endpoint zero, skipping [ 2141.571188][ T5923] cp210x 6-1:0.0: cp210x converter detected [ 2141.578239][ T3096] usb 2-1: config 0 interface 80 altsetting 254 endpoint 0x4 has invalid maxpacket 1024, setting to 64 [ 2141.594598][ T3096] usb 2-1: config 0 interface 80 altsetting 254 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 2141.611837][ T3096] usb 2-1: config 0 interface 80 altsetting 254 has a duplicate endpoint with address 0x1, skipping [ 2141.639563][ T3096] usb 2-1: config 0 interface 80 altsetting 254 bulk endpoint 0xB has invalid maxpacket 1024 [ 2141.668172][ T3096] usb 2-1: config 0 interface 80 altsetting 254 bulk endpoint 0x8 has invalid maxpacket 1024 [ 2141.680430][ T3096] usb 2-1: config 0 interface 80 altsetting 254 has a duplicate endpoint with address 0x4, skipping [ 2141.696414][ T3096] usb 2-1: config 0 interface 80 has no altsetting 0 [ 2141.783110][T28375] tipc: Enabling of bearer rejected, failed to enable media [ 2141.889284][T28378] netlink: 1688 bytes leftover after parsing attributes in process `syz.3.5935'. [ 2142.045020][ T5923] cp210x 6-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 2142.065272][ T5923] cp210x 6-1:0.0: querying part number failed [ 2142.084144][ T3096] usb 2-1: New USB device found, idVendor=1199, idProduct=6804, bcdDevice=e8.f8 [ 2142.111252][ T5923] usb 6-1: cp210x converter now attached to ttyUSB0 [ 2142.122024][ T3096] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2142.154994][ T3096] usb 2-1: Product: syz [ 2142.180349][ T3096] usb 2-1: Manufacturer: syz [ 2142.189513][ T3096] usb 2-1: SerialNumber: syz [ 2142.223803][ T3096] usb 2-1: config 0 descriptor?? [ 2142.262189][T28355] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 2142.279483][T28355] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 2142.295041][ T3096] sierra 2-1:0.80: Sierra USB modem converter detected [ 2142.421399][T28387] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5936'. [ 2142.541542][ T3096] usb 2-1: Sierra USB modem converter now attached to ttyUSB1 [ 2142.626641][ T3096] usb 2-1: Sierra USB modem converter now attached to ttyUSB2 [ 2142.731368][ T3096] usb 2-1: Sierra USB modem converter now attached to ttyUSB3 [ 2142.863636][ T3096] usb 2-1: USB disconnect, device number 34 [ 2142.955103][ T3096] sierra ttyUSB1: Sierra USB modem converter now disconnected from ttyUSB1 [ 2142.976397][ T3096] sierra ttyUSB2: Sierra USB modem converter now disconnected from ttyUSB2 [ 2143.006775][ T3096] sierra ttyUSB3: Sierra USB modem converter now disconnected from ttyUSB3 [ 2143.080398][ T3096] sierra 2-1:0.80: device disconnected [ 2143.169546][T19762] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 2143.343220][T19762] usb 3-1: Using ep0 maxpacket: 16 [ 2143.403963][T19762] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2143.475446][T19762] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2143.661639][T28406] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5939'. [ 2143.679808][T19762] usb 3-1: New USB device found, idVendor=1430, idProduct=474c, bcdDevice= 0.00 [ 2143.717424][T19762] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2143.821119][T19762] usb 3-1: config 0 descriptor?? [ 2144.063741][T23706] usb 6-1: USB disconnect, device number 41 [ 2144.185902][T23706] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 2144.215841][T23706] cp210x 6-1:0.0: device disconnected [ 2144.274781][T19762] sony 0003:1430:474C.001D: unknown main item tag 0x0 [ 2144.302244][T19762] sony 0003:1430:474C.001D: unknown main item tag 0x0 [ 2144.339972][T19762] sony 0003:1430:474C.001D: hidraw0: USB HID v0.00 Device [HID 1430:474c] on usb-dummy_hcd.2-1/input0 [ 2144.477655][T28396] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2144.532591][T28396] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2144.728719][T19762] sony 0003:1430:474C.001D: failed to claim input [ 2145.189333][T19762] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 2145.431056][T19762] usb 6-1: Using ep0 maxpacket: 16 [ 2145.455209][T19762] usb 6-1: config 0 has an invalid interface number: 145 but max is 0 [ 2145.509145][T19762] usb 6-1: config 0 has no interface number 0 [ 2145.547706][T19762] usb 6-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 2145.614117][T19762] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2145.638518][T19762] usb 6-1: Product: syz [ 2145.648797][T19762] usb 6-1: Manufacturer: syz [ 2145.682612][T19762] usb 6-1: SerialNumber: syz [ 2145.729820][T19762] usb 6-1: config 0 descriptor?? [ 2145.792744][T19762] hub 6-1:0.145: bad descriptor, ignoring hub [ 2145.847021][T19762] hub 6-1:0.145: probe with driver hub failed with error -5 [ 2145.887162][T28396] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2145.906493][T28396] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2145.966450][T19762] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.145/input/input202 [ 2146.417407][T28396] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2146.450783][T28396] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2146.461846][T28396] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2146.552730][T28396] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2146.647146][T28430] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 2146.718141][T19762] usb 3-1: USB disconnect, device number 43 [ 2146.971354][T28442] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5950'. [ 2147.370973][T28444] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.5951'. [ 2147.399871][T19762] usb 4-1: new high-speed USB device number 125 using dummy_hcd [ 2147.709212][T19762] usb 4-1: Using ep0 maxpacket: 16 [ 2147.716478][T19762] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2147.732096][T19762] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 2147.750980][T19762] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2147.760915][T19762] usb 4-1: Product: syz [ 2147.765297][T19762] usb 4-1: Manufacturer: syz [ 2147.772673][T19762] usb 4-1: SerialNumber: syz [ 2147.785598][T19762] usb 4-1: config 0 descriptor?? [ 2147.824516][T19762] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 2148.035430][T19762] usb 4-1: USB disconnect, device number 125 [ 2148.048335][T28146] usb 4-1: Failed to submit usb control message: -71 [ 2148.066619][T28146] usb 4-1: unable to send the bmi data to the device: -71 [ 2148.094635][T28146] usb 4-1: unable to get target info from device [ 2148.119092][T28146] usb 4-1: could not get target info (-71) [ 2148.139156][T28146] usb 4-1: could not probe fw (-71) [ 2148.442072][ T3096] usb 6-1: USB disconnect, device number 42 [ 2148.701980][T28468] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5955'. [ 2149.706351][T28482] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5961'. [ 2149.968536][T28482] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 2150.069349][ T5916] usb 4-1: new high-speed USB device number 126 using dummy_hcd [ 2150.279257][ T9] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 2150.318258][ T5916] usb 4-1: config 0 has no interfaces? [ 2150.343302][ T5916] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 2150.352626][ T5916] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2150.360931][ T5916] usb 4-1: Product: syz [ 2150.365241][ T5916] usb 4-1: Manufacturer: syz [ 2150.370068][ T5916] usb 4-1: SerialNumber: syz [ 2150.377989][ T5916] usb 4-1: config 0 descriptor?? [ 2150.449358][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 2150.493067][ T9] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 2150.545527][ T9] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 2150.582407][ T9] usb 3-1: can't read configurations, error -61 [ 2150.644719][T28484] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2150.729460][ T9] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 2150.798385][T28484] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2150.939678][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 2150.969289][ T9] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 2150.991933][T28504] netlink: 'syz.1.5969': attribute type 5 has an invalid length. [ 2150.994126][ T9] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 2151.024858][ T9] usb 3-1: can't read configurations, error -61 [ 2151.036011][ T9] usb usb3-port1: attempt power cycle [ 2151.046238][T28504] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5969'. [ 2151.282456][T28504] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2151.510624][ T9] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 2151.682554][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 2151.706008][ T9] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 2152.187127][ T9] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 2152.198478][ T9] usb 3-1: can't read configurations, error -61 [ 2152.361902][ T9] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 2152.449048][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 2152.481288][ T9] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 2152.498134][ T9] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 2152.506474][ T9] usb 3-1: can't read configurations, error -61 [ 2152.514520][ T9] usb usb3-port1: unable to enumerate USB device [ 2152.652048][T28511] tipc: Started in network mode [ 2152.657230][T28511] tipc: Node identity 5a54bbbc20f1, cluster identity 4711 [ 2152.665189][T28511] tipc: Enabled bearer , priority 0 [ 2152.674086][T28511] syzkaller0: entered promiscuous mode [ 2152.679901][T28511] syzkaller0: entered allmulticast mode [ 2152.816973][ T3096] usb 4-1: USB disconnect, device number 126 [ 2152.831037][T28513] tipc: Resetting bearer [ 2152.989270][T28510] tipc: Resetting bearer [ 2153.126276][T28510] tipc: Disabling bearer [ 2153.658927][T28527] netlink: 1688 bytes leftover after parsing attributes in process `syz.5.5976'. [ 2154.177822][T28539] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 2154.191333][T28539] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 2154.338079][T28531] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5977'. [ 2155.447613][T28556] netlink: 104 bytes leftover after parsing attributes in process `syz.2.5981'. [ 2155.639188][ T3096] usb 4-1: new high-speed USB device number 127 using dummy_hcd [ 2155.791189][ T3096] usb 4-1: config 0 has no interfaces? [ 2155.801380][ T3096] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 2155.811301][ T3096] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2155.820381][ T3096] usb 4-1: Product: syz [ 2155.824970][ T3096] usb 4-1: Manufacturer: syz [ 2155.830369][ T3096] usb 4-1: SerialNumber: syz [ 2156.001599][ T3096] usb 4-1: config 0 descriptor?? [ 2156.079695][ T9] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 2156.239551][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 2156.247383][ T9] usb 2-1: config 0 has no interfaces? [ 2156.256600][ T9] usb 2-1: New USB device found, idVendor=0856, idProduct=bc00, bcdDevice=b2.7f [ 2156.271772][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2156.291686][T28555] netlink: 76 bytes leftover after parsing attributes in process `syz.3.5983'. [ 2156.334515][ T9] usb 2-1: Product: syz [ 2156.334541][ T9] usb 2-1: Manufacturer: syz [ 2156.334555][ T9] usb 2-1: SerialNumber: syz [ 2156.337043][ T9] usb 2-1: config 0 descriptor?? [ 2156.643954][ T3096] usb 2-1: USB disconnect, device number 35 [ 2156.819363][T28570] netlink: 1688 bytes leftover after parsing attributes in process `syz.2.5988'. [ 