last executing test programs: 7.780512006s ago: executing program 4 (id=56): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000700)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000380)={0x24, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000680)={0x44, &(0x7f0000000140)={0x20, 0x12}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 7.123401907s ago: executing program 1 (id=65): r0 = syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) r1 = syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x0) syz_usb_disconnect(r0) close(r1) 5.040052077s ago: executing program 1 (id=78): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000a8f4dd086d04b1082a6d000000040902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000007c0)={0x34, &(0x7f0000000540)={0x0, 0x13}, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.742377234s ago: executing program 4 (id=81): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0x4) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000140)={0x0, 0x5}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x4}, 0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xca}, 0x8) sendmmsg$inet6(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000100)={0x0, 0xf2ea, 0x3, [0x1, 0x7, 0x4]}, 0xe) 4.692755s ago: executing program 3 (id=82): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2, 0x0, &(0x7f0000001000)) sendto$inet6(r0, &(0x7f00000001c0), 0xfffffffffffffede, 0x0, 0x0, 0x3000137) 4.200657479s ago: executing program 4 (id=84): r0 = memfd_create(&(0x7f0000000100)='\xf3u\t\x9f\x918\xc0ud\xb0l \xfd\xd7\x03\x00\x898\xf8\xb5\x90Xp\xe3$\x1c\x9b\a\x92H\x00\x00\x00\x00\x81\f\x1et\x10\x0e\xcfV9\xbe*\xd2d\xc8}\xd6\xdb\x88\xfb\xc7B\x8c\xa8\xb3~\x14\x11\xe3', 0x0) pwrite64(r0, &(0x7f0000000280)='/', 0x1, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') chmod(&(0x7f00000001c0)='./file0\x00', 0x0) 4.162083547s ago: executing program 3 (id=86): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000005c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000800)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000880)={@flat=@handle={0x73682a85, 0x0, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000900)=""/206, 0x14}, @fda={0x66646185, 0x5, 0x1}}, &(0x7f0000000240)={0x0, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) 4.024761928s ago: executing program 4 (id=87): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000009c0)={{0x12, 0x1, 0x0, 0x3a, 0x98, 0x2a, 0x8, 0xccd, 0x10a3, 0x23a2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x57, 0x33, 0x19}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000a00)={0x2c, &(0x7f0000000840)={0x0, 0x0, 0x6, "4f982237ba41"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 4.024355773s ago: executing program 3 (id=88): r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f00000000c0)={r1, 0xd82, 0x429, 0x4, 0x8, 0x1ff}, 0x14) 3.910729441s ago: executing program 0 (id=90): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b90402", 0x11}], 0x1, 0x0, 0x0, 0x7400}, 0x0) write$cgroup_subtree(r1, &(0x7f0000000580)=ANY=[], 0xfe33) 3.868633026s ago: executing program 3 (id=91): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000840)={0x84, &(0x7f0000000340)={0x40, 0xf, 0x1, 'V'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000780)={0x2c, &(0x7f0000000580)={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000003c0)={0x1c, &(0x7f0000000440)=ANY=[], 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 2.984683033s ago: executing program 0 (id=94): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0x4) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000140)={0x0, 0x5}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x4}, 0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xca}, 0x8) sendmmsg$inet6(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000100)={0x0, 0xf2ea, 0x3, [0x1, 0x7, 0x4]}, 0xe) 2.728678926s ago: executing program 0 (id=95): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f000000d340)={0x0, 0x0, &(0x7f000000d300)={&(0x7f000000d280)={0x5c, r1, 0x1, 0x70bd29, 0x6, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x30, 0x33, @action={{{0x0, 0x0, 0xd, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1}, {0x6}, @device_b, @broadcast, @initial, {0x1, 0x7f}, @value=@ver_80211n={0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x1, 0x0, 0x1}}, @sp_mp_confirm={0xf, 0x2, {0x2, @default, {}, @val={0x72, 0x6}, @void}}}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0xeb9]}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x11ee}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8010}, 0x84d0) 2.656466631s ago: executing program 1 (id=96): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000300)=@gcm_128={{0x303}, "5a6984110300", "2607080d7f4fcf00114ef2dece6c7c58", "07e300", '\x00\x00\x00\x00\x00 \x00'}, 0x28) sendto$inet6(r0, &(0x7f00000001c0), 0xfffffffffffffede, 0x0, 0x0, 0x3000137) 2.345242241s ago: executing program 0 (id=98): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000001880)=@mangle={'mangle\x00', 0x44, 0x6, 0x3b0, 0x280, 0x98, 0x98, 0x280, 0x280, 0x318, 0x318, 0x318, 0x318, 0x318, 0x6, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffff00, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'netpci0\x00', 'netpci0\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28}}, {{@ip={@local, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'vcan0\x00', 'netpci0\x00', {}, {}, 0x11, 0x0, 0x4c}, 0x0, 0x70, 0x130}, @unspec=@CHECKSUM={0x28}}, {{@ip={@rand_addr, @multicast2, 0x0, 0xffffffff, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz1\x00'}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x2a}, @rand_addr=0x4, 0x0, 0x0, 'ip6erspan0\x00', 'team_slave_1\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x410) 2.121876744s ago: executing program 1 (id=100): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x8, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc943, 0x0, 0x0, 0x0, 0x5}, [@call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f0000000980)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x0, 0x0, @loopback}], 0x2c) write$dsp(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f0000000040)=0x1f40) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000001a80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x8, 0x7fe2, 0x1, 0x9, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x85) bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000040)={r3, 0x0, 0x0}, 0x20) r4 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r4, 0xc0405602, 0x0) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_complete={{0x3, 0xb}, {0x0, 0xc8, @any, 0x1, 0x9}}}, 0xe) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f00000000c0)) unshare(0x20400) socket(0x29, 0x5, 0x0) pselect6(0x40, &(0x7f00000003c0)={0x3a, 0x0, 0x0, 0x0, 0x1, 0x4}, 0x0, 0x0, 0x0, 0x0) 2.08151092s ago: executing program 0 (id=101): r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f00000000c0)={r1, 0xd82, 0x429, 0x4, 0x8, 0x1ff}, 0x14) 1.922962719s ago: executing program 0 (id=102): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xa, 0x86, 0xf3, 0x40, 0x1110, 0x9024, 0xdb24, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0xe9, 0x50, 0x9, [{{0x9, 0x4, 0x62, 0x4, 0x0, 0x6f, 0x6f, 0x49, 0x5}}]}}]}}, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[], 0x0) 1.867523214s ago: executing program 4 (id=103): syz_usb_connect(0x2, 0x3d, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x40000) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/diskstats\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000480)=[{&(0x7f00000005c0)=""/178, 0xb2}], 0x1, 0x2, 0x9) pread64(r0, &(0x7f0000000500)=""/169, 0xa9, 0x25) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$packet(0x11, 0x2, 0x300) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(0xffffffffffffffff, 0x3) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x8, &(0x7f0000000000)=0x3, 0x4) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "2a8435", 0x14, 0x6, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x4, 0x5, 0xc2}}}}}}}, 0x0) 913.811043ms ago: executing program 3 (id=105): r0 = syz_open_dev$dri(&(0x7f0000000400), 0x1023, 0x100) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000440)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000340)={0x0, 0x0, r1, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000240)={0x0, 0x0, r1, r2, 0x0, 0x2, 0xa, 0x200, {0x2, 0x7f, 0x180, 0x10, 0xfdfc, 0x2025, 0xfffc, 0xffff, 0x3, 0x3, 0xfffd, 0x9, 0x200004, 0x1, "12d56163d7287bd287881d942450c7153243937ca9a58f1c02000000476b1500"}}) 