last executing test programs: 11.120127976s ago: executing program 0 (id=426): r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfffffffffffffe9f}}]}}, 0x0) syz_usb_connect(0x5, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100002439da20cd061201a2d20102030109021b0001000000000904000001717ffe000905a1"], 0x0) syz_usb_connect(0x0, 0xdd, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xc4, 0xb8, 0x68, 0x8, 0x2357, 0x109, 0xbdda, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0xf1, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0xff, 0xff, 0xff}}]}}]}}, 0x0) syz_usb_connect(0x0, 0x6d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100003cda2a200a111022"], 0x0) syz_usb_ep_write(0xffffffffffffffff, 0x81, 0x1, &(0x7f00000000c0)="cc") syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000cc0)=ANY=[], 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x141b82, 0x0) write$cgroup_int(r2, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, 0x0, 0x20000004) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000400)={0x34, &(0x7f0000000180)={0x0, 0x8, 0x1, "b6"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) 6.777634657s ago: executing program 1 (id=451): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100), 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f00000012c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x34, 0x0, "0c9e089c1b4a04000bde79f04103c458187eb46c2d996aff287154e786455261c425a7519cc275d04e6205abd307a0c4fa3838bf399ad5bd35f21907c7988d1300"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @private1}}, 0x0, 0x0, 0xc, 0x0, "a1c1dd75a6843e10951cd4b347113e55eb499519becf7542da0bc21470e441225642855b5f2f4bb561dc9363aed4a18d67efd5f2fdf98328de9441031348589b763d46d14810acc5f700"}, 0xd8) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000540)={@in6={{0xa, 0x0, 0x5, @mcast1}}, 0x0, 0x0, 0x3e, 0x0, "a1c1dd75a68473ba07d945c3b03e499419be4f9142da0bc21470e441225642855b5f2b4b67efbffefdf98328de9434031748589b763d46d14810acc5f7000000e3ffffff000000000000000000000020"}, 0xd8) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) 6.659559172s ago: executing program 1 (id=453): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000002000)=ANY=[@ANYBLOB="12010000facf01406e0510401c20000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000600)={0x2c, &(0x7f0000000300)={0x0, 0x0, 0x1, 'w'}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f00000003c0)={0x20, 0x16, 0x2, "f2ac"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f00000004c0)=ANY=[@ANYBLOB="001494"], 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000004c0)={0x34, &(0x7f0000000000)={0x0, 0x10, 0x1, '_'}, 0x0, 0x0, 0x0, 0x0, 0x0}) 6.374902595s ago: executing program 2 (id=455): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xe8, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000380)=ANY=[], 0x0, 0x0, 0x0, 0x0}) 6.308043043s ago: executing program 0 (id=456): syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000751c0110e60f00979ad101020301090224"], 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r1) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$UHID_CREATE(r2, &(0x7f0000002a00)={0x0, {'syz1\x00', 'syz0\x00', 'syz0\x00', &(0x7f00000000c0)=""/43, 0x2b, 0x0, 0x7f, 0xfffffffe}}, 0x120) write$UHID_DESTROY(r2, &(0x7f0000000080), 0x4) gettid() timer_create(0x0, 0x0, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001480)={0x2c, &(0x7f00000012c0)={0x40, 0xd}, &(0x7f0000001300)={0x0, 0xa, 0x1, 0xe}, 0x0, 0x0, 0x0}) openat$rnullb(0xffffffffffffff9c, 0x0, 0x228201, 0x0) chmod(&(0x7f0000000040)='.\x00', 0x35e) setuid(0xee01) mkdir(&(0x7f0000000040)='./file2\x00', 0xc1) mkdir(&(0x7f0000000300)='./file2/file0\x00', 0xc2) rename(&(0x7f0000000140)='./file2/file0\x00', &(0x7f0000000100)='./file2\x00') 5.965106378s ago: executing program 3 (id=457): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010028bd7000fddbdf250700000008000300", @ANYRES32=r3, @ANYBLOB="0c009900ff070000700000001400040073797a6b616c6c6572300000000000000800050006"], 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000400), 0x305800, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 5.677191579s ago: executing program 3 (id=458): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000540)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000380)={0x24, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.610299668s ago: executing program 2 (id=459): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r8, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r8, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) bind$inet6(r7, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r9 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r9, &(0x7f0000000040)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) 4.543585736s ago: executing program 2 (id=460): syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_conn_param_update_req={{0x12, 0x0, 0x8}, {0x5, 0x80, 0x9, 0x2}}}}, 0x15) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f00000001c0)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_host_features={{0x3d, 0xe}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, "a0742199e64971ad"}}}, 0x11) r0 = syz_open_dev$I2C(0x0, 0x1, 0x1) close(r0) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_opts(r1, 0x29, 0x39, 0x0, 0x0) syz_emit_vhci(0x0, 0x0) syz_usb_connect(0x1, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000e40)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x1d}, "f6f3c9aed034bc5454b751f1c6537fe9cc054300a6c4b99a9e56c07e85"}, 0x21) socket$inet(0x2, 0x3, 0x7) r2 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r2) syz_emit_vhci(&(0x7f0000000e80)=@HCI_EVENT_PKT={0x4, @hci_ev_si_security={{0x2, 0x7}, {0x101, 0xf825, 0x1ff, 0x1}}}, 0xa) connect$unix(0xffffffffffffffff, &(0x7f0000000ec0)=@abs={0x0, 0x0, 0x4e20}, 0x6e) syz_emit_vhci(&(0x7f0000000f40)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_features={{0xb, 0xb}, {0x1, 0xc9, "8857104d5cd1eb5e"}}}, 0xe) syz_emit_vhci(&(0x7f0000000f80)=@HCI_VENDOR_PKT, 0x2) madvise(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x15) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000fc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) prctl$PR_SET_PTRACER(0x59616d61, r2) openat$tun(0xffffffffffffff9c, 0x0, 0x40000, 0x0) syz_emit_vhci(&(0x7f0000001380)=@HCI_SCODATA_PKT={0x3, {0xc9}}, 0x4) 3.259461202s ago: executing program 2 (id=461): socket$inet_sctp(0x2, 0x5, 0x84) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) socket$kcm(0x2, 0xa, 0x2) socket(0x10, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$l2tp6(0xa, 0x2, 0x73) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x801, 0x84) socket$igmp(0x2, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0xb) pipe(&(0x7f0000000080)) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) socket$pppoe(0x18, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 3.256451558s ago: executing program 0 (id=462): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000540)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000380)={0x24, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) 3.161373428s ago: executing program 2 (id=463): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x2, 0x31, 0x7d, 0x55, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000200)=ANY=[@ANYBLOB="401504"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x40, 0x23) socket$nl_netfilter(0x10, 0x3, 0xc) gettid() timer_settime(0x0, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x10, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) lgetxattr(0x0, 0x0, 0x0, 0x0) 3.03893994s ago: executing program 3 (id=464): socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) socket$packet(0x11, 0x2, 0x300) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c00000003080102000000074441980000000000050003"], 0x1c}, 0x1, 0x0, 0x0, 0x50}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r3 = openat$cgroup_ro(r0, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r5, @ANYBLOB="ff830500000700ffffff", @ANYRES8=r0], 0x4}}, 0x0) sendfile(r4, r3, 0x0, 0x100000002) 2.956315546s ago: executing program 3 (id=465): socket$nl_generic(0x10, 0x3, 0x10) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x7fffffffffffffff, 0x20000) ioctl$BLKFLSBUF(r0, 0x1261, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_udp(0xa, 0x2, 0x0) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r2, &(0x7f0000000580)='1\x00', 0x2) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000f1a000/0x2000)=nil, 0x2000, 0x0) mlock(&(0x7f0000ff9000/0x7000)=nil, 0x7000) write$sysctl(r2, &(0x7f0000000000)='2\x00', 0x2) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) socket$l2tp(0x2, 0x2, 0x73) r3 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x809}, {0xa, 0x8, 0xfffffffe, @empty}, 0x2, {[0x0, 0x1, 0xfffffffe, 0xfff, 0x2, 0x4]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x1, 0x0, 0x0, 0x0, 0x9]}}, 0x5c) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000280), &(0x7f0000000380)=@v3={0x3000000, [{0x5, 0x6}, {0x80000000, 0xffffaf0a}]}, 0x18, 0x0) 2.441381157s ago: executing program 3 (id=466): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010028bd7000fddbdf250700000008000300", @ANYRES32=r3, @ANYBLOB="0c009900ff070000700000001400040073797a6b616c6c6572300000000000000800050006"], 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000400), 0x305800, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 2.215841811s ago: executing program 3 (id=467): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$vcsa(&(0x7f0000000000), 0x6, 0x4a000) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f00000002c0)={0x4, "421ae3543785259649154c631fb18e6a2ba2b1000000000000000000000007ee"}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, 0x0) r1 = timerfd_create(0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xdc}, 0x1c) setsockopt$inet6_int(r2, 0x29, 0x4c, 0x0, 0x0) clock_adjtime(0x0, 0x0) timerfd_settime(r1, 0x3, &(0x7f0000000000)={{0x77359400}, {0x77359400}}, 0x0) clock_adjtime(0x0, &(0x7f0000000180)={0xcaf, 0x0, 0x9, 0x1, 0x3, 0xe5b1, 0x800, 0x7, 0x80, 0x0, 0xcf3b, 0x6, 0x1, 0xa02, 0x10000, 0x0, 0x22c, 0x4d9, 0x1001, 0x7, 0x7483f474, 0x2, 0x2, 0x0, 0x7, 0x5}) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000059"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000600)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r3, 0x0, 0x0) 1.825157856s ago: executing program 1 (id=468): socket$inet6(0xa, 0x800000000000002, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f0000000140)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c0d23266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)={0x1}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x20000, 0x4}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.685069681s ago: executing program 1 (id=469): syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f09"], 0x0) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f478ef8"]) r2 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0xc45, 0x9, 0xfffffffffffffffd, 0x10000000, 0x10000, 0x3, 0x4002004c2, 0x1000, 0x9, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8, 0x8d], 0x100000, 0x2011c0}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000001c0)={[0x5, 0x6, 0x0, 0x0, 0x10003, 0x0, 0x400200cc4, 0xffe, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x6a, 0x8d], 0xeeee8000, 0x2011c0}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 384.277201ms ago: executing program 1 (id=470): socket$unix(0x1, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000140)) socket(0x10, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$l2tp6(0xa, 0x2, 0x73) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x801, 0x84) socket$igmp(0x2, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0xb) pipe(&(0x7f0000000080)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) socket$pppoe(0x18, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 305.453285ms ago: executing program 1 (id=471): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x41720, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_FPU(r2, 0x81a0ae8c, &(0x7f0000000100)) r3 = add_key$keyring(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r4 = add_key$user(&(0x7f0000000200), &(0x7f0000000280)={'syz', 0x0}, &(0x7f0000000580)="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", 0x118, r3) keyctl$KEYCTL_MOVE(0x1e, r4, r3, r3, 0x1) r5 = add_key$user(&(0x7f0000000180), &(0x7f0000000340)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r6 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_TSS_ADDR(r7, 0xae47, 0x566afa30a48730) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) r8 = socket$inet(0x2, 0x2, 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) setresuid(0xee01, r9, r9) r10 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r10, &(0x7f00000005c0), 0x10) sendmsg$can_bcm(r10, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8914, &(0x7f0000000100)={'vxcan1\x00', 0x2000}) keyctl$session_to_parent(0x12) keyctl$dh_compute(0x17, &(0x7f00000001c0)={r5, r4, r5}, &(0x7f0000000700)=""/252, 0xfc, &(0x7f0000000400)={&(0x7f0000000100)={'cryptd(streebog512-generic)\x00'}}) mount(&(0x7f0000000080)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='hfs\x00', 0x2208080, 0x0) 266.01593ms ago: executing program 0 (id=472): socket$inet_sctp(0x2, 0x5, 0x84) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) socket$kcm(0x2, 0xa, 0x2) socket(0x10, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$l2tp6(0xa, 0x2, 0x73) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x801, 0x84) socket$igmp(0x2, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0xb) pipe(&(0x7f0000000080)) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) socket$pppoe(0x18, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 183.428277ms ago: executing program 0 (id=473): creat(&(0x7f0000001380)='./file0\x00', 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)) socket$inet6_sctp(0xa, 0x5, 0x84) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.events\x00', 0x275a, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) socket(0x80000000000000a, 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$phonet(0x23, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$can_raw(0x1d, 0x3, 0x1) socket$tipc(0x1e, 0x5, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$can_raw(0x1d, 0x3, 0x1) socket$inet(0x2, 0x80001, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000b40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES32=r0], 0xc4}, 0x1, 0x0, 0x0, 0x4000}, 0x800) 81.645639ms ago: executing program 2 (id=474): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) accept4(r1, 0x0, 0x0, 0x0) r2 = openat$binfmt_format(0xffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_GET(r4, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000940)={0x14, r3, 0x705, 0x70bd23, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20004000}, 0x4000) munmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000) mmap$KVM_VCPU(&(0x7f0000ffc000/0x2000)=nil, 0x930, 0x0, 0x24132, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) memfd_secret(0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r5 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='%(,c\xbe\xfbL:', 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000000)='source', &(0x7f00000000c0)='%.,:', 0x0) mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000003) write$binfmt_format(r2, &(0x7f0000000100)='-1\x00', 0x2) close_range(r2, 0xffffffffffffffff, 0x0) sendmmsg$unix(r0, &(0x7f0000000b40), 0x1, 0x0) close(r0) 0s ago: executing program 0 (id=475): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010028bd7000fddbdf250700000008000300", @ANYRES32=r3, @ANYBLOB="0c009900ff070000700000001400040073797a6b616c6c6572300000000000000800050006"], 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000400), 0x305800, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) kernel console output (not intermixed with test programs): h: 249 > 9 [ 85.029911][ T5852] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 85.050023][ T5852] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 