2157.384196][T28577] netlink: 104 bytes leftover after parsing attributes in process `syz.2.5990'. [ 2157.591323][T28585] ptrace attach of "./syz-executor exec"[23388] was attempted by "./syz-executor exec"[28585] [ 2158.029589][T27468] usb 4-1: USB disconnect, device number 127 [ 2160.505476][T28612] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6000'. [ 2161.203209][ T9] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 2161.403724][ T9] usb 2-1: config 0 has no interfaces? [ 2161.416292][ T9] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 2161.428781][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2161.438256][ T9] usb 2-1: Product: syz [ 2161.457463][ T9] usb 2-1: Manufacturer: syz [ 2161.470510][ T9] usb 2-1: SerialNumber: syz [ 2161.506902][ T9] usb 2-1: config 0 descriptor?? [ 2161.929887][T28619] netlink: 76 bytes leftover after parsing attributes in process `syz.1.6004'. [ 2163.646879][ T5916] usb 2-1: USB disconnect, device number 36 [ 2164.331525][T28655] ptrace attach of "./syz-executor exec"[17443] was attempted by "./syz-executor exec"[28655] [ 2164.733816][T28658] binder: 28651:28658 ioctl 4018620d 0 returned -22 [ 2164.762285][T28657] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.6010'. [ 2166.759701][T23349] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 2166.779392][T23349] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 2166.861180][T23349] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 2166.876527][T23349] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 2166.889868][T23349] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 2167.136787][T28693] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6019'. [ 2168.658284][T14349] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2168.970674][T12043] Bluetooth: hci5: command tx timeout [ 2169.200584][T14349] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2169.254136][ T5916] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 2169.431544][ T5916] usb 6-1: config 0 has no interfaces? [ 2169.454131][ T5916] usb 6-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 2169.456553][T14349] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2169.479143][T27468] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 2169.487517][ T5916] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2169.512174][T28692] chnl_net:caif_netlink_parms(): no params data found [ 2169.533304][ T5916] usb 6-1: Product: syz [ 2169.537556][ T5916] usb 6-1: Manufacturer: syz [ 2169.601224][T14349] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2169.616448][ T5916] usb 6-1: SerialNumber: syz [ 2169.629418][T27468] usb 3-1: Using ep0 maxpacket: 16 [ 2169.638261][ T5916] usb 6-1: config 0 descriptor?? [ 2169.646217][T27468] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 2169.675829][T27468] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2169.697301][T27468] usb 3-1: Product: syz [ 2169.722007][T27468] usb 3-1: Manufacturer: syz [ 2169.740242][T27468] usb 3-1: SerialNumber: syz [ 2169.762438][T27468] usb 3-1: config 0 descriptor?? [ 2169.790765][T27468] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 2169.826776][T27468] usb 3-1: Detected FT232H [ 2169.913258][T28704] netlink: 76 bytes leftover after parsing attributes in process `syz.5.6021'. [ 2170.057007][T28692] bridge0: port 1(bridge_slave_0) entered blocking state [ 2170.057210][T28692] bridge0: port 1(bridge_slave_0) entered disabled state [ 2170.057436][T28692] bridge_slave_0: entered allmulticast mode [ 2170.080050][T28692] bridge_slave_0: entered promiscuous mode [ 2170.095700][T28692] bridge0: port 2(bridge_slave_1) entered blocking state [ 2170.095834][T28692] bridge0: port 2(bridge_slave_1) entered disabled state [ 2170.096125][T28692] bridge_slave_1: entered allmulticast mode [ 2170.102921][T28692] bridge_slave_1: entered promiscuous mode [ 2170.379540][T19762] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 2170.443510][T28692] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2170.448278][T28692] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2170.565289][T19762] usb 4-1: Using ep0 maxpacket: 8 [ 2170.584278][T19762] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2170.584334][T19762] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 2170.584387][T19762] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 2170.587126][T19762] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2170.587148][T19762] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2170.587164][T19762] usb 4-1: Product: syz [ 2170.587175][T19762] usb 4-1: Manufacturer: ࠒ [ 2170.587213][T19762] usb 4-1: SerialNumber: syz [ 2170.639159][T27468] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 2170.639637][T27468] ftdi_sio 3-1:0.0: GPIO initialisation failed: -71 [ 2170.646507][T27468] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 2170.654396][T27468] usb 3-1: USB disconnect, device number 48 [ 2170.719419][T27468] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 2170.724801][T27468] ftdi_sio 3-1:0.0: device disconnected [ 2170.807903][T19762] cdc_ncm 4-1:1.0: bind() failure [ 2170.816809][T19762] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 2170.816858][T19762] cdc_ncm 4-1:1.1: bind() failure [ 2170.867976][T28692] team0: Port device team_slave_0 added [ 2170.877918][T19762] usb 4-1: USB disconnect, device number 2 [ 2170.887927][T28692] team0: Port device team_slave_1 added [ 2171.040465][T12043] Bluetooth: hci5: command tx timeout [ 2171.095205][T28692] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2171.095233][T28692] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2171.095292][T28692] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2171.099366][T28692] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2171.099387][T28692] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2171.099442][T28692] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2172.289010][ C1] vkms_vblank_simulate: vblank timer overrun [ 2172.829369][T19762] usb 6-1: USB disconnect, device number 43 [ 2173.052871][T28763] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6032'. [ 2173.119298][T23349] Bluetooth: hci5: command tx timeout [ 2174.244547][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 2174.251223][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 2174.524677][T14349] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2174.542896][T14349] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2174.558512][T14349] bond0 (unregistering): Released all slaves [ 2174.596764][T14349] bond1 (unregistering): (slave bond2): Releasing backup interface [ 2174.617236][T14349] bond1 (unregistering): Released all slaves [ 2174.898098][T14349] bond2 (unregistering): Released all slaves [ 2175.037780][T28769] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 2175.059105][T28769] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 2175.087545][T28769] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 2175.141674][T28692] hsr_slave_0: entered promiscuous mode [ 2175.148784][T28692] hsr_slave_1: entered promiscuous mode [ 2175.155426][T28692] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2175.163440][T28692] Cannot create hsr debugfs directory [ 2175.199502][T23349] Bluetooth: hci5: command tx timeout [ 2175.813864][T14349] hsr_slave_0: left promiscuous mode [ 2175.869168][T14349] hsr_slave_1: left promiscuous mode [ 2175.885300][T14349] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2175.910469][T14349] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2175.935934][T14349] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2176.078186][T14349] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2176.193407][T14349] veth1_macvtap: left promiscuous mode [ 2176.213170][T14349] veth0_macvtap: left promiscuous mode [ 2176.299362][ T9] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 2176.429290][T19762] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 2176.528481][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 2176.552653][ T9] usb 4-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 2176.565044][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2176.573516][ T9] usb 4-1: Product: syz [ 2176.577817][ T9] usb 4-1: Manufacturer: syz [ 2176.586917][ T9] usb 4-1: SerialNumber: syz [ 2176.620258][ T9] usb 4-1: config 0 descriptor?? [ 2176.731408][ T9] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 2176.749245][T19762] usb 6-1: Using ep0 maxpacket: 16 [ 2176.769121][T19762] usb 6-1: config 0 has an invalid interface number: 145 but max is 0 [ 2176.778623][T19762] usb 6-1: config 0 has no interface number 0 [ 2176.788557][T19762] usb 6-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 2176.800313][T19762] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2176.810010][T19762] usb 6-1: Product: syz [ 2176.814730][T19762] usb 6-1: Manufacturer: syz [ 2177.029192][T19762] usb 6-1: SerialNumber: syz [ 2177.075533][T19762] usb 6-1: config 0 descriptor?? [ 2177.137845][T19762] hub 6-1:0.145: bad descriptor, ignoring hub [ 2177.168770][T19762] hub 6-1:0.145: probe with driver hub failed with error -5 [ 2177.238179][ T9] gspca_sonixj: reg_r err -32 [ 2177.247898][ T9] sonixj 4-1:0.0: probe with driver sonixj failed with error -32 [ 2177.319309][T19762] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.145/input/input203 [ 2178.876240][T28822] netlink: 104 bytes leftover after parsing attributes in process `syz.2.6043'. [ 2179.002388][T14349] team0 (unregistering): Port device team_slave_1 removed [ 2179.122877][T19762] usb 4-1: USB disconnect, device number 3 [ 2179.342694][T28825] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6044'. [ 2180.081308][T14349] team0 (unregistering): Port device team_slave_0 removed [ 2181.139396][T19762] usb 6-1: USB disconnect, device number 44 [ 2181.497575][T28849] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6047'. [ 2182.187748][T14349] IPVS: stop unused estimator thread 0... [ 2183.749346][ T5923] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 2183.872413][T28692] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 2183.934115][ T5923] usb 4-1: Using ep0 maxpacket: 8 [ 2183.965303][T28692] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 2183.978767][ T5923] usb 4-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 2184.011307][ T5923] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2184.052842][T28692] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 2184.069187][ T5923] usb 4-1: Product: syz [ 2184.079509][ T5923] usb 4-1: Manufacturer: syz [ 2184.109076][ T5923] usb 4-1: SerialNumber: syz [ 2184.128149][T28692] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 2184.150394][ T5923] usb 4-1: config 0 descriptor?? [ 2184.265618][ T5923] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 2184.349916][T28891] netlink: 104 bytes leftover after parsing attributes in process `syz.2.6055'. [ 2184.737265][ T5923] gspca_sonixj: reg_r err -32 [ 2184.744646][ T5923] sonixj 4-1:0.0: probe with driver sonixj failed with error -32 [ 2185.048065][T28692] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2185.226853][T28692] 8021q: adding VLAN 0 to HW filter on device team0 [ 2185.240354][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 2185.247561][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2185.294329][T28692] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2185.306327][T28692] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2185.357460][T28692] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2185.509515][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 