857.264504ms ago: executing program 2 (id=106): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x300, &(0x7f00000002c0)={&(0x7f0000000300)=@getqdisc={0x24, 0x26, 0x705, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x1, 0xfff1}, {0x10, 0x8}, {0x4, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 822.98247ms ago: executing program 3 (id=107): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100, 0x0, 0x0, 0x0, r1}, 0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x10, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f000000b000)={0x77359400}, &(0x7f0000048000)=0x200, 0x1) 764.201957ms ago: executing program 2 (id=108): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f000000d340)={0x0, 0x0, &(0x7f000000d300)={&(0x7f000000d280)={0x2c, r1, 0x1, 0x70bd29, 0x6, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0x8, 0xcd, [0x4, 0xeb9]}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x11ee}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8010}, 0x84d0) 706.063807ms ago: executing program 2 (id=109): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000c00)=ANY=[@ANYBLOB="38010000100013070000000000000000ffffffff0000000000000000000000000000000000000000000000000000000100"/62, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb0000000032000000ff01000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000a0002"], 0x138}, 0x1, 0xe}, 0x0) 608.64741ms ago: executing program 2 (id=110): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000300)=@gcm_128={{0x303}, "5a6984110300", "2607080d7f4fcf00114ef2dece6c7c58", "07e300", '\x00\x00\x00\x00\x00 \x00'}, 0x28) sendto$inet6(r0, &(0x7f00000001c0), 0xfffffffffffffede, 0x0, 0x0, 0x3000137) 450.844624ms ago: executing program 2 (id=111): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00'}) sendmsg$nl_route(r0, 0x0, 0x40000) syz_emit_ethernet(0x66, &(0x7f0000000cc0)={@multicast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x30, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x5, {0x0, 0x6, '\x00', 0x1, 0x89, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @local}}}}}}}, 0x0) 228.210689ms ago: executing program 4 (id=112): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1400}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0x1}]}}}]}, 0x3c}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000300)={0x4376ea830d55549b}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f00000ab000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000200)="36d0e866b8970000000f23c80f21f866350c00a0000f23f89d0f326635000400000f302e8dcc0f2374f8f83b5753baf80466b8f494f78e66efbafc0c66b83ac80000666fda6509", 0x47}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 214.154585ms ago: executing program 2 (id=113): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) bind$inet(0xffffffffffffffff, 0x0, 0x0) getpid() close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) recvmmsg(r2, &(0x7f0000002dc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 176.736545ms ago: executing program 1 (id=114): r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, 0x0, 0x0) r1 = socket$qrtr(0x2a, 0x2, 0x0) bind$qrtr(r1, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) 0s ago: executing program 1 (id=115): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r0 = socket(0x15, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x5, &(0x7f000001ae00)=""/102385, &(0x7f00000001c0)=0xffffffcc) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.170' (ED25519) to the list of known hosts. [ 54.802779][ T5816] cgroup: Unknown subsys name 'net' [ 54.932643][ T5816] cgroup: Unknown subsys name 'cpuset' [ 54.941033][ T5816] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 56.338101][ T5816] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 58.545687][ T5833] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 58.554083][ T5833] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 58.563110][ T5833] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 58.571585][ T5833] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 58.579769][ T5839] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 58.599728][ T5839] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 58.607498][ T5839] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 58.611279][ T5833] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 58.618227][ T5838] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 58.623416][ T5833] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 58.631266][ T5839] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 58.640376][ T5833] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 58.644087][ T5839] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 58.650406][ T5833] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 58.657504][ T5839] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 58.665061][ T5833] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 58.677812][ T5841] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 58.690436][ T5838] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 58.694374][ T5833] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 58.698974][ T5838] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 58.705473][ T5833] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 58.712837][ T5838] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 58.721356][ T5833] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 58.726917][ T5838] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 58.733112][ T5833] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 58.754338][ T5838] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 58.754503][ T5833] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 58.769982][ T5835] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 58.777336][ T5835] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 58.787737][ T5830] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 59.222936][ T5848] chnl_net:caif_netlink_parms(): no params data found [ 59.274561][ T5843] chnl_net:caif_netlink_parms(): no params data found [ 59.377284][ T5844] chnl_net:caif_netlink_parms(): no params data found [ 59.440207][ T5849] chnl_net:caif_netlink_parms(): no params data found [ 59.463681][ T5846] chnl_net:caif_netlink_parms(): no params data found [ 59.478543][ T5848] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.485882][ T5848] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.493533][ T5848] bridge_slave_0: entered allmulticast mode [ 59.501017][ T5848] bridge_slave_0: entered promiscuous mode [ 59.536914][ T5848] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.544255][ T5848] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.551803][ T5848] bridge_slave_1: entered allmulticast mode [ 59.558411][ T5848] bridge_slave_1: entered promiscuous mode [ 59.658233][ T5848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.687083][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.694351][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.702665][ T5843] bridge_slave_0: entered allmulticast mode [ 59.710199][ T5843] bridge_slave_0: entered promiscuous mode [ 59.718524][ T5848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.756419][ T5849] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.763739][ T5849] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.771263][ T5849] bridge_slave_0: entered allmulticast mode [ 59.777832][ T5849] bridge_slave_0: entered promiscuous mode [ 59.785960][ T5849] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.793108][ T5849] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.800503][ T5849] bridge_slave_1: entered allmulticast mode [ 59.807090][ T5849] bridge_slave_1: entered promiscuous mode [ 59.813766][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.821929][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.830156][ T5844] bridge_slave_0: entered allmulticast mode [ 59.836888][ T5844] bridge_slave_0: entered promiscuous mode [ 59.845209][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.852518][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.859886][ T5843] bridge_slave_1: entered allmulticast mode [ 59.866443][ T5843] bridge_slave_1: entered promiscuous mode [ 59.884453][ T5848] team0: Port device team_slave_0 added [ 59.907107][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.914315][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.921678][ T5844] bridge_slave_1: entered allmulticast mode [ 59.928286][ T5844] bridge_slave_1: entered promiscuous mode [ 59.953743][ T5848] team0: Port