last executing test programs: 15.0356794s ago: executing program 3 (id=1075): openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) memfd_create(&(0x7f0000000080)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00'/51, 0x2) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/pm_wakeup_irq', 0x0, 0x1a2) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) r1 = openat(0xffffffffffffff9c, 0x0, 0x103a42, 0x32) ftruncate(r1, 0x9) fallocate(0xffffffffffffffff, 0x20000, 0x0, 0x9) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) open(&(0x7f0000000240)='./file2\x00', 0x145142, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) bind$bt_hci(r0, &(0x7f00000001c0)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000040)="07000000010000", 0x7) 13.21285491s ago: executing program 3 (id=1082): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x13, 0x4, 0x0, &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x130}, 0x94) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf68803f1c1acb74fef", 0x87}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e42408bab6c1f29cb62d05805063967de38327e", 0x9e}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44cb083e962eee9b5d212523c162b42377ebd0bc624bf9425f6f4772e36c6c2fd4f69b65cc435f93c1a490cb75162251e15942b29", 0xce}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d53c5ac29f83aed3ae9968fe8", 0x60}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e", 0x62}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6cb75b5d05d6037f91e8f4f08e90d5313fb91fbdc5acd212f7d8", 0x58}, {&(0x7f00000000c0)}], 0x7}}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000bc0)="61275006ed747229311198ab94c7e6699587b0d033c2f17d1ccbd45cba520b6888fbad95d4d6ae3cc7172b392f90693e992e52408ba7f1874d1767303d6acb170f216f71908f53a3be1833a25eb1fb2ba3913dcc1de30c5c7e914b13514dea44fb2b964aaa280d5a85512fede48830ca6ea5cd18ff95c871", 0x78}], 0x1, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}, @txtime={{0x18, 0x1, 0x3d, 0x9d}}], 0x78}}], 0x2, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 13.136296635s ago: executing program 3 (id=1083): mkdir(0x0, 0x0) mkdir(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = openat$autofs(0xffffffffffffff9c, 0x0, 0x422040, 0x0) ioctl$DVB_DVR_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000000100)={0x5, 0x0, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, &(0x7f00000000c0), 0xf00) 7.254103609s ago: executing program 3 (id=1101): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = timerfd_create(0x0, 0x0) timerfd_settime(r2, 0x3, &(0x7f0000000080)={{0x0, 0x3938700}, {0x77359400}}, 0x0) clock_adjtime(0x0, &(0x7f0000000000)={0x3fd, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0, 0x61, 0x0, 0x0, 0x100, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x4, 0x0, 0x9, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x1}) ioctl$TFD_IOC_SET_TICKS(r2, 0x40085400, &(0x7f0000000100)=0xf) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0xd, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ff"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0x0, 0x0, 0x0, 0x2000004, 0x0, 0x0, 0x1f00, 0x39, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x6, 0x200008, 0x5, 0x20003}, 0x10}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000003fc0), 0x121100, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) mmap(&(0x7f0000a06000/0x2000)=nil, 0x2000, 0x200000c, 0x100030, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000032680)=""/102400, 0x19000) syz_open_dev$vim2m(&(0x7f00000000c0), 0x7, 0x2) ioctl$SOUND_MIXER_READ_DEVMASK(r3, 0xc0044dff, &(0x7f0000004000)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r1], 0x4c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) 7.185109224s ago: executing program 2 (id=1102): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) socket(0x22, 0x2, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) socket$alg(0x26, 0x5, 0x0) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, 0x0) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(0xffffffffffffffff, 0x0, 0x0) fchdir(r2) r3 = openat$dir(0xffffffffffffff9c, 0x0, 0x101000, 0x10c) getdents64(r3, &(0x7f00000000c0)=""/55, 0x37) lseek(r3, 0x3, 0x0) fanotify_mark(0xffffffffffffffff, 0x455, 0x8000003, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x10, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000020303000000000000000000020000000800010001"], 0x1c}, 0x1, 0x0, 0x0, 0x400c000}, 0x40) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[], 0x1c}}, 0x881) prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x10) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') read$FUSE(r2, &(0x7f0000002580)={0x2020}, 0x3da) sendmsg$kcm(r4, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x40840) 5.285456582s ago: executing program 2 (id=1103): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, 0x0) r1 = getpid() syz_pidfd_open(r1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$vimc2(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) openat$dsp1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) 5.258028306s ago: executing program 0 (id=1104): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18020000000000020000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94) r4 = socket(0x10, 0x803, 0x8) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0600000004000000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00ddff"], 0x50) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) r5 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r6, @ANYBLOB="00001000252155b21c0012000c000100626f6e64"], 0x3c}}, 0x40000) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r3, r6, 0x25, 0x0, @val=@netkit={@void, @value=r3}}, 0x1c) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=r2, @ANYBLOB="46ff0f00000000001c00128009000100626f6e64000000000c000280050001"], 0x3c}, 0x1, 0x0, 0x0, 0x690}, 0x20048040) 5.23555303s ago: executing program 1 (id=1105): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r1 = timerfd_create(0x0, 0x0) timerfd_settime(r1, 0x3, &(0x7f0000000440)={{0x0, 0x3938700}}, 0x0) read(r1, &(0x7f0000000240)=""/123, 0x7b) clock_adjtime(0x0, 0x0) 5.215747652s ago: executing program 3 (id=1106): mkdirat(0xffffffffffffff9c, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) mkdir(&(0x7f0000000840)='./file0\x00', 0x145) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',grou', @ANYRESDEC=0x0]) setresgid(0x0, 0x0, 0xee01) utimes(0x0, 0x0) r2 = syz_open_dev$dri(0x0, 0x1, 0x80280) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x20, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_VOICE(r3, 0x112, 0xb, 0x0, 0x0) connect$bt_sco(r3, &(0x7f0000000280)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) mount$bind(0x0, 0x0, 0x0, 0x2225400, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x89101) mount_setattr(r4, &(0x7f0000001d80)='.\x00', 0x8800, &(0x7f0000000240)={0x1, 0x4, 0x80000}, 0x20) 4.324060723s ago: executing program 0 (id=1107): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x13, 0x4, 0x0, &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x130}, 0x94) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf68803f1c1acb74fef", 0x87}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e42408bab6c1f29cb62d05805063967", 0x9a}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44cb083e962eee9b5d212523c162b42377ebd0bc624bf9425f6f4772e36c6c2fd4f69b65cc435f93c1a490cb75162251e15942b", 0xcd}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d53c5ac29f83aed3ae9968fe8", 0x60}, {&(0x7f0000000900)}, {&(0x7f00000000c0)}], 0x6}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, 0x0, 0x0, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @txtime={{0x18, 0x1, 0x3d, 0x9d}}], 0x48}}], 0x2, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000100)=0xfffffffe, 0x4) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 4.242954551s ago: executing program 1 (id=1108): lstat(&(0x7f0000000240)='./cgroup\x00', &(0x7f0000000280)) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, 0x0) 4.220719132s ago: executing program 1 (id=1109): r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r0, r1, 0x0, 0x2000fb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000300)=0xf) 4.119022038s ago: executing program 2 (id=1110): sched_setscheduler(0x0, 0x1, 0x0) syz_emit_ethernet(0x5e, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ptrace$ARCH_SHSTK_STATUS(0x1e, 0x0, 0x0, 0x5005) r0 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket(0x1e, 0x1, 0x0) connect$tipc(r1, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r1, &(0x7f0000000340), 0x2000011a) write(r1, &(0x7f0000000180)="b4", 0x1) recvmmsg$unix(r1, &(0x7f0000000c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x121, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan1\x00'}) syz_create_resource$binfmt(0x0) shmctl$SHM_STAT_ANY(0x0, 0xf, 0x0) setxattr$trusted_overlay_upper(0x0, &(0x7f0000000380), &(0x7f0000000240)=ANY=[], 0x15, 0x1) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, 0x0}], 0x1, 0x40800) getpriority(0x2, 0x0) ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000000200)) socket$nl_generic(0x10, 0x3, 0x10) 4.075575794s ago: executing program 0 (id=1111): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf68803f1c1acb74fef", 0x87}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e42408bab6c1f29cb62d05805063967de38327e", 0x9e}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44cb083e962eee9b5d212523c162b42377ebd0bc624bf9425f6f4772e36c6c2fd4f69b65cc435f93c1a490cb75162251e15942b29", 0xce}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d53c5ac29f83aed3ae9968fe8", 0x60}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291272cfaaa4817539972fb8bb2ede331312f556ecea24236759bf0d51003477ec489820505cea6045a9939974c6f2ee3815378dc0a620982383e84178b017ba52b", 0xc3}, {&(0x7f0000000900)}, {&(0x7f00000000c0)}], 0x7}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, 0x0, 0x0, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}, @txtime={{0x18, 0x1, 0x3d, 0x9d}}], 0x60}}], 0x2, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000100)=0xfffffffe, 0x4) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 3.510835487s ago: executing program 1 (id=1112): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f000022e000/0x4000)=nil, 0x4000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001dc0)=[{{0x0, 0x0, &(0x7f0000001b40)=[{&(0x7f0000000840)=""/4096, 0x1000}, {&(0x7f0000001840)=""/64, 0x40}, {&(0x7f0000001880)=""/6, 0x4}, {&(0x7f0000000400)=""/166, 0xa6}, {&(0x7f0000001980)=""/163, 0xa3}, {&(0x7f0000000540)=""/199, 0xc2}], 0x6}, 0x8}, {{&(0x7f0000000300)=@ieee802154, 0x80, &(0x7f0000001d40)=[{&(0x7f0000001c40)=""/222, 0xde}], 0x1, &(0x7f0000001d80)=""/8, 0x8}, 0x2}], 0x2, 0x2, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x88ce359bdb00143c, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xf) r3 = syz_usb_connect(0x3, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100007e9eb4104c053800f516010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000040)={0x2c, 0x0, 0x0, &(0x7f0000000240)={0x0, 0x8, 0x1, 0x61}, 0x0, 0x0}) syz_usb_control_io(r3, 0x0, &(0x7f0000000780)={0x84, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, 0x0, 0x0) sendmmsg(r4, 0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="28010000100007000000000000000000ff020000000000000000000000000001", @ANYRESDEC=r4, @ANYRES32=0xee00, @ANYRES8], 0x128}}, 0x0) 3.486295883s ago: executing program 0 (id=1113): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) socket(0x22, 0x2, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) socket$alg(0x26, 0x5, 0x0) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, 0x0) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r1, 0x7a6, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(0xffffffffffffffff, 0x0, 0x0) fchdir(r2) r3 = openat$dir(0xffffffffffffff9c, 0x0, 0x101000, 0x10c) getdents64(r3, &(0x7f00000000c0)=""/55, 0x37) lseek(r3, 0x3, 0x0) fanotify_mark(0xffffffffffffffff, 0x455, 0x8000003, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x10, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000020303000000000000000000020000000800010001"], 0x1c}, 0x1, 0x0, 0x0, 0x400c000}, 0x40) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[], 0x1c}}, 0x881) prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x10) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') read$FUSE(r2, &(0x7f0000002580)={0x2020}, 0x3da) sendmsg$kcm(r4, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x40840) 3.37650869s ago: executing program 4 (id=1114): setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000002b40)=ANY=[@ANYBLOB="020000001000000000df8300040000"], 0x24, 0x1) 2.885264075s ago: executing program 2 (id=1115): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) write$binfmt_format(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x6, 0x4000000007}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) 2.852810383s ago: executing program 4 (id=1116): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1, 0x100005, 0x5, 0x5, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0, 0xffffffffffffffff}, &(0x7f0000000380), &(0x7f00000003c0)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000180)={r1, &(0x7f0000000440), &(0x7f00000000c0)=""/110}, 0x20) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x22, 0x2, @thr={&(0x7f00000001c0)="246d1aeafdfe76e7ac60ccb79226f09fef7cef116bff9870ba2ea2bacbdef62cdd4965244a167b582e311bd13744588f564b62eb320c0a5a8e13fc59c67b1f4ce61222e676ab1d60a340bff17c195f858d724d13c443689dbbd83149a99d5f475b83c5101031ac6da7b3", &(0x7f0000000340)="460c91e81dde43b85f10923541586e96323ecde7c2a6a2940f3b1b855c2a332698f0e0d0f8cee9aae635da186f154f8ff8541086c89748c3a03eba9dd56e5da19baf4329a2e5faa2504e1f50253ac58696b8bd5a08f0e7dde85f48846ddae88fa7c58d2e8b9065fbcbe4845d3063dffc55d3a76e8a4037bd745d470d90b113d3e1323464208aac710fac4aa1b23e5a0a9871b8"}}, &(0x7f0000000080)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x1, 0x0, 0x8000, 0x3ff}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ptrace$ARCH_SHSTK_ENABLE(0x1e, 0x0, 0x0, 0x5001) read$msr(r2, &(0x7f0000005580)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x715000, 0x0) ioctl$TIOCSETD(r3, 0x5423, 0x0) syz_emit_vhci(&(0x7f00000006c0)=ANY=[@ANYBLOB], 0x4) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x1, 0xfffffffd}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r4, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001840)=r5, 0x4) 2.32417644s ago: executing program 0 (id=1117): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x13, 0x4, 0x0, &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x130}, 0x94) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf68803f1c1acb74fef", 0x87}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f0", 0x4f}, {&(0x7f0000000480)}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d53c5ac29f83aed3ae9968fe8", 0x60}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6cb75b5d05d6037f91e8f4f08e90d5313fb91fbdc5acd212f7d8c8", 0x59}], 0x5}}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000bc0)="61275006ed747229311198ab94c7e6699587b0d033c2f17d1ccbd45cba520b6888fbad95d4d6ae3cc7172b392f90693e992e52408ba7f1874d1767303d6acb170f216f71908f53a3be1833a25eb1fb2ba3913dcc1de30c5c7e914b13514dea44fb2b964aaa280d5a85512fede48830ca6ea5cd18ff95c871d91454240f370e0c8e2629e58605c4b29017a160709ec76547c92a21d0ec5589e228922b105d0b8b29256620c44d2118334025dedd46db5194f22b349264de22068d3d4db627db4fa827907e5bc02b69c36e94f8149f12116f75bd48aa86d41dfdf52e74b442782f530da1263fd0f699776e9459e33fe5", 0xef}], 0x1}}], 0x2, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000100)=0xfffffffe, 0x4) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 1.641231557s ago: executing program 2 (id=1118): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r1 = timerfd_create(0x0, 0x0) timerfd_settime(r1, 0x3, &(0x7f0000000440)={{0x0, 0x3938700}}, 0x0) read(r1, &(0x7f0000000240)=""/123, 0x7b) clock_adjtime(0x0, 0x0) 1.639636012s ago: executing program 4 (id=1119): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}}, 0x24}}, 0x0) socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001500010300000000000000000c0000000c0004"], 0x20}, 0x1, 0x0, 0x0, 0xc000}, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002, 0x0, 0x20000800}, 0x4000000) 1.574769791s ago: executing program 0 (id=1120): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$sock_int(r0, 0x1, 0xf, 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000600)=0x9, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[], &(0x7f0000000100)='GPL\x00'}, 0x94) listen(r1, 0x7) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@remote, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x0, 0xffff, 0x0, 0x2}, {0x10000, 0xea, 0x1, 0x0, 0x6, 0x19b, 0x0, 0xfffffffffffffffa}, {0x1, 0x8, 0x2, 0x8}, 0x0, 0x1, 0x1, 0x0, 0x4, 0x2}, {{@in6=@empty, 0x2, 0x6c}, 0xa, @in6=@empty, 0x2, 0x5, 0x3, 0xb7, 0x0, 0x8}}, 0xe8) syz_open_dev$usbmon(0x0, 0x0, 0x181440) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4e, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r3 = openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x400, 0x0) ioctl$GIO_CMAP(r3, 0x4b70, &(0x7f0000000400)) r4 = syz_open_procfs(0x0, &(0x7f0000000300)='net/icmp\x00') pread64(r4, 0x0, 0x0, 0x100000000000001) syncfs(r3) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20048054) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYBLOB="040e1a00031000"], 0xf) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) 1.361795639s ago: executing program 4 (id=1121): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x13, 0x4, 0x0, &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x130}, 0x94) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf68803f1c1acb74fef", 0x87}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e42408bab6c1f29cb62d05805063967", 0x9a}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44cb083e962eee9b5d212523c162b42377ebd0bc624bf9425f6f4772e36c6c2fd4f69b65cc435f93c1a490cb75162251e15942b", 0xcd}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d53c5ac29f83aed3ae9968fe8", 0x60}, {&(0x7f0000000900)}, {&(0x7f00000000c0)}], 0x6}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, 0x0, 0x0, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @txtime={{0x18, 0x1, 0x3d, 0x9d}}], 0x48}}], 0x2, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000100)=0xfffffffe, 0x4) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 1.150643479s ago: executing program 4 (id=1122): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 569.311523ms ago: executing program 1 (id=1123): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x2000fb) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000300)=0xf) 550.366713ms ago: executing program 2 (id=1124): bind$inet(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40) bind$unix(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x2) r3 = syz_open_dev$sndctrl(&(0x7f0000000180), 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r3, 0xc0b45545, &(0x7f0000000040)=0x1000) 434.475873ms ago: executing program 3 (id=1125): sched_setscheduler(0x0, 0x1, 0x0) syz_emit_ethernet(0x5e, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ptrace$ARCH_SHSTK_STATUS(0x1e, 0x0, 0x0, 0x5005) r0 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket(0x1e, 0x1, 0x0) connect$tipc(r1, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r1, &(0x7f0000000340), 0x2000011a) write(r1, &(0x7f0000000180)="b4", 