2185.516772][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2186.028915][T28692] veth0_vlan: entered promiscuous mode [ 2186.083870][T28692] veth1_vlan: entered promiscuous mode [ 2186.211944][T28692] veth0_macvtap: entered promiscuous mode [ 2186.259442][T28692] veth1_macvtap: entered promiscuous mode [ 2186.395403][T28692] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2186.491845][T28692] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2186.556696][T28692] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2186.590184][T28692] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2186.627079][T28692] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2186.658580][T28692] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2186.729219][ T5923] usb 6-1: new full-speed USB device number 45 using dummy_hcd [ 2186.899431][ T3096] usb 4-1: USB disconnect, device number 4 [ 2186.939258][ T5923] usb 6-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 2186.956846][ T5923] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2186.977295][ T5923] usb 6-1: Product: syz [ 2186.985198][ T5923] usb 6-1: Manufacturer: syz [ 2186.996113][ T5923] usb 6-1: SerialNumber: syz [ 2187.007639][ T5923] usb 6-1: config 0 descriptor?? [ 2187.034310][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2187.045103][ T5923] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 2187.080228][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2187.141065][ T5923] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 2187.155635][T28922] netlink: 68 bytes leftover after parsing attributes in process `syz.2.6060'. [ 2187.173202][ T5923] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) error while loading driver (-19) [ 2187.237276][T28906] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2187.248954][T28146] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2187.278769][T28146] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2187.279903][T28906] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2188.379518][T28939] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6014'. [ 2188.707938][T28935] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6062'. [ 2188.919269][ T30] audit: type=1326 audit(1752126091.943:9807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28946 comm="syz.1.6063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f720798e929 code=0x7ffc0000 [ 2188.970351][ T30] audit: type=1326 audit(1752126091.943:9808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28946 comm="syz.1.6063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f720798e929 code=0x7ffc0000 [ 2189.098195][ T30] audit: type=1326 audit(1752126092.013:9809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28946 comm="syz.1.6063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f720798e929 code=0x7ffc0000 [ 2189.188401][ T30] audit: type=1326 audit(1752126092.013:9810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28946 comm="syz.1.6063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f720798e929 code=0x7ffc0000 [ 2189.288958][ T30] audit: type=1326 audit(1752126092.013:9811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28946 comm="syz.1.6063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f720798e929 code=0x7ffc0000 [ 2189.321272][T19762] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 2189.350919][ T3096] usb 6-1: USB disconnect, device number 45 [ 2189.365265][T28952] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6064'. [ 2189.439714][ T30] audit: type=1326 audit(1752126092.013:9812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28946 comm="syz.1.6063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f720798e929 code=0x7ffc0000 [ 2189.542893][ T30] audit: type=1326 audit(1752126092.013:9813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28946 comm="syz.1.6063" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f720798e929 code=0x0 [ 2189.579244][T19762] usb 2-1: Using ep0 maxpacket: 8 [ 2189.609376][T19762] usb 2-1: config 0 has an invalid interface number: 6 but max is 2 [ 2189.638074][T19762] usb 2-1: config 0 has an invalid interface number: 6 but max is 2 [ 2189.719376][T19762] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2189.797046][T19762] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 2189.825438][T19762] usb 2-1: config 0 has no interface number 0 [ 2189.861506][T19762] usb 2-1: config 0 interface 6 has no altsetting 1 [ 2189.868180][T19762] usb 2-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=2b.ac [ 2189.903148][T19762] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2190.005215][T19762] usb 2-1: config 0 descriptor?? [ 2190.169380][ T9] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 2190.377327][T28969] netlink: 104 bytes leftover after parsing attributes in process `syz.2.6067'. [ 2190.419139][ T9] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 2190.427412][ T9] usb 4-1: config 0 has no interface number 0 [ 2190.479277][ T9] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 2190.490054][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2190.517809][ T9] usb 4-1: Product: syz [ 2190.526666][ T9] usb 4-1: Manufacturer: syz [ 2190.535230][ T9] usb 4-1: SerialNumber: syz [ 2190.557966][ T9] usb 4-1: config 0 descriptor?? [ 2190.603580][ T30] audit: type=1326 audit(1752126093.643:9814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28971 comm="syz.0.6068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f892138e929 code=0x7ffc0000 [ 2190.641885][T28972] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 2190.681656][T28972] audit: out of memory in audit_log_start [ 2190.816328][ T9] usb 4-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 2190.841934][ T9] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 2190.904042][ T9] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 2190.965956][ T9] usb 4-1: media controller created [ 2191.016312][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2191.932344][T23706] usb 2-1: USB disconnect, device number 37 [ 2192.239847][ T9] i2c i2c-2: ec100: i2c rd failed=-110 reg=33 [ 2193.059570][T29000] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6072'. [ 2193.537365][T27491] usb 4-1: USB disconnect, device number 5 [ 2194.749763][T29030] netlink: 68 bytes leftover after parsing attributes in process `syz.5.6077'. [ 2197.063888][T12043] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2197.083161][T12043] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2197.122212][T12043] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2197.152194][T12043] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2197.169816][T12043] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2198.515622][ T61] bond0: (slave netdevsim0): Releasing backup interface [ 2199.200000][T12043] Bluetooth: hci0: command tx timeout [ 2199.760691][T29062] chnl_net:caif_netlink_parms(): no params data found [ 2200.004158][T29103] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6089'. [ 2200.624109][T29120] netlink: 68 bytes leftover after parsing attributes in process `syz.0.6093'. [ 2201.294211][T12043] Bluetooth: hci0: command tx timeout [ 2201.306092][ T61] dvmrp0 (unregistering): left allmulticast mode [ 2202.849557][ T61] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2202.933058][ T61] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2202.965923][ T61] bond0 (unregistering): Released all slaves [ 2203.365589][T12043] Bluetooth: hci0: command tx timeout [ 2203.419340][T29131] netlink: 'syz.3.6097': attribute type 5 has an invalid length. [ 2203.427170][T29131] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6097'. [ 2203.486178][ T61] bond1 (unregistering): Released all slaves [ 2203.652158][T29132] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2204.022055][T29062] bridge0: port 1(bridge_slave_0) entered blocking state [ 2204.103842][T29062] bridge0: port 1(bridge_slave_0) entered disabled state [ 2204.135968][T29062] bridge_slave_0: entered allmulticast mode [ 2204.203737][T29062] bridge_slave_0: entered promiscuous mode [ 2204.541649][T29062] bridge0: port 2(bridge_slave_1) entered blocking state [ 2204.581495][T29062] bridge0: port 2(bridge_slave_1) entered disabled state [ 2204.598186][T29062] bridge_slave_1: entered allmulticast mode [ 2204.625317][T29062] bridge_slave_1: entered promiscuous mode [ 2204.926803][ T61] hsr_slave_0: left promiscuous mode [ 2205.000821][ T61] hsr_slave_1: left promiscuous mode [ 2205.017518][ T61] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2205.048501][ T61] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2205.439156][T12043] Bluetooth: hci0: command tx timeout [ 2206.866614][ T5923] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 2207.044659][ T5923] usb 2-1: Using ep0 maxpacket: 16 [ 2207.056166][ T5923] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2207.095893][ T5923] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2207.122375][ T5923] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2207.155287][ T5923] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 2207.179444][ T5923] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2207.214162][ T5923] usb 2-1: config 0 descriptor?? [ 2207.395440][ T61] team0 (unregistering): Port device team_slave_1 removed [ 2207.624587][ T61] team0 (unregistering): Port device C removed [ 2208.039158][ T5923] usbhid 2-1:0.0: can't add hid device: -71 [ 2208.045485][ T5923] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 2208.076551][ T5923] usb 2-1: USB disconnect, device number 38 [ 2208.722513][T23706] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 2208.906177][T29181] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 2209.098069][T23706] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2209.107688][T23706] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2209.237461][T23706] usb 6-1: Product: syz [ 2209.241940][T23706] usb 6-1: Manufacturer: syz [ 2209.246599][T23706] usb 6-1: SerialNumber: syz [ 2209.273097][T23706] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2209.631359][T27491] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2209.638475][T29062] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2209.901062][T29062] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2210.095242][T29182] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2210.104790][T29182] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2210.128602][T29062] team0: Port device team_slave_0 added [ 2210.211952][T29062] team0: Port device team_slave_1 added [ 2210.595928][T29062] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2210.621222][T29062] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2210.729300][T27491] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 2210.856387][T27491] ath9k_htc: Failed to initialize the device [ 2210.920864][T29062] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2210.977513][T27491] usb 6-1: ath9k_htc: USB layer deinitialized [ 2211.032223][T29062] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2211.067245][T29062] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2211.108670][T29062] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2211.218726][ T61] IPVS: stop unused estimator thread 0... [ 2211.473145][T29062] hsr_slave_0: entered promiscuous mode [ 