device team_slave_1 added [ 59.967555][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.974853][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.982187][ T5846] bridge_slave_0: entered allmulticast mode [ 59.988807][ T5846] bridge_slave_0: entered promiscuous mode [ 60.028112][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.035708][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.046280][ T5846] bridge_slave_1: entered allmulticast mode [ 60.053324][ T5846] bridge_slave_1: entered promiscuous mode [ 60.071022][ T5849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.085379][ T5849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.097205][ T5844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.109553][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.121826][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.132006][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.139058][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.165164][ T5848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.187548][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.215362][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.233521][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.242510][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.269546][ T5848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.287894][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.312246][ T5844] team0: Port device team_slave_0 added [ 60.327510][ T5843] team0: Port device team_slave_0 added [ 60.342159][ T5843] team0: Port device team_slave_1 added [ 60.363871][ T5849] team0: Port device team_slave_0 added [ 60.372354][ T5849] team0: Port device team_slave_1 added [ 60.384552][ T5844] team0: Port device team_slave_1 added [ 60.407069][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.414625][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.446358][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.470167][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.477137][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.503132][ T5849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.523878][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.531441][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.557585][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.572180][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.579807][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.606008][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.620710][ T5846] team0: Port device team_slave_0 added [ 60.627069][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.634386][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.660895][ T5849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.679175][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.686128][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.712646][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.728767][ T5846] team0: Port device team_slave_1 added [ 60.749791][ T5837] Bluetooth: hci4: command tx timeout [ 60.749921][ T5835] Bluetooth: hci0: command tx timeout [ 60.765848][ T5848] hsr_slave_0: entered promiscuous mode [ 60.772593][ T5848] hsr_slave_1: entered promiscuous mode [ 60.805274][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.812321][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.838533][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.838657][ T5835] Bluetooth: hci3: command tx timeout [ 60.849151][ T5837] Bluetooth: hci2: command tx timeout [ 60.849545][ T5837] Bluetooth: hci1: command tx timeout [ 60.894196][ T5843] hsr_slave_0: entered promiscuous mode [ 60.900885][ T5843] hsr_slave_1: entered promiscuous mode [ 60.908404][ T5843] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 60.916284][ T5843] Cannot create hsr debugfs directory [ 60.932316][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.939416][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.965882][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.994610][ T5844] hsr_slave_0: entered promiscuous mode [ 61.001357][ T5844] hsr_slave_1: entered promiscuous mode [ 61.007367][ T5844] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.015125][ T5844] Cannot create hsr debugfs directory [ 61.067891][ T5849] hsr_slave_0: entered promiscuous mode [ 61.077357][ T5849] hsr_slave_1: entered promiscuous mode [ 61.083824][ T5849] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.091971][ T5849] Cannot create hsr debugfs directory [ 61.104463][ T5846] hsr_slave_0: entered promiscuous mode [ 61.110747][ T5846] hsr_slave_1: entered promiscuous mode [ 61.116844][ T5846] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.124495][ T5846] Cannot create hsr debugfs directory [ 61.478598][ T5848] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 61.497146][ T5848] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 61.506682][ T5848] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 61.524438][ T5848] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 61.562281][ T5843] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 61.583070][ T5843] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 61.602967][ T5843] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 61.631943][ T5843] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 61.651200][ T5846] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 61.662920][ T5846] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 61.698513][ T5846] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 61.710571][ T5846] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 61.758190][ T5849] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 61.773177][ T5849] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 61.785121][ T5849] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 61.813126][ T5849] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 61.865917][ T5844] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 61.877132][ T5844] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 61.888657][ T5844] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 61.909759][ T5844] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 62.004543][ T5848] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.026985][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.068027][ T5848] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.088797][ T5843] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.106752][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.116435][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.123790][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.147911][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.155082][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.180938][ T5846] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.191656][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.198732][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.208154][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.215283][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.256383][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.263594][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.279576][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.287155][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.334291][ T5849] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.400824][ T5849] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.432667][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.439850][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.475509][ T1145] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.482686][ T1145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.501860][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.530219][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.560922][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.578360][ T5844] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.593132][ T5848] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.627267][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.634427][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.667193][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.674401][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.708538][ T5846] veth0_vlan: entered promiscuous mode [ 62.737228][ T5849] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 62.765331][ T5843] veth0_vlan: entered promiscuous mode [ 62.797593][ T5848] veth0_vlan: entered promiscuous mode [ 62.818195][ T5846] veth1_vlan: entered promiscuous mode [ 62.830803][ T5837] Bluetooth: hci4: command tx timeout [ 62.830863][ T5835] Bluetooth: hci0: command tx timeout [ 62.862491][ T5848] veth1_vlan: entered promiscuous mode [ 62.872954][ T5849] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.884922][ T5843] veth1_vlan: entered promiscuous mode [ 62.909828][ T5835] Bluetooth: hci3: command tx timeout [ 62.909836][ T5837] Bluetooth: hci2: command tx timeout [ 62.919724][ T5837] Bluetooth: hci1: command tx timeout [ 62.939909][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.963418][ T5846] veth0_macvtap: entered promiscuous mode [ 62.994512][ T5846] veth1_macvtap: entered promiscuous mode [ 63.015968][ T5848] veth0_macvtap: entered promiscuous mode [ 63.043543][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.054874][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.076606][ T5848] veth1_macvtap: entered promiscuous mode [ 63.084251][ T5843] veth0_macvtap: entered promiscuous mode [ 63.108211][ T5843] veth1_macvtap: entered promiscuous mode [ 63.118624][ T5846] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.132210][ T5846] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.142012][ T5846] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.151616][ T5846] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.162426][ T5849] veth0_vlan: entered promiscuous mode [ 63.190902][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.203059][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.215414][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.223438][ T5849] veth1_vlan: entered promiscuous mode [ 63.266950][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.282840][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.293525][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.304210][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.315939][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.333880][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.345530][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.359667][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.379382][ T5844] veth0_vlan: entered promiscuous mode [ 63.387095][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.399364][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.411935][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.422483][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.433921][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.458322][ T5843] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.467522][ T5843] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.477163][ T5843] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.486183][ T5843] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.515819][ T5848] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.526332][ T5848] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.535707][ T5848] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.545087][ T5848] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.577566][ T1145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.589912][ T5844] veth1_vlan: entered promiscuous mode [ 63.602109][ T1145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.651911][ T5849] veth0_macvtap: entered promiscuous mode [ 63.663936][ T1337] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.694097][ T1337] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.708247][ T5844] veth0_macvtap: entered promiscuous mode [ 63.732989][ T5849] veth1_macvtap: entered promiscuous mode [ 63.760566][ T5844] veth1_macvtap: entered promiscuous mode [ 63.772414][ T5846] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 63.796787][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.809731][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.817597][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.835797][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.841197][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.855135][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.865309][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.876306][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.886308][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.897185][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.908290][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.921665][ T5849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.932784][ T5849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.942891][ T5849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.953398][ T5849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.963403][ T5849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.974070][ T5849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.984032][ T5849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.994763][ T5849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.006276][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.022555][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.033906][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.044292][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.054791][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.064697][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.075223][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.086625][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.102880][ T5844] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.113419][ T5844] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.125190][ T5844] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.137841][ T5844] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.172119][ T5849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.191119][ T5849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.203298][ T5849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.214548][ T5849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.224642][ T5849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.235506][ T5849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.245605][ T5849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.256119][ T5849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.266939][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.296377][ T5849] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.306482][ T5849] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.316382][ T5849] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.325309][ T5849] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.341667][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.352286][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.417074][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.439820][ T2147] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 64.448908][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.553321][ T1337] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.581831][ T1337] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.609179][ T2147] usb 4-1: Using ep0 maxpacket: 8 [ 64.618905][ T2147] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 64.654742][ T2147] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 64.680102][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.688001][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.718993][ T2147] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 64.742149][ T5891] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 64.748250][ T2147] usb 4-1: New USB device found, idVendor=056a, idProduct=00b5, bcdDevice= 0.00 [ 64.787482][ T2147] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.797123][ T1145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.817222][ T1145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.827008][ T2147] usb 4-1: config 0 descriptor?? [ 64.909224][ T5837] Bluetooth: hci0: command tx timeout [ 64.914790][ T5837] Bluetooth: hci4: command tx timeout [ 64.923490][ T1145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.936754][ T1145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.989815][ T5837] Bluetooth: hci1: command tx timeout [ 64.995308][ T5837] Bluetooth: hci3: command tx timeout [ 65.002201][ T5835] Bluetooth: hci2: command tx timeout [ 65.127176][ T2147] usbhid 4-1:0.0: can't add hid device: -71 [ 65.139065][ T2147] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 65.152368][ T2147] usb 4-1: USB disconnect, device number 2 [ 65.387969][ T29] audit: type=1326 audit(1733286352.608:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5899 