0x1) recvmmsg$unix(r1, &(0x7f0000000c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x121, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan1\x00'}) syz_create_resource$binfmt(0x0) shmctl$SHM_STAT_ANY(0x0, 0xf, 0x0) setxattr$trusted_overlay_upper(0x0, &(0x7f0000000380), &(0x7f0000000240)=ANY=[], 0x15, 0x1) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, 0x0}], 0x1, 0x40800) getpriority(0x2, 0x0) ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000000200)) socket$nl_generic(0x10, 0x3, 0x10) 434.149449ms ago: executing program 1 (id=1126): socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, 0x0) sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES8], 0xc0}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r3, 0x0, 0xd2, &(0x7f0000000200)={@remote, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0x800b2, 0xfffffff7, 0x4, 0x40000006}, 0x3c) r4 = syz_open_procfs(0x0, &(0x7f0000002380)='net/ip_mr_cache\x00') pread64(r4, &(0x7f0000000100)=""/253, 0xfd, 0x1) 0s ago: executing program 4 (id=1127): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000003c0)={0x0, 0x0, 0x80800}) r1 = getpid() syz_pidfd_open(r1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$vimc2(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) openat$dsp1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) kernel console output (not intermixed with test programs): 0) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.673748][ T5812] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.699158][ T5804] team0: Port device team_slave_1 added [ 77.792993][ T5796] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.793007][ T5796] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.793028][ T5796] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.835471][ T5796] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.835487][ T5796] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.835508][ T5796] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.856436][ T5804] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.856450][ T5804] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.856472][ T5804] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.869443][ T5795] hsr_slave_0: entered promiscuous mode [ 77.871351][ T5795] hsr_slave_1: entered promiscuous mode [ 77.903342][ T5804] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.903357][ T5804] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.903379][ T5804] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.914060][ T5805] hsr_slave_0: entered promiscuous mode [ 77.915271][ T5805] hsr_slave_1: entered promiscuous mode [ 77.916535][ T5805] debugfs: 'hsr0' already exists in 'hsr' [ 77.916645][ T5805] Cannot create hsr debugfs directory [ 77.967487][ T5812] hsr_slave_0: entered promiscuous mode [ 77.968644][ T5812] hsr_slave_1: entered promiscuous mode [ 77.969463][ T5812] debugfs: 'hsr0' already exists in 'hsr' [ 77.969483][ T5812] Cannot create hsr debugfs directory [ 78.118227][ T5796] hsr_slave_0: entered promiscuous mode [ 78.118956][ T5796] hsr_slave_1: entered promiscuous mode [ 78.119440][ T5796] debugfs: 'hsr0' already exists in 'hsr' [ 78.119459][ T5796] Cannot create hsr debugfs directory [ 78.175947][ T5804] hsr_slave_0: entered promiscuous mode [ 78.176673][ T5804] hsr_slave_1: entered promiscuous mode [ 78.177238][ T5804] debugfs: 'hsr0' already exists in 'hsr' [ 78.177256][ T5804] Cannot create hsr debugfs directory [ 79.034308][ T5795] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 79.058091][ T5795] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 79.097292][ T5795] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 79.145158][ T5795] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 79.240519][ T5805] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 79.266350][ T5805] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 79.305247][ T5805] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 79.358174][ T5805] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 79.457148][ T5812] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 79.491543][ T5812] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 79.518015][ T5812] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 79.549270][ T5812] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 79.561047][ T5802] Bluetooth: hci0: command tx timeout [ 79.651011][ T5802] Bluetooth: hci3: command tx timeout [ 79.655753][ T5796] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 79.716690][ T5796] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 79.720649][ T5802] Bluetooth: hci4: command tx timeout [ 79.720676][ T5802] Bluetooth: hci2: command tx timeout [ 79.720695][ T5802] Bluetooth: hci1: command tx timeout [ 79.767419][ T5796] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 79.823278][ T5796] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 79.936393][ T5795] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.949158][ T5804] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 79.997126][ T5804] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 80.030122][ T5804] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 80.066729][ T5804] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 80.144906][ T5795] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.174174][ T69] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.174315][ T69] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.203021][ T5805] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.209584][ T69] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.209656][ T69] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.280330][ T5805] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.308212][ T5812] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.326032][ T69] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.326147][ T69] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.364315][ T3598] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.364452][ T3598] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.406291][ T5812] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.428327][ T5796] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.451248][ T69] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.460658][ T69] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.514029][ T3598] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.514157][ T3598] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.586490][ T5796] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.626550][ T5804] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.653621][ T3598] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.653764][ T3598] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.699083][ T1017] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.699211][ T1017] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.760321][ T5804] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.823112][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.830641][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.878386][ T3598] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.878578][ T3598] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.885700][ T5795] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.095729][ T5805] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.222310][ T5795] veth0_vlan: entered promiscuous mode [ 81.266696][ T5795] veth1_vlan: entered promiscuous mode [ 81.302375][ T5796] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.329467][ T5812] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.366900][ T5805] veth0_vlan: entered promiscuous mode [ 81.428715][ T5805] veth1_vlan: entered promiscuous mode [ 81.435672][ T5795] veth0_macvtap: entered promiscuous mode [ 81.469584][ T5795] veth1_macvtap: entered promiscuous mode [ 81.613119][ T31] cfg80211: failed to load regulatory.db [ 81.623409][ T5795] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.650575][ T5810] Bluetooth: hci0: command tx timeout [ 81.700570][ T5812] veth0_vlan: entered promiscuous mode [ 81.712315][ T5795] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.720576][ T5810] Bluetooth: hci3: command tx timeout [ 81.751804][ T5805] veth0_macvtap: entered promiscuous mode [ 81.755553][ T5804] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.788318][ T3598] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.800604][ T5810] Bluetooth: hci1: command tx timeout [ 81.800630][ T5810] Bluetooth: hci2: command tx timeout [ 81.800647][ T5810] Bluetooth: hci4: command tx timeout [ 81.827651][ T3598] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.843134][ T5805] veth1_macvtap: entered promiscuous mode [ 81.843983][ T3598] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.845379][ T5812] veth1_vlan: entered promiscuous mode [ 81.876795][ T3598] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.049575][ T5805] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.125870][ T5805] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.182564][ T1017] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.185523][ T1017] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.207320][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.207343][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.211072][ T1017] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.214986][ T5812] veth0_macvtap: entered promiscuous mode [ 82.245102][ T69] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.282203][ T5812] veth1_macvtap: entered promiscuous mode [ 82.327458][ T5804] veth0_vlan: entered promiscuous mode [ 82.328615][ T5796] veth0_vlan: entered promiscuous mode [ 82.389527][ T1235] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.389546][ T1235] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.429838][ T5804] veth1_vlan: entered promiscuous mode [ 82.479256][ T5796] veth1_vlan: entered promiscuous mode [ 82.518084][ T5812] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.570930][ T5812] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.596147][ T69] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.596165][ T69] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.634283][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.650074][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.672045][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.675157][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.107800][ T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.107821][ T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.542385][ T5804] veth0_macvtap: entered promiscuous mode [ 83.576708][ T5796] veth0_macvtap: entered promiscuous mode [ 83.591013][ T5804] veth1_macvtap: entered promiscuous mode [ 83.617517][ T5796] veth1_macvtap: entered promiscuous mode [ 83.721650][ T5802] Bluetooth: hci0: command tx timeout [ 83.748903][ T5804] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.783171][ T5804] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.863123][ T5796] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.871364][ T5802] Bluetooth: hci3: command tx timeout [ 83.880649][ T5802] Bluetooth: hci4: command tx timeout [ 83.880675][ T5802] Bluetooth: hci2: command tx timeout [ 83.880694][ T5802] Bluetooth: hci1: command tx timeout [ 83.934986][ T155] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.949379][ T155] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.950017][ T155] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.088327][ T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.088340][ T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.114750][ T56] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.116955][ T5796] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.156285][ T40] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.157083][ T40] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.159170][ T40] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.159329][ T40] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.803174][ T69] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.803195][ T69] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.858510][ T5934] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9'. [ 85.572289][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.572307][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.754790][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.754809][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.865998][ T4877] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.866015][ T4877] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.089540][ T1017] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.089560][ T1017] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.370837][ T31] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 89.132177][ T31] usb 3-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 89.132205][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.132222][ T31] usb 3-1: Product: syz [ 89.132234][ T31] usb 3-1: Manufacturer: syz [ 89.132246][ T31] usb 3-1: SerialNumber: syz [ 89.217045][ T31] r8152-cfgselector 3-1: Unknown version 0x0000 [ 89.217069][ T31] r8152-cfgselector 3-1: config 0 descriptor?? [ 89.648231][ T31] r8152-cfgselector 3-1: Unknown version 0x0000 [ 89.649654][ T31] r8152-cfgselector 3-1: bad CDC descriptors [ 89.711488][ T31] r8152-cfgselector 3-1: USB disconnect, device number 2 [ 89.831125][ T5994] ref_ctr_offset mismatch. inode: 0x32 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x78aa14760000 [ 91.360677][ T809] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 91.520496][ T809] usb 3-1: Using ep0 maxpacket: 16 [ 91.525394][ T809] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 91.525438][ T809] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 91.525461][ T809] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 91.525497][ T809] usb 3-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 91.525518][ T809] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.535722][ T809] usb 3-1: config 0 descriptor?? [ 92.459787][ T809] nintendo 0003:057E:2019.0001: hidraw0: USB HID v80.05 Device [HID 057e:2019] on usb-dummy_hcd.2-1/input0 [ 93.468071][ T809] nintendo 0003:057E:2019.0001: Failed to get joycon info; ret=-38 [ 93.468094][ T809] nintendo 0003:057E:2019.0001: Failed to retrieve controller info; ret=-38 [ 93.468110][ T809] nintendo 0003:057E:2019.0001: Failed to initialize controller; ret=-38 [ 93.493065][ T809] nintendo 0003:057E:2019.0001: probe - fail = -38 [ 93.493297][ T809] nintendo 0003:057E:2019.0001: probe with driver nintendo failed with error -38 [ 93.521264][ T809] usb 3-1: USB disconnect, device number 3 [ 93.586086][ T6041] fido_id[6041]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 93.822519][ T5885] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 93.850570][ T5981] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 94.020670][ T5981] usb 2-1: Using ep0 maxpacket: 16 [ 94.442968][ T5981] usb 2-1: unable to get BOS descriptor or descriptor too short [ 94.482770][ T5981] usb 2-1: config 7 has an invalid interface number: 106 but max is 3 [ 94.482798][ T5981] usb 2-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 94.482815][ T5981] usb 2-1: config 7 has 1 interface, different from the descriptor's value: 4 [ 94.482832][ T5981] usb 2-1: config 7 has no interface number 0 [ 94.482874][ T5981] usb 2-1: config 7 interface 106 altsetting 89 endpoint 0x6 has invalid wMaxPacketSize 0 [ 94.482892][ T5981] usb 2-1: config 7 interface 106 altsetting 89 has 1 endpoint descriptor, different from the interface descriptor's value: 13 [ 94.482915][ T5981] usb 2-1: config 7 interface 106 has no altsetting 0 [ 94.505983][ T5885] usb 1-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 94.506010][ T5885] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.506027][ T5885] usb 1-1: Product: syz [ 94.506038][ T5885] usb 1-1: Manufacturer: syz [ 94.506050][ T5885] usb 1-1: SerialNumber: syz [ 94.515369][ T5885] r8152-cfgselector 1-1: Unknown version 0x0000 [ 94.515390][ T5885] r8152-cfgselector 1-1: config 0 descriptor?? [ 94.547730][ T5981] usb 2-1: New USB device found, idVendor=0424, idProduct=cf30, bcdDevice=c7.5a [ 94.547758][ T5981] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.547774][ T5981] usb 2-1: Product: syz [ 94.547787][ T5981] usb 2-1: Manufacturer: syz [ 94.547798][ T5981] usb 2-1: SerialNumber: syz [ 94.937425][ T5885] r8152-cfgselector 1-1: Unknown version 0x0000 [ 94.937924][ T5885] r8152-cfgselector 1-1: bad CDC descriptors [ 94.958597][ T5885] r8152-cfgselector 1-1: USB disconnect, device number 2 [ 95.172778][ T5981] usb 2-1: USB disconnect, device number 2 [ 95.991266][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 96.250959][ T6083] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 96.570697][ T5884] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 97.097369][ T5884] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 97.097387][ T5884] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.097397][ T5884] usb 5-1: Product: syz [ 97.097404][ T5884] usb 5-1: Manufacturer: syz [ 97.097411][ T5884] usb 5-1: SerialNumber: syz [ 97.724565][ T6101] netlink: 20 bytes leftover after parsing attributes in process `syz.3.62'. [ 98.164307][ T5884] cdc_ncm 5-1:1.0: failed to get mac address [ 98.314985][ T6104] netlink: 12 bytes leftover after parsing attributes in process `syz.0.63'. [ 98.386258][ T5884] cdc_ncm 5-1:1.0: bind() failure [ 98.410512][ T5884] cdc_ncm 5-1:1.1: probe with driver cdc_ncm failed with error -71 [ 98.411916][ T5884] cdc_mbim 5-1:1.1: probe with driver cdc_mbim failed with error -71 [ 98.413880][ T5884] usbtest 5-1:1.1: probe with driver usbtest failed with error -71 [ 98.448403][ T5884] usb 5-1: USB disconnect, device number 2 [ 99.144575][ T6119] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 99.572686][ T808] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 99.736054][ T6132] Zero length message leads to an empty skb [ 100.235405][ T6130] netlink: 'syz.2.74': attribute type 1 has an invalid length. [ 100.257897][ T808] usb 5-1: Using ep0 maxpacket: 8 [ 100.260311][ T808] usb 5-1: config 0 has an invalid interface number: 52 but max is 0 [ 100.260328][ T808] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 100.260337][ T808] usb 5-1: config 0 has no interface number 0 [ 100.293407][ T808] usb 5-1: config 0 interface 52 has no altsetting 0 [ 101.460512][ T808] usb 5-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice= 0.00 [ 101.460539][ T808] usb 5-1: New USB device strings: Mfr=0, Product=234, SerialNumber=34 [ 101.460557][ T808] usb 5-1: Product: syz [ 101.460569][ T808] usb 5-1: SerialNumber: syz [ 101.522414][ T808] usb 5-1: config 0 descriptor?? [ 101.587775][ T6141] netlink: 12 bytes leftover after parsing attributes in process `syz.1.77'. [ 101.670394][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 102.950384][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 102.970385][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 102.980386][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 103.020386][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 103.040385][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 103.050386][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 103.060386][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 103.070385][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 103.080382][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 104.055637][ T6163] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 104.055652][ T6163] IPv6: NLM_F_CREATE should be set when creating new