2211.502421][T23706] usb 6-1: USB disconnect, device number 46 [ 2211.563128][T29062] hsr_slave_1: entered promiscuous mode [ 2212.419597][ T3096] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 2212.559395][T23706] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 2212.589609][ T3096] usb 4-1: Using ep0 maxpacket: 16 [ 2212.622372][ T3096] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2212.679354][ T3096] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2212.703304][ T3096] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2212.767302][ T3096] usb 4-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 2212.788001][T23706] usb 2-1: config 0 has no interfaces? [ 2212.790966][ T3096] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2212.833340][ T3096] usb 4-1: config 0 descriptor?? [ 2212.865383][T23706] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 2212.895184][T23706] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2212.924413][T23706] usb 2-1: Product: syz [ 2212.928816][T23706] usb 2-1: Manufacturer: syz [ 2212.935206][T23706] usb 2-1: SerialNumber: syz [ 2213.032795][T23706] usb 2-1: config 0 descriptor?? [ 2213.160985][T29234] tipc: Enabled bearer , priority 0 [ 2213.312704][ T3096] hid-multitouch 0003:0457:07DA.001E: hidraw0: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.3-1/input0 [ 2213.331367][T29222] netlink: 'syz.1.6115': attribute type 12 has an invalid length. [ 2213.339571][T29222] netlink: 9472 bytes leftover after parsing attributes in process `syz.1.6115'. [ 2213.355999][ T5916] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 2213.439583][T29238] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6115'. [ 2213.476224][T29216] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2213.496422][T29238] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 2213.504537][T29216] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2213.563151][ T5916] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2213.576285][ T5916] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 2213.589949][ T3096] usb 4-1: USB disconnect, device number 6 [ 2213.617790][T29238] netlink: 120 bytes leftover after parsing attributes in process `syz.1.6115'. [ 2213.681968][ T5916] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2213.691192][ T5916] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2213.699462][ T5916] usb 6-1: Product: syz [ 2213.703647][ T5916] usb 6-1: Manufacturer: syz [ 2213.708242][ T5916] usb 6-1: SerialNumber: syz [ 2213.737894][T29239] fido_id[29239]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 2213.980423][ T5916] usb 6-1: Audio class v2/v3 interfaces need an interface association [ 2214.101689][ T5916] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 2214.127992][T29062] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2214.158451][ T5916] usb 6-1: USB disconnect, device number 47 [ 2214.175364][ T6271] udevd[6271]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2214.204724][T29062] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2214.271337][T29062] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2214.282739][ T3096] tipc: Node number set to 2057681852 [ 2214.307228][T29062] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2215.012798][T29266] netlink: 104 bytes leftover after parsing attributes in process `syz.3.6119'. [ 2215.185522][ T3096] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 2215.317012][T29062] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2215.347525][ T3096] usb 6-1: config 0 has no interfaces? [ 2215.394491][ T3096] usb 6-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 2215.416261][ T3096] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2215.426356][ T3096] usb 6-1: Product: syz [ 2215.483645][ T3096] usb 6-1: Manufacturer: syz [ 2215.533958][ T3096] usb 6-1: SerialNumber: syz [ 2215.614395][ T3096] usb 6-1: config 0 descriptor?? [ 2215.690018][T29062] 8021q: adding VLAN 0 to HW filter on device team0 [ 2215.698026][T29271] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.6121'. [ 2215.768093][T19762] usb 2-1: USB disconnect, device number 39 [ 2215.931616][T28146] bridge0: port 1(bridge_slave_0) entered blocking state [ 2215.939080][T28146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2215.976402][T29262] netlink: 76 bytes leftover after parsing attributes in process `syz.5.6120'. [ 2216.046437][T28146] bridge0: port 2(bridge_slave_1) entered blocking state [ 2216.053843][T28146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2216.309212][T19762] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 2216.404911][T29062] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2216.529554][T19762] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2216.529599][T19762] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2216.533991][T19762] usb 2-1: config 0 descriptor?? [ 2216.593480][T19762] cp210x 2-1:0.0: cp210x converter detected [ 2216.644911][T29062] veth0_vlan: entered promiscuous mode [ 2216.665667][T29062] veth1_vlan: entered promiscuous mode [ 2216.787471][T19762] usb 2-1: cp210x converter now attached to ttyUSB0 [ 2216.823004][T29062] veth0_macvtap: entered promiscuous mode [ 2216.836125][T29062] veth1_macvtap: entered promiscuous mode [ 2216.920983][T29062] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2216.973392][T29062] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2216.976980][T29062] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2216.977024][T29062] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2216.977056][T29062] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2216.977086][T29062] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2217.418320][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2217.472630][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2217.579319][ T3096] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 2217.626375][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2217.653769][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2217.764643][ T3096] usb 4-1: config 0 has no interfaces? [ 2217.797071][ T3096] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 2217.852996][ T3096] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2217.891710][ T3096] usb 4-1: Product: syz [ 2217.898334][ T3096] usb 4-1: Manufacturer: syz [ 2217.927130][ T3096] usb 4-1: SerialNumber: syz [ 2217.968827][ T3096] usb 4-1: config 0 descriptor?? [ 2218.108244][T27491] usb 6-1: USB disconnect, device number 48 [ 2218.219959][T29309] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6078'. [ 2218.424759][T29291] netlink: 76 bytes leftover after parsing attributes in process `syz.3.6124'. [ 2219.020434][T27491] usb 2-1: USB disconnect, device number 40 [ 2219.023743][T27491] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 2219.024179][T27491] cp210x 2-1:0.0: device disconnected [ 2220.602964][T19762] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 2220.768035][T27491] usb 4-1: USB disconnect, device number 7 [ 2220.824518][T19762] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2220.864484][T19762] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2220.925612][T19762] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2221.097299][T19762] usb 2-1: config 0 descriptor?? [ 2221.116360][T23349] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2221.130357][T23349] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2221.140018][T23349] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2221.151363][T23349] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2221.159052][T23349] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2221.938055][T19762] usb 2-1: USB disconnect, device number 41 [ 2222.025559][T29348] tipc: Started in network mode [ 2222.030832][T29348] tipc: Node identity , cluster identity 4711 [ 2222.037277][T29348] tipc: Failed to set node id, please configure manually [ 2222.049390][T29348] tipc: Enabling of bearer rejected, failed to enable media [ 2222.499298][T19762] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 2222.869109][T19762] usb 2-1: Using ep0 maxpacket: 32 [ 2222.910544][T28146] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2222.928184][T19762] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2222.942494][T19762] usb 2-1: New USB device found, idVendor=14aa, idProduct=0226, bcdDevice= 0.40 [ 2222.958840][T19762] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2223.017432][T19762] usb 2-1: config 0 descriptor?? [ 2223.063547][T19762] dvb-usb: found a 'WideView WT-220U PenType Receiver (Typhoon/Freecom)' in warm state. [ 2223.091315][T19762] dvb-usb: bulk message failed: -22 (2/0) [ 2223.109344][T19762] dvb-usb: will use the device's hardware PID filter (table count: 15). [ 2223.150231][T19762] dvbdev: DVB: registering new adapter (WideView WT-220U PenType Receiver (Typhoon/Freecom)) [ 2223.260990][T23349] Bluetooth: hci1: command tx timeout [ 2223.364913][T29359] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6133'. [ 2223.374365][T19762] usb 2-1: media controller created [ 2223.396346][T19762] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2223.439238][T29359] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6133'. [ 2223.488804][T28146] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2223.543146][T19762] usb 2-1: DVB: registering adapter 2 frontend 0 (WideView USB DVB-T)... [ 2223.587906][T19762] dvbdev: dvb_create_media_entity: media entity 'WideView USB DVB-T' registered. [ 2223.911852][T19762] rc_core: IR keymap rc-dtt200u not found [ 2223.917666][T19762] Registered IR keymap rc-empty [ 2223.933739][T19762] rc rc0: WideView WT-220U PenType Receiver (Typhoon/Freecom) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 2223.969832][T28146] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2223.985720][T19762] input: WideView WT-220U PenType Receiver (Typhoon/Freecom) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input204 [ 2224.040580][T19762] dvb-usb: schedule remote query interval to 300 msecs. [ 2224.047607][T19762] dvb-usb: WideView WT-220U PenType Receiver (Typhoon/Freecom) successfully initialized and connected. [ 2224.076298][T29347] chnl_net:caif_netlink_parms(): no params data found [ 2224.089661][T19762] usb 2-1: USB disconnect, device number 42 [ 2224.159033][T19762] dvb-usb: WideView WT-220U PenType Receiver (Typh successfully deinitialized and disconnected. [ 2224.288549][T28146] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2224.489769][T19762] usb 2-1: new full-speed USB device number 43 using dummy_hcd [ 2224.556978][T29347] bridge0: port 1(bridge_slave_0) entered blocking state [ 2224.579254][T29347] bridge0: port 1(bridge_slave_0) entered disabled state [ 2224.597874][T29347] bridge_slave_0: entered allmulticast mode [ 2224.605827][T29347] bridge_slave_0: entered promiscuous mode [ 2224.645896][T19762] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2224.657054][T27468] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 2224.672408][T29347] bridge0: port 2(bridge_slave_1) entered blocking state [ 2224.684951][T19762] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2224.690538][T29347] bridge0: port 2(bridge_slave_1) entered disabled state [ 2224.711164][T29347] bridge_slave_1: entered allmulticast mode [ 2224.732501][T29347] bridge_slave_1: entered promiscuous mode [ 2224.738851][T19762] usb 2-1: New USB device found, idVendor=0853, idProduct=0146, bcdDevice= 0.00 [ 