comm="syz.0.7" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf739d579 code=0x7ffc0000 [ 65.433154][ T29] audit: type=1326 audit(1733286352.608:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5899 comm="syz.0.7" exe="/root/syz-executor" sig=0 arch=40000003 syscall=425 compat=1 ip=0xf739d579 code=0x7ffc0000 [ 65.468533][ T29] audit: type=1326 audit(1733286352.608:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5899 comm="syz.0.7" exe="/root/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf739d579 code=0x7ffc0000 [ 65.514525][ T29] audit: type=1326 audit(1733286352.608:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5899 comm="syz.0.7" exe="/root/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf739d579 code=0x7ffc0000 [ 65.543331][ T5831] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 65.613837][ T29] audit: type=1326 audit(1733286352.608:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5899 comm="syz.0.7" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf739d579 code=0x7ffc0000 [ 65.714494][ T29] audit: type=1326 audit(1733286352.608:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5899 comm="syz.0.7" exe="/root/syz-executor" sig=0 arch=40000003 syscall=254 compat=1 ip=0xf739d579 code=0x7ffc0000 [ 65.760475][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 65.771335][ T5831] usb 5-1: Using ep0 maxpacket: 16 [ 65.780916][ T5831] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 65.799554][ T5831] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 65.811414][ T29] audit: type=1326 audit(1733286352.608:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5899 comm="syz.0.7" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf739d579 code=0x7ffc0000 [ 65.835551][ T29] audit: type=1326 audit(1733286352.608:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5899 comm="syz.0.7" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf739d579 code=0x7ffc0000 [ 65.857551][ T29] audit: type=1326 audit(1733286352.608:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5899 comm="syz.0.7" exe="/root/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf739d579 code=0x7ffc0000 [ 65.882277][ T5831] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 65.891840][ T5831] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 65.900079][ T5831] usb 5-1: Product: syz [ 65.904357][ T29] audit: type=1326 audit(1733286352.608:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5899 comm="syz.0.7" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf739d579 code=0x7ffc0000 [ 65.926794][ T5831] usb 5-1: Manufacturer: syz [ 65.931539][ T5831] usb 5-1: SerialNumber: syz [ 65.947199][ T5831] usb 5-1: config 0 descriptor?? [ 65.959675][ T5882] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 65.980110][ T5831] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 65.999680][ T5831] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 66.030041][ T973] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 66.123578][ T5882] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 66.150343][ T5882] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 66.186693][ T5882] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 66.232398][ T973] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 66.245360][ T5882] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.254013][ T973] usb 4-1: config 0 has no interface number 0 [ 66.261525][ T973] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 66.290358][ T5882] usb 2-1: config 0 descriptor?? [ 66.296432][ T973] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 66.309785][ T973] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 66.326564][ T973] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 66.359765][ T973] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 66.379958][ T973] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 66.414548][ T973] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.431761][ T973] usb 4-1: config 0 descriptor?? [ 66.468179][ T973] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 66.568771][ T5831] em28xx 5-1:0.0: chip ID is em2874 [ 66.666187][ T5910] ldusb 4-1:0.55: Couldn't submit interrupt_in_urb -90 [ 66.720940][ T5882] usbhid 2-1:0.0: can't add hid device: -71 [ 66.728705][ T5882] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 66.739320][ T8] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 66.756534][ T5882] usb 2-1: USB disconnect, device number 2 [ 66.798449][ T46] usb 5-1: USB disconnect, device number 2 [ 66.805410][ T46] em28xx 5-1:0.0: Disconnecting em28xx [ 66.814186][ T46] em28xx 5-1:0.0: Freeing device [ 66.912060][ T8] usb 3-1: Using ep0 maxpacket: 16 [ 66.921672][ T8] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 66.933466][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 66.947356][ T8] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 66.957121][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.965165][ T8] usb 3-1: Product: syz [ 66.969378][ T8] usb 3-1: Manufacturer: syz [ 66.973965][ T8] usb 3-1: SerialNumber: syz [ 66.979818][ T5831] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 66.988965][ T5837] Bluetooth: hci4: command tx timeout [ 66.989396][ T5835] Bluetooth: hci0: command tx timeout [ 67.003763][ T8] usb 3-1: config 0 descriptor?? [ 67.012925][ T8] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 67.023195][ T8] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 67.070351][ T5837] Bluetooth: hci1: command tx timeout [ 67.076438][ T5837] Bluetooth: hci2: command tx timeout [ 67.078296][ T5835] Bluetooth: hci3: command tx timeout [ 67.129064][ T5831] usb 1-1: Using ep0 maxpacket: 8 [ 67.140865][ T5831] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 67.152360][ T5831] usb 1-1: config 0 has no interfaces? [ 67.167833][ T5831] usb 1-1: New USB device found, idVendor=04b4, idProduct=8613, bcdDevice=95.8f [ 67.177248][ T5831] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1 [ 67.185434][ T5831] usb 1-1: Product: syz [ 67.189847][ T5831] usb 1-1: Manufacturer: syz [ 67.194465][ T5831] usb 1-1: SerialNumber: syz [ 67.202278][ T5831] usb 1-1: config 0 descriptor?? [ 67.272615][ T5881] usb 4-1: USB disconnect, device number 3 [ 67.301322][ T5881] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 67.660326][ T8] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 67.667646][ T8] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 67.716368][ T5882] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 67.799015][ T46] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 67.819209][ T5881] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 67.879206][ T5882] usb 2-1: Using ep0 maxpacket: 16 [ 67.891845][ T5882] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 67.903711][ T5882] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 67.921142][ T5882] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 67.930850][ T5882] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.938979][ T5882] usb 2-1: Product: syz [ 67.943484][ T5882] usb 2-1: Manufacturer: syz [ 67.948145][ T5882] usb 2-1: SerialNumber: syz [ 67.952983][ T46] usb 5-1: Using ep0 maxpacket: 8 [ 67.957053][ T5882] usb 2-1: config 0 descriptor?? [ 67.967893][ T5882] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 67.969866][ T46] usb 5-1: New USB device found, idVendor=046d, idProduct=08b1, bcdDevice=6d.2a [ 67.977820][ T5881] usb 4-1: Using ep0 maxpacket: 16 [ 67.991940][ T46] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.992212][ T5882] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 68.008703][ T46] usb 5-1: config 0 descriptor?? [ 68.017832][ T46] pwc: Logitech QuickCam Notebook Pro USB webcam detected. [ 68.019835][ T5881] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 68.026510][ T46] pwc: Warning: more than 1 configuration available. [ 68.052420][ T5881] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 68.067398][ T5881] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 68.078135][ T5881] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.086321][ T5881] usb 4-1: Product: syz [ 68.090583][ T5881] usb 4-1: Manufacturer: syz [ 68.095222][ T5881] usb 4-1: SerialNumber: syz [ 68.103040][ T5881] usb 4-1: config 0 descriptor?? [ 68.113184][ T5881] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 68.123965][ T5881] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 68.585901][ T5882] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 68.599046][ T5882] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 68.687152][ T8] em28xx 3-1:0.0: Unknown AC97 audio processor