route [ 104.192764][ T808] usb 5-1: USB disconnect, device number 3 [ 105.799325][ T6181] binder: 6174:6181 ioctl c0306201 0 returned -14 [ 106.391992][ T6196] syzkaller1: entered promiscuous mode [ 106.392016][ T6196] syzkaller1: entered allmulticast mode [ 107.034595][ T37] audit: type=1326 audit(1775914278.433:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6201 comm="syz.3.101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd43d40c819 code=0x7ffc0000 [ 107.035603][ T37] audit: type=1326 audit(1775914278.433:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6201 comm="syz.3.101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd43d40c819 code=0x7ffc0000 [ 107.036083][ T37] audit: type=1326 audit(1775914278.433:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6201 comm="syz.3.101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fd43d40c819 code=0x7ffc0000 [ 107.036590][ T37] audit: type=1326 audit(1775914278.433:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6201 comm="syz.3.101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd43d40c819 code=0x7ffc0000 [ 107.228094][ T37] audit: type=1326 audit(1775914278.433:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6201 comm="syz.3.101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd43d40c819 code=0x7ffc0000 [ 107.892179][ T37] audit: type=1326 audit(1775914278.433:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6201 comm="syz.3.101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fd43d40c819 code=0x7ffc0000 [ 107.892232][ T37] audit: type=1326 audit(1775914278.433:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6201 comm="syz.3.101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd43d40c819 code=0x7ffc0000 [ 107.892267][ T37] audit: type=1326 audit(1775914278.433:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6201 comm="syz.3.101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd43d40c819 code=0x7ffc0000 [ 107.892303][ T37] audit: type=1326 audit(1775914278.433:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6201 comm="syz.3.101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fd43d40c819 code=0x7ffc0000 [ 107.892337][ T37] audit: type=1326 audit(1775914278.433:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6201 comm="syz.3.101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd43d40c819 code=0x7ffc0000 [ 107.920065][ T6208] netlink: 'syz.2.90': attribute type 1 has an invalid length. [ 109.919957][ T6221] binder: BINDER_SET_CONTEXT_MGR already set [ 109.919971][ T6221] binder: 6218:6221 ioctl 4018620d 200000000040 returned -16 [ 109.920735][ T6221] binder: 6218:6221 ioctl c0306201 0 returned -14 [ 112.687763][ T37] kauditd_printk_skb: 40 callbacks suppressed [ 112.687816][ T37] audit: type=1326 audit(1775914283.463:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6246 comm="syz.0.117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc67ccc819 code=0x7ffc0000 [ 112.688130][ T37] audit: type=1326 audit(1775914283.463:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6246 comm="syz.0.117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc67ccc819 code=0x7ffc0000 [ 112.688404][ T37] audit: type=1326 audit(1775914283.463:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6246 comm="syz.0.117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fbc67ccc819 code=0x7ffc0000 [ 112.688586][ T37] audit: type=1326 audit(1775914283.463:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6246 comm="syz.0.117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc67ccc819 code=0x7ffc0000 [ 112.688869][ T37] audit: type=1326 audit(1775914283.463:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6246 comm="syz.0.117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc67ccc819 code=0x7ffc0000 [ 112.689073][ T37] audit: type=1326 audit(1775914283.463:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6246 comm="syz.0.117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fbc67ccc819 code=0x7ffc0000 [ 112.689328][ T37] audit: type=1326 audit(1775914283.463:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6246 comm="syz.0.117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc67ccc819 code=0x7ffc0000 [ 112.689581][ T37] audit: type=1326 audit(1775914283.463:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6246 comm="syz.0.117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc67ccc819 code=0x7ffc0000 [ 112.689833][ T37] audit: type=1326 audit(1775914283.463:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6246 comm="syz.0.117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fbc67ccc819 code=0x7ffc0000 [ 112.690087][ T37] audit: type=1326 audit(1775914283.463:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6246 comm="syz.0.117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc67ccc819 code=0x7ffc0000 [ 113.825981][ T5810] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 113.826136][ T5810] Bluetooth: hci3: Injecting HCI hardware error event [ 113.828196][ T5802] Bluetooth: hci3: hardware error 0x00 [ 115.900117][ T6302] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 116.080874][ T6294] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 116.080885][ T6294] IPv6: NLM_F_CREATE should be set when creating new route [ 117.452184][ T6321] netlink: 8 bytes leftover after parsing attributes in process `syz.2.140'. [ 117.770670][ T6327] netlink: 'syz.0.139': attribute type 3 has an invalid length. [ 118.342371][ T5802] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 120.534102][ T6338] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 120.534119][ T6338] IPv6: NLM_F_CREATE should be set when creating new route [ 121.094134][ T5856] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 121.670476][ T5856] usb 2-1: Using ep0 maxpacket: 16 [ 121.677969][ T5856] usb 2-1: config 0 has an invalid interface number: 68 but max is 0 [ 121.677984][ T5856] usb 2-1: config 0 has no interface number 0 [ 121.678029][ T5856] usb 2-1: config 0 interface 68 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 87 [ 121.679830][ T5856] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=dc.c4 [ 121.679845][ T5856] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.679854][ T5856] usb 2-1: Product: syz [ 121.679860][ T5856] usb 2-1: Manufacturer: syz [ 121.679867][ T5856] usb 2-1: SerialNumber: syz [ 121.685272][ T5856] usb 2-1: config 0 descriptor?? [ 121.702212][ T6333] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 121.802672][ T5856] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 121.976096][ T6352] netlink: 4 bytes leftover after parsing attributes in process `syz.3.150'. [ 122.040907][ T5884] usb 2-1: USB disconnect, device number 3 [ 122.042290][ T6137] usb 2-1: Failed to submit usb control message: -71 [ 122.042309][ T6137] usb 2-1: unable to send the bmi data to the device: -71 [ 122.042317][ T6137] usb 2-1: unable to get target info from device [ 122.042334][ T6137] usb 2-1: could not get target info (-71) [ 122.042497][ T6137] usb 2-1: could not probe fw (-71) [ 122.065100][ T6354] netlink: 8 bytes leftover after parsing attributes in process `syz.2.151'. [ 123.218083][ T6367] netlink: 'syz.2.155': attribute type 3 has an invalid length. [ 126.820471][ T809] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 126.931080][ T808] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 127.263336][ T809] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 127.263382][ T809] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 127.263395][ T809] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 127.263415][ T809] usb 3-1: New USB device found, idVendor=056a, idProduct=0010, bcdDevice= 0.00 [ 127.263426][ T809] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.267224][ T809] usb 3-1: config 0 descriptor?? [ 127.340889][ T808] usb 5-1: Using ep0 maxpacket: 32 [ 127.464235][ T6404] netlink: 'syz.0.169': attribute type 3 has an invalid length. [ 127.580104][ T808] usb 5-1: config 0 has an invalid interface number: 188 but max is 0 [ 127.580205][ T808] usb 5-1: config 0 has no interface number 0 [ 127.596902][ T808] usb 5-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 128.103603][ T808] usb 5-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 128.103631][ T808] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.103647][ T808] usb 5-1: Product: syz [ 128.103660][ T808] usb 5-1: Manufacturer: syz [ 128.103672][ T808] usb 5-1: SerialNumber: syz [ 128.184120][ T808] usb 5-1: config 0 descriptor?? [ 128.199634][ T6393] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 128.322149][ T5884] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 128.626250][ T6393] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 128.837309][ T809] usbhid 3-1:0.0: can't add hid device: -71 [ 128.837424][ T809] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 128.844194][ T5884] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 128.844219][ T5884] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.844236][ T5884] usb 4-1: Product: syz [ 128.844248][ T5884] usb 4-1: Manufacturer: syz [ 128.844260][ T5884] usb 4-1: SerialNumber: syz [ 128.855709][ T809] usb 3-1: USB disconnect, device number 4 [ 129.066717][ T808] asix 5-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 129.066983][ T808] asix 5-1:0.188: probe with driver asix failed with error -32 [ 129.688164][ T5884] cdc_ncm 4-1:1.0: bind() failure [ 129.693599][ T5884] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 129.693625][ T5884] cdc_ncm 4-1:1.1: bind() failure [ 129.709907][ T5884] usb 4-1: USB disconnect, device number 2 [ 130.197109][ T5884] usb 5-1: USB disconnect, device number 4 [ 131.027521][ T6438] netlink: 'syz.4.181': attribute type 3 has an invalid length. [ 132.766294][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.766402][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.111558][ T809] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 133.270472][ T809] usb 4-1: Using ep0 maxpacket: 32 [ 133.280087][ T809] usb 4-1: config 0 has an invalid interface number: 188 but max is 0 [ 133.280112][ T809] usb 4-1: config 0 has no interface number 0 [ 133.280163][ T809] usb 4-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 133.303004][ T809] usb 4-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 133.303029][ T809] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.303046][ T809] usb 4-1: Product: syz [ 133.303057][ T809] usb 4-1: Manufacturer: syz [ 133.303069][ T809] usb 4-1: SerialNumber: syz [ 133.309256][ T809] usb 4-1: config 0 descriptor?? [ 133.319263][ T6456] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 133.560614][ T6456] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 133.660582][ T5856] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 133.900940][ T5856] usb 5-1: Using ep0 maxpacket: 8 [ 133.904533][ T5856] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 133.904557][ T5856] usb 5-1: config 0 has no interface number 0 [ 133.904597][ T5856] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 133.904617][ T5856] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 133.904639][ T5856] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 133.904660][ T5856] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 133.904679][ T5856] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 133.904716][ T5856] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 133.904736][ T5856] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.910018][ T5856] usb 5-1: config 0 descriptor?? [ 133.966771][ T809] asix 4-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 133.967018][ T809] asix 4-1:0.188: probe with driver asix failed with error -32 [ 134.068191][ T5856] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 134.361728][ T5810] Bluetooth: hci4: command 0x0405 tx timeout [ 135.360453][ T809] usb 5-1: USB disconnect, device number 5 [ 135.387725][ T809] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 136.397791][ T5800] usb 4-1: USB disconnect, device number 3 [ 137.116861][ T6515] netlink: 8 bytes leftover after parsing attributes in process `syz.4.212'. [ 137.116892][ T6515] netlink: 8 bytes leftover after parsing attributes in process `syz.4.212'. [ 137.457510][ T6525] syzkaller1: entered promiscuous mode [ 137.457533][ T6525] syzkaller1: entered allmulticast mode [ 137.868368][ T809] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 138.070441][ T809] usb 1-1: Using ep0 maxpacket: 8 [ 138.074765][ T809] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 138.074780][ T809] usb 1-1: config 0 has no interface number 0 [ 138.074802][ T809] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 138.074813][ T809] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 138.074825][ T809] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 138.074836][ T809] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 138.074847][ T809] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 138.074867][ T809] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 138.074878][ T809] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.077624][ T809] usb 1-1: config 0 descriptor?? [ 138.206565][ T809] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 138.280521][ T31] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 139.449874][ T809] usb 1-1: USB disconnect, device number 3 [ 139.451320][ T31] usb 3-1: Using ep0 maxpacket: 32 [ 139.464457][ T31] usb 3-1: config 0 has an invalid interface number: 188 but max is 0 [ 139.464481][ T31] usb 3-1: config 0 has no interface number 0 [ 139.464523][ T31] usb 3-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 139.469611][ T31] usb 3-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 139.469636][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.469653][ T31] usb 3-1: Product: syz [ 139.469665][ T31] usb 3-1: Manufacturer: syz [ 139.469676][ T31] usb 3-1: SerialNumber: syz [ 139.569444][ T809] ldusb 1-1:0.55: LD USB Device #0 now disconnected [ 139.603417][ T31] usb 3-1: config 0 descriptor?? [ 139.606713][ T6533] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 139.838416][ T6533] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 140.398080][ T31] asix 3-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 140.398359][ T31] asix 3-1:0.188: probe with driver asix failed with error -32 [ 141.200933][ T6555] netlink: 8 bytes leftover after parsing attributes in process `syz.4.225'. [ 141.203220][ T6555] netlink: 8 bytes leftover after parsing attributes in process `syz.4.225'. [ 141.420143][ T5893] usb 3-1: USB disconnect, device number 5 [ 142.993726][ T6585] syz.3.236 uses obsolete (PF_INET,SOCK_PACKET) [ 143.036582][ T6589] netlink: 8 bytes leftover after parsing attributes in process `syz.1.238'. [ 143.036603][ T6589] netlink: 8 bytes leftover after parsing attributes in process `syz.1.238'. [ 143.610563][ T9] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 144.111084][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 144.120170][ T9] usb 4-1: config 0 has an invalid interface number: 188 but max is 0 [ 144.120185][ T9] usb 4-1: config 0 has no interface number 0 [ 144.120210][ T9] usb 4-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 144.145244][ T9] usb 4-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 144.145271][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.145288][ T9] usb 4-1: Product: syz [ 144.145300][ T9] usb 4-1: Manufacturer: syz [ 144.145311][ T9] usb 4-1: SerialNumber: syz [ 144.150236][ T9] usb 4-1: config 0 descriptor?? [ 144.151356][ T6598] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 144.405332][ T6598] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 144.740472][ T5893] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 144.816014][ T9] asix 4-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 144.816177][ T9] asix 4-1:0.188: probe with driver asix failed with error -32 [ 144.892439][ T5893] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 144.892469][ T5893] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 144.892482][ T5893] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 144.892500][ T5893] usb 2-1: New USB device found, idVendor=056a, idProduct=0010, bcdDevice= 0.00 [ 144.892511][ T5893] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.901544][ T5893] usb 2-1: config 0 descriptor?? [ 145.190809][ T6628] netlink: 8 bytes leftover after parsing attributes in process `syz.0.252'. [ 145.190824][ T6628] netlink: 8 bytes leftover after parsing attributes in process `syz.0.252'. [ 145.339774][ T6631] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.253'. [ 145.536841][ T5893] usbhid 2-1:0.0: can't add hid device: -71 [ 145.536947][ T5893] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 145.544479][ T5893] usb 2-1: USB disconnect, device number 4 [ 146.321374][ T5884] usb 4-1: USB disconnect, device number 4 [ 147.332181][ T6656] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.264'. [ 147.542067][ T6659] netlink: 8 bytes leftover after parsing attributes in process `syz.0.263'. [ 147.542088][ T6659] netlink: 8 bytes leftover after parsing attributes in process `syz.0.263'. [ 148.362751][ T9] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 148.945524][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 148.957317][ T6689] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.275'. [ 148.980057][ T9] usb 1-1: config 0 has an invalid interface number: 188 but max is 0 [ 148.980072][ T9] usb 1-1: config 0 has no interface number 0 [ 148.980098][ T9] usb 1-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 149.008734][ T9] usb 1-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 149.008760][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.008777][ T9] usb 1-1: Product: syz [ 149.008789][ T9] usb 1-1: Manufacturer: syz [ 149.008801][ T9] usb 1-1: SerialNumber: syz [ 149.049287][ T9] usb 1-1: config 0 descriptor?? [ 149.050126][ T6670] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 149.283381][ T6670] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 149.561315][ T6698] netlink: 'syz.4.280': attribute type 1 has an invalid length. [ 149.725255][ T9] asix 1-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 149.725421][ T9] asix 1-1:0.188: probe with driver asix failed with error -32 [ 150.808552][ T6722] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.289'. [ 151.129895][ T31] usb 1-1: USB disconnect, device number 4 [ 151.250613][ T9] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 151.665284][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 151.671873][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 151.671919][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 151.671942][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 151.671978][ T9] usb 4-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 151.671997][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.795630][ T9] usb 4-1: config 0 descriptor?? [ 152.270721][ T9] nintendo 0003:057E:2019.0002: hidraw0: USB HID v80.05 Device [HID 057e:2019] on usb-dummy_hcd.3-1/input0 [ 152.343974][ T9] nintendo 0003:057E:2019.0002: Failed to get joycon info; ret=-38 [ 152.344869][ T9] nintendo 0003:057E:2019.0002: Failed to retrieve controller info; ret=-38 [ 152.344881][ T9] nintendo 0003:057E:2019.0002: Failed to initialize controller; ret=-38 [ 152.371687][ T9] nintendo 0003:057E:2019.0002: probe - fail = -38 [ 152.371819][ T9] nintendo 0003:057E:2019.0002: probe with driver nintendo failed with error -38 [ 152.982318][ T9] usb 4-1: USB disconnect, device number 5 [ 