2224.748812][T19762] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2224.760529][T19762] usb 2-1: config 0 descriptor?? [ 2224.896542][T27468] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 2224.904357][T27468] usb 3-1: can't read configurations, error -61 [ 2224.967516][T29347] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2225.030595][T29347] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2225.040356][T27468] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 2225.280475][T23349] Bluetooth: hci1: command tx timeout [ 2225.340860][T29347] team0: Port device team_slave_0 added [ 2225.358468][T27468] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 2225.379875][T19762] topre 0003:0853:0146.001F: hidraw0: USB HID v0.00 Device [HID 0853:0146] on usb-dummy_hcd.1-1/input0 [ 2225.407511][T27468] usb 3-1: can't read configurations, error -61 [ 2225.452853][T27468] usb usb3-port1: attempt power cycle [ 2225.535534][ T5916] usb 2-1: USB disconnect, device number 43 [ 2225.542203][T14095] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 2225.725352][T14095] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2225.769178][T14095] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 2225.780305][T14095] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2225.809186][T27468] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 2225.830423][T14095] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2225.842017][T14095] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2225.857483][T27468] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 2225.867551][T27468] usb 3-1: can't read configurations, error -61 [ 2225.878300][T14095] usb 4-1: Product: syz [ 2225.884189][T14095] usb 4-1: Manufacturer: syz [ 2225.888843][T14095] usb 4-1: SerialNumber: syz [ 2225.997292][T28146] bond2 (unregistering): (slave erspan0): Releasing active interface [ 2226.009942][T27468] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 2226.150274][T14095] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 8 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 2226.238431][T27468] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 2226.259080][T27468] usb 3-1: can't read configurations, error -61 [ 2226.276401][T27468] usb usb3-port1: unable to enumerate USB device [ 2226.672079][T28146] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2226.697177][T28146] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2226.714907][T28146] bond0 (unregistering): Released all slaves [ 2226.738501][T28146] bond1 (unregistering): Released all slaves [ 2226.928935][T28146] bond2 (unregistering): Released all slaves [ 2226.982930][T29347] team0: Port device team_slave_1 added [ 2227.065472][T27468] usb 4-1: USB disconnect, device number 8 [ 2227.095214][T27468] usblp0: removed [ 2227.188690][T28146] tipc: Left network mode [ 2227.193459][T29347] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2227.193482][T29347] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2227.193535][T29347] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2227.242426][T29347] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2227.254324][T29347] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2227.362986][T23349] Bluetooth: hci1: command tx timeout [ 2227.381005][T29347] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2227.706900][T29347] hsr_slave_0: entered promiscuous mode [ 2227.747572][T29347] hsr_slave_1: entered promiscuous mode [ 2227.857278][T29347] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2227.875623][T29347] Cannot create hsr debugfs directory [ 2227.975185][T29401] tipc: Started in network mode [ 2227.981685][T29401] tipc: Node identity , cluster identity 4711 [ 2227.989585][T29401] tipc: Failed to set node id, please configure manually [ 2227.996893][T29401] tipc: Enabling of bearer rejected, failed to enable media [ 2228.537455][T28146] hsr_slave_0: left promiscuous mode [ 2228.543961][T28146] hsr_slave_1: left promiscuous mode [ 2228.583593][T28146] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2228.605871][T28146] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2228.615171][T29416] netlink: 408 bytes leftover after parsing attributes in process `syz.1.6144'. [ 2228.666334][T28146] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2228.694116][T28146] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2228.791721][T28146] veth1_macvtap: left promiscuous mode [ 2228.797623][T28146] veth0_macvtap: left promiscuous mode [ 2229.126174][T29419] netlink: 'syz.3.6145': attribute type 5 has an invalid length. [ 2229.142983][T29419] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6145'. [ 2229.439165][T23349] Bluetooth: hci1: command tx timeout [ 2230.013625][T29431] netlink: 104 bytes leftover after parsing attributes in process `syz.2.6147'. [ 2230.137406][T29432] netlink: 104 bytes leftover after parsing attributes in process `syz.5.6146'. [ 2231.762533][T28146] team0 (unregistering): Port device team_slave_1 removed [ 2232.072340][T28146] team0 (unregistering): Port device team_slave_0 removed [ 2232.789290][T19762] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 2232.963456][T19762] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 2232.972017][T19762] usb 6-1: can't read configurations, error -61 [ 2233.112443][T19762] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 2233.325437][T19762] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 2233.365263][T19762] usb 6-1: can't read configurations, error -61 [ 2233.389663][T19762] usb usb6-port1: attempt power cycle [ 2233.766260][T19762] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 2233.834236][T19762] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 2233.843217][T19762] usb 6-1: can't read configurations, error -61 [ 2233.972223][T29414] netlink: 'syz.1.6144': attribute type 29 has an invalid length. [ 2233.979784][T19762] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 2234.112978][T19762] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 2234.121378][T19762] usb 6-1: can't read configurations, error -61 [ 2234.128025][T19762] usb usb6-port1: unable to enumerate USB device [ 2234.461867][T29462] fuse: Unknown parameter 'rootmoden^T.o.L' [ 2235.285203][T28146] IPVS: stop unused estimator thread 0... [ 2235.612442][T29481] netlink: 60 bytes leftover after parsing attributes in process `syz.5.6156'. [ 2235.691157][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 2235.697600][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 2235.787585][T29487] ptrace attach of "./syz-executor exec"[23388] was attempted by "./syz-executor exec"[29487] [ 2235.903658][T29489] FAULT_INJECTION: forcing a failure. [ 2235.903658][T29489] name failslab, interval 1, probability 0, space 0, times 0 [ 2235.948518][T29489] CPU: 1 UID: 0 PID: 29489 Comm: syz.2.6159 Not tainted 6.16.0-rc5-syzkaller-00053-g8c2e52ebbe88 #0 PREEMPT(full) [ 2235.948549][T29489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2235.948562][T29489] Call Trace: [ 2235.948572][T29489] [ 2235.948583][T29489] dump_stack_lvl+0x189/0x250 [ 2235.948619][T29489] ? __pfx____ratelimit+0x10/0x10 [ 2235.948652][T29489] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2235.948675][T29489] ? __pfx__printk+0x10/0x10 [ 2235.948706][T29489] ? __pfx___might_resched+0x10/0x10 [ 2235.948733][T29489] ? fs_reclaim_acquire+0x7d/0x100 [ 2235.948779][T29489] should_fail_ex+0x414/0x560 [ 2235.948817][T29489] should_failslab+0xa8/0x100 [ 2235.948845][T29489] __kmalloc_noprof+0xcb/0x4f0 [ 2235.948876][T29489] ? tomoyo_encode+0x28b/0x550 [ 2235.948902][T29489] tomoyo_encode+0x28b/0x550 [ 2235.948925][T29489] tomoyo_realpath_from_path+0x58d/0x5d0 [ 2235.948945][T29489] ? tomoyo_domain+0xd9/0x130 [ 2235.948974][T29489] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 2235.949004][T29489] tomoyo_path_number_perm+0x1e8/0x5a0 [ 2235.949032][T29489] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 2235.949074][T29489] ? __lock_acquire+0xab9/0xd20 [ 2235.949115][T29489] ? __fget_files+0x2a/0x420 [ 2235.949145][T29489] ? __fget_files+0x2a/0x420 [ 2235.949168][T29489] ? __fget_files+0x3a0/0x420 [ 2235.949191][T29489] ? __fget_files+0x2a/0x420 [ 2235.949221][T29489] security_file_ioctl+0xcb/0x2d0 [ 2235.949251][T29489] __se_sys_ioctl+0x47/0x170 [ 2235.949277][T29489] do_syscall_64+0xfa/0x3b0 [ 2235.949299][T29489] ? lockdep_hardirqs_on+0x9c/0x150 [ 2235.949333][T29489] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2235.949355][T29489] ? clear_bhb_loop+0x60/0xb0 [ 2235.949382][T29489] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2235.949403][T29489] RIP: 0033:0x7f4cbdd8e929 [ 2235.949442][T29489] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2235.949461][T29489] RSP: 002b:00007f4cbeb1b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2235.949487][T29489] RAX: ffffffffffffffda RBX: 00007f4cbdfb5fa0 RCX: 00007f4cbdd8e929 [ 2235.949504][T29489] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 2235.949518][T29489] RBP: 00007f4cbeb1b090 R08: 0000000000000000 R09: 0000000000000000 [ 2235.949532][T29489] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2235.949545][T29489] R13: 0000000000000000 R14: 00007f4cbdfb5fa0 R15: 00007f4cbe0dfa28 [ 2235.949575][T29489] [ 2236.122665][T29347] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 2236.284355][T29489] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2236.708606][T29347] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 2236.786450][T29347] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 2236.822372][T29347] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 2236.979457][T29502] netlink: 'syz.5.6161': attribute type 12 has an invalid length. [ 2237.405676][T29347] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2237.662496][T29347] 8021q: adding VLAN 0 to HW filter on device team0 [ 2237.699149][ T3096] usb 3-1: new low-speed USB device number 53 using dummy_hcd [ 2237.764500][ T1094] bridge0: port 1(bridge_slave_0) entered blocking state [ 2237.771811][ T1094] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2237.869273][ T3096] usb 3-1: device descriptor read/64, error -71 [ 2237.935341][ T1094] bridge0: port 2(bridge_slave_1) entered blocking state [ 2237.942951][ T1094] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2238.292488][ T3096] usb 3-1: new low-speed USB device number 54 using dummy_hcd [ 2238.489595][T29347] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2238.539707][T29347] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2238.709101][ T3096] usb 3-1: device descriptor read/64, error -71 [ 2238.825590][ T3096] usb usb3-port1: attempt power cycle [ 2238.969965][ T9] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 2239.180353][ T3096] usb 3-1: new low-speed USB device number 55 using dummy_hcd [ 2239.213465][ T9] usb 6-1: config 0 has no interfaces? [ 2239.250136][ T9] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 2239.297107][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2239.300990][ T3096] usb 3-1: device descriptor read/8, error -71 [ 2239.355606][ T9] usb 6-1: Product: syz [ 2239.360891][T29347] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2239.382685][ T9] usb 6-1: Manufacturer: syz [ 2239.387455][ T9] usb 6-1: SerialNumber: syz [ 2239.437830][ T9] usb 6-1: config 0 descriptor?? [ 2239.636800][ T3096] usb 3-1: new low-speed USB device number 56 using dummy_hcd [ 2239.867559][T29347] veth0_vlan: entered promiscuous mode [ 2239.968651][T29347] veth1_vlan: entered promiscuous mode [ 2240.092784][T29347] veth0_macvtap: entered promiscuous mode [ 2240.135988][T29347] veth1_macvtap: entered promiscuous mode [ 2240.203883][T29347] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2240.261225][T29347] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2240.296126][T29347] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2240.330691][T29347] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2240.365666][T29347] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2240.422460][T29347] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2241.216891][ T1115] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2241.308569][ T1115] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2241.906991][ T1115] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2241.955224][ T3096] usb 3-1: device descriptor read/8, error -71 [ 2241.973358][ T1115] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2242.197434][ T3096] usb usb3-port1: unable to enumerate USB device [ 2242.508499][T29565] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6169'. [ 2242.964866][T23349] Bluetooth: hci3: command 0x0406 tx timeout [ 2242.977964][T27468] usb 6-1: USB disconnect, device number 53 [ 2243.371147][T29585] ptrace attach of "./syz-executor exec"[28100] was attempted by "./syz-executor exec"[29585] [ 2243.909267][T29596] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6172'. [ 2246.666961][T29619] ipvlan2: entered allmulticast mode [ 2247.397799][T29632] netlink: 104 bytes leftover after parsing attributes in process `syz.5.6177'. [ 2249.042817][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 2249.042835][ T30] audit: type=1326 audit(1752126152.083:9828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29652 comm="syz.2.6184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cbdd8e929 code=0x7ffc0000 [ 2249.129093][ T30] audit: type=1326 audit(1752126152.123:9829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29652 comm="syz.2.6184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cbdd8e929 code=0x7ffc0000 [ 2249.317003][ T30] audit: type=1326 audit(1752126152.133:9830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29652 comm="syz.2.6184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f4cbdd8e929 code=0x7ffc0000 [ 2249.370592][ T9] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 2249.423133][ T30] audit: type=1326 audit(1752126152.133:9831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29652 comm="syz.2.6184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cbdd8e929 code=0x7ffc0000 [ 2249.446051][ C1] vkms_vblank_simulate: vblank timer overrun [ 2249.559134][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 2249.608009][T29662] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6187'. [ 2249.640509][ T9] usb 3-1: config 0 has an invalid interface number: 6 but max is 2 [ 2249.673137][ T9] usb 3-1: config 0 has an invalid interface number: 6 but max is 2 [ 2249.705401][ T30] audit: type=1326 audit(1752126152.133:9832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29652 comm="syz.2.6184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cbdd8e929 code=0x7ffc0000 [ 2249.725594][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2249.727949][ C1] vkms_vblank_simulate: vblank timer overrun [ 2249.791144][ T9] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 2249.871303][ T9] usb 3-1: config 0 has no interface number 0 [ 2249.877831][ T9] usb 3-1: config 0 interface 6 has no altsetting 1 [ 2249.897801][ T9] usb 3-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=2b.ac [ 2249.916352][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2249.932366][ T9] usb 3-1: config 0 descriptor?? [ 2249.952070][ T30] audit: type=1326 audit(1752126152.153:9833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29652 comm="syz.2.6184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f4cbdd8e929 code=0x7ffc0000 [ 2250.003184][ T30] audit: type=1326 audit(1752126152.153:9834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29652 comm="syz.2.6184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cbdd8e929 code=0x7ffc0000 [ 2250.038500][ T30] audit: type=1326 audit(1752126152.153:9835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29652 comm="syz.2.6184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cbdd8e929 code=0x7ffc0000 [ 2250.067785][ T30] audit: type=1326 audit(1752126152.153:9836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29652 comm="syz.2.6184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4cbdd8e929 code=0x7ffc0000 [ 2250.096501][ T30] audit: type=1326 audit(1752126152.153:9837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29652 comm="syz.2.6184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cbdd8e929 code=0x7ffc0000 [ 2250.169507][T19762] usb 3-1: USB disconnect, device number 57 [ 2250.269136][ T9] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 2250.439353][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 2250.446444][ T9] usb 6-1: config 0 has an invalid interface number: 217 but max is 0 [ 2250.454814][ T9] usb 6-1: config 0 has no interface number 0 [ 2250.463861][ T9] usb 6-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice= 0.02 [ 2250.477498][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2250.509322][ T9] usb 6-1: Product: syz [ 2250.534553][ T9] usb 6-1: Manufacturer: syz [ 2250.545503][ T9] usb 6-1: SerialNumber: syz [ 2250.573521][ T9] usb 6-1: config 0 descriptor?? [ 2250.590752][ T9] ftdi_sio 6-1:0.217: FTDI USB Serial Device converter detected [ 2250.612755][ T9] usb 6-1: Detected SIO [ 2250.641989][ T9] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 2251.272811][T29685] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.6194'. [ 2251.882147][ T9] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 2252.140524][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 2252.801157][ T9] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 2252.810714][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2252.828014][ T9] usb 2-1: Product: syz [ 2252.968425][ T9] usb 2-1: Manufacturer: syz [ 2252.996751][ T9] usb 2-1: SerialNumber: syz [ 2253.020690][ T9] usb 2-1: config 0 descriptor?? [ 2253.040308][ T9] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 2253.063704][ T9] usb 2-1: Detected FT232H [ 2253.312675][T29706] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6202'. [ 2253.326875][T27468] usb 6-1: USB disconnect, device number 54 [ 2253.356489][T27468] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 2253.630764][T27468] ftdi_sio 6-1:0.217: device disconnected [ 2253.747819][T23349] Bluetooth: hci3: unexpected event for opcode 0x0c5b [ 2253.922017][ T9] ftdi_sio 2-1:0.0: GPIO initialisation failed: -71 [ 2253.957380][ T9] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB1 [ 2254.054149][ T9] usb 2-1: USB disconnect, device number 44 [ 2254.077270][ T9] ftdi_sio ttyUSB1: FTDI USB Serial Device converter now disconnected from ttyUSB1 [ 2254.092082][ T9] ftdi_sio 2-1:0.0: device disconnected [ 2254.759252][ T5916] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 2254.921386][ T5916] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2254.969090][ T5916] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2254.979639][ T5916] usb 4-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 2254.992330][ T5916] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2255.006563][ T5916] usb 4-1: config 0 descriptor?? [ 2255.205537][T29750] sch_tbf: burst 4393 is lower than device lo mtu (65550) ! [ 2255.631193][ T5916] hid-thrustmaster 0003:044F:B65D.0020: unknown main item tag 0x0 [ 2255.655259][ T5916] hid-thrustmaster 0003:044F:B65D.0020: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.3-1/input0 [ 2255.678122][ T5916] hid-thrustmaster 0003:044F:B65D.0020: Wrong number of endpoints? [ 2255.891393][ C1] hid-thrustmaster 0003:044F:B65D.0020: URB to get model id failed with error -71 [ 2255.893286][T27491] usb 4-1: USB disconnect, device number 9 [ 2255.947187][T29752] fido_id[29752]: Failed to read report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:044F:B65D.0020/report_descriptor': No such device [ 2256.285445][T29760] syz_tun: entered promiscuous mode [ 2256.329541][T29760] batadv_slave_0: entered promiscuous mode [ 2256.350959][T29760] hsr1: entered allmulticast mode [ 2256.387756][T29760] syz_tun: entered allmulticast mode [ 2256.413694][T29760] batadv_slave_0: entered allmulticast mode [ 2257.019203][T27468] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 2257.269429][T27468] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2257.279755][T27468] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2257.322955][T27468] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2257.361163][T27468] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2257.613512][T27468] usb 4-1: usb_control_msg returned -32 [ 2257.614087][T29763] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6220'. [ 2257.638562][T27468] usbtmc 4-1:16.0: can't read capabilities [ 2257.820513][T29763] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 2257.860997][T28269] usb 4-1: USB disconnect, device number 10 [ 2260.693070][T29798] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6230'. [ 2260.754540][T29798] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6230'. [ 2260.773454][T29798] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6230'. [ 2260.802408][T29798] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6230'. [ 2260.823401][T29798] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6230'. [ 2260.844888][T29798] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6230'. [ 2260.893323][T29798] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6230'. [ 2260.950867][T29798] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6230'. [ 2260.996638][T29798] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6230'. [ 2261.989129][ T9] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 2262.244198][T23349] Bluetooth: hci3: unexpected event for opcode 0x0413 [ 2262.259076][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 2262.275982][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2262.289070][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2262.330210][ T9] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 2262.365357][ T9] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2262.413450][ T9] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 2262.430215][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2262.456677][ T9] usb 2-1: Product: syz [ 2262.470870][ T9] usb 2-1: Manufacturer: syz [ 2262.495911][ T9] usb 2-1: SerialNumber: syz [ 2262.536374][ T9] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 2262.568887][ T9] usbtest 2-1:1.0: couldn't get endpoints, -22 [ 2262.609198][ T9] usbtest 2-1:1.0: probe with driver usbtest failed with error -22 [ 2262.737107][T28269] usb 2-1: USB disconnect, device number 45 [ 2264.000019][T23349] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 2264.010702][T23349] Bluetooth: hci0: Injecting HCI hardware error event [ 2264.022307][T12043] Bluetooth: hci0: hardware error 0x00 [ 2264.199216][T14095] usb 2-1: new full-speed USB device number 46 using dummy_hcd [ 2264.219353][ T9] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 2264.361421][T14095] usb 2-1: config 0 has an invalid descriptor of length 191, skipping remainder of the config [ 