detected! [ 68.695315][ T8] em28xx 3-1:0.0: couldn't setup AC97 register 2 [ 68.703981][ T8] em28xx 3-1:0.0: couldn't setup AC97 register 4 [ 68.743701][ T5881] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 68.766269][ T5881] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 68.838636][ T46] pwc: recv_control_msg error -71 req 02 val 2700 [ 68.855376][ T46] pwc: recv_control_msg error -71 req 04 val 1600 [ 68.863981][ T46] pwc: recv_control_msg error -71 req 02 val 2c00 [ 68.877309][ T46] pwc: recv_control_msg error -71 req 04 val 1000 [ 68.884741][ T46] pwc: recv_control_msg error -71 req 04 val 1300 [ 68.894846][ T46] pwc: recv_control_msg error -71 req 04 val 1400 [ 68.902004][ T46] pwc: recv_control_msg error -71 req 02 val 2000 [ 68.909594][ T46] pwc: recv_control_msg error -71 req 02 val 2100 [ 68.917843][ T46] pwc: recv_control_msg error -71 req 06 val 0600 [ 68.923167][ T8] em28xx 3-1:0.0: couldn't setup AC97 register 6 [ 68.934948][ T46] pwc: recv_control_msg error -71 req 04 val 1500 [ 68.950815][ T8] em28xx 3-1:0.0: couldn't setup AC97 register 54 [ 68.952484][ T46] pwc: recv_control_msg error -71 req 02 val 2500 [ 68.957856][ T8] em28xx 3-1:0.0: couldn't setup AC97 register 56 [ 68.966497][ T46] pwc: recv_control_msg error -71 req 02 val 2400 [ 68.980657][ T8] usb 3-1: USB disconnect, device number 2 [ 68.996926][ T46] pwc: recv_control_msg error -71 req 02 val 2600 [ 69.010264][ T46] pwc: recv_control_msg error -71 req 02 val 2900 [ 69.017558][ T46] pwc: recv_control_msg error -71 req 02 val 2800 [ 69.037481][ T46] pwc: recv_control_msg error -71 req 04 val 1100 [ 69.056406][ T46] pwc: recv_control_msg error -71 req 04 val 1200 [ 69.084809][ T46] pwc: Registered as video103. [ 69.099529][ T46] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input5 [ 69.124200][ T46] usb 5-1: USB disconnect, device number 3 [ 69.382914][ T5881] em28xx 4-1:0.0: Unknown AC97 audio processor detected! [ 69.394183][ T5881] em28xx 4-1:0.0: couldn't setup AC97 register 2 [ 69.402474][ T5881] em28xx 4-1:0.0: couldn't setup AC97 register 4 [ 69.413590][ T5881] em28xx 4-1:0.0: couldn't setup AC97 register 6 [ 69.624038][ T5882] em28xx 2-1:0.0: Unknown AC97 audio processor detected! [ 69.639419][ T5881] em28xx 4-1:0.0: AC97 command still being executed: not handled properly! [ 69.655714][ T5881] em28xx 4-1:0.0: couldn't setup AC97 register 54 [ 69.663327][ T5882] em28xx 2-1:0.0: couldn't setup AC97 register 2 [ 69.673392][ T5882] em28xx 2-1:0.0: couldn't setup AC97 register 4 [ 69.684501][ T5882] em28xx 2-1:0.0: couldn't setup AC97 register 6 [ 69.783475][ T46] usb 1-1: USB disconnect, device number 2 [ 69.825376][ T5881] em28xx 4-1:0.0: couldn't setup AC97 register 56 [ 69.835692][ T5955] netlink: 16 bytes leftover after parsing attributes in process `syz.2.29'. [ 69.864261][ T5955] netlink: 16 bytes leftover after parsing attributes in process `syz.2.29'. [ 69.888491][ T5881] usb 4-1: USB disconnect, device number 4 [ 69.911990][ T5882] em28xx 2-1:0.0: couldn't setup AC97 register 54 [ 69.932680][ T5882] em28xx 2-1:0.0: couldn't setup AC97 register 56 [ 69.965622][ T5882] usb 2-1: USB disconnect, device number 3 [ 70.187470][ T5966] netlink: 'syz.4.34': attribute type 10 has an invalid length. [ 70.198885][ T5966] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.207615][ T5966] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.226230][ T5966] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.233468][ T5966] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.241688][ T5966] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.248936][ T5966] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.275548][ T5966] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 70.277468][ T5971] netlink: 4 bytes leftover after parsing attributes in process `syz.4.34'. [ 70.298120][ T5971] bridge_slave_1: left allmulticast mode [ 70.303976][ T5971] bridge_slave_1: left promiscuous mode [ 70.311555][ T5971] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.333137][ T5971] bridge_slave_0: left allmulticast mode [ 70.339362][ T5971] bridge_slave_0: left promiscuous mode [ 70.345323][ T5971] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.372161][ T5971] bond0: (slave bridge0): Releasing backup interface [ 71.329873][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 71.338628][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 71.347742][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 71.356432][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 71.365178][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 71.629621][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 71.722555][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.729144][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.796277][ T6001] Zero length message leads to an empty skb [ 71.839216][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 72.145890][ T5882] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 72.352466][ T5882] usb 1-1: Using ep0 maxpacket: 16 [ 72.417020][ T6030] netlink: 4 bytes leftover after parsing attributes in process `syz.1.60'. [ 72.422259][ T5882] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 72.427946][ T5831] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 72.438646][ T5882] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 72.467077][ T5882] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 72.476456][ T5882] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.495979][ T5882] usb 1-1: Product: syz [ 72.505336][ T5882] usb 1-1: Manufacturer: syz [ 72.518933][ T5882] usb 1-1: SerialNumber: syz [ 72.535893][ T6030] netlink: 104 bytes leftover after parsing attributes in process `syz.1.60'. [ 72.546761][ T5882] usb 1-1: config 0 descriptor?? [ 72.554720][ T6030] netlink: 104 bytes leftover after parsing attributes in process `syz.1.60'. [ 72.570884][ T5882] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 72.585824][ T5882] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 72.599207][ T5831] usb 5-1: Using ep0 maxpacket: 8 [ 72.608456][ T5831] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 72.629997][ T5831] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.660103][ T5831] usb 5-1: Product: syz [ 72.664493][ T5831] usb 5-1: Manufacturer: syz [ 72.711532][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 72.711546][ T29] audit: type=1326 audit(1733286359.918:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6037 comm="syz.1.63" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73bd579 code=0x7ffc0000 [ 72.748977][ T5831] usb 5-1: SerialNumber: syz [ 72.841380][ T5831] usb 5-1: config 0 descriptor?? [ 72.864696][ T29] audit: type=1326 audit(1733286359.918:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6037 comm="syz.1.63" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73bd579 code=0x7ffc0000 [ 72.889698][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 72.933233][ T29] audit: type=1326 audit(1733286359.928:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6037 comm="syz.1.63" exe="/root/syz-executor" sig=0 arch=40000003 syscall=436 compat=1 ip=0xf73bd579 code=0x7ffc0000 [ 72.956762][ T29] audit: type=1326 audit(1733286359.928:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6037 comm="syz.1.63" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73bd579 code=0x7ffc0000 [ 72.978799][ T29] audit: type=1326 audit(1733286359.928:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6037 comm="syz.1.63" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73bd579 code=0x7ffc0000 [ 73.099087][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 73.109969][ T5831] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 73.192204][ T5882] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 73.200101][ T5882] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 73.499145][ T5884] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 73.669421][ T5884] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 73.689013][ T5884] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 73.725046][ T5884] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 73.744139][ T5884] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.774657][ T6042] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 73.796619][ T5884] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 73.810729][ T5882] em28xx 1-1:0.0: Unknown AC97 audio processor detected! [ 73.818537][ T5882] em28xx 1-1:0.0: couldn't setup AC97 register 2 [ 73.831541][ T5882] em28xx 1-1:0.0: couldn't setup AC97 register 4 [ 