153.179694][ T6748] fido_id[6748]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 153.671206][ T5893] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 153.901066][ T5893] usb 5-1: Using ep0 maxpacket: 32 [ 154.002303][ T5893] usb 5-1: config 0 has an invalid interface number: 188 but max is 0 [ 154.002328][ T5893] usb 5-1: config 0 has no interface number 0 [ 154.003218][ T5893] usb 5-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 154.037926][ T5893] usb 5-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 154.037962][ T5893] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.037979][ T5893] usb 5-1: Product: syz [ 154.037992][ T5893] usb 5-1: Manufacturer: syz [ 154.038003][ T5893] usb 5-1: SerialNumber: syz [ 154.192868][ T5893] usb 5-1: config 0 descriptor?? [ 154.210302][ T6764] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 154.326909][ T6775] netlink: 'syz.0.309': attribute type 1 has an invalid length. [ 154.667772][ T6764] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 154.931896][ T9] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 155.073358][ T5893] asix 5-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 155.073622][ T5893] asix 5-1:0.188: probe with driver asix failed with error -32 [ 155.126126][ T9] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 155.126143][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.126153][ T9] usb 2-1: Product: syz [ 155.126159][ T9] usb 2-1: Manufacturer: syz [ 155.126166][ T9] usb 2-1: SerialNumber: syz [ 155.730522][ T5810] Bluetooth: hci4: command 0x0405 tx timeout [ 156.017129][ T9] cdc_ncm 2-1:1.0: failed GET_NTB_PARAMETERS [ 156.017205][ T9] cdc_ncm 2-1:1.0: bind() failure [ 156.026661][ T9] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 156.026701][ T9] cdc_ncm 2-1:1.1: bind() failure [ 156.037020][ T9] usb 2-1: USB disconnect, device number 5 [ 156.456907][ T5893] usb 5-1: USB disconnect, device number 6 [ 158.353717][ T5884] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 158.857098][ T5884] usb 5-1: Using ep0 maxpacket: 32 [ 158.863731][ T5884] usb 5-1: config 0 has an invalid interface number: 188 but max is 0 [ 158.863755][ T5884] usb 5-1: config 0 has no interface number 0 [ 158.863798][ T5884] usb 5-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 158.866195][ T5884] usb 5-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 158.866219][ T5884] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.866235][ T5884] usb 5-1: Product: syz [ 158.866248][ T5884] usb 5-1: Manufacturer: syz [ 158.866259][ T5884] usb 5-1: SerialNumber: syz [ 158.882820][ T5884] usb 5-1: config 0 descriptor?? [ 158.883926][ T6832] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 159.369048][ T6832] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 159.788365][ T5884] asix 5-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 159.788527][ T5884] asix 5-1:0.188: probe with driver asix failed with error -61 [ 160.742130][ T6878] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.352'. [ 161.126865][ T5884] usb 5-1: USB disconnect, device number 7 [ 161.930532][ T9] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 162.009458][ T6905] ref_ctr_offset mismatch. inode: 0x15d offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x78aa14760000 [ 162.101383][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 162.104118][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 162.104166][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 162.104189][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 162.104226][ T9] usb 4-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 162.104246][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.193044][ T9] usb 4-1: config 0 descriptor?? [ 162.230535][ T5884] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 162.410575][ T5884] usb 5-1: Using ep0 maxpacket: 16 [ 162.434410][ T5884] usb 5-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 162.434438][ T5884] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.434455][ T5884] usb 5-1: Product: syz [ 162.434468][ T5884] usb 5-1: Manufacturer: syz [ 162.434479][ T5884] usb 5-1: SerialNumber: syz [ 162.519924][ T5884] usb 5-1: config 0 descriptor?? [ 162.524023][ T6910] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.365'. [ 162.552324][ T5884] visor 5-1:0.0: Sony Clie 3.5 converter detected [ 162.679854][ T9] nintendo 0003:057E:2019.0003: hidraw0: USB HID v80.05 Device [HID 057e:2019] on usb-dummy_hcd.3-1/input0 [ 162.770491][ T9] nintendo 0003:057E:2019.0003: Failed to get joycon info; ret=-38 [ 162.770514][ T9] nintendo 0003:057E:2019.0003: Failed to retrieve controller info; ret=-38 [ 162.771081][ T9] nintendo 0003:057E:2019.0003: Failed to initialize controller; ret=-38 [ 162.874235][ T9] nintendo 0003:057E:2019.0003: probe - fail = -38 [ 162.874410][ T9] nintendo 0003:057E:2019.0003: probe with driver nintendo failed with error -38 [ 162.943232][ T5884] usb 5-1: clie_3_5_startup: get interface number bad return length: 0 [ 162.943401][ T5884] visor 5-1:0.0: probe with driver visor failed with error -5 [ 163.025744][ T31] usb 4-1: USB disconnect, device number 6 [ 163.048193][ T6915] fido_id[6915]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 163.180517][ T5893] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 163.780588][ T5893] usb 3-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 163.780616][ T5893] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.780633][ T5893] usb 3-1: Product: syz [ 163.780644][ T5893] usb 3-1: Manufacturer: syz [ 163.780656][ T5893] usb 3-1: SerialNumber: syz [ 163.806091][ T5893] r8152-cfgselector 3-1: Unknown version 0x0000 [ 163.806113][ T5893] r8152-cfgselector 3-1: config 0 descriptor?? [ 164.441627][ T5893] r8152-cfgselector 3-1: Unknown version 0x0000 [ 164.442083][ T5893] r8152-cfgselector 3-1: bad CDC descriptors [ 164.663531][ T5893] r8152-cfgselector 3-1: USB disconnect, device number 6 [ 164.951856][ T5893] usb 5-1: USB disconnect, device number 8 [ 164.953891][ T6942] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.377'. [ 165.670543][ T809] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 166.250444][ T809] usb 4-1: Using ep0 maxpacket: 16 [ 166.301164][ T809] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 166.301216][ T809] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 166.301240][ T809] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 166.301278][ T809] usb 4-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 166.301298][ T809] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.316079][ T809] usb 4-1: config 0 descriptor?? [ 166.737505][ T809] nintendo 0003:057E:2019.0004: hidraw0: USB HID v80.05 Device [HID 057e:2019] on usb-dummy_hcd.3-1/input0 [ 166.790500][ T5884] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 166.791145][ T809] nintendo 0003:057E:2019.0004: Failed to get joycon info; ret=-38 [ 166.791163][ T809] nintendo 0003:057E:2019.0004: Failed to retrieve controller info; ret=-38 [ 166.791177][ T809] nintendo 0003:057E:2019.0004: Failed to initialize controller; ret=-38 [ 166.822095][ T809] nintendo 0003:057E:2019.0004: probe - fail = -38 [ 166.822317][ T809] nintendo 0003:057E:2019.0004: probe with driver nintendo failed with error -38 [ 166.940787][ T5884] usb 5-1: Using ep0 maxpacket: 16 [ 166.945112][ T5884] usb 5-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 166.945138][ T5884] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.945153][ T5884] usb 5-1: Product: syz [ 166.945165][ T5884] usb 5-1: Manufacturer: syz [ 166.945176][ T5884] usb 5-1: SerialNumber: syz [ 166.953308][ T5884] usb 5-1: config 0 descriptor?? [ 166.984802][ T5884] visor 5-1:0.0: Sony Clie 3.5 converter detected [ 167.070486][ T9] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 167.133120][ T809] usb 4-1: USB disconnect, device number 7 [ 167.237227][ T9] usb 1-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 167.237256][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.237320][ T9] usb 1-1: Product: syz [ 167.237333][ T9] usb 1-1: Manufacturer: syz [ 167.237345][ T9] usb 1-1: SerialNumber: syz [ 167.277952][ T9] r8152-cfgselector 1-1: Unknown version 0x0000 [ 167.277974][ T9] r8152-cfgselector 1-1: config 0 descriptor?? [ 167.388977][ T5884] usb 5-1: clie_3_5_startup: get interface number bad return length: 0 [ 167.389232][ T5884] visor 5-1:0.0: probe with driver visor failed with error -5 [ 168.193931][ T809] r8152-cfgselector 1-1: USB disconnect, device number 5 [ 169.956103][ T31] usb 5-1: USB disconnect, device number 9 [ 171.082573][ T5810] Bluetooth: hci4: command 0x0405 tx timeout [ 174.030459][ T9] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 174.190479][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 174.192306][ T9] usb 3-1: config 0 has no interfaces? [ 174.192327][ T9] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 174.192338][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.196641][ T9] usb 3-1: config 0 descriptor?? [ 174.438263][ T9] usb 3-1: USB disconnect, device number 7 [ 175.411850][ T37] kauditd_printk_skb: 13 callbacks suppressed [ 175.411940][ T37] audit: type=1326 audit(1775915114.816:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7081 comm="syz.4.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00981bc819 code=0x7ffc0000 [ 175.412369][ T37] audit: type=1326 audit(1775915114.816:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7081 comm="syz.4.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00981bc819 code=0x7ffc0000 [ 175.412748][ T37] audit: type=1326 audit(1775915114.816:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7081 comm="syz.4.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f00981bc819 code=0x7ffc0000 [ 175.413043][ T37] audit: type=1326 audit(1775915114.816:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7081 comm="syz.4.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00981bc819 code=0x7ffc0000 [ 175.413418][ T37] audit: type=1326 audit(1775915114.816:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7081 comm="syz.4.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00981bc819 code=0x7ffc0000 [ 175.421388][ T37] audit: type=1326 audit(1775915114.816:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7081 comm="syz.4.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f00981bc819 code=0x7ffc0000 [ 175.424814][ T37] audit: type=1326 audit(1775915114.816:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7081 comm="syz.4.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00981bc819 code=0x7ffc0000 [ 175.427764][ T37] audit: type=1326 audit(1775915114.816:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7081 comm="syz.4.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00981bc819 code=0x7ffc0000 [ 175.552028][ T37] audit: type=1326 audit(1775915114.816:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7081 comm="syz.4.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f00981bc819 code=0x7ffc0000 [ 175.598274][ T37] audit: type=1326 audit(1775915114.816:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7081 comm="syz.4.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00981bc819 code=0x7ffc0000 [ 176.920527][ T5810] Bluetooth: hci4: command 0x0405 tx timeout [ 177.890553][ T31] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 178.049082][ T31] usb 4-1: Using ep0 maxpacket: 16 [ 178.187075][ T31] usb 4-1: config 0 has an invalid interface number: 68 but max is 0 [ 178.187098][ T31] usb 4-1: config 0 has no interface number 0 [ 178.187134][ T31] usb 4-1: config 0 interface 68 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 87 [ 178.524106][ T31] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=dc.c4 [ 178.524134][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.524151][ T31] usb 4-1: Product: syz [ 178.524163][ T31] usb 4-1: Manufacturer: syz [ 178.524175][ T31] usb 4-1: SerialNumber: syz [ 178.586459][ T31] usb 4-1: config 0 descriptor?? [ 178.596987][ T7103] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 178.679617][ T31] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 179.321432][ T809] usb 4-1: USB disconnect, device number 8 [ 179.321805][ T6486] usb 4-1: Failed to submit usb control message: -71 [ 179.321835][ T6486] usb 4-1: unable to send the bmi data to the device: -71 [ 179.321849][ T6486] usb 4-1: unable to get target info from device [ 179.321861][ T6486] usb 4-1: could not get target info (-71) [ 179.322056][ T6486] usb 4-1: could not probe fw (-71) [ 180.752967][ T37] kauditd_printk_skb: 31 callbacks suppressed [ 180.752986][ T37] audit: type=1326 audit(1775915119.416:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7126 comm="syz.1.447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c5548c819 code=0x7ffc0000 [ 180.753022][ T37] audit: type=1326 audit(1775915119.416:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7126 comm="syz.1.447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c5548c819 code=0x7ffc0000 [ 180.753060][ T37] audit: type=1326 audit(1775915119.416:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7126 comm="syz.1.447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4c5548c819 code=0x7ffc0000 [ 180.753096][ T37] audit: type=1326 audit(1775915119.416:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7126 comm="syz.1.447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c5548c819 code=0x7ffc0000 [ 180.753132][ T37] audit: type=1326 audit(1775915119.416:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7126 comm="syz.1.447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c5548c819 code=0x7ffc0000 [ 180.753169][ T37] audit: type=1326 audit(1775915119.416:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7126 comm="syz.1.447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=277 compat=0 ip=0x7f4c5548c819 code=0x7ffc0000 [ 180.753205][ T37] audit: type=1326 audit(1775915119.416:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7126 comm="syz.1.447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c5548c819 code=0x7ffc0000 [ 180.753240][ T37] audit: type=1326 audit(1775915119.416:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7126 comm="syz.1.447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c5548c819 code=0x7ffc0000 [ 180.753277][ T37] audit: type=1326 audit(1775915119.416:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7126 comm="syz.1.447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f4c5548c819 code=0x7ffc0000 [ 180.753313][ T37] audit: type=1326 audit(1775915119.416:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7126 comm="syz.1.447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c5548c819 code=0x7ffc0000 [ 184.216941][ T7160] GUP no longer grows the stack in syz.1.458 (7160): 2000001d4000-200000200000 (2000001d2000) [ 184.216994][ T7160] CPU: 0 UID: 0 PID: 7160 Comm: syz.1.458 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 184.217018][ T7160] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 184.217037][ T7160] Call Trace: [ 184.217045][ T7160] [ 184.217054][ T7160] dump_stack_lvl+0xe8/0x150 [ 184.217095][ T7160] __get_user_pages+0x22b6/0x2800 [ 184.217157][ T7160] get_user_pages_remote+0x2f6/0xab0 [ 184.217183][ T7160] ? __pfx_mtree_load+0x10/0x10 [ 184.217211][ T7160] ? __pfx_get_user_pages_remote+0x10/0x10 [ 184.217238][ T7160] ? __access_remote_vm+0x44d/0x7f0 [ 184.217268][ T7160] __access_remote_vm+0x226/0x7f0 [ 184.217304][ T7160] ? __pfx___access_remote_vm+0x10/0x10 [ 184.217332][ T7160] ? rep_movs_alternative+0x4a/0x90 [ 184.217362][ T7160] proc_pid_cmdline_read+0x41c/0x7f0 [ 184.217389][ T7160] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 184.217411][ T7160] ? rw_verify_area+0x2ac/0x4e0 [ 184.217440][ T7160] vfs_readv+0x597/0x850 [ 184.217462][ T7160] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 184.217487][ T7160] ? __pfx_vfs_readv+0x10/0x10 [ 184.217521][ T7160] ? __fget_files+0x2a/0x420 [ 184.217547][ T7160] ? __fget_files+0x3a6/0x420 [ 184.217568][ T7160] ? __fget_files+0x2a/0x420 [ 184.217598][ T7160] __x64_sys_preadv+0x1a2/0x2b0 [ 184.217616][ T7160] ? __pfx___se_sys_futex+0x10/0x10 [ 184.217635][ T7160] ? __pfx___x64_sys_preadv+0x10/0x10 [ 184.217665][ T7160] do_syscall_64+0x14d/0xf80 [ 184.217684][ T7160] ? trace_irq_disable+0x3b/0x150 [ 184.217704][ T7160] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.217722][ T7160] ? clear_bhb_loop+0x40/0x90 [ 184.217744][ T7160] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.217762][ T7160] RIP: 0033:0x7f4c5548c819 [ 184.217784][ T7160] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 184.217799][ T7160] RSP: 002b:00007f4c536e6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 184.217826][ T7160] RAX: ffffffffffffffda RBX: 00007f4c55705fa0 RCX: 00007f4c5548c819 [ 184.217839][ T7160] RDX: 0000000000000001 RSI: 0000200000001200 RDI: 0000000000000007 [ 184.217851][ T7160] RBP: 00007f4c55522c91 R08: 0000000000006a76 R09: 0000000000000000 [ 184.217862][ T7160] R10: 000000000000003f R11: 0000000000000246 R12: 0000000000000000 [ 184.217873][ T7160] R13: 00007f4c55706038 R14: 00007f4c55705fa0 R15: 00007fff12aa01c8 [ 184.217904][ T7160] [ 186.111803][ T7187] ref_ctr_offset mismatch. inode: 0x1e5 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x78aa14760000 [ 189.397845][ T7226] ref_ctr_offset mismatch. inode: 0x1ea offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x78aa14760000 [ 190.953348][ T5884] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 191.252438][ T5884] usb 1-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 191.252466][ T5884] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.252483][ T5884] usb 1-1: Product: syz [ 191.252495][ T5884] usb 1-1: Manufacturer: syz [ 191.252507][ T5884] usb 1-1: SerialNumber: syz [ 191.283485][ T5884] r8152-cfgselector 1-1: Unknown version 0x0000 [ 191.283508][ T5884] r8152-cfgselector 1-1: config 0 descriptor?? [ 192.515389][ T5884] r8152-cfgselector 1-1: USB disconnect, device number 6 [ 194.278021][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.278088][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.313541][ T7276] ref_ctr_offset mismatch. inode: 0x26c offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x78aa14760000 [ 194.400503][ T9] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 194.540960][ T9] usb 5-1: device descriptor read/64, error -71 [ 194.940480][ T9] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 195.070850][ T9] usb 5-1: device descriptor read/64, error -71 [ 195.180887][ T9] usb usb5-port1: attempt power cycle [ 195.583155][ T9] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 195.602178][ T9] usb 5-1: device descriptor read/8, error -71 [ 196.600567][ T9] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 196.621257][ T9] usb 5-1: device descriptor read/8, error -71 [ 196.910058][ T9] usb usb5-port1: unable to enumerate USB device [ 198.840976][ T7314] ref_ctr_offset mismatch. inode: 0x215 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x78aa14760000 [ 200.270914][ T5809] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 200.471131][ T5809] usb 3-1: device descriptor read/64, error -71 [ 201.500528][ T5799] Bluetooth: hci0: command 0x0406 tx timeout [ 201.502619][ T5799] Bluetooth: hci1: command 0x0406 tx timeout [ 201.503790][ T5799] Bluetooth: hci2: command 0x0406 tx timeout [ 201.623763][ T5809] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 201.720013][ T7348] netlink: 16 bytes leftover after parsing attributes in process `syz.1.521'. [ 201.720047][ T7348] netlink: 16 bytes leftover after parsing attributes in process `syz.1.521'. [ 201.860456][ T5809] usb 3-1: device descriptor read/64, error -71 [ 201.984474][ T5809] usb usb3-port1: attempt power cycle [ 202.595679][ T7358] ref_ctr_offset mismatch. inode: 0x22b offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x78aa14760000 [ 202.620527][ T5809] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 202.641312][ T5809] usb 3-1: device descriptor read/8, error -71 [ 202.880470][ T5809] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 202.993442][ T5809] usb 3-1: device descriptor read/8, error -71 [ 203.100795][ T5809] usb usb3-port1: unable to enumerate USB device [ 205.138423][ T7391] ref_ctr_offset mismatch. inode: 0x23a offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x78aa14760000 [ 205.526195][ T808] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 205.940899][ T808] usb 5-1: device descriptor read/64, error -71 [ 206.400521][ T808] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 206.591358][ T808] usb 5-1: device descriptor read/64, error -71 [ 206.721391][ T808] usb usb5-port1: attempt power cycle [ 207.140760][ T808] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 207.417957][ T808] usb 5-1: device descriptor read/8, error -71 [ 207.701140][ T808] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 207.729440][ T808] usb 5-1: device descriptor read/8, error -71 [ 207.848412][ T808] usb usb5-port1: unable to enumerate USB device [ 209.101647][ T7444] binder_alloc: 7443: pid 7443 spamming oneway? 