85.060348][ T5853] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 85.068781][ T5852] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 85.079478][ T5853] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 85.088781][ T5855] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 85.090050][ T5853] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 85.107776][ T5839] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 85.109869][ T5853] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 85.125292][ T5839] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 85.127256][ T5853] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 85.152657][ T5853] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 85.649993][ T5836] chnl_net:caif_netlink_parms(): no params data found [ 85.772640][ T5842] chnl_net:caif_netlink_parms(): no params data found [ 85.838412][ T5840] chnl_net:caif_netlink_parms(): no params data found [ 85.963716][ T5841] chnl_net:caif_netlink_parms(): no params data found [ 85.980604][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.989765][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.998695][ T5836] bridge_slave_0: entered allmulticast mode [ 86.008643][ T5836] bridge_slave_0: entered promiscuous mode [ 86.042972][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.051611][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.059288][ T5836] bridge_slave_1: entered allmulticast mode [ 86.066590][ T5836] bridge_slave_1: entered promiscuous mode [ 86.131785][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.139722][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.148598][ T5842] bridge_slave_0: entered allmulticast mode [ 86.158618][ T5842] bridge_slave_0: entered promiscuous mode [ 86.181171][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.189782][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.198345][ T5840] bridge_slave_0: entered allmulticast mode [ 86.206874][ T5840] bridge_slave_0: entered promiscuous mode [ 86.230961][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.238464][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.246274][ T5842] bridge_slave_1: entered allmulticast mode [ 86.253469][ T5842] bridge_slave_1: entered promiscuous mode [ 86.270489][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.277635][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.285345][ T5840] bridge_slave_1: entered allmulticast mode [ 86.293343][ T5840] bridge_slave_1: entered promiscuous mode [ 86.303984][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.320278][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.415593][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.441538][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.467711][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.494855][ T5836] team0: Port device team_slave_0 added [ 86.503897][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.530239][ T5841] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.537493][ T5841] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.545408][ T5841] bridge_slave_0: entered allmulticast mode [ 86.552726][ T5841] bridge_slave_0: entered promiscuous mode [ 86.561277][ T5841] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.568447][ T5841] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.576277][ T5841] bridge_slave_1: entered allmulticast mode [ 86.584450][ T5841] bridge_slave_1: entered promiscuous mode [ 86.609874][ T5840] team0: Port device team_slave_0 added [ 86.618036][ T5836] team0: Port device team_slave_1 added [ 86.643996][ T5842] team0: Port device team_slave_0 added [ 86.665201][ T5840] team0: Port device team_slave_1 added [ 86.687273][ T5842] team0: Port device team_slave_1 added [ 86.746285][ T5841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.770046][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.777033][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.803190][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.817551][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.824810][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.855866][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.856071][ T43] cfg80211: failed to load regulatory.db [ 86.890790][ T5841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.900751][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.908205][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.945640][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.972769][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.981670][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.010098][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.038211][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.047733][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.078130][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.091363][ T51] Bluetooth: hci0: command tx timeout [ 87.124294][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.131974][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.160116][ T51] Bluetooth: hci1: command tx timeout [ 87.166417][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.192907][ T5841] team0: Port device team_slave_0 added [ 87.238050][ T5841] team0: Port device team_slave_1 added [ 87.244550][ T5853] Bluetooth: hci3: command tx timeout [ 87.250654][ T51] Bluetooth: hci2: command tx timeout [ 87.278017][ T5836] hsr_slave_0: entered promiscuous mode [ 87.285600][ T5836] hsr_slave_1: entered promiscuous mode [ 87.315265][ T5840] hsr_slave_0: entered promiscuous mode [ 87.322764][ T5840] hsr_slave_1: entered promiscuous mode [ 87.328944][ T5840] debugfs: 'hsr0' already exists in 'hsr' [ 87.335374][ T5840] Cannot create hsr debugfs directory [ 87.363666][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.370854][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.397333][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.410809][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.417915][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.444277][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.544981][ T5842] hsr_slave_0: entered promiscuous mode [ 87.551978][ T5842] hsr_slave_1: entered promiscuous mode [ 87.558252][ T5842] debugfs: 'hsr0' already exists in 'hsr' [ 87.564490][ T5842] Cannot create hsr debugfs directory [ 87.664410][ T5841] hsr_slave_0: entered promiscuous mode [ 87.671220][ T5841] hsr_slave_1: entered promiscuous mode [ 87.677370][ T5841] debugfs: 'hsr0' already exists in 'hsr' [ 87.683333][ T5841] Cannot create hsr debugfs directory [ 88.014463][ T5836] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 88.041206][ T5836] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 88.073596][ T5836] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 88.105941][ T5836] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 88.154116][ T5840] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 88.196116][ T5840] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 88.208533][ T5840] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 88.222875][ T5840] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 88.302536][ T5841] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 88.315825][ T5841] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 88.327427][ T5841] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 88.341143][ T5841] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 88.465604][ T5842] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 88.492632][ T5842] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 88.503673][ T5842] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 88.521600][ T5842] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 88.603999][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.647208][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.686504][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.706249][ T5840] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.743271][ T1324] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.751033][ T1324] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.766196][ T1324] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.773404][ T1324] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.800295][ T1324] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.807812][ T1324] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.817929][ T1324] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.825311][ T1324] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.927863][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.982838][ T5841] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.005899][ T5836] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 89.025935][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.035279][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.086081][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.098501][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.106790][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.156947][ T5842] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.173456][ T51] Bluetooth: hci0: command tx timeout [ 89.215838][ T1324] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.223412][ T1324] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.241191][ T51] Bluetooth: hci1: command tx timeout [ 89.281845][ T1324] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.289884][ T1324] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.320690][ T51] Bluetooth: hci2: command tx timeout [ 89.326339][ T51] Bluetooth: hci3: command tx timeout [ 89.537704][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.559110][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.744980][ T5836] veth0_vlan: entered promiscuous mode [ 89.795323][ T5836] veth1_vlan: entered promiscuous mode [ 89.827526][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.841725][ T5840] veth0_vlan: entered promiscuous mode [ 89.867451][ T5840] veth1_vlan: entered promiscuous mode [ 89.951972][ T5836] veth0_macvtap: entered promiscuous mode [ 89.964480][ T5836] veth1_macvtap: entered promiscuous mode [ 89.979078][ T5841] veth0_vlan: entered promiscuous mode [ 90.017024][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.037844][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.056666][ T5841] veth1_vlan: entered promiscuous mode [ 90.066201][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.097813][ T4324] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.108933][ T4324] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.127270][ T5840] veth0_macvtap: entered promiscuous mode [ 90.144055][ T4324] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.153614][ T4324] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.186764][ T5840] veth1_macvtap: entered promiscuous mode [ 90.263087][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.311784][ T5841] veth0_macvtap: entered promiscuous mode [ 90.321572][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.357768][ T5842] veth0_vlan: entered promiscuous mode [ 90.371277][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.378314][ T4324] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.397938][ T5841] veth1_macvtap: entered promiscuous mode [ 90.406670][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.421274][ T4324] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.432365][ T4324] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.464588][ T4324] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.480813][ T5842] veth1_vlan: entered promiscuous mode [ 90.507684][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.546235][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.567767][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.586947][ T5842] veth0_macvtap: entered promiscuous mode [ 90.616686][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.658435][ T5836] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 90.667156][ T5842] veth1_macvtap: entered promiscuous mode [ 90.728644][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.753354][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.779579][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.788969][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.814835][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.842086][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.853622][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.934110][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.968699][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.985067][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.995089][ T4324] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.007933][ T4324] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.017706][ T4324] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.046456][ T4324] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.224812][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.242121][ T51] Bluetooth: hci0: command tx timeout [ 91.248841][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.320041][ T51] Bluetooth: hci1: command tx timeout [ 91.387420][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.394327][ T5937] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 91.420350][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.423722][ T51] Bluetooth: hci3: command tx timeout [ 91.433262][ T5853] Bluetooth: hci2: command tx timeout [ 91.487284][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.522079][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.655869][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.676423][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.331956][ T5963] vcan0: entered allmulticast mode [ 92.350513][ T10] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 92.532555][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 92.543758][ T10] usb 4-1: config 1 has an invalid interface number: 83 but max is 0 [ 92.555092][ T10] usb 4-1: config 1 has no interface number 0 [ 92.562682][ T10] usb 4-1: config 1 interface 83 altsetting 4 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 92.584605][ T10] usb 4-1: config 1 interface 83 has no altsetting 0 [ 92.608900][ T10] usb 4-1: New USB device found, idVendor=2201, idProduct=012c, bcdDevice=a2.c5 [ 92.634740][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.653512][ T10] usb 4-1: Product: syz [ 92.657805][ T10] usb 4-1: Manufacturer: syz [ 92.669547][ T10] usb 4-1: SerialNumber: syz [ 92.942483][ T10] usb 4-1: probing VID:PID(2201:012C) [ 92.957764][ T10] usb 4-1: vub300 testing UNKNOWN EndPoint(0) 08 [ 93.010599][ T10] usb 4-1: vub300 ignoring EndPoint(0) 08 [ 93.022662][ T10] usb 4-1: Could not find two sets of bulk-in/out endpoint pairs [ 93.039389][ T10] vub300 4-1:1.83: probe with driver vub300 failed with error -22 [ 93.088490][ T10] usb 4-1: USB disconnect, device number 2 [ 93.320776][ T51] Bluetooth: hci0: command tx timeout [ 93.372505][ T5984] mmap: syz.2.20 (5984) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 93.399628][ T51] Bluetooth: hci1: command tx timeout [ 93.480524][ T5853] Bluetooth: hci2: command tx timeout [ 93.487094][ T51] Bluetooth: hci3: command tx timeout [ 93.493259][ T43] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 93.716041][ T43] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 93.745070][ T43] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 93.766026][ T43] usb 1-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 93.784378][ T43] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 93.794305][ T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.819304][ T9] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 93.826431][ T43] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 93.839253][ T24] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 93.871599][ T43] usb 1-1: invalid MIDI out EP 0 [ 94.008611][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 94.020850][ T5838] udevd[5838]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 94.045563][ T9] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 94.047995][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 94.057854][ T9] usb 4-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 94.102863][ T43] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 94.112305][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.148342][ T24] usb 2-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 94.179300][ T43] usb 1-1: USB disconnect, device number 2 [ 94.188226][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.190354][ T9] usb 4-1: config 0 descriptor?? [ 94.206364][ T24] usb 2-1: Product: syz [ 94.215050][ T24] usb 2-1: Manufacturer: syz [ 94.257479][ T24] usb 2-1: SerialNumber: syz [ 94.285459][ T24] usb 2-1: config 0 descriptor?? [ 94.302270][ T24] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 94.427391][ T6000] netlink: 'syz.2.28': attribute type 1 has an invalid length. [ 94.511987][ T5986] vxcan0: entered promiscuous mode [ 94.528650][ T43] usb 4-1: USB disconnect, device number 3 [ 95.532477][ T6029] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 96.441521][ T5846] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 96.569324][ T9] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 96.578977][ T24] gspca_sonixj: reg_w1 err -71 [ 96.587617][ T24] sonixj 2-1:0.0: probe with driver sonixj failed with error -71 [ 96.598947][ T24] usb 2-1: USB disconnect, device number 2 [ 96.611152][ T5846] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 96.632005][ T5846] usb 1-1: config 0 has no interface number 0 [ 96.640063][ T5846] usb 1-1: config 0 interface 41 has no altsetting 0 [ 96.650780][ T5846] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 96.660194][ T5846] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.673427][ T5846] usb 1-1: Product: syz [ 96.677640][ T5846] usb 1-1: Manufacturer: syz [ 96.685457][ T5846] usb 1-1: SerialNumber: syz [ 96.714147][ T5846] usb 1-1: config 0 descriptor?? [ 96.758732][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 96.777723][ T9] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 96.798171][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.822085][ T9] usb 3-1: config 0 descriptor?? [ 96.842669][ T9] pwc: Askey VC010 type 2 USB webcam detected. [ 97.247820][ T9] pwc: recv_control_msg error -32 req 02 val 2b00 [ 97.258370][ T9] pwc: recv_control_msg error -32 req 02 val 2700 [ 97.275991][ T9] pwc: recv_control_msg error -32 req 02 val 2c00 [ 97.302392][ T9] pwc: recv_control_msg error -32 req 04 val 1000 [ 97.311143][ T9] pwc: recv_control_msg error -32 req 04 val 1300 [ 97.347122][ T9] pwc: recv_control_msg error -32 req 04 val 1400 [ 97.360894][ T9] pwc: recv_control_msg error -32 req 02 val 2000 [ 97.500433][ T6057] tipc: Started in network mode [ 97.506252][ T6057] tipc: Node identity aad5b311e0ce, cluster identity 4711 [ 97.517727][ T6057] tipc: Enabled bearer , priority 0 [ 97.540460][ T6056] tipc: Resetting bearer [ 97.547553][ T5846] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 97.772685][ T9] pwc: recv_control_msg error -71 req 02 val 2500 [ 97.789810][ T9] pwc: recv_control_msg error -71 req 02 val 2400 [ 97.802296][ T9] pwc: recv_control_msg error -71 req 02 val 2600 [ 97.816813][ T9] pwc: recv_control_msg error -71 req 02 val 2900 [ 97.831608][ T9] pwc: recv_control_msg error -71 req 02 val 2800 [ 97.845808][ T9] pwc: recv_control_msg error -71 req 04 val 1100 [ 97.859027][ T9] pwc: recv_control_msg error -71 req 04 val 1200 [ 97.884462][ T9] pwc: Registered as video103. [ 97.919816][ T9] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input5 [ 97.992413][ T9] usb 3-1: USB disconnect, device number 2 [ 98.211677][ T24] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 98.395070][ T24] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 98.430192][ T24] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 98.450541][ T24] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 98.465989][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 98.479497][ T24] usb 2-1: SerialNumber: syz [ 98.553323][ T3404] tipc: Node number set to 1243329297 [ 98.732056][ T24] usb 2-1: 0:2 : does not exist [ 98.747409][ T24] usb 2-1: unit 5: unexpected type 0x09 [ 98.832505][ T24] usb 2-1: USB disconnect, device number 3 [ 98.881323][ T5849] udevd[5849]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 99.045560][ T5846] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0000:ffffffb9 [ 99.069077][ T5846] CoreChips 1-1:0.41: probe with driver CoreChips failed with error -71 [ 99.099253][ T5846] usb 1-1: USB disconnect, device number 3 [ 99.481940][ T6056] tipc: Disabling bearer [ 99.493433][ T6068] warning: `syz.2.53' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 99.579311][ T5846] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 99.749940][ T5846] usb 2-1: Using ep0 maxpacket: 32 [ 99.758085][ T5846] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 99.771299][ T5846] usb 2-1: config 0 has no interface number 0 [ 99.782474][ T5846] usb 2-1: config 0 interface 184 has no altsetting 0 [ 99.795465][ T5846] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 99.807192][ T5846] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.818411][ T5846] usb 2-1: Product: syz [ 99.832656][ T5846] usb 2-1: Manufacturer: syz [ 99.841072][ T5846] usb 2-1: SerialNumber: syz [ 99.872936][ T5846] usb 2-1: config 0 descriptor?? [ 99.891741][ T5846] smsc75xx v1.0.0 [ 99.953200][ T30] audit: type=1800 audit(1751457736.153:2): pid=6087 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.59" name="/" dev="fuse" ino=1 res=0 errno=0 [ 100.022943][ T30] audit: type=1800 audit(1751457736.183:3): pid=6087 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.59" name="/" dev="fuse" ino=1 res=0 errno=0 [ 100.172396][ T6094] ======================================================= [ 100.172396][ T6094] WARNING: The mand mount option has been deprecated and [ 100.172396][ T6094] and is ignored by this kernel. Remove the mand [ 100.172396][ T6094] option from the mount to silence this warning. [ 100.172396][ T6094] ======================================================= [ 100.521376][ T5846] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 100.554068][ T5846] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 100.833658][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802279e400: rx timeout, send abort [ 100.899357][ T9] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 101.090646][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 101.099574][ T9] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 101.114736][ T9] usb 4-1: config 179 has no interface number 0 [ 101.140624][ T9] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 101.162082][ T9] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 101.189420][ T9] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 101.206079][ T9] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 101.221543][ T9] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 101.239689][ T9] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 101.299772][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.330578][ T6106] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 101.344038][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802279e400: abort rx timeout. Force session deactivation [ 101.603030][ T9] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input6 [ 101.790363][ T6106] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.826501][ T6106] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.004646][ T5846] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000118: -71 [ 102.023773][ T5846] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to write RX_ADDRH: -71 [ 102.046449][ T5846] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to set mac address [ 102.058284][ T5846] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 102.063680][ T9] usb 4-1: USB disconnect, device number 4 [ 102.067737][ C0] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 102.067792][ C0] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 102.070719][ T5846] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71 [ 102.123010][ T5846] usb 2-1: USB disconnect, device number 4 [ 103.100328][ T5908] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 103.287753][ T5908] usb 4-1: Using ep0 maxpacket: 32 [ 103.329320][ T5908] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 103.411342][ T5908] usb 4-1: config 0 has no interface number 0 [ 103.488183][ T5908] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 103.497537][ T5908] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.505759][ T5908] usb 4-1: Product: syz [ 103.510226][ T5908] usb 4-1: Manufacturer: syz [ 103.515001][ T5908] usb 4-1: SerialNumber: syz [ 103.522858][ T5908] usb 4-1: config 0 descriptor?? [ 103.531307][ T5908] smsc95xx v2.0.0 [ 103.954192][ T5908] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 103.977272][ T5908] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 104.271397][ T6139] syz_tun: entered allmulticast mode [ 104.619354][ T43] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 104.779235][ T43] usb 3-1: Using ep0 maxpacket: 8 [ 104.790199][ T43] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 104.801070][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.809444][ T43] usb 3-1: Product: syz [ 104.813708][ T43] usb 3-1: Manufacturer: syz [ 104.818317][ T43] usb 3-1: SerialNumber: syz [ 104.825611][ T43] usb 3-1: config 0 descriptor?? [ 105.038172][ T43] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 105.622835][ T5908] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000038: -71 [ 105.652210][ T5908] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 105.691293][ T5908] usb 4-1: USB disconnect, device number 5 [ 106.500950][ T43] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 106.535062][ T43] usb 3-1: USB disconnect, device number 3 [ 106.689298][ T9] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 106.840240][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 106.851634][ T9] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 106.860016][ T9] usb 4-1: config 0 has no interface number 0 [ 106.867498][ T9] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 106.887729][ T9] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 106.908200][ T9] usb 4-1: config 0 interface 41 has no altsetting 0 [ 106.927913][ T9] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 106.937430][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.957527][ T9] usb 4-1: Product: syz [ 106.962099][ T9] usb 4-1: Manufacturer: syz [ 106.966813][ T9] usb 4-1: SerialNumber: syz [ 106.984557][ T9] usb 4-1: config 0 descriptor?? [ 107.000099][ T6163] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 107.008434][ T6163] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 107.272154][ T6163] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 107.302544][ T6163] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 107.786799][ T9] Error reading MAC address [ 107.875011][ T6163] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 107.977466][ T6163] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 108.362857][ T6173] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 108.368753][ T980] IPVS: starting estimator thread 0... [ 108.379932][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 108.483544][ T6180] IPVS: using max 30 ests per chain, 72000 per kthread [ 108.653935][ T9] sr9700 4-1:0.41 eth1: register 'sr9700' at usb-dummy_hcd.3-1, CoreChip SR9700 USB Ethernet, ce:8d:ed:4e:c6:fb [ 108.675130][ T9] usb 4-1: USB disconnect, device number 6 [ 108.691640][ T9] sr9700 4-1:0.41 eth1: unregister 'sr9700' usb-dummy_hcd.3-1, CoreChip SR9700 USB Ethernet [ 108.805960][ T6190] veth1_macvtap: left promiscuous mode [ 108.860008][ T43] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 109.145111][ T6207] netlink: 14 bytes leftover after parsing attributes in process `syz.2.104'. [ 109.316943][ T6207] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 109.337121][ T6207] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 109.348910][ T6207] bond0 (unregistering): Released all slaves [ 109.386793][ T6210] mkiss: ax0: crc mode is auto. [ 109.510331][ T6210] block nbd0: server does not support multiple connections per device. [ 109.543612][ T6210] block nbd0: shutting down sockets [ 109.559611][ T24] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 109.729358][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 109.740302][ T24] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 109.754193][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.764462][ T24] usb 1-1: Product: syz [ 109.768756][ T24] usb 1-1: Manufacturer: syz [ 109.777989][ T5846] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 109.791677][ T24] usb 1-1: SerialNumber: syz [ 109.800654][ T24] usb 1-1: config 0 descriptor?? [ 109.941946][ T5846] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 109.956192][ T5846] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 109.966569][ T5846] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.980014][ T5846] usb 3-1: config 0 descriptor?? [ 109.996129][ T5846] pwc: Askey VC010 type 2 USB webcam detected. [ 110.022277][ T24] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 110.415200][ T5846] pwc: recv_control_msg error -32 req 02 val 2b00 [ 110.432554][ T5846] pwc: recv_control_msg error -32 req 02 val 2700 [ 110.440783][ T5846] pwc: recv_control_msg error -32 req 02 val 2c00 [ 110.451202][ T5846] pwc: recv_control_msg error -32 req 04 val 1000 [ 110.458944][ T5846] pwc: recv_control_msg error -32 req 04 val 1300 [ 110.467155][ T5846] pwc: recv_control_msg error -32 req 04 val 1400 [ 110.474913][ T5846] pwc: recv_control_msg error -32 req 02 val 2000 [ 110.483283][ T5846] pwc: recv_control_msg error -32 req 02 val 2100 [ 110.886619][ T6234] pimreg: entered allmulticast mode [ 110.892700][ T5846] pwc: recv_control_msg error -71 req 02 val 2400 [ 110.905211][ T5846] pwc: recv_control_msg error -71 req 02 val 2600 [ 110.913278][ T5846] pwc: recv_control_msg error -71 req 02 val 2900 [ 110.925245][ T5846] pwc: recv_control_msg error -71 req 02 val 2800 [ 110.933264][ T5846] pwc: recv_control_msg error -71 req 04 val 1100 [ 110.943223][ T5846] pwc: recv_control_msg error -71 req 04 val 1200 [ 110.961869][ T5846] pwc: Registered as video103. [ 110.993700][ T5846] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input7 [ 111.057000][ T5846] usb 3-1: USB disconnect, device number 4 [ 111.443603][ T24] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 111.492601][ T24] usb 1-1: USB disconnect, device number 4 [ 111.720782][ T6254] process 'syz.1.121' launched './file1' with NULL argv: empty string added [ 111.770671][ T6256] 8021q: adding VLAN 0 to HW filter on device bond0 [ 111.785158][ T6256] bond0: (slave rose0): Enslaving as an active interface with an up link [ 111.909234][ T30] audit: type=1326 audit(1751457748.103:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6260 comm="syz.3.123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facef18e929 code=0x7ff00000 [ 111.955454][ T30] audit: type=1326 audit(1751457748.103:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6260 comm="syz.3.123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facef18e929 code=0x7ff00000 [ 112.015617][ T30] audit: type=1326 audit(1751457748.103:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6260 comm="syz.3.123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facef18e929 code=0x7ff00000 [ 112.037793][ C0] vkms_vblank_simulate: vblank timer overrun [ 112.144050][ T6271] capability: warning: `syz.0.125' uses deprecated v2 capabilities in a way that may be insecure [ 112.167315][ T30] audit: type=1326 audit(1751457748.103:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6260 comm="syz.3.123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facef18e929 code=0x7ff00000 [ 112.251591][ T6279] netlink: 14 bytes leftover after parsing attributes in process `syz.0.125'. [ 112.314188][ T30] audit: type=1326 