73.849056][ T5882] em28xx 1-1:0.0: couldn't setup AC97 register 6 [ 74.066621][ T5882] em28xx 1-1:0.0: couldn't setup AC97 register 54 [ 74.098274][ T5882] em28xx 1-1:0.0: couldn't setup AC97 register 56 [ 74.119189][ T6060] netlink: 192 bytes leftover after parsing attributes in process `syz.3.73'. [ 74.119817][ T5880] usb 2-1: USB disconnect, device number 4 [ 74.133943][ T5882] usb 1-1: USB disconnect, device number 3 [ 74.549572][ T5831] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 74.568198][ T5831] usb 5-1: USB disconnect, device number 4 [ 74.876123][ T5880] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 75.041030][ T5880] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 75.066058][ T5880] usb 3-1: config 0 has no interface number 0 [ 75.092909][ T5880] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 75.105893][ T5880] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 75.121030][ T5880] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 75.133256][ T5880] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 75.146453][ T5880] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 75.166385][ T5880] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 75.198023][ T5880] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.206963][ T46] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 75.309619][ T5880] usb 3-1: config 0 descriptor?? [ 75.369006][ T46] usb 2-1: Using ep0 maxpacket: 8 [ 75.417515][ T5880] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 75.477924][ T46] usb 2-1: New USB device found, idVendor=046d, idProduct=08b1, bcdDevice=6d.2a [ 75.602667][ T46] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.646610][ T6062] ldusb 3-1:0.55: Couldn't submit interrupt_in_urb -90 [ 75.664385][ T46] usb 2-1: config 0 descriptor?? [ 75.711323][ T46] pwc: Logitech QuickCam Notebook Pro USB webcam detected. [ 75.747202][ T46] pwc: Warning: more than 1 configuration available. [ 75.853784][ T6087] binder: 6086:6087 ioctl 4018620d 0 returned -22 [ 76.155640][ T6099] netlink: 192 bytes leftover after parsing attributes in process `syz.0.90'. [ 76.226231][ T5882] usb 3-1: USB disconnect, device number 3 [ 76.229256][ T5880] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 76.234593][ T5882] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 76.348924][ T973] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 76.409159][ T5880] usb 5-1: Using ep0 maxpacket: 8 [ 76.423391][ T5880] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 76.433517][ T5880] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.444572][ T5880] usb 5-1: Product: syz [ 76.449252][ T5880] usb 5-1: Manufacturer: syz [ 76.454144][ T5880] usb 5-1: SerialNumber: syz [ 76.460731][ T5880] usb 5-1: config 0 descriptor?? [ 76.519019][ T973] usb 4-1: Using ep0 maxpacket: 16 [ 76.534380][ T46] pwc: recv_control_msg error -71 req 02 val 2700 [ 76.558991][ T973] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 76.570691][ T973] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 76.584424][ T973] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 76.584591][ T46] pwc: recv_control_msg error -71 req 04 val 1600 [ 76.603559][ T46] pwc: recv_control_msg error -71 req 02 val 2c00 [ 76.604416][ T973] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.618729][ T46] pwc: recv_control_msg error -71 req 04 val 1000 [ 76.630323][ T46] pwc: recv_control_msg error -71 req 04 val 1300 [ 76.637871][ T46] pwc: recv_control_msg error -71 req 04 val 1400 [ 76.646759][ T46] pwc: recv_control_msg error -71 req 02 val 2000 [ 76.653448][ T973] usb 4-1: Product: syz [ 76.657640][ T973] usb 4-1: Manufacturer: syz [ 76.662804][ T973] usb 4-1: SerialNumber: syz [ 76.672938][ T973] usb 4-1: config 0 descriptor?? [ 76.682901][ T973] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 76.692919][ T46] pwc: recv_control_msg error -71 req 02 val 2100 [ 76.699655][ T5880] usb 5-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 76.715309][ T973] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 76.723524][ T46] pwc: recv_control_msg error -71 req 06 val 0600 [ 76.732217][ T46] pwc: recv_control_msg error -71 req 04 val 1500 [ 76.739471][ T46] pwc: recv_control_msg error -71 req 02 val 2500 [ 76.746823][ T46] pwc: recv_control_msg error -71 req 02 val 2400 [ 76.758331][ T46] pwc: recv_control_msg error -71 req 02 val 2600 [ 76.765692][ T46] pwc: recv_control_msg error -71 req 02 val 2900 [ 76.777942][ T46] pwc: recv_control_msg error -71 req 02 val 2800 [ 76.785498][ T46] pwc: recv_control_msg error -71 req 04 val 1100 [ 76.793562][ T46] pwc: recv_control_msg error -71 req 04 val 1200 [ 76.806160][ T46] pwc: Registered as video103. [ 76.814252][ T46] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input6 [ 76.858351][ T46] usb 2-1: USB disconnect, device number 5 [ 77.296739][ T973] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 77.350664][ T973] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 77.541951][ T5880] usb write operation failed. (-71) [ 77.581234][ T5880] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 77.619278][ T5880] dvbdev: DVB: registering new adapter (Terratec H7) [ 77.626289][ T5880] usb 5-1: media controller created [ 77.666681][ T5880] usb read operation failed. (-71) [ 77.675415][ T5880] usb write operation failed. (-71) [ 77.694181][ T5880] dvb_usb_az6007 5-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 77.696521][ T6118] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 77.740608][ T5880] usb 5-1: USB disconnect, device number 5 [ 78.012544][ T5835] Bluetooth: hci2: Malformed LE Event: 0x0b [ 78.159277][ T5882] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 78.243530][ T6134] netlink: 192 bytes leftover after parsing attributes in process `syz.2.104'. [ 78.279032][ T5885] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 78.319041][ T5882] usb 2-1: Using ep0 maxpacket: 8 [ 78.326238][ T5882] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 78.336661][ T5882] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 78.347321][ T5882] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 78.367839][ T5882] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 78.381466][ T8] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 78.389614][ T5882] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 78.398746][ T5882] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.416708][ T973] em28xx 4-1:0.0: Unknown AC97 audio processor detected! [ 78.425069][ T973] em28xx 4-1:0.0: couldn't setup AC97 register 2 [ 78.432478][ T973] em28xx 4-1:0.0: couldn't setup AC97 register 4 [ 78.441851][ T973] em28xx 4-1:0.0: couldn't setup AC97 register 6 [ 78.450252][ T973] em28xx 4-1:0.0: couldn't setup AC97 register 54 [ 78.457461][ T973] em28xx 4-1:0.0: couldn't setup AC97 register 56 [ 78.464537][ T5885] usb 1-1: config 0 has an invalid interface number: 98 but max is 0 [ 78.478674][ T5885] usb 1-1: config 0 has no interface number 0 [ 78.485307][ T973] usb 4-1: USB disconnect, device number 5 [ 78.491801][ T5885] usb 1-1: config 0 interface 98 has no altsetting 0 [ 78.512527][ T5885] usb 1-1: New USB device found, idVendor=1110, idProduct=9024, bcdDevice=db.24 [ 78.522066][ T5885] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.535435][ T5885] usb 1-1: Product: syz [ 78.549483][ T5885] usb 1-1: Manufacturer: syz [ 78.554320][ T5885] usb 1-1: SerialNumber: syz [ 78.562022][ T5885] usb 1-1: config 0 descriptor?? [ 78.570146][ T8] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 78.578617][ T8] usb 5-1: config 0 has no interface number 0 [ 78.585219][ T8] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 78.596893][ T8] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 78.608619][ T8] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 78.620035][ T8] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 78.630128][ T8] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 78.643710][ T8] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 78.653238][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.663854][ T5882] usb 2-1: GET_CAPABILITIES returned 0 [ 78.669655][ T5882] usbtmc 2-1:16.0: can't read capabilities [ 78.681715][ T8] usb 5-1: config 0 descriptor?? [ 78.695303][ T8] ldusb 5-1:0.55: LD USB Device #1 now attached to major 180 minor 1 [ 78.785787][ T5885] usb 1-1: [ueagle-atm] ADSL device founded vid (0X1110) pid (0X9024) Rev (0XDB24): Eagle II [ 78.828452][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 78.845141][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 