1 buffers allocated for a total size of 4096 [ 209.314010][ T7450] netlink: 'syz.3.559': attribute type 3 has an invalid length. [ 210.109995][ T7454] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.561'. [ 210.545198][ T5800] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 211.016927][ T5800] usb 3-1: device descriptor read/64, error -71 [ 211.250867][ T5800] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 211.382409][ T5800] usb 3-1: device descriptor read/64, error -71 [ 211.491898][ T5800] usb usb3-port1: attempt power cycle [ 211.514511][ T7477] binder_alloc: 7476: pid 7476 spamming oneway? 1 buffers allocated for a total size of 4096 [ 211.983293][ T7479] Bluetooth: MGMT ver 1.23 [ 212.170474][ T5800] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 212.191198][ T5800] usb 3-1: device descriptor read/8, error -71 [ 212.450904][ T5800] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 212.481456][ T5800] usb 3-1: device descriptor read/8, error -71 [ 212.587458][ T5800] usb usb3-port1: unable to enumerate USB device [ 212.622014][ T7492] netlink: 'syz.1.576': attribute type 3 has an invalid length. [ 213.994399][ T7508] binder_alloc: 7507: pid 7507 spamming oneway? 1 buffers allocated for a total size of 4096 [ 214.040419][ T5802] Bluetooth: hci0: command 0x0406 tx timeout [ 214.073955][ T5808] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 215.893945][ T7530] blktrace: Concurrent blktraces are not allowed on loop2 [ 216.916111][ T7536] binder_alloc: 7535: pid 7535 spamming oneway? 1 buffers allocated for a total size of 4096 [ 216.916501][ T7536] binder_alloc: 7535: pid 7535 spamming oneway? 2 buffers allocated for a total size of 5120 [ 216.930504][ T808] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 217.124607][ T7540] netlink: 'syz.1.593': attribute type 3 has an invalid length. [ 217.161870][ T808] usb 5-1: device descriptor read/64, error -71 [ 217.432881][ T808] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 217.700905][ T808] usb 5-1: device descriptor read/64, error -71 [ 217.814004][ T808] usb usb5-port1: attempt power cycle [ 218.269617][ T808] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 218.714985][ T808] usb 5-1: device descriptor read/8, error -71 [ 218.923543][ T5884] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 219.091628][ T5884] usb 1-1: Using ep0 maxpacket: 16 [ 219.109153][ T5884] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 219.109176][ T5884] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 219.109208][ T5884] usb 1-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 219.109228][ T5884] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.160419][ T808] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 219.163050][ T5884] usb 1-1: config 0 descriptor?? [ 219.181247][ T808] usb 5-1: device descriptor read/8, error -71 [ 219.291166][ T808] usb usb5-port1: unable to enumerate USB device [ 220.915385][ T7572] blktrace: Concurrent blktraces are not allowed on loop8 [ 222.153246][ T9] usb 1-1: USB disconnect, device number 7 [ 222.522817][ T5802] Bluetooth: hci4: command 0x0405 tx timeout [ 222.980967][ T9] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 223.140923][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 223.271377][ T9] usb 1-1: config 0 has an invalid interface number: 68 but max is 0 [ 223.271451][ T9] usb 1-1: config 0 has no interface number 0 [ 223.271823][ T9] usb 1-1: config 0 interface 68 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 87 [ 223.626831][ T9] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=dc.c4 [ 223.626937][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.627379][ T9] usb 1-1: Product: syz [ 223.627482][ T9] usb 1-1: Manufacturer: syz [ 223.628285][ T9] usb 1-1: SerialNumber: syz [ 223.942897][ T9] usb 1-1: config 0 descriptor?? [ 223.951869][ T7581] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 224.364543][ T9] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 224.411008][ T5884] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 224.659467][ T5884] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 224.659496][ T5884] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.659563][ T5884] usb 5-1: Product: syz [ 224.659576][ T5884] usb 5-1: Manufacturer: syz [ 224.659594][ T5884] usb 5-1: SerialNumber: syz [ 224.817439][ T4892] usb 1-1: Failed to submit usb control message: -71 [ 224.818320][ T4892] usb 1-1: unable to send the bmi data to the device: -71 [ 224.818339][ T4892] usb 1-1: unable to get target info from device [ 224.818352][ T4892] usb 1-1: could not get target info (-71) [ 224.823283][ T5893] usb 1-1: USB disconnect, device number 8 [ 224.920172][ T7608] blktrace: Concurrent blktraces are not allowed on loop2 [ 225.541018][ T4892] usb 1-1: could not probe fw (-71) [ 226.394586][ T7621] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 227.058225][ T5884] cdc_ncm 5-1:1.0: failed to get mac address [ 227.452641][ T5884] cdc_ncm 5-1:1.0: bind() failure [ 227.461844][ T31] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 227.491625][ T5884] cdc_ncm 5-1:1.1: probe with driver cdc_ncm failed with error -71 [ 227.497363][ T5884] cdc_mbim 5-1:1.1: probe with driver cdc_mbim failed with error -71 [ 227.520186][ T5884] usbtest 5-1:1.1: probe with driver usbtest failed with error -71 [ 227.684948][ T5884] usb 5-1: USB disconnect, device number 22 [ 228.340426][ T31] usb 4-1: device descriptor read/64, error -71 [ 228.617115][ T31] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 229.280742][ T31] usb 4-1: device descriptor read/64, error -71 [ 229.394306][ T31] usb usb4-port1: attempt power cycle [ 229.814321][ T7651] blktrace: Concurrent blktraces are not allowed on loop8 [ 229.971911][ T31] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 231.062969][ T31] usb 4-1: device descriptor read/8, error -71 [ 231.358404][ T7659] ref_ctr_offset mismatch. inode: 0x22e offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x78aa14760000 [ 231.862792][ T9] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 232.769454][ T9] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 232.769481][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.769498][ T9] usb 2-1: Product: syz [ 232.769510][ T9] usb 2-1: Manufacturer: syz [ 232.769523][ T9] usb 2-1: SerialNumber: syz [ 234.170168][ T37] kauditd_printk_skb: 13 callbacks suppressed [ 234.170187][ T37] audit: type=1326 audit(1775915428.914:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7680 comm="syz.4.642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00981bc819 code=0x7ffc0000 [ 234.170226][ T37] audit: type=1326 audit(1775915428.914:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7680 comm="syz.4.642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00981bc819 code=0x7ffc0000 [ 234.170263][ T37] audit: type=1326 audit(1775915428.924:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7680 comm="syz.4.642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f00981bc819 code=0x7ffc0000 [ 234.170400][ T37] audit: type=1326 audit(1775915428.924:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7680 comm="syz.4.642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00981bc819 code=0x7ffc0000 [ 234.170439][ T37] audit: type=1326 audit(1775915428.934:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7680 comm="syz.4.642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00981bc819 code=0x7ffc0000 [ 234.170474][ T37] audit: type=1326 audit(1775915428.934:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7680 comm="syz.4.642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f00981bc819 code=0x7ffc0000 [ 234.170513][ T37] audit: type=1326 audit(1775915428.934:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7680 comm="syz.4.642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00981bc819 code=0x7ffc0000 [ 234.170548][ T37] audit: type=1326 audit(1775915428.934:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7680 comm="syz.4.642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00981bc819 code=0x7ffc0000 [ 234.170584][ T37] audit: type=1326 audit(1775915428.944:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7680 comm="syz.4.642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f00981bc819 code=0x7ffc0000 [ 234.170619][ T37] audit: type=1326 audit(1775915428.944:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7680 comm="syz.4.642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00981bc819 code=0x7ffc0000 [ 235.169241][ T9] cdc_ncm 2-1:1.0: bind() failure [ 235.330178][ T9] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 235.330221][ T9] cdc_ncm 2-1:1.1: bind() failure [ 235.431198][ T9] usb 2-1: USB disconnect, device number 6 [ 237.818343][ T7730] netlink: 'syz.3.655': attribute type 3 has an invalid length. [ 238.604917][ T5802] Bluetooth: hci4: command 0x0405 tx timeout [ 239.421886][ T7743] blktrace: Concurrent blktraces are not allowed on loop0 [ 240.180537][ T5893] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 240.346189][ T5893] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 240.346221][ T5893] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.346238][ T5893] usb 3-1: Product: syz [ 240.346250][ T5893] usb 3-1: Manufacturer: syz [ 240.346262][ T5893] usb 3-1: SerialNumber: syz [ 240.852828][ T9] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 241.278029][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 241.286060][ T9] usb 2-1: config 0 has no interfaces? [ 241.286092][ T9] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 241.286112][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.292786][ T9] usb 2-1: config 0 descriptor?? [ 241.564409][ T31] usb 2-1: USB disconnect, device number 7 [ 242.287382][ T5893] cdc_ncm 3-1:1.0: failed to get mac address [ 242.514362][ T5893] cdc_ncm 3-1:1.0: bind() failure [ 242.731100][ T5893] cdc_ncm 3-1:1.1: probe with driver cdc_ncm failed with error -71 [ 242.732008][ T5893] cdc_mbim 3-1:1.1: probe with driver cdc_mbim failed with error -71 [ 242.733623][ T5893] usbtest 3-1:1.1: probe with driver usbtest failed with error -71 [ 242.767336][ T5893] usb 3-1: USB disconnect, device number 16 [ 242.964189][ T7781] netlink: 'syz.1.670': attribute type 3 has an invalid length. [ 244.192798][ T7797] blktrace: Concurrent blktraces are not allowed on loop6 [ 245.740994][ T5893] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 245.930965][ T5893] usb 3-1: Using ep0 maxpacket: 16 [ 245.964192][ T5800] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 246.086544][ T5893] usb 3-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 246.086653][ T5893] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.086762][ T5893] usb 3-1: Product: syz [ 246.086861][ T5893] usb 3-1: Manufacturer: syz [ 246.086989][ T5893] usb 3-1: SerialNumber: syz [ 246.310956][ T5800] usb 1-1: Using ep0 maxpacket: 8 [ 246.418543][ T5800] usb 1-1: config 0 has no interfaces? [ 246.418578][ T5800] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 246.418597][ T5800] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.441482][ T5800] usb 1-1: config 0 descriptor?? [ 246.456456][ T5893] usb 3-1: config 0 descriptor?? [ 246.482372][ T5893] visor 3-1:0.0: Sony Clie 3.5 converter detected [ 247.034875][ T5990] usb 1-1: USB disconnect, device number 9 [ 247.156990][ T5893] usb 3-1: clie_3_5_startup: get interface number bad return length: 0 [ 247.157142][ T5893] visor 3-1:0.0: probe with driver visor failed with error -5 [ 247.716680][ T5893] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 247.766009][ T7841] blktrace: Concurrent blktraces are not allowed on loop8 [ 248.570405][ T5893] usb 2-1: Using ep0 maxpacket: 16 [ 248.573012][ T5893] usb 2-1: config 0 has an invalid interface number: 68 but max is 0 [ 248.573034][ T5893] usb 2-1: config 0 has no interface number 0 [ 248.573082][ T5893] usb 2-1: config 0 interface 68 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 87 [ 248.575298][ T5893] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=dc.c4 [ 248.575321][ T5893] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.575337][ T5893] usb 2-1: Product: syz [ 248.575349][ T5893] usb 2-1: Manufacturer: syz [ 248.575361][ T5893] usb 2-1: SerialNumber: syz [ 248.662707][ T5893] usb 2-1: config 0 descriptor?? [ 248.663506][ T7831] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 249.087374][ T31] usb 3-1: USB disconnect, device number 17 [ 249.244171][ T5893] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 249.260180][ T6216] usb 2-1: Failed to submit usb control message: -71 [ 249.260211][ T6216] usb 2-1: unable to send the bmi data to the device: -71 [ 249.260226][ T6216] usb 2-1: unable to get target info from device [ 249.260238][ T6216] usb 2-1: could not get target info (-71) [ 249.261612][ T6216] usb 2-1: could not probe fw (-71) [ 249.650058][ T5893] usb 2-1: USB disconnect, device number 8 [ 251.236993][ T6256] Bluetooth: hci5: Frame reassembly failed (-84) [ 251.631095][ T5893] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 251.985604][ T37] kauditd_printk_skb: 22 callbacks suppressed [ 251.985642][ T37] audit: type=1326 audit(1775915447.064:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7878 comm="syz.2.702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dba7fc819 code=0x7ffc0000 [ 251.985986][ T37] audit: type=1326 audit(1775915447.064:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7878 comm="syz.2.702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dba7fc819 code=0x7ffc0000 [ 251.986202][ T37] audit: type=1326 audit(1775915447.064:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7878 comm="syz.2.702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f1dba7fc819 code=0x7ffc0000 [ 251.986390][ T37] audit: type=1326 audit(1775915447.064:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7878 comm="syz.2.702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dba7fc819 code=0x7ffc0000 [ 251.986566][ T37] audit: type=1326 audit(1775915447.064:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7878 comm="syz.2.702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dba7fc819 code=0x7ffc0000 [ 251.986762][ T37] audit: type=1326 audit(1775915447.064:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7878 comm="syz.2.702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f1dba7fc819 code=0x7ffc0000 [ 251.987021][ T37] audit: type=1326 audit(1775915447.064:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7878 comm="syz.2.702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dba7fc819 code=0x7ffc0000 [ 251.987209][ T37] audit: type=1326 audit(1775915447.064:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7878 comm="syz.2.702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dba7fc819 code=0x7ffc0000 [ 251.987399][ T37] audit: type=1326 audit(1775915447.064:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7878 comm="syz.2.702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1dba7fc819 code=0x7ffc0000 [ 251.987587][ T37] audit: type=1326 audit(1775915447.064:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7878 comm="syz.2.702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dba7fc819 code=0x7ffc0000 [ 252.537402][ T7882] netlink: 8 bytes leftover after parsing attributes in process `syz.4.703'. [ 252.537425][ T7882] netlink: 8 bytes leftover after parsing attributes in process `syz.4.703'. [ 252.662940][ T5893] usb 4-1: Using ep0 maxpacket: 16 [ 252.738196][ T7892] blktrace: Concurrent blktraces are not allowed on loop2 [ 253.253783][ T5808] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 253.289953][ T5893] usb 4-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 253.289980][ T5893] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.289997][ T5893] usb 4-1: Product: syz [ 253.290010][ T5893] usb 4-1: Manufacturer: syz [ 253.290022][ T5893] usb 4-1: SerialNumber: syz [ 253.349892][ T5893] usb 4-1: config 0 descriptor?? [ 253.588684][ T5893] visor 4-1:0.0: Sony Clie 3.5 converter detected [ 254.293355][ T5893] usb 4-1: clie_3_5_startup: get config number failed: -71 [ 254.293511][ T5893] visor 4-1:0.0: probe with driver visor failed with error -71 [ 254.384351][ T5893] usb 4-1: USB disconnect, device number 13 [ 255.753993][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.754053][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.831059][ T5893] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 255.963528][ T7918] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 256.490839][ T5893] usb 5-1: Using ep0 maxpacket: 16 [ 256.498799][ T5893] usb 5-1: config 0 has an invalid interface number: 68 but max is 0 [ 256.498824][ T5893] usb 5-1: config 0 has no interface number 0 [ 256.498857][ T5893] usb 5-1: config 0 interface 68 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 87 [ 257.388191][ T5893] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=dc.c4 [ 257.388219][ T5893] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.388236][ T5893] usb 5-1: Product: syz [ 257.388248][ T5893] usb 5-1: Manufacturer: syz [ 257.388260][ T5893] usb 5-1: SerialNumber: syz [ 257.426990][ T5893] usb 5-1: config 0 descriptor?? [ 257.427711][ T7910] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 257.469839][ T5893] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 257.525136][ T7932] netlink: 8 bytes leftover after parsing attributes in process `syz.2.717'. [ 257.525209][ T7932] netlink: 8 bytes leftover after parsing attributes in process `syz.2.717'. [ 257.972322][ T7934] blktrace: Concurrent blktraces are not allowed on loop6 [ 259.096669][ T6216] usb 5-1: Failed to submit usb control message: -110 [ 259.096702][ T6216] usb 5-1: unable to send the bmi data to the device: -110 [ 259.096718][ T6216] usb 5-1: unable to get target info from device [ 259.096731][ T6216] usb 5-1: could not get target info (-110) [ 259.096831][ T6216] usb 5-1: could not probe fw (-110) [ 259.447706][ T5893] usb 5-1: USB disconnect, device number 23 [ 259.909860][ T1143] Bluetooth: hci5: Frame reassembly failed (-84) [ 259.924543][ T4892] Bluetooth: hci5: Frame reassembly failed (-84) [ 260.090478][ T9] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 260.559148][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 260.652299][ T9] usb 3-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 260.652327][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.652343][ T9] usb 3-1: Product: syz [ 260.652355][ T9] usb 3-1: Manufacturer: syz [ 260.652367][ T9] usb 3-1: SerialNumber: syz [ 260.676963][ T9] usb 3-1: config 0 descriptor?? [ 260.696795][ T9] visor 3-1:0.0: Sony Clie 3.5 converter detected [ 261.712641][ T7965] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 261.712810][ T7965] IPv6: NLM_F_CREATE should be set when creating new route [ 261.961092][ T5808] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 262.174006][ T9] usb 3-1: clie_3_5_startup: get config number failed: -71 [ 262.174155][ T9] visor 3-1:0.0: probe with driver visor failed with error -71 [ 262.197492][ T9] usb 3-1: USB disconnect, device number 18 [ 262.930439][ T5809] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 263.090697][ T5809] usb 1-1: Using ep0 maxpacket: 16 [ 263.459952][ T5809] usb 1-1: config 0 has an invalid interface number: 68 but max is 0 [ 263.459977][ T5809] usb 1-1: config 0 has no interface number 0 [ 263.460020][ T5809] usb 1-1: config 0 interface 68 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 87 [ 263.505748][ T5809] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=dc.c4 [ 263.505776][ T5809] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.505792][ T5809] usb 1-1: Product: syz [ 263.505804][ T5809] usb 1-1: Manufacturer: syz [ 263.505815][ T5809] usb 1-1: SerialNumber: syz [ 263.515645][ T7980] netlink: 8 bytes leftover after parsing attributes in process `syz.1.735'. [ 263.515664][ T7980] netlink: 8 bytes leftover after parsing attributes in process `syz.1.735'. [ 263.572822][ T5809] usb 1-1: config 0 descriptor?? [ 263.573674][ T7976] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 263.605844][ T5809] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 263.822582][ T809] usb 1-1: USB disconnect, device number 10 [ 263.826918][ T1017] usb 1-1: Failed to submit usb control message: -71 [ 263.826950][ T1017] usb 1-1: unable to send the bmi data to the device: -71 [ 263.826965][ T1017] usb 1-1: unable to get target info from device [ 263.826978][ T1017] usb 1-1: could not get target info (-71) [ 263.827154][ T1017] usb 1-1: could not probe fw (-71) [ 265.877291][ T8002] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 265.877302][ T8002] IPv6: NLM_F_CREATE should be set when creating new route [ 267.111206][ T37] kauditd_printk_skb: 22 callbacks suppressed [ 267.111224][ T37] audit: type=1326 audit(1775916229.777:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8012 comm="syz.4.733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00981bc819 code=0x7ffc0000 [ 267.111265][ T37] audit: type=1326 audit(1775916229.777:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8012 comm="syz.4.733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00981bc819 code=0x7ffc0000 [ 267.111300][ T37] audit: type=1326 audit(1775916229.777:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8012 comm="syz.4.733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f00981bc819 code=0x7ffc0000 [ 267.111333][ T37] audit: type=1326 audit(1775916229.787:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8012 comm="syz.4.733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00981bc819 code=0x7ffc0000 [ 267.111367][ T37] audit: type=1326 audit(1775916229.787:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8012 comm="syz.4.733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00981bc819 code=0x7ffc0000 [ 267.111400][ T37] audit: type=1326 audit(1775916229.797:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8012 comm="syz.4.733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f00981bc819 code=0x7ffc0000 [ 267.111431][ T37] audit: type=1326 audit(1775916229.797:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8012 comm="syz.4.733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00981bc819 code=0x7ffc0000 [ 267.111465][ T37] audit: type=1326 audit(1775916229.797:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8012 comm="syz.4.733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00981bc819 code=0x7ffc0000 [ 267.111499][ T37] audit: type=1326 audit(1775916229.797:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8012 comm="syz.4.733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f00981bc819 code=0x7ffc0000 [ 267.111535][ T37] audit: type=1326 audit(1775916229.797:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8012 comm="syz.4.733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00981bc819 code=0x7ffc0000 [ 267.303548][ T8018] netlink: 8 bytes leftover after parsing attributes in process `syz.1.747'. [ 267.303569][ T8018] netlink: 8 bytes leftover after parsing attributes in process `syz.1.747'. [ 269.524534][ T8041] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 270.721075][ T6216] Bluetooth: hci5: Frame reassembly failed (-84) [ 270.940410][ T809] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 271.163651][ T809] usb 4-1: Using ep0 maxpacket: 16 [ 271.365333][ T809] usb 4-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 271.365361][ T809] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.365378][ T809] usb 4-1: Product: syz [ 271.365391][ T809] usb 4-1: Manufacturer: syz [ 271.365403][ T809] usb 4-1: SerialNumber: syz [ 271.388614][ T809] usb 4-1: config 0 descriptor?? [ 271.428619][ T809] visor 4-1:0.0: Sony Clie 3.5 converter detected [ 271.664932][ T8062] netlink: 8 bytes leftover after parsing attributes in process `syz.4.762'. [ 271.664951][ T8062] netlink: 8 bytes leftover after parsing attributes in process `syz.4.762'. [ 272.682370][ T5808] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 272.944377][ T809] usb 4-1: clie_3_5_startup: get config number failed: -71 [ 272.944470][ T809] visor 4-1:0.0: probe with driver visor failed with error -71 [ 272.967011][ T809] usb 4-1: USB disconnect, device number 14 [ 274.112506][ T8082] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 274.138063][ T8086] netlink: 12 bytes leftover after parsing attributes in process `syz.3.770'. [ 274.195153][ T8086] bond1: entered promiscuous mode [ 274.195178][ T8086] bond1: entered allmulticast mode [ 274.868254][ T8093] netlink: 8 bytes leftover after parsing attributes in process `syz.0.774'. [ 274.868270][ T8093] netlink: 8 bytes leftover after parsing attributes in process `syz.0.774'. [ 277.979546][ T5808] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 277.979854][ T5808] Bluetooth: hci0: command 0x0406 tx timeout [ 278.072155][ T8129] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 278.567800][ T8134] netlink: 8 bytes leftover after parsing attributes in process `syz.0.788'. [ 278.567821][ T8134] netlink: 8 bytes leftover after parsing attributes in process `syz.0.788'. [ 278.776276][ T8141] netlink: 36 bytes leftover after parsing attributes in process `syz.1.791'. [ 281.167241][ T37] kauditd_printk_skb: 25 callbacks suppressed [ 281.167258][ T37] audit: type=1326 audit(1775916500.590:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8154 comm="syz.0.798" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbc67ccc819 code=0x0 [ 282.220983][ T8167] netlink: 8 bytes leftover after parsing attributes in process `syz.2.803'. [ 282.221004][ T8167] netlink: 8 bytes leftover after parsing attributes in process `syz.2.803'. [ 283.677197][ T8184] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 284.913458][ T1235] Bluetooth: hci5: Frame reassembly failed (-84) [ 285.210948][ T5990] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 285.366326][ T5990] usb 1-1: Using ep0 maxpacket: 16 [ 285.448173][ T5990] usb 1-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 285.448201][ T5990] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.448218][ T5990] usb 1-1: Product: syz [ 285.448230][ T5990] usb 1-1: Manufacturer: syz [ 285.448241][ T5990] usb 1-1: SerialNumber: syz [ 285.723405][ T37] audit: type=1326 audit(1775916760.983:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8199 comm="syz.1.814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c5548c819 code=0x7ffc0000 [ 285.723606][ T37] audit: type=1326 audit(1775916760.993:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8199 comm="syz.1.814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c5548c819 code=0x7ffc0000 [ 285.723806][ T37] audit: type=1326 audit(1775916760.993:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8199 comm="syz.1.814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f4c5548c819 code=0x7ffc0000 [ 285.723998][ T37] audit: type=1326 audit(1775916760.993:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8199 comm="syz.1.814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c5548c819 code=0x7ffc0000 [ 285.724312][ T37] audit: type=1326 audit(1775916761.003:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8199 comm="syz.1.814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c5548c819 code=0x7ffc0000 [ 285.724480][ T37] audit: type=1326 audit(1775916761.003:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8199 comm="syz.1.814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f4c5548c819 code=0x7ffc0000 [ 285.724627][ T37] audit: type=1326 audit(1775916761.003:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8199 comm="syz.1.814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c5548c819 code=0x7ffc0000 [ 285.724843][ T37] audit: type=1326 audit(1775916761.013:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8199 comm="syz.1.814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c5548c819 code=0x7ffc0000 [ 285.725012][ T37] audit: type=1326 audit(1775916761.013:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8199 comm="syz.1.814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f4c5548c819 code=0x7ffc0000 [ 286.180997][ T5990] usb 1-1: config 0 descriptor?? [ 286.418559][ T5990] visor 1-1:0.0: Sony Clie 3.5 converter detected [ 286.920463][ T5808] Bluetooth: hci5: command 0x1003 tx timeout [ 286.921134][ T5802] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 289.039690][ T8220] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 289.089137][ T5990] usb 1-1: clie_3_5_startup: get config number failed: -71 [ 289.089301][ T5990] visor 1-1:0.0: probe with driver visor failed with error -71 [ 289.133100][ T5990] usb 1-1: USB disconnect, device number 11 [ 290.357363][ T8227] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 291.140903][ T9] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 291.207774][ T1017] Bluetooth: hci5: Frame reassembly failed (-84) [ 291.298762][ T9] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 291.298789][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.298807][ T9] usb 1-1: Product: syz [ 291.298819][ T9] usb 1-1: Manufacturer: syz [ 291.298831][ T9] usb 1-1: SerialNumber: syz [ 291.460440][ T808] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 291.657348][ T808] usb 5-1: Using ep0 maxpacket: 16 [ 291.961437][ T808] usb 5-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 291.961464][ T808] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.961481][ T808] usb 5-1: Product: syz [ 291.961493][ T808] usb 5-1: Manufacturer: syz [ 291.961505][ T808] usb 5-1: SerialNumber: syz [ 292.010191][ T808] usb 5-1: config 0 descriptor?? [ 292.051836][ T808] visor 5-1:0.0: Sony Clie 3.5 converter detected [ 293.129082][ T9] cdc_ncm 1-1:1.0: failed to get mac address [ 293.491619][ T5808] Bluetooth: hci5: command 0x1003 tx timeout [ 293.520247][ T8266] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 293.589155][ T9] cdc_ncm 1-1:1.0: bind() failure [ 293.596562][ T5802] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 293.599688][ T9] cdc_ncm 1-1:1.1: probe with driver cdc_ncm failed with error -71 [ 293.601334][ T9] cdc_mbim 1-1:1.1: probe with driver cdc_mbim failed with error -71 [ 293.636714][ T9] usbtest 1-1:1.1: probe with driver usbtest failed with error -71 [ 293.665374][ T9] usb 1-1: USB disconnect, device number 12 [ 294.952034][ T808] usb 5-1: clie_3_5_startup: get config number failed: -71 [ 294.952192][ T808] visor 5-1:0.0: probe with driver visor failed with error -71 [ 294.966861][ T808] usb 5-1: USB disconnect, device number 24 [ 296.378942][ T31] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 296.550813][ T31] usb 1-1: Using ep0 maxpacket: 16 [ 296.729894][ T8299] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 296.882713][ T31] usb 1-1: config 0 has an invalid interface number: 68 but max is 0 [ 296.882738][ T31] usb 1-1: config 0 has no interface number 0 [ 296.882781][ T31] usb 1-1: config 0 interface 68 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 87 [ 296.918638][ T31] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=dc.c4 [ 296.918665][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.918682][ T31] usb 1-1: Product: syz [ 296.918694][ T31] usb 1-1: Manufacturer: syz [ 296.918706][ T31] usb 1-1: SerialNumber: syz [ 296.989504][ T31] usb 1-1: config 0 descriptor?? [ 296.990215][ T8292] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 297.066473][ T31] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 297.229758][ T13] usb 1-1: Failed to submit usb control message: -71 [ 297.229791][ T13] usb 1-1: unable to send the bmi data to the device: -71 [ 297.229807][ T13] usb 1-1: unable to get target info from device [ 297.229820][ T13] usb 1-1: could not get target info (-71) [ 297.229954][ T13] usb 1-1: could not probe fw (-71) [ 297.233514][ T808] usb 1-1: USB disconnect, device number 13 [ 297.370412][ T31] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 297.869315][ T31] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 297.869397][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.869468][ T31] usb 5-1: Product: syz [ 297.869535][ T31] usb 5-1: Manufacturer: syz [ 297.869603][ T31] usb 5-1: SerialNumber: syz [ 298.593315][ T40] Bluetooth: hci5: Frame reassembly failed (-84) [ 298.791103][ T31] cdc_ncm 5-1:1.0: failed to get mac address [ 298.860930][ T9] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 299.013210][ T31] cdc_ncm 5-1:1.0: bind() failure [ 299.025804][ T31] cdc_ncm 5-1:1.1: probe with driver cdc_ncm failed with error -71 [ 299.031125][ T31] cdc_mbim 5-1:1.1: probe with driver cdc_mbim failed with error -71 [ 299.032695][ T31] usbtest 5-1:1.1: probe with driver usbtest failed with error -71 [ 299.080677][ T31] usb 5-1: USB disconnect, device number 25 [ 299.160428][ T5893] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 299.227961][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 299.235894][ T9] usb 4-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 299.235920][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.235938][ T9] usb 4-1: Product: syz [ 299.235950][ T9] usb 4-1: Manufacturer: syz [ 299.235963][ T9] usb 4-1: SerialNumber: syz [ 299.250919][ T9] usb 4-1: config 0 descriptor?? [ 299.261706][ T9] visor 4-1:0.0: Sony Clie 3.5 converter detected [ 299.650555][ T5893] usb 1-1: Using ep0 maxpacket: 16 [ 299.653549][ T5893] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 299.653597][ T5893] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 299.653633][ T5893] usb 1-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 299.653653][ T5893] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.661064][ T5893] usb 1-1: config 0 descriptor?? [ 299.670535][ T5893] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 300.601052][ T5808] Bluetooth: hci5: command 0x1003 tx timeout [ 300.603527][ T5802] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 300.663008][ T9] usb 4-1: clie_3_5_startup: get config number failed: -71 [ 300.663140][ T9] visor 4-1:0.0: probe with driver visor failed with error -71 [ 300.665228][ T8346] netlink: 8 bytes leftover after parsing attributes in process `syz.4.867'. [ 300.665245][ T8346] netlink: 8 bytes leftover after parsing attributes in process `syz.4.867'. [ 300.715841][ T9] usb 4-1: USB disconnect, device number 15 [ 302.654220][ T809] usb 1-1: USB disconnect, device number 14 [ 303.253254][ T37] kauditd_printk_skb: 26 callbacks suppressed [ 303.253325][ T37] audit: type=1326 audit(1775917802.660:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8383 comm="syz.3.882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd43d40c819 code=0x7ffc0000 [ 303.253676][ T37] audit: type=1326 audit(1775917802.660:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8383 comm="syz.3.882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd43d40c819 code=0x7ffc0000 [ 303.253915][ T37] audit: type=1326 audit(1775917802.660:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8383 comm="syz.3.882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fd43d40c819 code=0x7ffc0000 [ 303.254292][ T37] audit: type=1326 audit(1775917802.660:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8383 comm="syz.3.882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd43d40c819 code=0x7ffc0000 [ 303.254578][ T37] audit: type=1326 audit(1775917802.660:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8383 comm="syz.3.882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd43d40c819 code=0x7ffc0000 [ 303.254866][ T37] audit: type=1326 audit(1775917802.660:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8383 comm="syz.3.882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fd43d40c819 code=0x7ffc0000 [ 303.255208][ T37] audit: type=1326 audit(1775917802.660:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8383 comm="syz.3.882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd43d40c819 code=0x7ffc0000 [ 303.255504][ T37] audit: type=1326 audit(1775917802.660:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8383 comm="syz.3.882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd43d40c819 code=0x7ffc0000 [ 303.255790][ T37] audit: type=1326 audit(1775917802.660:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8383 comm="syz.3.882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fd43d40c819 code=0x7ffc0000 [ 303.256027][ T37] audit: type=1326 audit(1775917802.660:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8383 comm="syz.3.882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd43d40c819 code=0x7ffc0000 [ 304.229349][ T8393] netlink: 12 bytes leftover after parsing attributes in process `syz.4.886'. [ 304.338149][ T8403] bond1: entered promiscuous mode [ 304.338174][ T8403] bond1: entered allmulticast mode [ 304.950787][ T5980] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 305.266400][ T5980] usb 3-1: Using ep0 maxpacket: 16 [ 305.335812][ T5980] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 305.335875][ T5980] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 305.335893][ T5980] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 305.335931][ T5980] usb 3-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 305.335950][ T5980] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.395625][ T5980] usb 3-1: config 0 descriptor?? [ 305.433654][ T5980] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 307.951572][ T5893] usb 3-1: USB disconnect, device number 19 [ 308.300403][ T5800] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 308.743645][ T5800] usb 1-1: config 1 interface 1 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 