audit(1751457748.103:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6260 comm="syz.3.123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facef18e929 code=0x7ff00000 [ 112.392722][ T30] audit: type=1326 audit(1751457748.103:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6260 comm="syz.3.123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facef18e929 code=0x7ff00000 [ 112.476765][ T30] audit: type=1326 audit(1751457748.103:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6260 comm="syz.3.123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facef18e929 code=0x7ff00000 [ 112.501304][ T6279] syz_tun (unregistering): left allmulticast mode [ 112.514161][ T30] audit: type=1326 audit(1751457748.103:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6260 comm="syz.3.123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facef18e929 code=0x7ff00000 [ 112.550429][ T30] audit: type=1326 audit(1751457748.103:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6260 comm="syz.3.123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facef18e929 code=0x7ff00000 [ 112.579348][ T5846] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 112.594885][ T30] audit: type=1326 audit(1751457748.103:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6260 comm="syz.3.123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facef18e929 code=0x7ff00000 [ 112.754288][ T5846] usb 2-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 112.764560][ T5846] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.793098][ T5846] usb 2-1: Product: syz [ 112.797393][ T5846] usb 2-1: Manufacturer: syz [ 112.818885][ T5846] usb 2-1: SerialNumber: syz [ 112.837131][ T5846] usb 2-1: config 0 descriptor?? [ 112.867035][ T5846] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 113.160578][ T6304] netlink: 4 bytes leftover after parsing attributes in process `syz.0.134'. [ 113.421888][ T3404] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 113.590597][ T3404] usb 4-1: Using ep0 maxpacket: 32 [ 113.608530][ T3404] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 113.622169][ T3404] usb 4-1: config 0 has no interface number 0 [ 113.634249][ T3404] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 113.648024][ T3404] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.656438][ T3404] usb 4-1: Product: syz [ 113.664625][ T3404] usb 4-1: Manufacturer: syz [ 113.669915][ T3404] usb 4-1: SerialNumber: syz [ 113.681992][ T3404] usb 4-1: config 0 descriptor?? [ 113.698182][ T3404] smsc95xx v2.0.0 [ 114.136483][ T3404] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 114.150467][ T3404] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 114.669292][ T43] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 114.819254][ T43] usb 1-1: Using ep0 maxpacket: 16 [ 114.853307][ T43] usb 1-1: unable to get BOS descriptor or descriptor too short [ 114.876204][ T43] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 114.884694][ T43] usb 1-1: can't read configurations, error -71 [ 115.333979][ T5846] gspca_sonixj: reg_w1 err -71 [ 115.392168][ T5846] sonixj 2-1:0.0: probe with driver sonixj failed with error -71 [ 115.423538][ T5846] usb 2-1: USB disconnect, device number 6 [ 115.974464][ T3404] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000006c: -71 [ 115.999770][ T3404] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 116.050529][ T3404] usb 4-1: USB disconnect, device number 7 [ 116.700357][ T6367] @ÿ: renamed from veth0_vlan (while UP) [ 117.524539][ T6370] kvm: pic: non byte write [ 117.583112][ T6373] kvm: vcpu 0: requested 64 ns lapic timer period limited to 200000 ns [ 117.672571][ T6370] kvm: pic: non byte write [ 118.560830][ T30] kauditd_printk_skb: 91 callbacks suppressed [ 118.560860][ T30] audit: type=1800 audit(1751457754.763:105): pid=6390 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.152" name="/" dev="9p" ino=2 res=0 errno=0 [ 119.059908][ T10] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 119.361587][ T6407] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 119.434093][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 119.527669][ T10] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 119.670920][ T10] usb 2-1: config 0 has no interface number 0 [ 119.799746][ T10] usb 2-1: config 0 interface 184 has no altsetting 0 [ 119.810117][ T10] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 119.819344][ T10] usb 2-1: New USB device strings: Mfr=227, Product=1, SerialNumber=3 [ 119.827511][ T10] usb 2-1: Product: syz [ 119.841738][ T10] usb 2-1: Manufacturer: syz [ 119.847064][ T10] usb 2-1: SerialNumber: syz [ 119.869438][ T10] usb 2-1: config 0 descriptor?? [ 119.878263][ T10] smsc75xx v1.0.0 [ 119.948696][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 119.969221][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 120.149177][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 120.189951][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 120.254028][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 120.356494][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 120.559696][ T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!! [ 120.617560][ T6423] binder_alloc: 6422: binder_alloc_buf, no vma [ 120.678397][ T6421] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 120.756910][ T10] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 120.789920][ T10] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 121.125123][ T9] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 121.311221][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 121.321829][ T9] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 121.331403][ T9] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 121.341011][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.352936][ T9] usb 4-1: config 0 descriptor?? [ 121.567955][ T9] usb 4-1: string descriptor 0 read error: -71 [ 121.579608][ T9] usb 4-1: USB disconnect, device number 8 [ 121.809767][ T6446] netlink: 60 bytes leftover after parsing attributes in process `syz.0.170'. [ 121.830794][ T6446] unsupported nlmsg_type 40 [ 122.451617][ T10] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000011c: -71 [ 122.471271][ T10] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to write RX_ADDRL: -71 [ 122.481980][ T10] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to set mac address [ 122.491734][ T10] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 122.502925][ T10] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71 [ 122.535910][ T10] usb 2-1: USB disconnect, device number 7 [ 123.385078][ T10] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 123.401869][ T5846] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 123.480705][ T30] audit: type=1804 audit(1751457759.683:106): pid=6495 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.186" name="/newroot/40/file1" dev="fuse" ino=1 res=1 errno=0 [ 123.505904][ T30] audit: type=1800 audit(1751457759.683:107): pid=6495 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.186" name="/" dev="fuse" ino=1 res=0 errno=0 [ 123.537362][ T30] audit: type=1800 audit(1751457759.683:108): pid=6495 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.186" name="/" dev="fuse" ino=1 res=0 errno=0 [ 123.569925][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 123.584521][ T10] usb 3-1: not running at top speed; connect to a high speed hub [ 123.590718][ T5846] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 123.602294][ T10] usb 3-1: config 14 has an invalid interface number: 169 but max is 0 [ 123.618052][ T6499] TCP: out of memory -- consider tuning tcp_mem [ 123.625785][ T10] usb 3-1: config 14 has no interface number 0 [ 123.632381][ T5846] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 123.639467][ T51] Bluetooth: hci2: command tx timeout [ 123.654048][ T10] usb 3-1: config 14 interface 169 has no altsetting 0 [ 123.657376][ T5846] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 123.671533][ T10] usb 3-1: New USB device found, idVendor=07fa, idProduct=0847, bcdDevice= c.76 [ 123.686620][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.691491][ T5846] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 123.710515][ T10] usb 3-1: Product: syz [ 123.714706][ T10] usb 3-1: Manufacturer: syz [ 123.719549][ T10] usb 3-1: SerialNumber: syz [ 123.750838][ T5846] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 123.777522][ T6504] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 123.793562][ T5846] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.798712][ T6504] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 123.814034][ T5846] usb 4-1: config 0 descriptor?? [ 123.856889][ T6504] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 123.888181][ T6504] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 123.907516][ T6504] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 123.973591][ T10] hub 3-1:14.169: bad descriptor, ignoring hub [ 123.982634][ T10] hub 3-1:14.169: probe with driver hub failed with error -5 [ 123.993556][ T10] HFC-S_USB 3-1:14.169: probe with driver HFC-S_USB failed with error -5 [ 124.021118][ T10] usb 3-1: USB disconnect, device number 5 [ 124.328202][ T5846] plantronics 0003:047F:FFFF.0001: ignoring exceeding usage max [ 124.351922][ T5846] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 125.130012][ T6522] syz.2.193 uses obsolete (PF_INET,SOCK_PACKET) [ 126.279778][ T5846] usb 4-1: reset high-speed USB device number 9 using dummy_hcd [ 127.574562][ T3404] usb 4-1: USB disconnect, device number 9 [ 128.069675][ T10] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 128.087141][ T6565] syz.1.202 (6565) used greatest stack depth: 19624 bytes left [ 128.244347][ T10] usb 4-1: config 0 has no interfaces? [ 128.253307][ T10] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 128.265593][ T10] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 128.285732][ T10] usb 4-1: Manufacturer: syz [ 128.306417][ T10] usb 4-1: config 0 descriptor?? [ 128.368308][ T6577] infiniband syz1: set active [ 128.377929][ T6577] infiniband syz1: added syz_tun [ 128.451726][ T6577] RDS/IB: syz1: added [ 128.456372][ T6577] smc: adding ib device syz1 with port count 1 [ 128.463021][ T6577] smc: ib device syz1 port 1 has pnetid [ 128.492082][ T3404] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 128.554806][ T10] usb 4-1: USB disconnect, device number 10 [ 128.674530][ T3404] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 128.698397][ T3404] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 128.789208][ T3404] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.810230][ T3404] usb 2-1: config 0 descriptor?? [ 128.821829][ T3404] pwc: Askey VC010 type 2 USB webcam detected. [ 129.095815][ T5853] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 129.106377][ T5853] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 129.114491][ T5853] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 129.125045][ T5853] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 129.134880][ T5853] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 129.231715][ T3404] pwc: recv_control_msg error -32 req 02 val 2b00 [ 129.249192][ T3404] pwc: recv_control_msg error -32 req 02 val 2700 [ 129.268277][ T3404] pwc: recv_control_msg error -32 req 02 val 2c00 [ 129.280394][ T3404] pwc: recv_control_msg error -32 req 04 val 1000 [ 129.297976][ T3404] pwc: recv_control_msg error -32 req 04 val 1300 [ 129.315194][ T3404] pwc: recv_control_msg error -32 req 04 val 1400 [ 129.324144][ T3404] pwc: recv_control_msg error -32 req 02 val 2000 [ 129.331894][ T3404] pwc: recv_control_msg error -32 req 02 val 2100 [ 129.342927][ T3404] pwc: recv_control_msg error -32 req 04 val 1500 [ 129.355449][ T3404] pwc: recv_control_msg error -32 req 02 val 2500 [ 129.571354][ T3404] pwc: recv_control_msg error -71 req 02 val 2600 [ 129.585343][ T3404] pwc: recv_control_msg error -71 req 02 val 2900 [ 129.589384][ T10] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 129.599590][ T3404] pwc: recv_control_msg error -71 req 02 val 2800 [ 129.610167][ T3404] pwc: recv_control_msg error -71 req 04 val 1100 [ 129.630342][ T3404] pwc: recv_control_msg error -71 req 04 val 1200 [ 129.641949][ T3404] pwc: Registered as video103. [ 129.650454][ T3404] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input8 [ 129.713772][ T3404] usb 2-1: USB disconnect, device number 8 [ 129.760731][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 129.770515][ T10] usb 4-1: config 1 has an invalid interface number: 105 but max is 0 [ 129.783024][ T10] usb 4-1: config 1 has no interface number 0 [ 129.794051][ T10] usb 4-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 129.812777][ T10] usb 4-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 129.839539][ T10] usb 4-1: config 1 interface 105 has no altsetting 0 [ 129.852971][ T10] usb 4-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 129.869370][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.882324][ T10] usb 4-1: Product: syz [ 129.886538][ T10] usb 4-1: Manufacturer: syz [ 129.892519][ T10] usb 4-1: SerialNumber: syz [ 129.897601][ T6600] chnl_net:caif_netlink_parms(): no params data found [ 129.908164][ T6605] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 129.917471][ T6605] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 130.079878][ T6600] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.088865][ T6600] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.096239][ T6600] bridge_slave_0: entered allmulticast mode [ 130.104774][ T6600] bridge_slave_0: entered promiscuous mode [ 130.113456][ T6600] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.131077][ T6600] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.138316][ T6600] bridge_slave_1: entered allmulticast mode [ 130.154328][ T6605] netlink: 36 bytes leftover after parsing attributes in process `syz.3.215'. [ 130.172192][ T6605] netlink: 16 bytes leftover after parsing attributes in process `syz.3.215'. [ 130.183374][ T6600] bridge_slave_1: entered promiscuous mode [ 130.222427][ T6605] netlink: 36 bytes leftover after parsing attributes in process `syz.3.215'. [ 130.243222][ T6605] netlink: 36 bytes leftover after parsing attributes in process `syz.3.215'. [ 130.281195][ T10] aqc111 4-1:1.105: probe with driver aqc111 failed with error -71 [ 130.292203][ T6600] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 130.314852][ T10] usb 4-1: USB disconnect, device number 11 [ 130.325669][ T6600] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 130.474670][ T6600] team0: Port device team_slave_0 added [ 130.483556][ T6600] team0: Port device team_slave_1 added [ 130.549882][ T6600] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 130.556918][ T6600] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 130.586019][ T6600] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 130.610366][ T6600] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 130.617335][ T6600] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 130.680237][ T6600] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 130.741078][ T6625] netlink: 'syz.2.218': attribute type 27 has an invalid length. [ 130.824605][ T6625] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.833379][ T6625] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.008663][ T6625] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 131.025295][ T6625] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 131.147948][ T6600] hsr_slave_0: entered promiscuous mode [ 131.157328][ T6600] hsr_slave_1: entered promiscuous mode [ 131.162293][ T51] Bluetooth: hci1: command tx timeout [ 131.172413][ T6600] debugfs: 'hsr0' already exists in 'hsr' [ 131.178209][ T6600] Cannot create hsr debugfs directory [ 131.213194][ T43] syz1: Port: 1 Link DOWN [ 131.268267][ T36] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.278614][ T36] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.289243][ T5908] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 131.299445][ T36] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.313725][ T36] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.476108][ T5908] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 131.507734][ T5908] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 131.539213][ T5908] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 13155, setting to 64 [ 131.565586][ T5908] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 131.590372][ T5908] usb 4-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 131.609222][ T5908] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.627517][ T5908] usb 4-1: Product: syz [ 131.638286][ T5908] usb 4-1: Manufacturer: syz [ 131.647019][ T5908] usb 4-1: SerialNumber: syz [ 131.670244][ T5908] usb 4-1: config 0 descriptor?? [ 131.693718][ T6630] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 131.707993][ T5908] input: KB Gear Tablet as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input9 [ 131.711322][ T6600] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.856499][ T6600] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.933339][ T6630] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.945475][ T6630] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.955469][ T6600] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.969932][ C0] kbtab 4-1:0.0: kbtab_irq - usb_submit_urb failed with result -1 [ 131.978055][ T30] audit: type=1800 audit(1751457768.173:109): pid=6636 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.222" name="dmabuf" dev="dmabuf" ino=4 res=0 errno=0 [ 132.001505][ T43] usb 4-1: USB disconnect, device number 12 [ 132.125423][ T6600] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.241599][ T6639] bpq0: entered promiscuous mode [ 132.246702][ T6639] bpq0: entered allmulticast mode [ 132.370171][ T6600] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 132.386580][ T6600] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 132.403156][ T6600] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 132.432634][ T6600] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 132.593621][ T6600] 8021q: adding VLAN 0 to HW filter on device bond0 [ 132.635900][ T6600] 8021q: adding VLAN 0 to HW filter on device team0 [ 132.651409][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.658573][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 132.675662][ T1324] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.682898][ T1324] bridge0: port 2(bridge_slave_1) entered forwarding state [ 132.699396][ T10] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 132.869374][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 132.882362][ T10] usb 2-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 132.902073][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.927711][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.934304][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.936684][ T10] usb 2-1: Product: syz [ 132.955825][ T10] usb 2-1: Manufacturer: syz [ 132.965727][ T10] usb 2-1: SerialNumber: syz [ 132.977645][ T10] usb 2-1: config 0 descriptor?? [ 132.986165][ T6600] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 133.047084][ T6600] veth0_vlan: entered promiscuous mode [ 133.076629][ T6600] veth1_vlan: entered promiscuous mode [ 133.138076][ T6600] veth0_macvtap: entered promiscuous mode [ 133.154841][ T6600] veth1_macvtap: entered promiscuous mode [ 133.239646][ T51] Bluetooth: hci1: command tx timeout [ 133.260849][ T10] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 133.269896][ T10] gspca_sunplus: reg_w_riv err -71 [ 133.275094][ T10] sunplus 2-1:0.0: probe with driver sunplus failed with error -71 [ 133.282875][ T6600] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 133.287829][ T10] usb 2-1: USB disconnect, device number 9 [ 133.305881][ T6600] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 133.354231][ T3481] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.379350][ T3481] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.420856][ T4324] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.450304][ T3481] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.571013][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 133.600440][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 133.655975][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 133.664971][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 134.152660][ T9] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 134.311158][ T9] usb 2-1: config 0 has no interfaces? [ 134.317160][ T9] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 134.327062][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.340484][ T9] usb 2-1: config 0 descriptor?? [ 134.560328][ T6684] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 134.573629][ T6684] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 134.585639][ T9] usb 2-1: USB disconnect, device number 10 [ 134.916553][ T6698] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 134.934245][ T6698] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 134.945986][ T6698] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 134.958072][ T6698] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 134.972341][ T6698] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 134.990654][ T1324] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 135.006623][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 135.016986][ T1324] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 135.024485][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 135.121386][ T9] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 135.149256][ T3404] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 135.155711][ T6700] tipc: Enabled bearer , priority 10 [ 135.279324][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 135.286059][ T9] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 135.295306][ T9] usb 1-1: config 0 has no interface number 0 [ 135.302575][ T9] usb 1-1: config 0 interface 184 has no altsetting 0 [ 135.312663][ T9] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 135.321898][ T51] Bluetooth: hci1: command tx timeout [ 135.327766][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.333083][ T3404] usb 2-1: Using ep0 maxpacket: 16 [ 135.336029][ T9] usb 1-1: Product: syz [ 135.345452][ T9] usb 1-1: Manufacturer: syz [ 135.347458][ T3404] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 135.350234][ T9] usb 1-1: SerialNumber: syz [ 135.364933][ T3404] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 135.368296][ T9] usb 1-1: config 0 descriptor?? [ 135.377038][ T3404] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 1.40 [ 135.386729][ T9] smsc75xx v1.0.0 [ 135.392427][ T3404] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.400955][ T3404] usb 2-1: Product: syz [ 135.405146][ T3404] usb 2-1: Manufacturer: syz [ 135.412540][ T3404] usb 2-1: SerialNumber: syz [ 135.848754][ T3404] usb 2-1: 0:2 : does not exist [ 135.890772][ T6712] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 135.907250][ T6712] kvm: pic: single mode not supported [ 135.907486][ T6712] kvm: pic: non byte read [ 135.918183][ T6712] kvm: pic: level sensitive irq not supported [ 135.918254][ T6712] kvm: pic: non byte read [ 135.931983][ T6712] kvm: pic: level sensitive irq not supported [ 135.932044][ T6712] kvm: pic: non byte read [ 135.943278][ T6712] kvm: pic: level sensitive irq not supported [ 135.943332][ T6712] kvm: pic: non byte read [ 136.001830][ T9] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 136.013273][ T9] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 136.083858][ T3404] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 136.141677][ T3404] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5) [ 136.166152][ T3404] usb 2-1: 5:0: cannot get min/max values for control 4 (id 5) [ 136.218020][ T3404] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5) [ 136.249041][ T3404] usb 2-1: USB disconnect, device number 11 [ 136.301880][ T5851] udevd[5851]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 136.451438][ T6725] netlink: 4 bytes leftover after parsing attributes in process `syz.2.250'. [ 136.779380][ T3404] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 136.962807][ T3404] usb 3-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 136.973948][ T3404] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.989523][ T3404] usb 3-1: Product: syz [ 136.993704][ T3404] usb 3-1: Manufacturer: syz [ 137.005027][ T3404] usb 3-1: SerialNumber: syz [ 137.030462][ T3404] usb 3-1: config 0 descriptor?? [ 137.058758][ T3404] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 137.378181][ T6727] syz.3.251 (6727): drop_caches: 2 [ 137.399887][ T51] Bluetooth: hci1: command tx timeout [ 137.852392][ T9] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000300: -71 [ 137.868885][ T9] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to write ADDR_FILTX: -71 [ 137.880860][ T9] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to set mac address [ 137.895482][ T9] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 137.905414][ T9] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71 [ 137.925812][ T9] usb 1-1: USB disconnect, device number 7 [ 138.127638][ T6747] TCP: out of memory -- consider tuning tcp_mem [ 138.538628][ T6757] netlink: 8 bytes leftover after parsing attributes in process `syz.0.263'. [ 138.556665][ T6757] netlink: 8 bytes leftover after parsing attributes in process `syz.0.263'. [ 138.566000][ T6757] netlink: 8 bytes leftover after parsing attributes in process `syz.0.263'. [ 138.599592][ T6757] netlink: 8 bytes leftover after parsing attributes in process `syz.0.263'. [ 138.608412][ T6757] netlink: 8 bytes leftover after parsing attributes in process `syz.0.263'. [ 138.659223][ T30] audit: type=1326 audit(1751457774.853:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6758 comm="syz.3.264" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7facef18e929 code=0x0 [ 139.865482][ T6768] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 139.896074][ T6768] kvm: pic: non byte read [ 139.906955][ T6768] kvm: pic: level sensitive irq not supported [ 139.907043][ T6768] kvm: pic: non byte read [ 139.974085][ T6768] kvm: pic: level sensitive irq not supported [ 139.974159][ T6768] kvm: pic: non byte read [ 139.991255][ T6768] kvm: pic: level sensitive irq not supported [ 139.991893][ T6768] kvm: pic: non byte read [ 140.109218][ T3404] gspca_sonixj: i2c_w8 err -71 [ 140.160743][ T3404] sonixj 3-1:0.0: probe with driver sonixj failed with error -71 [ 140.185191][ T3404] usb 3-1: USB disconnect, device number 6 [ 140.803600][ T6789] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 141.101469][ T9] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 141.153233][ T6799] syzkaller0: create flow: hash 494344190 index 1 [ 141.179423][ T5908] syzkaller0: tun_net_xmit 76 [ 141.197331][ T6799] syzkaller0: delete flow: hash 494344190 index 1 [ 141.261803][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 141.275807][ T9] usb 4-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 141.290703][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.318476][ T9] usb 4-1: Product: syz [ 141.330222][ T9] usb 4-1: Manufacturer: syz [ 141.334941][ T10] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 141.342503][ T9] usb 4-1: SerialNumber: syz [ 141.352355][ T9] usb 4-1: config 0 descriptor?? [ 141.360988][ T9] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 141.500766][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 141.515826][ T10] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 141.543299][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 141.584111][ T10] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 141.594030][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.602706][ T10] usb 1-1: Product: syz [ 141.606902][ T10] usb 1-1: Manufacturer: syz [ 141.613259][ T10] usb 1-1: SerialNumber: syz [ 141.628729][ T10] usb 1-1: config 0 descriptor?? [ 141.647497][ T10] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 141.667788][ T10] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 142.278776][ T10] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 142.296041][ T10] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 142.918847][ T10] em28xx 1-1:0.0: Unknown AC97 audio processor detected! [ 142.935345][ T10] em28xx 1-1:0.0: couldn't setup AC97 register 2 [ 142.943896][ T10] em28xx 1-1:0.0: couldn't setup AC97 register 4 [ 143.554433][ T10] em28xx 1-1:0.0: couldn't setup AC97 register 54 [ 143.561694][ T10] em28xx 1-1:0.0: couldn't setup AC97 register 56 [ 143.575994][ T10] usb 1-1: USB disconnect, device number 8 [ 144.029896][ T9] gspca_sonixj: reg_w1 err -71 [ 144.113070][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 144.215436][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 144.638625][ T9] sonixj 4-1:0.0: probe with driver sonixj failed with error -71 [ 144.640858][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 144.783220][ T9] usb 4-1: USB disconnect, device number 13 [ 145.119223][ T6344] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 145.289244][ T6344] usb 3-1: Using ep0 maxpacket: 32 [ 145.297323][ T6344] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 145.307101][ T6344] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.315123][ T6344] usb 3-1: Product: syz [ 145.320346][ T6344] usb 3-1: Manufacturer: syz [ 145.324959][ T6344] usb 3-1: SerialNumber: syz [ 145.333632][ T6344] usb 3-1: config 0 descriptor?? [ 145.346558][ T6344] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 145.389397][ T5846] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 145.553583][ T5846] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 145.565698][ T5846] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 145.576509][ T5846] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.588690][ T5846] usb 4-1: config 0 descriptor?? [ 145.598097][ T5846] pwc: Askey VC010 type 2 USB webcam detected. [ 145.921154][ T6849] binder_alloc: 6848: pid 6848 spamming oneway? 1 buffers allocated for a total size of 4096 [ 145.940791][ T6849] binder_alloc: 6848: pid 6848 spamming oneway? 