78.854611][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 78.863706][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 78.875059][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 78.884191][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 78.893277][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 78.902365][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 78.911618][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 78.933023][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 78.942359][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 78.951559][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 78.969276][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 78.978437][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 78.987587][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 78.996675][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 79.460058][ T5885] usb 1-1: reset high-speed USB device number 4 using dummy_hcd [ 79.576716][ T973] usb 5-1: USB disconnect, device number 6 [ 79.585246][ T973] ldusb 5-1:0.55: LD USB Device #1 now disconnected [ 79.749696][ T5882] usb 2-1: USB disconnect, device number 6 [ 79.827426][ T5885] usb 1-1: failed to restore interface 98 altsetting 4 (error=-71) [ 79.837120][ T5885] usb 1-1: [ueagle-atm] pre-firmware device, uploading firmware [ 79.847675][ T5885] usb 1-1: [ueagle-atm] loading firmware ueagle-atm/eagleII.fw [ 79.855976][ T973] usb 1-1: Direct firmware load for ueagle-atm/eagleII.fw failed with error -2 [ 79.874384][ T5885] usb 1-1: USB disconnect, device number 4 [ 79.882300][ T973] usb 1-1: Falling back to sysfs fallback for: ueagle-atm/eagleII.fw [ 79.987200][ T973] ------------[ cut here ]------------ [ 79.993051][ T973] WARNING: CPU: 0 PID: 973 at fs/kernfs/dir.c:526 kernfs_get+0x71/0x90 [ 80.001735][ T973] Modules linked in: [ 80.005701][ T973] CPU: 0 UID: 0 PID: 973 Comm: kworker/0:2 Not tainted 6.13.0-rc1-syzkaller-00025-gfeffde684ac2 #0 [ 80.016733][ T973] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 80.026859][ T973] Workqueue: events request_firmware_work_func [ 80.033705][ T973] RIP: 0010:kernfs_get+0x71/0x90 [ 80.038657][ T973] Code: 23 e8 43 10 57 ff 48 89 df be 04 00 00 00 e8 a6 fa c1 ff f0 ff 03 eb 05 e8 2c 10 57 ff 5b 5d c3 cc cc cc cc e8 20 10 57 ff 90 <0f> 0b 90 eb d7 89 d9 80 e1 07 80 c1 03 38 c1 7c b7 48 89 df e8 a6 [ 80.059399][ T973] RSP: 0018:ffffc90003f276a0 EFLAGS: 00010293 [ 80.065530][ T973] RAX: ffffffff82486200 RBX: ffff8880336ac4b0 RCX: ffff8880265f5a00 [ 80.073688][ T973] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 80.081701][ T973] RBP: 0000000000000000 R08: ffffffff824861d4 R09: 1ffff110066d5896 [ 80.089738][ T973] R10: dffffc0000000000 R11: ffffed10066d5897 R12: dffffc0000000000 [ 80.097749][ T973] R13: ffff88807d2bae80 R14: ffffffff8c851c30 R15: ffff88807d2baeb0 [ 80.106055][ T973] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 80.115423][ T973] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 80.122131][ T973] CR2: 00000000f73f6188 CR3: 00000000637b2000 CR4: 00000000003526f0 [ 80.130195][ T973] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 80.138209][ T973] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 80.146880][ T973] Call Trace: [ 80.151180][ T973] [ 80.154450][ T973] ? __warn+0x165/0x4d0 [ 80.158664][ T973] ? kernfs_get+0x71/0x90 [ 80.163422][ T973] ? report_bug+0x2b3/0x500 [ 80.168153][ T973] ? kernfs_get+0x71/0x90 [ 80.172613][ T973] ? handle_bug+0x60/0x90 [ 80.177072][ T973] ? exc_invalid_op+0x1a/0x50 [ 80.182056][ T973] ? asm_exc_invalid_op+0x1a/0x20 [ 80.187141][ T973] ? kernfs_get+0x44/0x90 [ 80.191787][ T973] ? kernfs_get+0x70/0x90 [ 80.196154][ T973] ? kernfs_get+0x71/0x90 [ 80.200563][ T973] kobject_add_internal+0x4ba/0x8d0 [ 80.206429][ T973] kobject_add+0x152/0x220 [ 80.211315][ T973] ? __pfx_kobject_add+0x10/0x10 [ 80.216280][ T973] ? __kasan_kmalloc+0x98/0xb0 [ 80.221188][ T973] ? kobject_init+0x83/0x1f0 [ 80.225842][ T973] get_device_parent+0x391/0x410 [ 80.230900][ T973] device_add+0x325/0xbf0 [ 80.235266][ T973] ? fw_create_instance+0xd2/0x180 [ 80.240447][ T973] firmware_fallback_sysfs+0x307/0x9e0 [ 80.246007][ T973] _request_firmware+0xdf7/0x13b0 [ 80.251140][ T973] ? __pfx__request_firmware+0x10/0x10 [ 80.256633][ T973] request_firmware_work_func+0x12a/0x280 [ 80.262413][ T973] ? __pfx_request_firmware_work_func+0x10/0x10 [ 80.268713][ T973] ? process_scheduled_works+0x976/0x1840 [ 80.274499][ T973] process_scheduled_works+0xa66/0x1840 [ 80.280100][ T973] ? __pfx_process_scheduled_works+0x10/0x10 [ 80.286267][ T973] ? assign_work+0x364/0x3d0 [ 80.290952][ T973] worker_thread+0x870/0xd30 [ 80.295557][ T973] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 80.301521][ T973] ? __kthread_parkme+0x169/0x1d0 [ 80.306560][ T973] ? __pfx_worker_thread+0x10/0x10 [ 80.312168][ T973] kthread+0x2f0/0x390 [ 80.316288][ T973] ? __pfx_worker_thread+0x10/0x10 [ 80.321766][ T973] ? __pfx_kthread+0x10/0x10 [ 80.326366][ T973] ret_from_fork+0x4b/0x80 [ 80.330861][ T973] ? __pfx_kthread+0x10/0x10 [ 80.335459][ T973] ret_from_fork_asm+0x1a/0x30 [ 80.340279][ T973] [ 80.343308][ T973] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 80.350680][ T973] CPU: 0 UID: 0 PID: 973 Comm: kworker/0:2 Not tainted 6.13.0-rc1-syzkaller-00025-gfeffde684ac2 #0 [ 80.361349][ T973] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 80.371405][ T973] Workqueue: events request_firmware_work_func [ 80.377571][ T973] Call Trace: [ 80.380851][ T973] [ 80.383779][ T973] dump_stack_lvl+0x241/0x360 [ 80.388461][ T973] ? __pfx_dump_stack_lvl+0x10/0x10 [ 80.393661][ T973] ? __pfx__printk+0x10/0x10 [ 80.398254][ T973] ? _printk+0xd5/0x120 [ 80.402422][ T973] ? __init_begin+0x41000/0x41000 [ 80.407457][ T973] ? vscnprintf+0x5d/0x90 [ 80.411805][ T973] panic+0x349/0x880 [ 80.415773][ T973] ? __warn+0x174/0x4d0 [ 80.419935][ T973] ? __pfx_panic+0x10/0x10 [ 80.424358][ T973] ? ret_from_fork_asm+0x1a/0x30 [ 80.429346][ T973] __warn+0x344/0x4d0 [ 80.433336][ T973] ? kernfs_get+0x71/0x90 [ 80.437673][ T973] report_bug+0x2b3/0x500 [ 80.442023][ T973] ? kernfs_get+0x71/0x90 [ 80.446390][ T973] handle_bug+0x60/0x90 [ 80.450581][ T973] exc_invalid_op+0x1a/0x50 [ 80.455206][ T973] asm_exc_invalid_op+0x1a/0x20 [ 80.460065][ T973] RIP: 0010:kernfs_get+0x71/0x90 [ 80.465011][ T973] Code: 23 e8 43 10 57 ff 48 89 df be 04 00 00 00 e8 a6 fa c1 ff f0 ff 03 eb 05 e8 2c 10 57 ff 5b 5d c3 cc cc cc cc e8 20 10 57 ff 90 <0f> 0b 90 eb d7 89 d9 80 e1 07 80 c1 03 38 c1 7c b7 48 89 df e8 a6 [ 80.484624][ T973] RSP: 0018:ffffc90003f276a0 EFLAGS: 00010293 [ 80.490701][ T973] RAX: ffffffff82486200 RBX: ffff8880336ac4b0 RCX: ffff8880265f5a00 [ 80.498709][ T973] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 80.506689][ T973] RBP: 0000000000000000 R08: ffffffff824861d4 R09: 1ffff110066d5896 [ 80.514678][ T973] R10: dffffc0000000000 R11: ffffed10066d5897 R12: dffffc0000000000 [ 80.522760][ T973] R13: ffff88807d2bae80 R14: ffffffff8c851c30 R15: ffff88807d2baeb0 [ 80.530752][ T973] ? kernfs_get+0x44/0x90 [ 80.535101][ T973] ? kernfs_get+0x70/0x90 [ 80.539472][ T973] kobject_add_internal+0x4ba/0x8d0 [ 80.544694][ T973] kobject_add+0x152/0x220 [ 80.549142][ T973] ? __pfx_kobject_add+0x10/0x10 [ 80.554133][ T973] ? __kasan_kmalloc+0x98/0xb0 [ 80.559012][ T973] ? kobject_init+0x83/0x1f0 [ 80.563611][ T973] get_device_parent+0x391/0x410 [ 80.568556][ T973] device_add+0x325/0xbf0 [ 80.572898][ T973] ? fw_create_instance+0xd2/0x180 [ 80.578016][ T973] firmware_fallback_sysfs+0x307/0x9e0 [ 80.583578][ T973] _request_firmware+0xdf7/0x13b0 [ 80.588619][ T973] ? __pfx__request_firmware+0x10/0x10 [ 80.594094][ T973] request_firmware_work_func+0x12a/0x280 [ 80.599849][ T973] ? __pfx_request_firmware_work_func+0x10/0x10 [ 80.606133][ T973] ? process_scheduled_works+0x976/0x1840 [ 80.611862][ T973] process_scheduled_works+0xa66/0x1840 [ 80.617436][ T973] ? __pfx_process_scheduled_works+0x10/0x10 [ 80.623455][ T973] ? assign_work+0x364/0x3d0 [ 80.628087][ T973] worker_thread+0x870/0xd30 [ 80.632689][ T973] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 80.638590][ T973] ? __kthread_parkme+0x169/0x1d0 [ 80.643625][ T973] ? __pfx_worker_thread+0x10/0x10 [ 80.648742][ T973] kthread+0x2f0/0x390 [ 80.652836][ T973] ? __pfx_worker_thread+0x10/0x10 [ 80.657973][ T973] ? __pfx_kthread+0x10/0x10 [ 80.662598][ T973] ret_from_fork+0x4b/0x80 [ 80.667038][ T973] ? __pfx_kthread+0x10/0x10 [ 80.671667][ T973] ret_from_fork_asm+0x1a/0x30 [ 80.676552][ T973] [ 80.679887][ T973] Kernel Offset: disabled [ 80.684355][ T973] Rebooting in 86400 seconds..