308.745779][ T5800] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 308.745794][ T5800] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.745803][ T5800] usb 1-1: Product: syz [ 308.745810][ T5800] usb 1-1: Manufacturer: syz [ 308.745817][ T5800] usb 1-1: SerialNumber: syz [ 310.583301][ T5800] cdc_ncm 1-1:1.0: bind() failure [ 310.648463][ T5800] cdc_ncm 1-1:1.1: probe with driver cdc_ncm failed with error -71 [ 310.649094][ T5800] cdc_mbim 1-1:1.1: probe with driver cdc_mbim failed with error -71 [ 310.651122][ T5800] usbtest 1-1:1.1: probe with driver usbtest failed with error -71 [ 310.656148][ T5800] usb 1-1: USB disconnect, device number 15 [ 311.610838][ T5893] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 311.761794][ T5893] usb 5-1: Using ep0 maxpacket: 16 [ 311.966660][ T5808] Bluetooth: hci4: command 0x0405 tx timeout [ 312.028322][ T5893] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 312.029132][ T5893] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 312.029225][ T5893] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 312.029464][ T5893] usb 5-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 312.029543][ T5893] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.152576][ T37] kauditd_printk_skb: 60 callbacks suppressed [ 312.152788][ T37] audit: type=1326 audit(1775917811.490:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8485 comm="syz.3.919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd43d40c819 code=0x7ffc0000 [ 312.153490][ T37] audit: type=1326 audit(1775917811.490:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8485 comm="syz.3.919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd43d40c819 code=0x7ffc0000 [ 312.153623][ T37] audit: type=1326 audit(1775917811.490:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8485 comm="syz.3.919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fd43d40c819 code=0x7ffc0000 [ 312.154547][ T37] audit: type=1326 audit(1775917811.490:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8485 comm="syz.3.919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd43d40c819 code=0x7ffc0000 [ 312.155945][ T37] audit: type=1326 audit(1775917811.490:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8485 comm="syz.3.919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd43d40c819 code=0x7ffc0000 [ 312.156727][ T37] audit: type=1326 audit(1775917811.490:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8485 comm="syz.3.919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fd43d40c819 code=0x7ffc0000 [ 312.157545][ T37] audit: type=1326 audit(1775917811.490:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8485 comm="syz.3.919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd43d40c819 code=0x7ffc0000 [ 312.158485][ T37] audit: type=1326 audit(1775917811.490:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8485 comm="syz.3.919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd43d40c819 code=0x7ffc0000 [ 312.159623][ T37] audit: type=1326 audit(1775917811.490:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8485 comm="syz.3.919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fd43d40c819 code=0x7ffc0000 [ 312.160918][ T37] audit: type=1326 audit(1775917811.490:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8485 comm="syz.3.919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd43d40c819 code=0x7ffc0000 [ 312.501552][ T5893] usb 5-1: config 0 descriptor?? [ 312.656244][ T5893] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 312.888456][ T8498] netlink: 8 bytes leftover after parsing attributes in process `syz.1.922'. [ 312.888477][ T8498] netlink: 8 bytes leftover after parsing attributes in process `syz.1.922'. [ 314.375104][ T8525] netlink: 44 bytes leftover after parsing attributes in process `syz.3.932'. [ 314.618377][ T8537] netlink: 8 bytes leftover after parsing attributes in process `syz.3.936'. [ 314.618398][ T8537] netlink: 8 bytes leftover after parsing attributes in process `syz.3.936'. [ 314.778673][ T808] usb 5-1: USB disconnect, device number 26 [ 315.562725][ T8553] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.943'. [ 315.663185][ T5802] Bluetooth: hci4: unexpected event for opcode 0x1003 [ 315.710947][ T5800] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 316.854883][ T5800] usb 2-1: Using ep0 maxpacket: 8 [ 317.251139][ T5800] usb 2-1: config 0 has no interfaces? [ 317.251172][ T5800] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 317.251188][ T5800] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.255157][ T8561] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 317.276753][ T5800] usb 2-1: config 0 descriptor?? [ 317.345022][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.345063][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.538793][ T9] usb 2-1: USB disconnect, device number 9 [ 317.584264][ T8568] netlink: 8 bytes leftover after parsing attributes in process `syz.3.949'. [ 317.584286][ T8568] netlink: 8 bytes leftover after parsing attributes in process `syz.3.949'. [ 320.220952][ T5802] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 320.222579][ T5802] Bluetooth: hci4: Injecting HCI hardware error event [ 320.225087][ T5802] Bluetooth: hci4: hardware error 0x00 [ 320.228425][ T37] kauditd_printk_skb: 60 callbacks suppressed [ 320.228439][ T37] audit: type=1326 audit(1775917818.900:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8590 comm="syz.3.957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd43d40c819 code=0x7ffc0000 [ 320.228478][ T37] audit: type=1326 audit(1775917818.900:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8590 comm="syz.3.957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd43d40c819 code=0x7ffc0000 [ 320.228511][ T37] audit: type=1326 audit(1775917818.900:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8590 comm="syz.3.957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fd43d40c819 code=0x7ffc0000 [ 320.228548][ T37] audit: type=1326 audit(1775917818.910:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8590 comm="syz.3.957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd43d40c819 code=0x7ffc0000 [ 320.228582][ T37] audit: type=1326 audit(1775917818.910:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8590 comm="syz.3.957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd43d40c819 code=0x7ffc0000 [ 320.228620][ T37] audit: type=1326 audit(1775917818.910:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8590 comm="syz.3.957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fd43d40c819 code=0x7ffc0000 [ 320.228653][ T37] audit: type=1326 audit(1775917818.910:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8590 comm="syz.3.957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd43d40c819 code=0x7ffc0000 [ 320.228686][ T37] audit: type=1326 audit(1775917818.910:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8590 comm="syz.3.957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd43d40c819 code=0x7ffc0000 [ 320.228719][ T37] audit: type=1326 audit(1775917818.910:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8590 comm="syz.3.957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fd43d40c819 code=0x7ffc0000 [ 320.228751][ T37] audit: type=1326 audit(1775917818.910:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8590 comm="syz.3.957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd43d40c819 code=0x7ffc0000 [ 320.705505][ T8598] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 321.711064][ T8609] netlink: 8 bytes leftover after parsing attributes in process `syz.0.962'. [ 321.711087][ T8609] netlink: 8 bytes leftover after parsing attributes in process `syz.0.962'. [ 322.980398][ T5800] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 323.001110][ T5802] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 323.141199][ T5800] usb 1-1: Using ep0 maxpacket: 8 [ 323.145609][ T5800] usb 1-1: config 0 has no interfaces? [ 323.145644][ T5800] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 323.145664][ T5800] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.187473][ T5800] usb 1-1: config 0 descriptor?? [ 324.545078][ T5802] Bluetooth: hci0: command 0x0406 tx timeout [ 324.546617][ T5808] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 324.660432][ T808] usb 1-1: USB disconnect, device number 16 [ 325.946694][ T9] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 326.147272][ T8638] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 326.460712][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 326.463329][ T9] usb 4-1: config 0 has an invalid interface number: 68 but max is 0 [ 326.463344][ T9] usb 4-1: config 0 has no interface number 0 [ 326.463369][ T9] usb 4-1: config 0 interface 68 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 87 [ 326.469571][ T9] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=dc.c4 [ 326.469586][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.469596][ T9] usb 4-1: Product: syz [ 326.469603][ T9] usb 4-1: Manufacturer: syz [ 326.469610][ T9] usb 4-1: SerialNumber: syz [ 326.538213][ T9] usb 4-1: config 0 descriptor?? [ 326.538964][ T8632] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 326.592241][ T9] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 326.828610][ T5800] usb 4-1: USB disconnect, device number 16 [ 326.837604][ T67] usb 4-1: Failed to submit usb control message: -71 [ 326.837634][ T67] usb 4-1: unable to send the bmi data to the device: -71 [ 326.837660][ T67] usb 4-1: unable to get target info from device [ 326.837673][ T67] usb 4-1: could not get target info (-71) [ 326.837767][ T67] usb 4-1: could not probe fw (-71) [ 327.361301][ T5990] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 327.530826][ T5990] usb 1-1: Using ep0 maxpacket: 32 [ 327.548788][ T5990] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 327.548817][ T5990] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 327.548856][ T5990] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 327.548876][ T5990] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.602750][ T5990] usb 1-1: config 0 descriptor?? [ 327.631764][ T5990] hub 1-1:0.0: USB hub found [ 327.823375][ T5990] hub 1-1:0.0: 1 port detected [ 328.112812][ T5990] hub 1-1:0.0: hub_hub_status failed (err = -71) [ 328.112837][ T5990] hub 1-1:0.0: config failed, can't get hub status (err -71) [ 328.127411][ T5990] usbhid 1-1:0.0: can't add hid device: -71 [ 328.127518][ T5990] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 328.151422][ T5990] usb 1-1: USB disconnect, device number 17 [ 329.302092][ T808] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 329.942537][ T808] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 329.942564][ T808] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 329.979974][ T808] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 329.980001][ T808] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.980018][ T808] usb 3-1: Product: syz [ 329.980030][ T808] usb 3-1: Manufacturer: syz [ 329.980043][ T808] usb 3-1: SerialNumber: syz [ 331.534404][ T808] cdc_ncm 3-1:1.0: bind() failure [ 331.554107][ T808] cdc_ncm 3-1:1.1: probe with driver cdc_ncm failed with error -71 [ 331.554988][ T808] cdc_mbim 3-1:1.1: probe with driver cdc_mbim failed with error -71 [ 331.556555][ T808] usbtest 3-1:1.1: probe with driver usbtest failed with error -71 [ 331.592782][ T808] usb 3-1: USB disconnect, device number 20 [ 333.690875][ T8750] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1014'. [ 333.690889][ T8750] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1014'. [ 336.003181][ T8786] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1028'. [ 336.003204][ T8786] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1028'. [ 337.606919][ T8823] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1043'. [ 337.606941][ T8823] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1043'. [ 339.071612][ T8837] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 339.071627][ T8837] IPv6: NLM_F_CREATE should be set when creating new route [ 339.664366][ T37] kauditd_printk_skb: 25 callbacks suppressed [ 339.664382][ T37] audit: type=1326 audit(1775919375.083:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8845 comm="syz.2.1053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dba7fc819 code=0x7ffc0000 [ 339.666090][ T37] audit: type=1326 audit(1775919375.083:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8845 comm="syz.2.1053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dba7fc819 code=0x7ffc0000 [ 339.667135][ T37] audit: type=1326 audit(1775919375.083:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8845 comm="syz.2.1053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f1dba7fc819 code=0x7ffc0000 [ 339.667173][ T37] audit: type=1326 audit(1775919375.083:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8845 comm="syz.2.1053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dba7fc819 code=0x7ffc0000 [ 339.668566][ T37] audit: type=1326 audit(1775919375.083:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8845 comm="syz.2.1053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dba7fc819 code=0x7ffc0000 [ 339.668606][ T37] audit: type=1326 audit(1775919375.083:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8845 comm="syz.2.1053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f1dba7fc819 code=0x7ffc0000 [ 339.668641][ T37] audit: type=1326 audit(1775919375.083:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8845 comm="syz.2.1053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dba7fc819 code=0x7ffc0000 [ 339.668674][ T37] audit: type=1326 audit(1775919375.083:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8845 comm="syz.2.1053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dba7fc819 code=0x7ffc0000 [ 339.668708][ T37] audit: type=1326 audit(1775919375.083:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8845 comm="syz.2.1053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f1dba7fc819 code=0x7ffc0000 [ 339.668743][ T37] audit: type=1326 audit(1775919375.083:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8845 comm="syz.2.1053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dba7fc819 code=0x7ffc0000 [ 339.802081][ T5808] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 339.813460][ T5808] Bluetooth: hci0: command 0x0406 tx timeout [ 340.300401][ T31] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 340.481088][ T31] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 340.481116][ T31] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 340.485776][ T31] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 340.485801][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.485818][ T31] usb 3-1: Product: syz [ 340.485831][ T31] usb 3-1: Manufacturer: syz [ 340.485844][ T31] usb 3-1: SerialNumber: syz [ 342.112615][ T31] cdc_ncm 3-1:1.0: bind() failure [ 342.144742][ T31] cdc_ncm 3-1:1.1: probe with driver cdc_ncm failed with error -71 [ 342.145591][ T31] cdc_mbim 3-1:1.1: probe with driver cdc_mbim failed with error -71 [ 342.148861][ T31] usbtest 3-1:1.1: probe with driver usbtest failed with error -71 [ 342.211178][ T31] usb 3-1: USB disconnect, device number 21 [ 344.200736][ T5810] Bluetooth: hci0: command 0x0406 tx timeout [ 344.200804][ T5808] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 347.818377][ T5800] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 348.282741][ T5800] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 348.282768][ T5800] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 348.293301][ T5800] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 348.293327][ T5800] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.293344][ T5800] usb 1-1: Product: syz [ 348.293356][ T5800] usb 1-1: Manufacturer: syz [ 348.293368][ T5800] usb 1-1: SerialNumber: syz [ 349.375302][ T5800] cdc_ncm 1-1:1.0: bind() failure [ 349.400423][ T5800] cdc_ncm 1-1:1.1: probe with driver cdc_ncm failed with error -71 [ 349.401314][ T5800] cdc_mbim 1-1:1.1: probe with driver cdc_mbim failed with error -71 [ 349.411314][ T5800] usbtest 1-1:1.1: probe with driver usbtest failed with error -71 [ 349.480863][ T5800] usb 1-1: USB disconnect, device number 18 [ 350.280547][ T5802] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 350.284202][ T5802] Bluetooth: hci0: command 0x0406 tx timeout [ 351.428100][ T8954] syz_tun: entered allmulticast mode [ 355.339572][ T8986] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 355.341767][ T8986] IPv6: NLM_F_CREATE should be set when creating new route [ 356.575769][ T8995] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1104'. [ 357.191536][ T9000] bond1: entered promiscuous mode [ 357.191562][ T9000] bond1: entered allmulticast mode [ 358.545661][ T5893] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 358.887800][ T5893] usb 2-1: Using ep0 maxpacket: 16 [ 359.257359][ T5893] usb 2-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 359.257387][ T5893] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 359.257405][ T5893] usb 2-1: Product: syz [ 359.257417][ T5893] usb 2-1: Manufacturer: syz [ 359.257429][ T5893] usb 2-1: SerialNumber: syz [ 359.300398][ T5893] usb 2-1: config 0 descriptor?? [ 359.317454][ T5893] visor 2-1:0.0: Sony Clie 3.5 converter detected [ 359.875732][ T5893] usb 2-1: clie_3_5_startup: get interface number bad return length: 0 [ 359.875827][ T5893] visor 2-1:0.0: probe with driver visor failed with error -5 [ 360.108824][ T5893] usb 2-1: USB disconnect, device number 10 [ 360.713180][ T9043] fuse: Bad value for 'fd' [ 466.680229][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 466.680247][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P5796/5:b..l P40/2:b..l P9036/1:b..l P9051/1:b..l [ 466.680283][ C1] rcu: (detected by 1, t=10502 jiffies, g=24681, q=47 ncpus=2) [ 466.680296][ C1] task:syz.2.1124 state:R running task stack:24680 pid:9051 tgid:9049 ppid:5804 task_flags:0x400040 flags:0x00080000 [ 466.680334][ C1] Call Trace: [ 466.680339][ C1] [ 466.680348][ C1] __schedule+0x1553/0x5240 [ 466.680378][ C1] ? __pfx___schedule+0x10/0x10 [ 466.680395][ C1] preempt_schedule_irq+0x4d/0xa0 [ 466.680406][ C1] irqentry_exit+0x599/0x620 [ 466.680417][ C1] ? rcu_is_watching+0x15/0xb0 [ 466.680431][ C1] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 466.680441][ C1] RIP: 0010:xas_create+0xf91/0x1ba0 [ 466.680454][ C1] Code: f6 e9 ae 0a 00 00 e8 6e 6e a2 f6 48 8b 5c 24 10 48 8b 84 24 88 00 00 00 42 80 3c 38 00 74 08 48 89 df e8 82 92 08 f7 4c 8b 33 <48> 8b 5c 24 18 89 ef 41 89 ed 8b 6c 24 54 89 ee e8 2a 70 a2 f6 41 [ 466.680462][ C1] RSP: 0018:ffffc9000624f340 EFLAGS: 00000246 [ 466.680470][ C1] RAX: 1ffff110080fac92 RBX: ffff8880407d6490 RCX: 0000000000080000 [ 466.680477][ C1] RDX: ffffc90006ea3000 RSI: 0000000000005e52 RDI: 0000000000005e53 [ 466.680483][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 466.680489][ C1] R10: dffffc0000000000 R11: fffffbfff1ed4ef7 R12: ffffc9000624f560 [ 466.680495][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: dffffc0000000000 [ 466.680519][ C1] xas_store+0x9a/0x1880 [ 466.680531][ C1] ? xas_find_conflict+0xcd7/0xd90 [ 466.680546][ C1] shmem_add_to_page_cache+0x877/0xbf0 [ 466.680570][ C1] ? __pfx_shmem_add_to_page_cache+0x10/0x10 [ 466.680585][ C1] ? percpu_ref_put+0xf9/0x180 [ 466.680597][ C1] ? __mem_cgroup_charge+0x149/0x1e0 [ 466.680612][ C1] shmem_get_folio_gfp+0x7e9/0x1a80 [ 466.680637][ C1] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 466.680655][ C1] shmem_fault+0x170/0x380 [ 466.680668][ C1] __do_fault+0x138/0x390 [ 466.680678][ C1] ? do_pte_missing+0x134f/0x29e0 [ 466.680688][ C1] ? __pfx_filemap_map_pages+0x10/0x10 [ 466.680697][ C1] do_pte_missing+0x1825/0x29e0 [ 466.680712][ C1] ? handle_mm_fault+0xe7/0x13c0 [ 466.680726][ C1] handle_mm_fault+0xd0a/0x13c0 [ 466.680743][ C1] ? handle_mm_fault+0xe7/0x13c0 [ 466.680757][ C1] ? __pfx_handle_mm_fault+0x10/0x10 [ 466.680770][ C1] ? follow_page_pte+0xc47/0x1380 [ 466.680788][ C1] ? __pfx_follow_page_pte+0x10/0x10 [ 466.680809][ C1] __get_user_pages+0x1679/0x2800 [ 466.680839][ C1] populate_vma_page_range+0x2be/0x3c0 [ 466.680853][ C1] ? __pfx_populate_vma_page_range+0x10/0x10 [ 466.680865][ C1] ? userfaultfd_unmap_complete+0x29e/0x320 [ 466.680879][ C1] ? rt_mutex_slowunlock+0x61e/0x8b0 [ 466.680892][ C1] __mm_populate+0x25f/0x390 [ 466.680911][ C1] ? __pfx___mm_populate+0x10/0x10 [ 466.680923][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 466.680934][ C1] ? lockdep_hardirqs_on+0x7a/0x110 [ 466.680944][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 466.680955][ C1] vm_mmap_pgoff+0x3ad/0x4f0 [ 466.680968][ C1] ? __pfx___schedule+0x10/0x10 [ 466.680979][ C1] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 466.680992][ C1] ? preempt_schedule_notrace_thunk+0x16/0x30 [ 466.681007][ C1] ? __x64_sys_mmap+0x7f/0x140 [ 466.681022][ C1] do_syscall_64+0x14d/0xf80 [ 466.681033][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 466.681042][ C1] ? clear_bhb_loop+0x40/0x90 [ 466.681053][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 466.681062][ C1] RIP: 0033:0x7f1dba7fc819 [ 466.681071][ C1] RSP: 002b:00007f1db8a4e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 466.681080][ C1] RAX: ffffffffffffffda RBX: 00007f1dbaa75fa0 RCX: 00007f1dba7fc819 [ 466.681087][ C1] RDX: b635773f06ebbeee RSI: 0000000000b36000 RDI: 0000200000000000 [ 466.681093][ C1] RBP: 00007f1dba892c91 R08: ffffffffffffffff R09: 0000000000000000 [ 466.681099][ C1] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 466.681104][ C1] R13: 00007f1dbaa76038 R14: 00007f1dbaa75fa0 R15: 00007fff922b4388 [ 466.681119][ C1] [ 466.681123][ C1] task:syz.0.1120 state:R running task stack:25896 pid:9036 tgid:9035 ppid:5812 task_flags:0x40054c flags:0x00080000 [ 466.681150][ C1] Call Trace: [ 466.681153][ C1] [ 466.681158][ C1] __schedule+0x1553/0x5240 [ 466.681180][ C1] ? __pfx___schedule+0x10/0x10 [ 466.681197][ C1] preempt_schedule_irq+0x4d/0xa0 [ 466.681207][ C1] irqentry_exit+0x599/0x620 [ 466.681216][ C1] ? rcu_is_watching+0x15/0xb0 [ 466.681229][ C1] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 466.681238][ C1] RIP: 0010:deref_stack_reg+0x33/0x230 [ 466.681247][ C1] Code: 53 48 83 ec 20 48 89 54 24 18 49 89 f0 49 89 ff 48 be 00 00 00 00 00 fc ff df 48 8d 5f 08 49 89 dc 49 c1 ec 03 41 80 3c 34 00 <4c> 89 04 24 74 16 48 89 df e8 1f 05 b4 00 4c 8b 04 24 48 be 00 00 [ 466.681255][ C1] RSP: 0018:ffffc90003ff70a0 EFLAGS: 00000246 [ 466.681262][ C1] RAX: fffffffffffffff0 RBX: ffffc90003ff7230 RCX: 0000000000000000 [ 466.681268][ C1] RDX: ffffc90003ff7268 RSI: dffffc0000000000 RDI: ffffc90003ff7228 [ 466.681274][ C1] RBP: dffffc0000000000 R08: ffffc90003ff7218 R09: 0000000000000000 [ 466.681281][ C1] R10: ffffc90003ff7278 R11: fffff520007fee51 R12: 1ffff920007fee46 [ 466.681287][ C1] R13: 1ffff920007fee47 R14: ffffc90003ff7228 R15: ffffc90003ff7228 [ 466.681305][ C1] unwind_next_frame+0x18c6/0x23c0 [ 466.681317][ C1] ? unwind_next_frame+0xa5/0x23c0 [ 466.681326][ C1] ? __unwind_start+0xf7/0x760 [ 466.681338][ C1] __unwind_start+0x5b8/0x760 [ 466.681349][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 466.681362][ C1] arch_stack_walk+0xe3/0x150 [ 466.681374][ C1] ? arch_stack_walk+0xe3/0x150 [ 466.681384][ C1] stack_trace_save+0xa9/0x100 [ 466.681396][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 466.681408][ C1] ? __kasan_kmalloc+0x93/0xb0 SYZFAIL: failed to send rpc fd=3 want=264 sent=0 n=-1 (errno 32: Broken pipe) [ 466.681421][ C1] ? __kmalloc_cache_noprof+0x3a6/0x690 [ 466.681429][ C1] ? kmem_cache_free+0x159/0x6b0 [ 466.681437][ C1] ? __put_anon_vma+0x12a/0x310 [ 466.681445][ C1] ? unlink_anon_vmas+0x58b/0x730 [ 466.681453][ C1] ? free_pgtables+0x836/0xb70 [ 466.681463][ C1] ? exit_mmap+0x490/0xa10 [ 466.681470][ C1] ? __mmput+0xcb/0x3d0 [ 466.681482][ C1] kasan_save_stack+0x3e/0x60 [ 466.681518][ C1] kasan_record_aux_stack+0xbd/0xd0 [ 466.681529][ C1] kmem_cache_free+0x4fb/0x6b0 [ 466.681538][ C1] ? __put_anon_vma+0x12a/0x310 [ 466.681552][ C1] __put_anon_vma+0x12a/0x310 [ 466.681563][ C1] unlink_anon_vmas+0x58b/0x730 [ 466.681576][ C1] free_pgtables+0x836/0xb70 [ 466.681592][ C1] ? __pfx_free_pgtables+0x10/0x10 [ 466.681605][ C1] ? rwbase_write_lock+0x568/0x730 [ 466.681621][ C1] exit_mmap+0x490/0xa10 [ 466.681631][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 466.681639][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 466.681656][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 466.681671][ C1] ? __pfx_exit_aio+0x10/0x10 [ 466.681688][ C1] ? uprobe_clear_state+0x288/0x2a0 [ 466.681699][ C1] __mmput+0xcb/0x3d0 [ 466.681712][ C1] exit_mm+0x168/0x220 [ 466.681724][ C1] do_exit+0x6a2/0x23c0 [ 466.681735][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 466.681747][ C1] ? __pfx_do_exit+0x10/0x10 [ 466.681755][ C1] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 466.681768][ C1] ? reacquire_held_locks+0x104/0x190 [ 466.681778][ C1] ? rt_spin_lock+0x1e0/0x400 [ 466.681796][ C1] do_group_exit+0x21b/0x2d0 [ 466.681805][ C1] ? rt_spin_unlock+0x160/0x200 [ 466.681819][ C1] get_signal+0x125c/0x1310 [ 466.681841][ C1] arch_do_signal_or_restart+0xbc/0x830 [ 466.681855][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 466.681875][ C1] exit_to_user_mode_loop+0x86/0x480 [ 466.681888][ C1] ? rcu_is_watching+0x15/0xb0 [ 466.681900][ C1] do_syscall_64+0x32d/0xf80 [ 466.681909][ C1] ? trace_irq_disable+0x3b/0x150 [ 466.681919][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 466.681928][ C1] ? clear_bhb_loop+0x40/0x90 [ 466.681939][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 466.681948][ C1] RIP: 0033:0x7fbc67ccc819 [ 466.681955][ C1] RSP: 002b:00007fbc65f26028 EFLAGS: 00000246 ORIG_RAX: 000000000000013e [ 466.681964][ C1] RAX: 0000000000487000 RBX: 00007fbc67f45fa0 RCX: 00007fbc67ccc819 [ 466.681970][ C1] RDX: 0000000000000000 RSI: 00000000ffffff9a RDI: 0000200000000240 [ 466.681976][ C1] RBP: 00007fbc67d62c91 R08: 0000000000000000 R09: 0000000000000000 [ 466.681981][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 466.681986][ C1] R13: 00007fbc67f46038 R14: 00007fbc67f45fa0 R15: 00007ffe600ec2b8 [ 466.682000][ C1] [ 466.682004][ C1] task:kworker/u8:2 state:R running task stack:21328 pid:40 tgid:40 ppid:2 task_flags:0x4208160 flags:0x00080000 [ 466.682030][ C1] Workqueue: tipc_send tipc_conn_send_work [ 466.682041][ C1] Call Trace: [ 466.682043][ C1] [ 466.682048][ C1] __schedule+0x1553/0x5240 [ 466.682062][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 466.682079][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 466.682092][ C1] ? __pfx___schedule+0x10/0x10 [ 466.682102][ C1] ? rcu_is_watching+0x15/0xb0 [ 466.682113][ C1] ? trace_contention_end+0x3b/0x170 [ 466.682128][ C1] preempt_schedule_irq+0x4d/0xa0 [ 466.682138][ C1] irqentry_exit+0x599/0x620 [ 466.682147][ C1] ? rcu_is_watching+0x15/0xb0 [ 466.682159][ C1] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 466.682168][ C1] RIP: 0010:lock_is_held_type+0x106/0x150 [ 466.682178][ C1] Code: 18 00 00 b8 ff ff ff ff 65 0f c1 05 f4 d0 2a 07 83 f8 01 75 25 9c 58 a9 00 02 00 00 75 39 41 f7 c4 00 02 00 00 74 01 fb 89 d8 <5b> 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 90 0f 0b 90 48 c7 [ 466.682186][ C1] RSP: 0018:ffffc90000b173b0 EFLAGS: 00000206 [ 466.682193][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000046 [ 466.682198][ C1] RDX: 0000000000000200 RSI: ffffffff8d7c20cd RDI: ffffffff8ba67a80 [ 466.682204][ C1] RBP: 00000000ffffffff R08: ffffffff819d83b4 R09: ffff8880290e9fa0 [ 466.682210][ C1] R10: dffffc0000000000 R11: fffffbfff1ed4ef7 R12: 0000000000000246 [ 466.682216][ C1] R13: ffff88801f6d5b80 R14: ffffffff8ddcba40 R15: 0000000000000008 [ 466.682226][ C1] ? prepare_to_wait_exclusive+0x44/0x220 [ 466.682244][ C1] __might_resched+0x37/0x480 [ 466.682259][ C1] rt_spin_lock+0xc2/0x400 [ 466.682272][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 466.682282][ C1] ? __pfx_rt_spin_lock+0x10/0x10 [ 466.682293][ C1] ? rcu_is_watching+0x15/0xb0 [ 466.682303][ C1] ? rt_spin_lock+0x20e/0x400 [ 466.682317][ C1] ? __pfx_rt_spin_lock+0x10/0x10 [ 466.682330][ C1] prepare_to_wait_exclusive+0x44/0x220 [ 466.682346][ C1] __lock_sock+0x154/0x2e0 [ 466.682359][ C1] ? __pfx___lock_sock+0x10/0x10 [ 466.682369][ C1] ? rt_spin_lock+0x20e/0x400 [ 466.682380][ C1] ? __pfx_autoremove_wake_function+0x10/0x10 [ 466.682393][ C1] ? __pfx_rt_spin_lock+0x10/0x10 [ 466.682405][ C1] ? __local_bh_disable_ip+0x3c/0x420 [ 466.682418][ C1] ? lock_sock_nested+0x5f/0x130 [ 466.682430][ C1] ? lock_sock_nested+0x5f/0x130 [ 466.682442][ C1] lock_sock_nested+0xb3/0x130 [ 466.682456][ C1] tipc_send_packet+0x6e/0xa0 [ 466.682464][ C1] ? __pfx_tipc_send_packet+0x10/0x10 [ 466.682473][ C1] sock_sendmsg+0x3fb/0x450 [ 466.682486][ C1] ? lockdep_hardirqs_on+0x7a/0x110 [ 466.682499][ C1] ? __pfx_sock_sendmsg+0x10/0x10 [ 466.682516][ C1] ? iov_iter_kvec+0xb8/0x180 [ 466.682533][ C1] tipc_conn_send_work+0x330/0xaa0 [ 466.682544][ C1] ? tipc_conn_send_work+0x1bd/0xaa0 [ 466.682562][ C1] ? __pfx_tipc_conn_send_work+0x10/0x10 [ 466.682574][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 466.682588][ C1] ? do_raw_spin_unlock+0xf5/0x210 [ 466.682609][ C1] ? process_scheduled_works+0xa8d/0x18c0 [ 466.682621][ C1] ? process_scheduled_works+0xa8d/0x18c0 [ 466.682634][ C1] process_scheduled_works+0xb6e/0x18c0 [ 466.682660][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 466.682675][ C1] ? assign_work+0x3d5/0x5e0 [ 466.682689][ C1] worker_thread+0xa53/0xfc0 [ 466.682714][ C1] kthread+0x388/0x470 [ 466.682724][ C1] ? __pfx_worker_thread+0x10/0x10 [ 466.682736][ C1] ? __pfx_kthread+0x10/0x10 [ 466.682745][ C1] ret_from_fork+0x51e/0xb90 [ 466.682759][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 466.682770][ C1] ? __switch_to+0xc7d/0x1450 [ 466.682783][ C1] ? __pfx_kthread+0x10/0x10 [ 466.682793][ C1] ret_from_fork_asm+0x1a/0x30 [ 466.682809][ C1] [ 466.682813][ C1] task:syz-executor state:R running task stack:22400 pid:5796 tgid:5796 ppid:5794 task_flags:0x400140 flags:0x00080000 [ 466.682838][ C1] Call Trace: [ 466.682841][ C1] [ 466.682846][ C1] __schedule+0x1553/0x5240 [ 466.682868][ C1] ? __pfx___schedule+0x10/0x10 [ 466.682879][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 466.682893][ C1] preempt_schedule_irq+0x4d/0xa0 [ 466.682903][ C1] irqentry_exit+0x599/0x620 [ 466.682912][ C1] ? trace_irq_disable+0x3b/0x150 [ 466.682926][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 466.682935][ C1] RIP: 0010:lock_acquire+0x20b/0x2e0 [ 466.682944][ C1] Code: e9 30 ff ff ff e8 35 1e 84 09 f7 c3 00 02 00 00 0f 84 38 ff ff ff 65 48 8b 05 a1 ab ae 10 48 3b 44 24 30 75 33 fb 48 83 c4 38 <5b> 41 5c 41 5d 41 5e 41 5f 5d e9 06 de 87 09 cc 48 8d 3d be 64 cd [ 466.682951][ C1] RSP: 0018:ffffc900046e72c8 EFLAGS: 00000282 [ 466.682958][ C1] RAX: 2705f52a4500e200 RBX: 0000000000000246 RCX: 0000000000000046 [ 466.682964][ C1] RDX: 000000007e674c74 RSI: ffffffff8d7c20cd RDI: ffffffff8ba67a80 [ 466.682970][ C1] RBP: 0000000000000000 R08: ffffffff82320f08 R09: ffffffff8ddcb980 [ 466.682976][ C1] R10: dffffc0000000000 R11: fffff9400028df09 R12: 0000000000000002 [ 466.682982][ C1] R13: ffffffff8ddcb980 R14: 0000000000000000 R15: 0000000000000000 [ 466.682991][ C1] ? page_table_check_set+0x148/0x610 [ 466.683007][ C1] ? page_table_check_set+0x148/0x610 [ 466.683016][ C1] page_table_check_set+0x165/0x610 [ 466.683024][ C1] ? page_table_check_set+0x148/0x610 [ 466.683036][ C1] copy_pmd_range+0x3ad6/0x7c00 [ 466.683061][ C1] ? __pfx_copy_pmd_range+0x10/0x10 [ 466.683073][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 466.683089][ C1] copy_page_range+0xaf4/0x1120 [ 466.683108][ C1] ? __pfx_copy_page_range+0x10/0x10 [ 466.683122][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 466.683132][ C1] ? lockdep_hardirqs_on+0x7a/0x110 [ 466.683142][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 466.683153][ C1] dup_mmap+0xf4c/0x1d50 [ 466.683173][ C1] ? __pfx_dup_mmap+0x10/0x10 [ 466.683182][ C1] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 466.683199][ C1] ? rt_spin_unlock+0x160/0x200 [ 466.683221][ C1] copy_mm+0x13b/0x4a0 [ 466.683235][ C1] copy_process+0x18be/0x3cd0 [ 466.683252][ C1] ? copy_process+0x921/0x3cd0 [ 466.683270][ C1] ? __pfx_copy_process+0x10/0x10 [ 466.683288][ C1] kernel_clone+0x249/0x840 [ 466.683302][ C1] ? __pfx_kernel_clone+0x10/0x10 [ 466.683323][ C1] __x64_sys_clone+0x1b6/0x230 [ 466.683333][ C1] ? __pfx___x64_sys_clone+0x10/0x10 [ 466.683350][ C1] ? do_user_addr_fault+0xc6f/0x1340 [ 466.683368][ C1] do_syscall_64+0x14d/0xf80 [ 466.683377][ C1] ? trace_irq_disable+0x3b/0x150 [ 466.683387][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 466.683396][ C1] ? clear_bhb_loop+0x40/0x90 [ 466.683407][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 466.683416][ C1] RIP: 0033:0x7f00981e5292 [ 466.683423][ C1] RSP: 002b:00007fff23958580 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 466.683432][ C1] RAX: ffffffffffffffda RBX: 00007fff23958580 RCX: 00007f00981e5292 [ 466.683438][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 466.683443][ C1] RBP: 00007fff2395870c R08: 0000000000000000 R09: 0000000000000001 [ 466.683449][ C1] R10: 000055558095b7d0 R11: 0000000000000246 R12: 0000000000000001 [ 466.683454][ C1] R13: 00000000000927c0 R14: 000000000005820a R15: 00007fff23958760 [ 466.683468][ C1] [ 466.683472][ C1] rcu: rcu_preempt kthread starved for 10502 jiffies! g24681 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 466.683483][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 466.683488][ C1] rcu: RCU grace-period kthread stack dump: [ 466.683491][ C1] task:rcu_preempt state:R running task stack:27680 pid:18 tgid:18 ppid:2 task_flags:0x208040 flags:0x00080000 [ 466.683518][ C1] Call Trace: [ 466.683521][ C1] [ 466.683526][ C1] __schedule+0x1553/0x5240 [ 466.683538][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 466.683559][ C1] ? __pfx___schedule+0x10/0x10 [ 466.683573][ C1] ? schedule+0x90/0x360 [ 466.683583][ C1] schedule+0x164/0x360 [ 466.683593][ C1] schedule_timeout+0x158/0x2c0 [ 466.683604][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 466.683614][ C1] ? __pfx_process_timeout+0x10/0x10 [ 466.683628][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 466.683638][ C1] ? prepare_to_swait_event+0x340/0x370 [ 466.683654][ C1] rcu_gp_fqs_loop+0x312/0x11d0 [ 466.683664][ C1] ? lockdep_hardirqs_on+0x7a/0x110 [ 466.683674][ C1] ? rcu_gp_init+0x1313/0x15b0 [ 466.683685][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 466.683693][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 466.683705][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 466.683717][ C1] rcu_gp_kthread+0x9e/0x2b0 [ 466.683727][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 466.683734][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 466.683745][ C1] ? __kthread_parkme+0x7a/0x1f0 [ 466.683757][ C1] ? __kthread_parkme+0x19c/0x1f0 [ 466.683772][ C1] kthread+0x388/0x470 [ 466.683782][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 466.683789][ C1] ? __pfx_kthread+0x10/0x10 [ 466.683799][ C1] ret_from_fork+0x51e/0xb90 [ 466.683812][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 466.683823][ C1] ? __switch_to+0xc7d/0x1450 [ 466.683836][ C1] ? __pfx_kthread+0x10/0x10 [ 466.683845][ C1] ret_from_fork_asm+0x1a/0x30 [ 466.683861][ C1] [ 466.683864][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 466.683874][ C1] Sending NMI from CPU 1 to CPUs 0: [ 466.683908][ C0] NMI backtrace for cpu 0 [ 466.683931][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 466.683973][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 466.683982][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 466.684000][ C0] Code: 3e 5c 02 e9 13 c4 03 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d f3 1c 25 00 fb f4 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 466.684012][ C0] RSP: 0018:ffffffff8da07dc0 EFLAGS: 00000246 [ 466.684024][ C0] RAX: 0000000001183239 RBX: ffffffff81996bfa RCX: 0000000080000001 [ 466.684034][ C0] RDX: 0000000000000001 RSI: ffffffff8d56604f RDI: ffffffff8ba67a80 [ 466.684045][ C0] RBP: ffffffff8da07eb0 R08: ffff8880b8833e1b R09: 1ffff110171067c3 [ 466.684056][ C0] R10: dffffc0000000000 R11: ffffed10171067c4 R12: 0000000000000000 [ 466.684066][ C0] R13: 1ffffffff1b605d8 R14: 0000000000000000 R15: 1ffffffff1b605d8 [ 466.684076][ C0] FS: 0000000000000000(0000) GS:ffff888126332000(0000) knlGS:0000000000000000 [ 466.684088][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 466.684099][ C0] CR2: 00007f0098f656b8 CR3: 00000000330f4000 CR4: 00000000003526f0 [ 466.684112][ C0] Call Trace: [ 466.684118][ C0] [ 466.684123][ C0] default_idle+0x9/0x20 [ 466.684139][ C0] default_idle_call+0x72/0xb0 [ 466.684157][ C0] do_idle+0x36a/0x5f0 [ 466.684173][ C0] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 466.684191][ C0] ? __pfx_do_idle+0x10/0x10 [ 466.684211][ C0] cpu_startup_entry+0x43/0x60 [ 466.684228][ C0] rest_init+0x2de/0x300 [ 466.684247][ C0] start_kernel+0x385/0x3d0 [ 466.684265][ C0] x86_64_start_reservations+0x24/0x30 [ 466.684285][ C0] x86_64_start_kernel+0x143/0x1c0 [ 466.684304][ C0] common_startup_64+0x13e/0x147 [ 466.684326][ C0] [ 593.684735][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 593.684803][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 596.791239][ T5804] syz_tun (unregistering): left allmulticast mode [ 597.662395][ T1017] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 597.842293][ T1017] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 598.042868][ T1017] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 598.232352][ T1017] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 598.501323][ T1017] bridge_slave_1: left allmulticast mode [ 598.501473][ T1017] bridge_slave_1: left promiscuous mode [ 598.504167][ T1017] bridge0: port 2(bridge_slave_1) entered disabled state [ 598.616611][ T1017] bridge_slave_0: left allmulticast mode [ 598.616638][ T1017] bridge_slave_0: left promiscuous mode [ 598.616884][ T1017] bridge0: port 1(bridge_slave_0) entered disabled state [ 599.431185][ T1017] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 599.490696][ T1017] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 599.533922][ T1017] bond0 (unregistering): Released all slaves [ 599.538970][ T1017] bond1 (unregistering): Released all slaves [ 600.850297][ T1017] hsr_slave_0: left promiscuous mode [ 600.890312][ T1017] hsr_slave_1: left promiscuous mode [ 600.893186][ T1017] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 600.893366][ T1017] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 600.951901][ T1017] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 600.951928][ T1017] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 601.042026][ T1017] veth1_macvtap: left promiscuous mode [ 601.042185][ T1017] veth0_macvtap: left promiscuous mode [ 601.042338][ T1017] veth1_vlan: left promiscuous mode [ 601.042511][ T1017] veth0_vlan: left promiscuous mode [ 601.730713][ T1017] team0 (unregistering): Port device team_slave_1 removed [ 601.771090][ T1017] team0 (unregistering): Port device team_slave_0 removed