2 buffers allocated for a total size of 5120 [ 146.015227][ T5846] pwc: recv_control_msg error -32 req 02 val 2b00 [ 146.025259][ T5846] pwc: recv_control_msg error -32 req 02 val 2700 [ 146.038430][ T5846] pwc: recv_control_msg error -32 req 02 val 2c00 [ 146.046742][ T5846] pwc: recv_control_msg error -32 req 04 val 1000 [ 146.068983][ T5846] pwc: recv_control_msg error -32 req 04 val 1300 [ 146.081000][ T5846] pwc: recv_control_msg error -32 req 04 val 1400 [ 146.088245][ T5846] pwc: recv_control_msg error -32 req 02 val 2000 [ 146.299249][ T5846] pwc: recv_control_msg error -32 req 04 val 1500 [ 146.308514][ T5846] pwc: recv_control_msg error -32 req 02 val 2500 [ 146.319820][ T5846] pwc: recv_control_msg error -32 req 02 val 2400 [ 146.429282][ T10] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 146.540600][ T5846] pwc: recv_control_msg error -71 req 02 val 2900 [ 146.553076][ T5846] pwc: recv_control_msg error -71 req 02 val 2800 [ 146.560317][ T5846] pwc: recv_control_msg error -71 req 04 val 1100 [ 146.567392][ T5846] pwc: recv_control_msg error -71 req 04 val 1200 [ 146.587147][ T5846] pwc: Registered as video103. [ 146.602789][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 146.602954][ T5846] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input10 [ 146.632672][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 146.648671][ T5846] usb 4-1: USB disconnect, device number 14 [ 146.677667][ T10] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 146.703375][ T10] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 146.712726][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.721067][ T10] usb 2-1: Product: syz [ 146.725382][ T10] usb 2-1: Manufacturer: syz [ 146.730056][ T10] usb 2-1: SerialNumber: syz [ 146.944423][ T10] usb 2-1: 0:2 : does not exist [ 146.957289][ T10] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 146.982946][ T10] usb 2-1: USB disconnect, device number 12 [ 147.010862][ T43] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 147.019772][ T5851] udevd[5851]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 147.181576][ T43] usb 1-1: config index 0 descriptor too short (expected 65183, got 72) [ 147.200899][ T43] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 147.220566][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.239463][ T43] usb 1-1: Product: syz [ 147.243664][ T43] usb 1-1: Manufacturer: syz [ 147.248722][ T43] usb 1-1: SerialNumber: syz [ 147.268450][ T43] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 147.297749][ T24] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 147.517655][ T6863] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 147.532903][ T6863] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 147.553834][ T6863] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 147.578158][ T6863] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 147.634389][ T6863] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 147.651547][ T6863] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 147.663600][ T10] usb 1-1: USB disconnect, device number 9 [ 147.790563][ T6878] netlink: 'syz.1.307': attribute type 27 has an invalid length. [ 147.910238][ T6878] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.918403][ T6878] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.932914][ T6878] vcan0: left allmulticast mode [ 148.089009][ T6878] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 148.133473][ T6878] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 148.182793][ T6344] gspca_stk1135: reg_w 0x351 err -71 [ 148.190813][ T6344] gspca_stk1135: serial bus timeout: status=0x00 [ 148.209679][ T6344] gspca_stk1135: Sensor write failed [ 148.215007][ T6344] gspca_stk1135: serial bus timeout: status=0x00 [ 148.246375][ T6344] gspca_stk1135: Sensor write failed [ 148.252950][ T6344] gspca_stk1135: serial bus timeout: status=0x00 [ 148.266436][ T6344] gspca_stk1135: Sensor read failed [ 148.283802][ T6344] gspca_stk1135: serial bus timeout: status=0x00 [ 148.313531][ T6344] gspca_stk1135: Sensor read failed [ 148.318789][ T6344] gspca_stk1135: Detected sensor type unknown (0x0) [ 148.340724][ T6344] gspca_stk1135: serial bus timeout: status=0x00 [ 148.347106][ T6344] gspca_stk1135: Sensor read failed [ 148.352879][ T6344] gspca_stk1135: serial bus timeout: status=0x00 [ 148.359869][ T24] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 148.377745][ T6344] gspca_stk1135: Sensor read failed [ 148.384345][ T24] ath9k_htc: Failed to initialize the device [ 148.390659][ T6344] gspca_stk1135: serial bus timeout: status=0x00 [ 148.399312][ T6344] gspca_stk1135: Sensor write failed [ 148.405197][ T6344] gspca_stk1135: serial bus timeout: status=0x00 [ 148.406644][ T10] usb 1-1: ath9k_htc: USB layer deinitialized [ 148.412185][ T6344] gspca_stk1135: Sensor write failed [ 148.425345][ T6344] stk1135 3-1:0.0: probe with driver stk1135 failed with error -71 [ 148.443258][ T6344] usb 3-1: USB disconnect, device number 7 [ 148.567035][ T12] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.597702][ T12] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.632167][ T12] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.649382][ T1324] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.770253][ T10] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 148.939200][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 148.963918][ T10] usb 1-1: config index 0 descriptor too short (expected 241, got 72) [ 148.984413][ T10] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 149.034501][ T10] usb 1-1: New USB device found, idVendor=110a, idProduct=2210, bcdDevice=bd.da [ 149.050814][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.075906][ T10] usb 1-1: config 0 descriptor?? [ 149.094595][ T10] mos7840 1-1:0.0: Moschip 7840/7820 USB Serial Driver converter detected [ 149.828403][ T6926] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 149.850078][ T6926] kvm: pic: non byte read [ 149.856418][ T6926] kvm: pic: level sensitive irq not supported [ 149.856480][ T6926] kvm: pic: non byte read [ 149.868280][ T6926] kvm: pic: level sensitive irq not supported [ 149.868344][ T6926] kvm: pic: non byte read [ 149.881288][ T6926] kvm: pic: level sensitive irq not supported [ 149.881349][ T6926] kvm: pic: non byte read [ 149.973258][ T6931] binder_alloc: 6930: binder_alloc_buf, no vma [ 150.229685][ T6940] netfs: Couldn't get user pages (rc=-14) [ 150.324503][ T6943] netlink: 8 bytes leftover after parsing attributes in process `syz.1.323'. [ 150.333765][ T6943] netlink: 8 bytes leftover after parsing attributes in process `syz.1.323'. [ 150.342964][ T6943] netlink: 8 bytes leftover after parsing attributes in process `syz.1.323'. [ 150.353762][ T10] mos7840 ttyUSB0: probe with driver mos7840 failed with error -71 [ 150.367327][ T10] mos7840 ttyUSB1: probe with driver mos7840 failed with error -71 [ 150.392360][ T6946] netlink: 8 bytes leftover after parsing attributes in process `syz.1.323'. [ 150.404391][ T10] usb 1-1: USB disconnect, device number 10 [ 150.418825][ T10] mos7840 1-1:0.0: device disconnected [ 150.425946][ T6946] netlink: 8 bytes leftover after parsing attributes in process `syz.1.323'. [ 150.439335][ T6880] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 150.493542][ T6948] netlink: 4 bytes leftover after parsing attributes in process `syz.3.325'. [ 150.562986][ T6949] netlink: 4 bytes leftover after parsing attributes in process `syz.3.325'. [ 150.599245][ T6880] usb 3-1: Using ep0 maxpacket: 32 [ 150.605863][ T6880] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 150.616496][ T6880] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 150.629514][ T6880] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 150.638643][ T6880] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.648894][ T6880] usb 3-1: config 0 descriptor?? [ 150.658192][ T6880] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 151.674715][ T5853] Bluetooth: hci0: unexpected cc 0x2039 length: 9 > 1 [ 151.682064][ T5853] Bluetooth: hci0: unexpected event for opcode 0x2039 [ 152.024980][ T6971] netlink: 4 bytes leftover after parsing attributes in process `syz.0.333'. [ 152.045381][ T6971] syzkaller1: entered promiscuous mode [ 152.069731][ T6971] syzkaller1: entered allmulticast mode [ 152.152717][ T1324] bridge_slave_1: left allmulticast mode [ 152.158545][ T1324] bridge_slave_1: left promiscuous mode [ 152.165914][ T1324] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.174840][ T6975] binder: 6972:6975 ioctl c0306201 200000000480 returned -14 [ 152.206945][ T1324] bridge_slave_0: left allmulticast mode [ 152.222424][ T1324] bridge_slave_0: left promiscuous mode [ 152.231747][ T1324] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.920055][ T30] audit: type=1800 audit(1751457789.073:111): pid=6988 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.339" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 153.385494][ T24] usb 3-1: USB disconnect, device number 8 [ 153.706347][ T1324] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 153.710879][ T6880] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 153.726252][ T1324] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 153.736949][ T1324] bond0 (unregistering): Released all slaves [ 153.872778][ T24] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 153.909446][ T6880] usb 1-1: Using ep0 maxpacket: 32 [ 153.917362][ T6880] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 153.925849][ T6880] usb 1-1: config 0 has no interface number 0 [ 153.933276][ T6880] usb 1-1: config 0 interface 184 has no altsetting 0 [ 153.945020][ T6880] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 153.960416][ T6880] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.975130][ T6880] usb 1-1: Product: syz [ 153.979408][ T6880] usb 1-1: Manufacturer: syz [ 153.983998][ T6880] usb 1-1: SerialNumber: syz [ 154.000014][ T6880] usb 1-1: config 0 descriptor?? [ 154.012089][ T6880] smsc75xx v1.0.0 [ 154.047520][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 154.071961][ T24] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 154.081913][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.100454][ T24] usb 3-1: config 0 descriptor?? [ 154.110826][ T24] pwc: Askey VC010 type 2 USB webcam detected. [ 154.210807][ T5853] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 154.222029][ T5853] Bluetooth: hci3: Injecting HCI hardware error event [ 154.230232][ T51] Bluetooth: hci3: hardware error 0x00 [ 154.469689][ T1324] hsr_slave_0: left promiscuous mode [ 154.475780][ T1324] hsr_slave_1: left promiscuous mode [ 154.482197][ T1324] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 154.490440][ T1324] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 154.498728][ T1324] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 154.509276][ T1324] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 154.522457][ T24] pwc: recv_control_msg error -32 req 02 val 2b00 [ 154.530456][ T24] pwc: recv_control_msg error -32 req 02 val 2700 [ 154.537755][ T24] pwc: recv_control_msg error -32 req 02 val 2c00 [ 154.559261][ T24] pwc: recv_control_msg error -32 req 04 val 1000 [ 154.570129][ T24] pwc: recv_control_msg error -32 req 04 val 1300 [ 154.581616][ T1324] veth1_macvtap: left promiscuous mode [ 154.587583][ T24] pwc: recv_control_msg error -32 req 04 val 1400 [ 154.587619][ T1324] veth0_macvtap: left promiscuous mode [ 154.597808][ T24] pwc: recv_control_msg error -32 req 02 val 2000 [ 154.606522][ T6997] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 154.620154][ T6997] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 154.634244][ T1324] veth1_vlan: left promiscuous mode [ 154.650059][ T24] pwc: recv_control_msg error -32 req 02 val 2100 [ 154.657584][ T24] pwc: recv_control_msg error -32 req 04 val 1500 [ 154.663662][ T1324] veth0_vlan: left promiscuous mode [ 154.669304][ T6880] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 154.687951][ T24] pwc: recv_control_msg error -32 req 02 val 2500 [ 154.697606][ T6880] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 154.746643][ T24] pwc: recv_control_msg error -32 req 02 val 2400 [ 154.957263][ T24] pwc: recv_control_msg error -71 req 02 val 2900 [ 154.973556][ T24] pwc: recv_control_msg error -71 req 02 val 2800 [ 154.984573][ T24] pwc: recv_control_msg error -71 req 04 val 1100 [ 155.007772][ T24] pwc: recv_control_msg error -71 req 04 val 1200 [ 155.021204][ T24] pwc: Registered as video103. [ 155.060194][ T24] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input11 [ 155.100637][ T24] usb 3-1: USB disconnect, device number 9 [ 155.337426][ T1324] team0 (unregistering): Port device team_slave_1 removed [ 155.376372][ T1324] team0 (unregistering): Port device team_slave_0 removed [ 155.740037][ T5853] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 155.754466][ T5853] Bluetooth: hci0: Injecting HCI hardware error event [ 155.771579][ T5844] Bluetooth: hci0: hardware error 0x00 [ 155.792569][ T24] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 155.878977][ T7015] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.973953][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 155.984193][ T24] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 155.987661][ T7015] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.993588][ T24] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 155.993614][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.005742][ T24] usb 3-1: config 0 descriptor?? [ 156.116524][ T7015] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.166808][ T7026] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 156.181242][ T7026] kvm: pic: non byte read [ 156.185893][ T7026] kvm: pic: level sensitive irq not supported [ 156.185977][ T7026] kvm: pic: non byte read [ 156.228947][ T7015] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.246278][ T7026] kvm: pic: level sensitive irq not supported [ 156.246385][ T7026] kvm: pic: non byte read [ 156.275788][ T7026] kvm: pic: level sensitive irq not supported [ 156.275852][ T7026] kvm: pic: non byte read [ 156.286835][ T51] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 156.295861][ T7026] kvm: pic: level sensitive irq not supported [ 156.295994][ T7026] kvm: pic: non byte read [ 156.451554][ T12] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.474736][ T12] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.495293][ T12] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.521483][ T5908] usb 3-1: USB disconnect, device number 10 [ 156.527467][ T12] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.929802][ T24] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 156.976861][ T6880] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71 [ 156.991012][ T6880] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71 [ 157.001371][ T6880] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 157.012209][ T6880] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71 [ 157.032728][ T6880] usb 1-1: USB disconnect, device number 11 [ 157.102648][ T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 157.114125][ T7043] netlink: 88 bytes leftover after parsing attributes in process `syz.2.359'. [ 157.123846][ T24] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 157.134024][ T24] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 157.143415][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.299575][ T24] usb 4-1: config 0 descriptor?? [ 157.628020][ T7057] netlink: 'syz.0.364': attribute type 10 has an invalid length. [ 157.663820][ T7057] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 157.694450][ T6880] usb 4-1: USB disconnect, device number 15 [ 157.799248][ T5844] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 157.959814][ T6884] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 158.139257][ T6884] usb 1-1: Using ep0 maxpacket: 8 [ 158.147777][ T6884] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 158.159416][ T6900] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 158.163435][ T6884] usb 1-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 158.176152][ T6884] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.186048][ T6884] usb 1-1: Product: syz [ 158.190296][ T6884] usb 1-1: Manufacturer: syz [ 158.195079][ T6884] usb 1-1: SerialNumber: syz [ 158.208894][ T6884] usb 1-1: config 0 descriptor?? [ 158.217624][ T6884] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 158.320294][ T6900] usb 2-1: Using ep0 maxpacket: 8 [ 158.328234][ T6900] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 158.341472][ T6900] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 158.351397][ T6900] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 158.364937][ T6900] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 158.374173][ T6900] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.388620][ T6900] hub 2-1:1.0: bad descriptor, ignoring hub [ 158.395270][ T6900] hub 2-1:1.0: probe with driver hub failed with error -5 [ 158.419753][ T6900] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 158.543712][ T7073] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 158.556496][ T7073] kvm: pic: non byte read [ 158.561549][ T7073] kvm: pic: level sensitive irq not supported [ 158.561607][ T7073] kvm: pic: non byte read [ 158.699636][ T5908] usb 2-1: USB disconnect, device number 13 [ 158.999368][ T5908] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 159.149355][ T24] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 159.154117][ T5908] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 159.168843][ T5908] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 159.181253][ T5908] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.192311][ T5908] usb 4-1: config 0 descriptor?? [ 159.208010][ T5908] pwc: Askey VC010 type 2 USB webcam detected. [ 159.301708][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 159.313398][ T24] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 159.323591][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.337515][ T24] usb 3-1: config 