2264.375485][T14095] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 2264.389492][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 2264.401536][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2264.413923][T14095] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 33536, setting to 64 [ 2264.428062][ T9] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 2264.446600][T14095] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 2264.468113][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2264.475495][T14095] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2264.486842][T14095] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2264.498228][T14095] usb 2-1: Manufacturer: syz [ 2264.516652][ T9] usb 3-1: config 0 descriptor?? [ 2264.533717][T14095] usb 2-1: config 0 descriptor?? [ 2264.548288][ T9] hub 3-1:0.0: USB hub found [ 2264.745808][ T9] hub 3-1:0.0: 1 port detected [ 2264.959160][T14095] rc_core: IR keymap rc-hauppauge not found [ 2264.968246][T14095] Registered IR keymap rc-empty [ 2264.994651][T14095] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 2265.026085][T14095] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 2265.061855][T14095] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 2265.082661][T14095] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input206 [ 2265.115705][T14095] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 2265.156742][T14095] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 2265.197342][T14095] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 2265.229606][T14095] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 2265.249715][T14095] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 2265.270292][T14095] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 2265.294104][T14095] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 2265.323675][T14095] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 2265.343066][ T5916] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 2265.379481][T14095] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 2265.409462][T14095] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 2265.432929][T14095] mceusb 2-1:0.0: Registered with mce emulator interface version 1 [ 2265.455218][T14095] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 2265.526069][T14095] usb 2-1: USB disconnect, device number 46 [ 2265.533870][T29895] __nla_validate_parse: 45 callbacks suppressed [ 2265.533889][T29895] netlink: 36 bytes leftover after parsing attributes in process `syz.5.6266'. [ 2265.547115][ T5916] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2265.558943][T29895] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6266'. [ 2265.575864][T29895] netlink: 36 bytes leftover after parsing attributes in process `syz.5.6266'. [ 2265.577800][ T5916] usb 4-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=13.4a [ 2265.585721][T29895] netlink: 36 bytes leftover after parsing attributes in process `syz.5.6266'. [ 2265.662508][ T5916] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2265.676279][ T5916] usb 4-1: Product: syz [ 2265.681116][ T5916] usb 4-1: Manufacturer: syz [ 2265.685835][ T5916] usb 4-1: SerialNumber: syz [ 2265.719830][ T5916] usb 4-1: config 0 descriptor?? [ 2265.732509][ T5916] dvb-usb: found a 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' in warm state. [ 2265.744556][T27491] hub 3-1:0.0: hub_ext_port_status failed (err = -71) [ 2265.745600][T27491] usb 3-1: USB disconnect, device number 58 [ 2265.762044][ T5916] dvb-usb: bulk message failed: -22 (3/0) [ 2265.813483][ T5916] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 2265.826282][ T5916] dvbdev: DVB: registering new adapter (TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device) [ 2265.841187][ T5916] usb 4-1: media controller created [ 2265.853621][ T5916] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2265.902187][ T5916] dvb-usb: bulk message failed: -22 (6/0) [ 2265.915327][ T5916] dvb-usb: no frontend was attached by 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' [ 2265.954282][ T5916] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input207 [ 2265.978108][ T5916] dvb-usb: schedule remote query interval to 150 msecs. [ 2265.986246][ T5916] dvb-usb: bulk message failed: -22 (3/0) [ 2266.009315][ T5916] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device successfully initialized and connected. [ 2266.047871][ T5916] usb 4-1: USB disconnect, device number 11 [ 2266.094061][T12043] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 2266.160584][T28269] hid-generic 0000:0003:0000.0021: unknown main item tag 0x0 [ 2266.199439][ T5916] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I successfully deinitialized and disconnected. [ 2266.214945][T28269] hid-generic 0000:0003:0000.0021: unknown main item tag 0x0 [ 2266.260467][T28269] hid-generic 0000:0003:0000.0021: hidraw0: HID v0.00 Device [syz0] on syz1 [ 2266.502797][T29904] fido_id[29904]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 2266.925832][T28269] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 2266.939933][T27491] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 2267.083497][T28269] usb 3-1: Using ep0 maxpacket: 8 [ 2267.102399][T28269] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2267.125366][T28269] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 2267.141224][T27491] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2267.148948][T28269] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2267.161389][T27491] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2267.188121][T27491] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2267.234061][T28269] usb 3-1: config 0 descriptor?? [ 2267.237983][T27491] usb 2-1: config 0 descriptor?? [ 2267.424065][T19762] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 2267.492029][T28269] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 2267.589295][T19762] usb 4-1: Using ep0 maxpacket: 32 [ 2267.615673][T19762] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2267.626133][T19762] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2267.694973][T27491] keytouch 0003:0926:3333.0022: fixing up Keytouch IEC report descriptor [ 2267.722806][T19762] usb 4-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 2267.760243][T19762] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2267.799101][T19762] usb 4-1: Product: syz [ 2267.803348][T19762] usb 4-1: Manufacturer: syz [ 2267.807966][T19762] usb 4-1: SerialNumber: syz [ 2267.824045][T27491] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0022/input/input208 [ 2268.063469][T19762] usb 4-1: config 0 descriptor?? [ 2268.071083][ T9] usb 3-1: USB disconnect, device number 59 [ 2268.314143][T27491] keytouch 0003:0926:3333.0022: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 2268.320952][T14095] usb 4-1: USB disconnect, device number 12 [ 2269.475224][T29847] Set syz1 is full, maxelem 65536 reached [ 2269.695166][ T9] usb 2-1: USB disconnect, device number 47 [ 2270.036012][T29948] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6279'. [ 2270.047714][T29946] sch_tbf: burst 4393 is lower than device lo mtu (65550) ! [ 2272.629798][ T5916] usb 2-1: new full-speed USB device number 48 using dummy_hcd [ 2273.473219][ T5916] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2273.529568][ T5916] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 2273.567915][ T5916] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 2273.591110][ T5916] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2273.636708][ T5916] usb 2-1: config 0 descriptor?? [ 2273.671822][T29970] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 2273.695992][ T5916] hub 2-1:0.0: USB hub found [ 2273.958305][ T5916] hub 2-1:0.0: 2 ports detected [ 2274.145184][T29985] sch_tbf: burst 4393 is lower than device lo mtu (65550) ! [ 2274.392252][ T5916] hub 2-1:0.0: set hub depth failed [ 2274.695595][ T5916] usb 2-1: USB disconnect, device number 48 [ 2274.715716][T28269] hub 2-1:0.0: hub_ext_port_status failed (err = -71) [ 2275.759525][ T9] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 2275.943349][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 2275.972092][ T9] usb 6-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 2276.024482][ T9] usb 6-1: config 16 has 0 interfaces, different from the descriptor's value: 1 [ 2276.071340][ T9] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2276.116242][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2277.047343][ T9] usb 6-1: USB disconnect, device number 55 [ 2277.173044][T29995] team0 (unregistering): Port device team_slave_0 removed [ 2277.281397][T29995] team0 (unregistering): Port device team_slave_1 removed [ 2279.431882][T30018] sch_tbf: burst 4393 is lower than device lo mtu (65550) ! [ 2294.770065][T23349] Bluetooth: hci5: command 0x0406 tx timeout [ 2295.840829][T30061] sched: DL replenish lagged too much [ 2298.333868][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 2298.468575][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 2405.349008][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 2405.356100][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P23365/1:b..l [ 2405.365016][ C0] rcu: (detected by 0, t=10503 jiffies, g=254961, q=698714 ncpus=2) [ 2405.373223][ C0] task:syz-executor state:R running task stack:24104 pid:23365 tgid:23365 ppid:5839 task_flags:0x40050c flags:0x00004004 [ 2405.388910][ C0] Call Trace: [ 2405.392247][ C0] [ 2405.395215][ C0] __schedule+0x16f5/0x4d00 [ 2405.399787][ C0] ? preempt_schedule_common+0x83/0xd0 [ 2405.405328][ C0] ? __pfx___schedule+0x10/0x10 [ 2405.410246][ C0] ? do_raw_spin_lock+0x121/0x290 [ 2405.415344][ C0] ? preempt_schedule+0xae/0xc0 [ 2405.420238][ C0] preempt_schedule_common+0x83/0xd0 [ 2405.425584][ C0] preempt_schedule+0xae/0xc0 [ 2405.430314][ C0] ? __pfx_preempt_schedule+0x10/0x10 [ 2405.435737][ C0] preempt_schedule_thunk+0x16/0x30 [ 2405.440971][ C0] _raw_spin_unlock+0x3f/0x50 [ 2405.445701][ C0] unmap_page_range+0x3842/0x41c0 [ 2405.450932][ C0] ? __pfx_unmap_page_range+0x10/0x10 [ 2405.456364][ C0] ? unmap_vmas+0x144/0x580 [ 2405.460915][ C0] unmap_vmas+0x399/0x580 [ 2405.465310][ C0] ? __pfx_unmap_vmas+0x10/0x10 [ 2405.470246][ C0] exit_mmap+0x248/0xb50 [ 2405.474531][ C0] ? uprobe_clear_state+0x20f/0x290 [ 2405.479790][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 2405.484606][ C0] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 2405.490309][ C0] ? __pfx_exit_aio+0x10/0x10 [ 2405.495041][ C0] ? uprobe_clear_state+0x274/0x290 [ 2405.500299][ C0] __mmput+0x118/0x420 [ 2405.504439][ C0] exit_mm+0x1da/0x2c0 [ 2405.508566][ C0] ? __pfx_exit_mm+0x10/0x10 [ 2405.513214][ C0] ? rcu_is_watching+0x15/0xb0 [ 2405.518000][ C0] do_exit+0x648/0x22e0 [ 2405.522235][ C0] ? do_raw_spin_lock+0x121/0x290 [ 2405.527319][ C0] ? __pfx_do_exit+0x10/0x10 [ 2405.531988][ C0] do_group_exit+0x21c/0x2d0 [ 2405.536631][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 2405.541876][ C0] get_signal+0x1286/0x1340 [ 2405.546553][ C0] arch_do_signal_or_restart+0x9a/0x750 [ 2405.552253][ C0] ? __pfx___x64_sys_wait4+0x10/0x10 [ 2405.557580][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 2405.563798][ C0] ? exit_to_user_mode_loop+0x40/0x110 [ 2405.569331][ C0] exit_to_user_mode_loop+0x75/0x110 [ 2405.574656][ C0] do_syscall_64+0x2bd/0x3b0 [ 2405.579276][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 2405.584530][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2405.590641][ C0] ? clear_bhb_loop+0x60/0xb0 [ 2405.595357][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2405.601277][ C0] RIP: 0033:0x7f2edd384b97 [ 2405.605838][ C0] RSP: 002b:00007fff213867d0 EFLAGS: 00000293 ORIG_RAX: 000000000000003d [ 2405.614297][ C0] RAX: fffffffffffffe00 RBX: 0000000000005b5c RCX: 00007f2edd384b97 [ 2405.622693][ C0] RDX: 0000000040000000 RSI: 00007fff2138680c RDI: 00000000ffffffff [ 2405.630725][ C0] RBP: 00007fff2138680c R08: 0000000000000000 R09: 0000000000000000 [ 2405.638741][ C0] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000008 [ 2405.646750][ C0] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 2405.654780][ C0] [ 2405.657904][ C0] rcu: rcu_preempt kthread starved for 10169 jiffies! g254961 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 2405.669254][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 2405.679270][ C0] rcu: RCU grace-period kthread stack dump: [ 2405.685188][ C0] task:rcu_preempt state:R running task stack:26760 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 [ 2405.698979][ C0] Call Trace: [ 2405.702304][ C0] [ 2405.705271][ C0] __schedule+0x16f5/0x4d00 [ 2405.709836][ C0] ? schedule+0x165/0x360 [ 2405.714229][ C0] ? __pfx___schedule+0x10/0x10 [ 2405.719159][ C0] ? schedule+0x91/0x360 [ 2405.723473][ C0] schedule+0x165/0x360 [ 2405.727668][ C0] schedule_timeout+0x12b/0x270 [ 2405.732561][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 2405.737987][ C0] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 2405.743947][ C0] ? __pfx_process_timeout+0x10/0x10 [ 2405.749285][ C0] ? prepare_to_swait_event+0x341/0x380 [ 2405.754895][ C0] rcu_gp_fqs_loop+0x301/0x1540 [ 2405.759806][ C0] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 2405.766008][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 2405.771316][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 2405.776581][ C0] rcu_gp_kthread+0x99/0x390 [ 2405.781223][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 2405.786452][ C0] ? __kthread_parkme+0x7b/0x200 [ 2405.791422][ C0] ? __kthread_parkme+0x1a1/0x200 [ 2405.796505][ C0] kthread+0x70e/0x8a0 [ 2405.800635][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 2405.805868][ C0] ? __pfx_kthread+0x10/0x10 [ 2405.810497][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 2405.815746][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 2405.820999][ C0] ? __pfx_kthread+0x10/0x10 [ 2405.825638][ C0] ret_from_fork+0x3f9/0x770 [ 2405.830258][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 2405.835424][ C0] ? __switch_to_asm+0x39/0x70 [ 2405.840247][ C0] ? __switch_to_asm+0x33/0x70 [ 2405.845053][ C0] ? __pfx_kthread+0x10/0x10 [ 2405.849678][ C0] ret_from_fork_asm+0x1a/0x30 [ 2405.854514][ C0] [ 2405.857569][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 2405.863940][ C0] Sending NMI from CPU 0 to CPUs 1: [ 2405.869257][ C1] NMI backtrace for cpu 1 [ 2405.869285][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.16.0-rc5-syzkaller-00053-g8c2e52ebbe88 #0 PREEMPT(full) [ 2405.869307][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2405.869321][ C1] RIP: 0010:__lock_acquire+0x893/0xd20 [ 2405.869385][ C1] Code: 83 3d b4 e6 03 0e 00 0f 85 36 02 00 00 48 83 7c 24 28 00 0f 84 bc 01 00 00 41 8b 46 f8 25 ff 1f 00 00 48 0f a3 05 dd c8 09 12 <0f> 83 5a 01 00 00 48 69 c0 c8 00 00 00 48 8d 80 f0 02 49 93 e9 87 [ 2405.869403][ C1] RSP: 0018:ffffc90000a07a48 EFLAGS: 00000003 [ 2405.869423][ C1] RAX: 0000000000000007 RBX: 0000000000000002 RCX: 000000006290c103 [ 2405.869436][ C1] RDX: 00000000071bee9f RSI: 00000000a42637f2 RDI: ffff88801d2c5a00 [ 2405.869449][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: ffffffff81729ae5 [ 2405.869461][ C1] R10: ffffc90000a07c98 R11: ffffffff81acf3a0 R12: 000000000afe4109 [ 2405.869475][ C1] R13: ffff88801d2c64f0 R14: ffff88801d2c6540 R15: 39529a686290c103 [ 2405.869491][ C1] FS: 0000000000000000(0000) GS:ffff888125d1b000(0000) knlGS:0000000000000000 [ 2405.869506][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2405.869519][ C1] CR2: 000055c449290140 CR3: 00000000326d4000 CR4: 00000000003526f0 [ 2405.869536][ C1] Call Trace: [ 2405.869544][ C1] [ 2405.869556][ C1] ? unwind_next_frame+0xa5/0x2390 [ 2405.869587][ C1] lock_acquire+0x120/0x360 [ 2405.869605][ C1] ? unwind_next_frame+0xa5/0x2390 [ 2405.869630][ C1] ? unwind_next_frame+0xa5/0x2390 [ 2405.869650][ C1] ? start_secondary+0x101/0x110 [ 2405.869668][ C1] ? unwind_next_frame+0xa5/0x2390 [ 2405.869688][ C1] unwind_next_frame+0xc2/0x2390 [ 2405.869708][ C1] ? unwind_next_frame+0xa5/0x2390 [ 2405.869731][ C1] ? unwind_next_frame+0xa5/0x2390 [ 2405.869752][ C1] ? cpu_startup_entry+0x44/0x60 [ 2405.869777][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 2405.869805][ C1] arch_stack_walk+0x11c/0x150 [ 2405.869832][ C1] ? start_secondary+0x101/0x110 [ 2405.869850][ C1] stack_trace_save+0x9c/0xe0 [ 2405.869875][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 2405.869900][ C1] ? stack_trace_save+0x9c/0xe0 [ 2405.869926][ C1] ? stack_depot_save_flags+0x40/0x900 [ 2405.869959][ C1] kasan_save_track+0x3e/0x80 [ 2405.869982][ C1] ? kasan_save_track+0x3e/0x80 [ 2405.870000][ C1] ? __kasan_slab_alloc+0x6c/0x80 [ 2405.870020][ C1] ? kmem_cache_alloc_node_noprof+0x1bb/0x3c0 [ 2405.870043][ C1] ? kmalloc_reserve+0xbd/0x290 [ 2405.870069][ C1] ? __alloc_skb+0x142/0x2d0 [ 2405.870088][ C1] ? synproxy_send_client_synack+0x16c/0xe20 [ 2405.870113][ C1] ? nft_synproxy_eval_v4+0x36e/0x560 [ 2405.870141][ C1] ? nft_synproxy_do_eval+0x345/0x570 [ 2405.870166][ C1] ? nft_do_chain+0x409/0x1920 [ 2405.870191][ C1] ? nft_do_chain_inet+0x25d/0x340 [ 2405.870216][ C1] ? nf_hook_slow+0xc5/0x220 [ 2405.870239][ C1] ? NF_HOOK+0x206/0x3a0 [ 2405.870262][ C1] ? NF_HOOK+0x30c/0x3a0 [ 2405.870281][ C1] ? __netif_receive_skb+0x143/0x380 [ 2405.870299][ C1] ? process_backlog+0x60e/0x14f0 [ 2405.870317][ C1] ? __napi_poll+0xc4/0x480 [ 2405.870333][ C1] ? net_rx_action+0x707/0xe30 [ 2405.870351][ C1] ? handle_softirqs+0x286/0x870 [ 2405.870373][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 2405.870392][ C1] ? irq_exit_rcu+0x9/0x30 [ 2405.870411][ C1] ? sysvec_apic_timer_interrupt+0xa6/0xc0 [ 2405.870439][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2405.870459][ C1] ? pv_native_safe_halt+0x13/0x20 [ 2405.870485][ C1] ? default_idle+0x13/0x20 [ 2405.870503][ C1] ? default_idle_call+0x74/0xb0 [ 2405.870522][ C1] ? do_idle+0x1e8/0x510 [ 2405.870542][ C1] ? cpu_startup_entry+0x44/0x60 [ 2405.870563][ C1] ? start_secondary+0x101/0x110 [ 2405.870601][ C1] __kasan_slab_alloc+0x6c/0x80 [ 2405.870623][ C1] kmem_cache_alloc_node_noprof+0x1bb/0x3c0 [ 2405.870645][ C1] ? kmalloc_reserve+0xbd/0x290 [ 2405.870668][ C1] kmalloc_reserve+0xbd/0x290 [ 2405.870691][ C1] __alloc_skb+0x142/0x2d0 [ 2405.870713][ C1] synproxy_send_client_synack+0x16c/0xe20 [ 2405.870741][ C1] ? __pfx_synproxy_send_client_synack+0x10/0x10 [ 2405.870763][ C1] ? nft_socket_init+0x3b0/0x3d0 [ 2405.870786][ C1] ? synproxy_pernet+0x45/0x270 [ 2405.870815][ C1] nft_synproxy_eval_v4+0x36e/0x560 [ 2405.870845][ C1] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 2405.870873][ C1] ? nf_ip_checksum+0x13c/0x510 [ 2405.870901][ C1] nft_synproxy_do_eval+0x345/0x570 [ 2405.870930][ C1] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 2405.870955][ C1] ? queue_work_on+0x115/0x270 [ 2405.870987][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 2405.871015][ C1] ? queue_work_on+0x1ed/0x270 [ 2405.871041][ C1] nft_do_chain+0x409/0x1920 [ 2405.871065][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 2405.871093][ C1] ? __local_bh_enable_ip+0x12d/0x1c0 [ 2405.871113][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 2405.871137][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 2405.871176][ C1] ? __pfx_nf_nat_inet_fn+0x10/0x10 [ 2405.871206][ C1] nft_do_chain_inet+0x25d/0x340 [ 2405.871232][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 2405.871257][ C1] ? ipt_do_table+0x2a3/0x1640 [ 2405.871283][ C1] ? nf_nat_ipv4_local_in+0x223/0x720 [ 2405.871303][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 2405.871329][ C1] nf_hook_slow+0xc5/0x220 [ 2405.871352][ C1] NF_HOOK+0x206/0x3a0 [ 2405.871372][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 2405.871394][ C1] ? NF_HOOK+0x9a/0x3a0 [ 2405.871413][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 2405.871432][ C1] ? ip_rcv_finish_core+0xda3/0x1c00 [ 2405.871455][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 2405.871476][ C1] ? skb_dst+0x4f/0xd0 [ 2405.871496][ C1] ? ip_local_deliver+0x12a/0x1b0 [ 2405.871518][ C1] NF_HOOK+0x30c/0x3a0 [ 2405.871539][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 2405.871559][ C1] ? NF_HOOK+0x9a/0x3a0 [ 2405.871585][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 2405.871604][ C1] ? ip_rcv_core+0x7f7/0xd00 [ 2405.871624][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 2405.871649][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 2405.871668][ C1] __netif_receive_skb+0x143/0x380 [ 2405.871687][ C1] ? process_backlog+0x2d5/0x14f0 [ 2405.871707][ C1] process_backlog+0x60e/0x14f0 [ 2405.871725][ C1] ? __lock_acquire+0xab9/0xd20 [ 2405.871749][ C1] ? __pfx_process_backlog+0x10/0x10 [ 2405.871772][ C1] __napi_poll+0xc4/0x480 [ 2405.871788][ C1] ? net_rx_action+0x46d/0xe30 [ 2405.871808][ C1] net_rx_action+0x707/0xe30 [ 2405.871827][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 2405.871862][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 2405.871896][ C1] handle_softirqs+0x286/0x870 [ 2405.871918][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 2405.871941][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 2405.871976][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 2405.872003][ C1] __irq_exit_rcu+0xca/0x1f0 [ 2405.872022][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 2405.872046][ C1] irq_exit_rcu+0x9/0x30 [ 2405.872064][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 2405.872090][ C1] [ 2405.872097][ C1] [ 2405.872104][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2405.872122][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 2405.872149][ C1] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 93 2d 19 00 f3 0f 1e fa fb f4 c8 dd 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 2405.872164][ C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c6 [ 2405.872180][ C1] RAX: 01daa34beb67b400 RBX: ffffffff81975c78 RCX: 01daa34beb67b400 [ 2405.872194][ C1] RDX: 0000000000000001 RSI: ffffffff8d998685 RDI: ffffffff8be29dc0 [ 2405.872206][ C1] RBP: ffffc90000197f20 R08: ffff8880b8732f5b R09: 1ffff110170e65eb [ 2405.872220][ C1] R10: dffffc0000000000 R11: ffffed10170e65ec R12: ffffffff8fa1eff0 [ 2405.872233][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff11003a58b40 [ 2405.872248][ C1] ? do_idle+0x1e8/0x510 [ 2405.872272][ C1] default_idle+0x13/0x20 [ 2405.872290][ C1] default_idle_call+0x74/0xb0 [ 2405.872309][ C1] do_idle+0x1e8/0x510 [ 2405.872347][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2405.872369][ C1] ? __pfx_do_idle+0x10/0x10 [ 2405.872394][ C1] ? do_idle+0x4ec/0x510 [ 2405.872417][ C1] cpu_startup_entry+0x44/0x60 [ 2405.872439][ C1] start_secondary+0x101/0x110 [ 2405.872455][ C1] common_startup_64+0x13e/0x147 [ 2405.872489][ C1] [ 2406.826534][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 2406.845467][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 2413.472095][T28096] Bluetooth: hci1: command tx timeout