0 descriptor?? [ 159.356895][ T24] pwc: Askey VC010 type 2 USB webcam detected. [ 159.610870][ T5908] pwc: recv_control_msg error -32 req 02 val 2b00 [ 159.618003][ T5908] pwc: recv_control_msg error -32 req 02 val 2700 [ 159.626726][ T5908] pwc: recv_control_msg error -32 req 02 val 2c00 [ 159.634000][ T5908] pwc: recv_control_msg error -32 req 04 val 1000 [ 159.641402][ T5908] pwc: recv_control_msg error -32 req 04 val 1300 [ 159.648435][ T5908] pwc: recv_control_msg error -32 req 04 val 1400 [ 159.655497][ T5908] pwc: recv_control_msg error -32 req 02 val 2000 [ 159.662620][ T5908] pwc: recv_control_msg error -32 req 02 val 2100 [ 159.672596][ T5908] pwc: recv_control_msg error -32 req 04 val 1500 [ 159.680727][ T5908] pwc: recv_control_msg error -32 req 02 val 2500 [ 159.687758][ T5908] pwc: recv_control_msg error -32 req 02 val 2400 [ 159.694827][ T5908] pwc: recv_control_msg error -32 req 02 val 2600 [ 159.756441][ T24] pwc: recv_control_msg error -32 req 02 val 2b00 [ 159.763671][ T24] pwc: recv_control_msg error -32 req 02 val 2700 [ 159.771770][ T24] pwc: recv_control_msg error -32 req 02 val 2c00 [ 159.779011][ T24] pwc: recv_control_msg error -32 req 04 val 1000 [ 159.786941][ T24] pwc: recv_control_msg error -32 req 04 val 1300 [ 159.794377][ T24] pwc: recv_control_msg error -32 req 04 val 1400 [ 159.801838][ T24] pwc: recv_control_msg error -32 req 02 val 2000 [ 159.809266][ T24] pwc: recv_control_msg error -32 req 02 val 2100 [ 159.816402][ T24] pwc: recv_control_msg error -32 req 04 val 1500 [ 159.824404][ T24] pwc: recv_control_msg error -32 req 02 val 2500 [ 159.831737][ T24] pwc: recv_control_msg error -32 req 02 val 2400 [ 159.903220][ T5908] pwc: recv_control_msg error -71 req 02 val 2800 [ 159.920040][ T5908] pwc: recv_control_msg error -71 req 04 val 1100 [ 159.926926][ T5908] pwc: recv_control_msg error -71 req 04 val 1200 [ 159.938221][ T5908] pwc: Registered as video103. [ 159.955037][ T5908] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input12 [ 159.978719][ T5908] usb 4-1: USB disconnect, device number 16 [ 160.044625][ T24] pwc: recv_control_msg error -71 req 02 val 2900 [ 160.064495][ T24] pwc: recv_control_msg error -71 req 02 val 2800 [ 160.079905][ T24] pwc: recv_control_msg error -71 req 04 val 1100 [ 160.102268][ T24] pwc: recv_control_msg error -71 req 04 val 1200 [ 160.118533][ T24] pwc: Registered as video103. [ 160.134203][ T24] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input13 [ 160.177383][ T7088] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 160.203073][ T7088] kvm: pic: non byte read [ 160.207198][ T24] usb 3-1: USB disconnect, device number 11 [ 160.207870][ T7088] kvm: pic: level sensitive irq not supported [ 160.217837][ T7088] kvm: pic: non byte read [ 160.233508][ T7088] kvm: pic: level sensitive irq not supported [ 160.233620][ T7088] kvm: pic: non byte read [ 160.245604][ T7088] kvm: pic: level sensitive irq not supported [ 160.258525][ T7088] kvm: pic: level sensitive irq not supported [ 160.742337][ T7104] netfs: Couldn't get user pages (rc=-14) [ 160.929310][ T10] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 161.043265][ T24] IPVS: starting estimator thread 0... [ 161.048869][ T7109] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 161.123497][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 161.153391][ T7113] IPVS: using max 28 ests per chain, 67200 per kthread [ 161.161161][ T10] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 161.185953][ T10] usb 2-1: config 0 has no interface number 0 [ 161.189531][ T6884] gspca_zc3xx: reg_r err -110 [ 161.205064][ T10] usb 2-1: config 0 interface 184 has no altsetting 0 [ 161.225927][ T10] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 161.245282][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.253743][ T10] usb 2-1: Product: syz [ 161.262387][ T10] usb 2-1: Manufacturer: syz [ 161.267106][ T10] usb 2-1: SerialNumber: syz [ 161.304327][ T10] usb 2-1: config 0 descriptor?? [ 161.330806][ T10] smsc75xx v1.0.0 [ 161.439861][ T7122] trusted_key: syz.0.389 sent an empty control message without MSG_MORE. [ 161.809229][ T6884] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 161.815623][ T6884] gspca_zc3xx 1-1:0.0: probe with driver gspca_zc3xx failed with error -110 [ 161.829047][ T6884] usb 1-1: USB disconnect, device number 12 [ 161.928071][ T10] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 161.940077][ T10] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 162.129288][ T5908] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 162.289263][ T5908] usb 3-1: Using ep0 maxpacket: 8 [ 162.311146][ T5908] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 162.321315][ T5908] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.330102][ T5908] usb 3-1: Product: syz [ 162.337654][ T5908] usb 3-1: Manufacturer: syz [ 162.343277][ T5908] usb 3-1: SerialNumber: syz [ 162.352038][ T5908] usb 3-1: config 0 descriptor?? [ 162.566088][ T5908] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 163.386268][ T5908] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 163.397424][ T5908] dvbdev: DVB: registering new adapter (TerraTec NOXON DAB Stick) [ 163.405460][ T5908] usb 3-1: media controller created [ 163.426285][ T5908] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 163.487663][ T5908] i2c i2c-1: Added multiplexed i2c bus 2 [ 163.496431][ T5908] rtl2830 1-0010: Realtek RTL2830 successfully attached [ 163.504735][ T5908] usb 3-1: DVB: registering adapter 1 frontend 0 (Realtek RTL2830 (DVB-T))... [ 163.514544][ T5908] dvbdev: dvb_create_media_entity: media entity 'Realtek RTL2830 (DVB-T)' registered. [ 163.555109][ T5908] DVB: Unable to find symbol mxl5005s_attach() [ 164.368056][ T10] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000010: -71 [ 164.390629][ T10] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to write HW_CFG: -71 [ 164.400362][ T10] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 164.413830][ T10] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71 [ 164.449379][ T10] usb 2-1: USB disconnect, device number 14 [ 164.517726][ T7143] mkiss: ax0: crc mode is auto. [ 164.544211][ T24] usb 3-1: USB disconnect, device number 12 [ 164.689506][ T7143] block nbd0: server does not support multiple connections per device. [ 164.700603][ T7143] block nbd0: shutting down sockets [ 164.869261][ T24] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 165.030677][ T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 165.040984][ T24] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 165.050191][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.061105][ T24] usb 4-1: config 0 descriptor?? [ 165.077881][ T24] pwc: Askey VC010 type 2 USB webcam detected. [ 165.220913][ T10] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 165.359267][ T6899] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 165.379348][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 165.388117][ T10] usb 2-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 165.397325][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.405356][ T10] usb 2-1: Product: syz [ 165.409612][ T10] usb 2-1: Manufacturer: syz [ 165.414803][ T10] usb 2-1: SerialNumber: syz [ 165.422520][ T10] usb 2-1: config 0 descriptor?? [ 165.430794][ T10] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 165.475270][ T24] pwc: recv_control_msg error -32 req 02 val 2b00 [ 165.482719][ T24] pwc: recv_control_msg error -32 req 02 val 2700 [ 165.489966][ T24] pwc: recv_control_msg error -32 req 02 val 2c00 [ 165.497436][ T24] pwc: recv_control_msg error -32 req 04 val 1000 [ 165.511038][ T6899] usb 3-1: config 0 has no interfaces? [ 165.518107][ T6899] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 165.527419][ T6899] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 165.535461][ T6899] usb 3-1: Manufacturer: syz [ 165.543269][ T6899] usb 3-1: config 0 descriptor?? [ 165.705785][ T24] pwc: recv_control_msg error -32 req 04 val 1400 [ 165.715620][ T24] pwc: recv_control_msg error -32 req 02 val 2000 [ 165.727042][ T24] pwc: recv_control_msg error -32 req 02 val 2100 [ 165.734566][ T24] pwc: recv_control_msg error -32 req 04 val 1500 [ 165.743327][ T24] pwc: recv_control_msg error -32 req 02 val 2500 [ 165.773381][ T6344] usb 3-1: USB disconnect, device number 13 [ 165.958335][ T24] pwc: recv_control_msg error -71 req 02 val 2600 [ 165.968055][ T24] pwc: recv_control_msg error -71 req 02 val 2900 [ 165.975692][ T24] pwc: recv_control_msg error -71 req 02 val 2800 [ 165.982824][ T24] pwc: recv_control_msg error -71 req 04 val 1100 [ 165.990910][ T24] pwc: recv_control_msg error -71 req 04 val 1200 [ 165.998739][ T24] pwc: Registered as video103. [ 166.016566][ T24] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input14 [ 166.026179][ T6884] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 166.047455][ T24] usb 4-1: USB disconnect, device number 17 [ 166.191244][ T6884] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 166.203484][ T6884] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 166.213474][ T6884] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.224393][ T6884] usb 1-1: config 0 descriptor?? [ 166.243553][ T6884] pwc: Askey VC010 type 2 USB webcam detected. [ 166.649252][ T6884] pwc: recv_control_msg error -32 req 02 val 2b00 [ 166.662545][ T6884] pwc: recv_control_msg error -32 req 02 val 2700 [ 166.685111][ T6884] pwc: recv_control_msg error -32 req 02 val 2c00 [ 166.704229][ T6884] pwc: recv_control_msg error -32 req 04 val 1000 [ 166.719792][ T6884] pwc: recv_control_msg error -32 req 04 val 1300 [ 166.730405][ T6884] pwc: recv_control_msg error -32 req 04 val 1400 [ 166.751077][ T6884] pwc: recv_control_msg error -32 req 02 val 2000 [ 166.779806][ T6884] pwc: recv_control_msg error -32 req 02 val 2100 [ 167.188312][ T6884] pwc: recv_control_msg error -71 req 02 val 2400 [ 167.201848][ T6884] pwc: recv_control_msg error -71 req 02 val 2600 [ 167.215592][ T6884] pwc: recv_control_msg error -71 req 02 val 2900 [ 167.227805][ T6884] pwc: recv_control_msg error -71 req 02 val 2800 [ 167.235664][ T6884] pwc: recv_control_msg error -71 req 04 val 1100 [ 167.248982][ T6884] pwc: recv_control_msg error -71 req 04 val 1200 [ 167.257463][ T6884] pwc: Registered as video103. [ 167.264418][ T6884] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input15 [ 167.318500][ T6884] usb 1-1: USB disconnect, device number 13 [ 167.648388][ T7196] sg_write: data in/out 2013/126 bytes for SCSI command 0x0-- guessing data in; [ 167.648388][ T7196] program syz.2.417 not setting count and/or reply_len properly [ 167.790714][ T7199] bridge0: port 3(gretap0) entered blocking state [ 167.797280][ T7199] bridge0: port 3(gretap0) entered disabled state [ 167.804430][ T7199] gretap0: entered allmulticast mode [ 167.817761][ T7199] gretap0: entered promiscuous mode [ 167.911873][ T30] audit: type=1326 audit(1751457804.113:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7202 comm="syz.0.420" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdb20d8e929 code=0x0 [ 168.249343][ T24] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 168.412085][ T24] usb 3-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 168.423140][ T24] usb 3-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 168.433035][ T24] usb 3-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 168.445986][ T24] usb 3-1: config 0 interface 0 has no altsetting 0 [ 168.452708][ T24] usb 3-1: New USB device found, idVendor=046d, idProduct=c294, bcdDevice= 0.00 [ 168.461774][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.472326][ T24] usb 3-1: config 0 descriptor?? [ 168.681513][ T10] gspca_stk1135: reg_w 0x353 err -71 [ 168.687849][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 168.699051][ T10] gspca_stk1135: Sensor write failed [ 168.704635][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 168.724057][ T10] gspca_stk1135: Sensor write failed [ 168.731886][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 168.738301][ T10] gspca_stk1135: Sensor read failed [ 168.746406][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 168.752877][ T10] gspca_stk1135: Sensor read failed [ 168.758198][ T10] gspca_stk1135: Detected sensor type unknown (0x0) [ 168.769514][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 168.775854][ T10] gspca_stk1135: Sensor read failed [ 168.781338][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 168.787674][ T10] gspca_stk1135: Sensor read failed [ 168.794209][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 168.809993][ T10] gspca_stk1135: Sensor write failed [ 168.815384][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 168.823283][ T10] gspca_stk1135: Sensor write failed [ 168.828699][ T10] stk1135 2-1:0.0: probe with driver stk1135 failed with error -71 [ 168.864928][ T10] usb 2-1: USB disconnect, device number 15 [ 168.865404][ T24] usbhid 3-1:0.0: can't add hid device: -71 [ 168.892503][ T24] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 168.920193][ T24] usb 3-1: USB disconnect, device number 14 [ 169.189325][ T6900] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 169.276695][ T24] hid-generic C98F:0003:0000.0002: unknown main item tag 0x0 [ 169.285931][ T24] hid-generic C98F:0003:0000.0002: unknown main item tag 0x0 [ 169.296219][ T7228] capability: warning: `syz.1.427' uses 32-bit capabilities (legacy support in use) [ 169.299226][ T24] hid-generic C98F:0003:0000.0002: hidraw0: HID v0.00 Device [syz0] on syz1 [ 169.306288][ T10] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 169.340047][ T6900] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 169.349034][ T6900] usb 4-1: config index 0 descriptor too short (expected 8192, got 27) [ 169.359226][ T6900] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 169.392928][ T6900] usb 4-1: config 0 has no interfaces? [ 169.401047][ T6900] usb 4-1: config index 1 descriptor too short (expected 8192, got 27) [ 169.422153][ T6900] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 169.449544][ T6900] usb 4-1: config 0 has no interfaces? [ 169.457821][ T7229] fido_id[7229]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 169.473516][ T6900] usb 4-1: config index 2 descriptor too short (expected 8192, got 27) [ 169.481959][ T6900] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 169.492262][ T6900] usb 4-1: config 0 has no interfaces? [ 169.500217][ T6900] usb 4-1: config index 3 descriptor too short (expected 8192, got 27) [ 169.509002][ T6900] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 169.519787][ T6900] usb 4-1: config 0 has no interfaces? [ 169.525385][ T10] usb 1-1: config index 0 descriptor too short (expected 65183, got 72) [ 169.535569][ T6900] usb 4-1: config index 4 descriptor too short (expected 8192, got 27) [ 169.544592][ T6900] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 169.555110][ T10] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 169.564579][ T6900] usb 4-1: config 0 has no interfaces? [ 169.570126][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.578105][ T10] usb 1-1: Product: syz [ 169.582424][ T10] usb 1-1: Manufacturer: syz [ 169.587241][ T10] usb 1-1: SerialNumber: syz [ 169.592601][ T6900] usb 4-1: config index 5 descriptor too short (expected 8192, got 27) [ 169.601041][ T6900] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 169.610633][ T7236] netlink: 'syz.2.430': attribute type 6 has an invalid length. [ 169.613424][ T6900] usb 4-1: config 0 has no interfaces? [ 169.632355][ T10] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 169.635813][ T6884] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 169.646190][ T6900] usb 4-1: config index 6 descriptor too short (expected 8192, got 27) [ 169.662530][ T6900] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 169.670575][ T6884] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 169.682527][ T24] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 169.693050][ T6900] usb 4-1: config 0 has no interfaces? [ 169.704530][ T5908] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 169.722181][ T6900] usb 4-1: config index 7 descriptor too short (expected 8192, got 27) [ 169.751701][ T6900] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 169.763494][ T6900] usb 4-1: config 0 has no interfaces? [ 169.772411][ T6900] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 169.782472][ T6900] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 169.791154][ T6900] usb 4-1: Product: syz [ 169.795423][ T6900] usb 4-1: Manufacturer: syz [ 169.800357][ T6900] usb 4-1: SerialNumber: syz [ 169.824744][ T6900] usb 4-1: config 0 descriptor?? [ 169.859672][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 169.871477][ T24] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 169.891788][ T24] usb 2-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 169.912106][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.916357][ T7226] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 169.920206][ T24] usb 2-1: Product: syz [ 169.920222][ T24] usb 2-1: Manufacturer: syz [ 169.920236][ T24] usb 2-1: SerialNumber: syz [ 169.922876][ T24] usb 2-1: config 0 descriptor?? [ 169.953281][ T7226] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 169.965474][ T7226] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 169.981757][ T24] usb 2-1: bad CDC descriptors [ 169.986842][ T7226] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 169.995852][ T24] usb 2-1: unsupported MDLM descriptors [ 170.008970][ T7226] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 170.036157][ T7226] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 170.046817][ T24] usb 1-1: USB disconnect, device number 14 [ 170.228356][ T6900] usb 4-1: USB disconnect, device number 18 [ 170.374118][ T30] audit: type=1326 audit(1751457806.573:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7245 comm="syz.2.432" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1a19d8e929 code=0x0 [ 170.842165][ T5908] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 170.851788][ T5908] ath9k_htc: Failed to initialize the device [ 170.860391][ T24] usb 1-1: ath9k_htc: USB layer deinitialized [ 171.190723][ T24] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 171.262261][ T7267] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 171.289235][ T7267] picdev_read: 2 callbacks suppressed [ 171.289251][ T7267] kvm: pic: non byte read [ 171.299788][ T7267] kvm: pic: level sensitive irq not supported [ 171.299850][ T7267] kvm: pic: non byte read [ 171.311224][ T7267] kvm: pic: level sensitive irq not supported [ 171.311326][ T7267] kvm: pic: non byte read [ 171.324175][ T7267] kvm: pic: level sensitive irq not supported [ 171.324235][ T7267] kvm: pic: non byte read [ 171.335755][ T7267] kvm: pic: level sensitive irq not supported [ 171.335814][ T7267] kvm: pic: non byte read [ 171.347758][ T7267] kvm: pic: level sensitive irq not supported [ 171.347817][ T7267] kvm: pic: non byte read [ 171.358958][ T7267] kvm: pic: level sensitive irq not supported [ 171.359016][ T7267] kvm: pic: non byte read [ 171.369839][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 171.377570][ T24] usb 1-1: config index 0 descriptor too short (expected 241, got 72) [ 171.396167][ T24] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 171.418269][ T24] usb 1-1: New USB device found, idVendor=110a, idProduct=2210, bcdDevice=bd.da [ 171.439128][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.454939][ T24] usb 1-1: config 0 descriptor?? [ 171.479895][ T24] mos7840 1-1:0.0: Moschip 7840/7820 USB Serial Driver converter detected [ 171.828866][ T7280] kvm: pic: non byte write [ 171.844392][ T7280] kvm: pic: non byte write [ 173.004869][ T6900] usb 2-1: USB disconnect, device number 16 [ 173.252986][ T7301] binder_alloc: 7300: binder_alloc_buf, no vma [ 173.329572][ T24] mos7840 ttyUSB0: probe with driver mos7840 failed with error -71 [ 173.350676][ T24] mos7840 ttyUSB1: probe with driver mos7840 failed with error -71 [ 173.378863][ T24] usb 1-1: USB disconnect, device number 15 [ 173.397191][ T24] mos7840 1-1:0.0: device disconnected [ 173.600141][ T7316] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 173.613024][ T7316] kvm: pic: non byte read [ 173.617597][ T7316] kvm: pic: level sensitive irq not supported [ 173.617647][ T7316] kvm: pic: non byte read [ 173.630255][ T7316] kvm: pic: level sensitive irq not supported [ 173.630326][ T7316] kvm: pic: non byte read [ 173.641565][ T7316] kvm: pic: level sensitive irq not supported [ 173.641739][ T7316] kvm: pic: level sensitive irq not supported [ 173.749286][ T6900] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 173.922588][ T6900] usb 2-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 173.931864][ T6900] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.942059][ T6900] usb 2-1: config 0 descriptor?? [ 174.030988][ T5908] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 174.099245][ T10] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 174.191521][ T5908] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 174.215136][ T5908] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 174.226623][ T5908] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.243237][ T5908] usb 3-1: config 0 descriptor?? [ 174.249877][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 174.260722][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 174.273196][ T5908] pwc: Askey VC010 type 2 USB webcam detected. [ 174.281240][ T10] usb 1-1: config 0 has no interfaces? [ 174.290498][ T10] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 174.299732][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.308391][ T10] usb 1-1: Product: syz [ 174.312985][ T10] usb 1-1: Manufacturer: syz [ 174.318033][ T10] usb 1-1: SerialNumber: syz [ 174.340008][ T10] usb 1-1: config 0 descriptor?? [ 174.566445][ T10] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 174.574447][ T10] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 174.583859][ T10] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 174.591886][ T10] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 174.599942][ T10] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 174.607692][ T10] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 174.615536][ T10] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 174.623336][ T10] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 174.632105][ T10] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 174.639902][ T10] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 174.652769][ T10] hid-generic 0000:007F:FFFFFFFE.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 174.662893][ T5908] pwc: recv_control_msg error -32 req 02 val 2b00 [ 174.674456][ T5908] pwc: recv_control_msg error -32 req 02 val 2700 [ 174.691434][ T5908] pwc: recv_control_msg error -32 req 02 val 2c00 [ 174.698946][ T5908] pwc: recv_control_msg error -32 req 04 val 1000 [ 174.706709][ T5908] pwc: recv_control_msg error -32 req 04 val 1300 [ 174.714593][ T5908] pwc: recv_control_msg error -32 req 04 val 1400 [ 174.718469][ T7333] fido_id[7333]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 174.722971][ T5908] pwc: recv_control_msg error -32 req 02 val 2000 [ 174.738829][ T24] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 174.744474][ T5908] pwc: recv_control_msg error -32 req 02 val 2100 [ 174.758093][ T5908] pwc: recv_control_msg error -32 req 04 val 1500 [ 174.766593][ T5908] pwc: recv_control_msg error -32 req 02 val 2500 [ 174.774253][ T5908] pwc: recv_control_msg error -32 req 02 val 2400 [ 174.781787][ T5908] pwc: recv_control_msg error -32 req 02 val 2600 [ 174.788725][ T5908] pwc: recv_control_msg error -32 req 02 val 2900 [ 174.796212][ T5908] pwc: recv_control_msg error -32 req 02 val 2800 [ 174.909228][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 174.917672][ T24] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 174.927010][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.936953][ T24] usb 4-1: Product: syz [ 174.941158][ T24] usb 4-1: Manufacturer: syz [ 174.945745][ T24] usb 4-1: SerialNumber: syz [ 174.959754][ T24] usb 4-1: config 0 descriptor?? [ 175.004255][ T5908] pwc: recv_control_msg error -71 req 04 val 1200 [ 175.019661][ T5908] pwc: Registered as video103. [ 175.031745][ T5908] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input16 [ 175.067280][ T5908] usb 3-1: USB disconnect, device number 15 [ 175.172048][ T24] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 175.882047][ T6880] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 176.055406][ T6880] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 176.064600][ T6880] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.072871][ T6880] usb 3-1: Product: syz [ 176.077055][ T6880] usb 3-1: Manufacturer: syz [ 176.081750][ T6880] usb 3-1: SerialNumber: syz [ 176.095009][ T6880] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 176.117380][ T6884] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 176.163919][ T6900] pegasus 2-1:0.0: setup Pegasus II specific registers [ 176.339654][ T10] usb 3-1: USB disconnect, device number 16 [ 176.592574][ T24] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 176.609336][ T24] usb 4-1: USB disconnect, device number 19 [ 176.882854][ T5908] usb 1-1: USB disconnect, device number 16 [ 177.159432][ T6884] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 177.178246][ T6884] ath9k_htc: Failed to initialize the device [ 177.186285][ T10] usb 3-1: ath9k_htc: USB layer deinitialized [ 177.259429][ T5908] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 177.419443][ T5908] usb 1-1: Using ep0 maxpacket: 8 [ 177.437876][ T5908] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 177.448356][ T5908] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.456710][ T5908] usb 1-1: Product: syz [ 177.461187][ T5908] usb 1-1: Manufacturer: syz [ 177.465893][ T5908] usb 1-1: SerialNumber: syz [ 177.483738][ T5908] usb 1-1: config 0 descriptor?? [ 177.499405][ T10] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 177.669289][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 177.691650][ T10] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 177.706130][ T10] usb 3-1: config 0 has no interface number 0 [ 177.715446][ T10] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 177.726125][ T5908] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 177.735425][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.746222][ T10] usb 3-1: Product: syz [ 177.751583][ T10] usb 3-1: Manufacturer: syz [ 177.756306][ T10] usb 3-1: SerialNumber: syz [ 177.767506][ T10] usb 3-1: config 0 descriptor?? [ 177.778087][ T10] smsc95xx v2.0.0 [ 177.803897][ T6900] pegasus 2-1:0.0: can't locate MII phy, using default [ 177.837602][ T7351] netlink: 'syz.3.466': attribute type 10 has an invalid length. [ 177.845097][ T6900] pegasus 2-1:0.0: eth1, ELECOM USB Ethernet LD-USB20, 52:f8:f6:93:5d:13 [ 177.858144][ T6900] usb 2-1: USB disconnect, device number 17 [ 178.183877][ T10] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 178.194743][ T10] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 178.239312][ T6900] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 178.369654][ T6900] usb 4-1: device descriptor read/64, error -71 [ 178.390723][ T7361] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 178.609398][ T6900] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 178.719390][ T24] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 178.739300][ T6900] usb 4-1: device descriptor read/64, error -71 [ 178.849783][ T6900] usb usb4-port1: attempt power cycle [ 178.872337][ T24] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 178.882634][ T24] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 178.891709][ T24] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 178.900796][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.912520][ T24] usb 2-1: config 0 descriptor?? [ 179.018842][ T10] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 179.030048][ T10] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -32 [ 179.189323][ T6900] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 179.209791][ T6900] usb 4-1: device descriptor read/8, error -71 [ 179.241390][ T10] usb 2-1: USB disconnect, device number 18 [ 179.339956][ T5908] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 179.355601][ T5908] usb 1-1: USB disconnect, device number 17 [ 179.449322][ T6900] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 179.469733][ T6900] usb 4-1: device descriptor read/8, error -71 [ 179.579569][ T6900] usb usb4-port1: unable to enumerate USB device [ 180.017060][ T7373] could not allocate digest TFM handle cryptd(streebog512-generic) [ 180.058714][ T6900] usb 3-1: USB disconnect, device number 17 [ 180.123868][ T7387] [ 180.126203][ T7387] ============================================ [ 180.132328][ T7387] WARNING: possible recursive locking detected [ 180.138467][ T7387] 6.16.0-rc4-next-20250702-syzkaller #0 Not tainted [ 180.145041][ T7387] -------------------------------------------- [ 180.151173][ T7387] syz.2.474/7387 is trying to acquire lock: [ 180.157063][ T7387] ffff88807dd61568 (&sb->s_type->i_mutex_key#17){+.+.}-{4:4}, at: __simple_recursive_removal+0x95/0x510 [ 180.168242][ T7387] [ 180.168242][ T7387] but task is already holding lock: [ 180.175610][ T7387] ffff888025fc4148 (&sb->s_type->i_mutex_key#17){+.+.}-{4:4}, at: bm_entry_write+0x289/0x540 [ 180.185803][ T7387] [ 180.185803][ T7387] other info that might help us debug this: [ 180.193939][ T7387] Possible unsafe locking scenario: [ 180.193939][ T7387] [ 180.201372][ T7387] CPU0 [ 180.204633][ T7387] ---- [ 180.207890][ T7387] lock(&sb->s_type->i_mutex_key#17); [ 180.213334][ T7387] lock(&sb->s_type->i_mutex_key#17); [ 180.218779][ T7387] [ 180.218779][ T7387] *** DEADLOCK *** [ 180.218779][ T7387] [ 180.226902][ T7387] May be due to missing lock nesting notation [ 180.226902][ T7387] [ 180.235198][ T7387] 3 locks held by syz.2.474/7387: [ 180.240198][ T7387] #0: ffff888050fd9cf8 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x247/0x320 [ 180.249237][ T7387] #1: ffff88807c9fc428 (sb_writers#11){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 180.258193][ T7387] #2: ffff888025fc4148 (&sb->s_type->i_mutex_key#17){+.+.}-{4:4}, at: bm_entry_write+0x289/0x540 [ 180.268798][ T7387] [ 180.268798][ T7387] stack backtrace: [ 180.274687][ T7387] CPU: 0 UID: 0 PID: 7387 Comm: syz.2.474 Not tainted 6.16.0-rc4-next-20250702-syzkaller #0 PREEMPT(full) [ 180.274705][ T7387] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 180.274716][ T7387] Call Trace: [ 180.274724][ T7387] [ 180.274731][ T7387] dump_stack_lvl+0x189/0x250 [ 180.274749][ T7387] ? __pfx_dump_stack_lvl+0x10/0x10 [ 180.274763][ T7387] ? __pfx__printk+0x10/0x10 [ 180.274779][ T7387] ? print_lock_name+0xde/0x100 [ 180.274795][ T7387] print_deadlock_bug+0x28b/0x2a0 [ 180.274809][ T7387] validate_chain+0x1a3f/0x2140 [ 180.274824][ T7387] ? lockdep_unlock+0x89/0x120 [ 180.274839][ T7387] ? validate_chain+0x897/0x2140 [ 180.274855][ T7387] __lock_acquire+0xab9/0xd20 [ 180.274874][ T7387] ? __simple_recursive_removal+0x95/0x510 [ 180.274888][ T7387] lock_acquire+0x120/0x360 [ 180.274904][ T7387] ? __simple_recursive_removal+0x95/0x510 [ 180.274922][ T7387] down_write+0x96/0x1f0 [ 180.274940][ T7387] ? __simple_recursive_removal+0x95/0x510 [ 180.274954][ T7387] ? __pfx_down_write+0x10/0x10 [ 180.274973][ T7387] __simple_recursive_removal+0x95/0x510 [ 180.274990][ T7387] bm_entry_write+0x4f7/0x540 [ 180.275007][ T7387] ? __pfx_bm_entry_write+0x10/0x10 [ 180.275025][ T7387] ? __pfx_bm_entry_write+0x10/0x10 [ 180.275040][ T7387] vfs_write+0x27e/0xa90 [ 180.275057][ T7387] ? __pfx_vfs_write+0x10/0x10 [ 180.275071][ T7387] ? __fget_files+0x2a/0x420 [ 180.275089][ T7387] ? __fget_files+0x3a0/0x420 [ 180.275104][ T7387] ? __fget_files+0x2a/0x420 [ 180.275122][ T7387] ksys_write+0x145/0x250 [ 180.275137][ T7387] ? __pfx_ksys_write+0x10/0x10 [ 180.275150][ T7387] ? rcu_is_watching+0x15/0xb0 [ 180.275163][ T7387] ? do_syscall_64+0xbe/0x3b0 [ 180.275180][ T7387] do_syscall_64+0xfa/0x3b0 [ 180.275195][ T7387] ? lockdep_hardirqs_on+0x9c/0x150 [ 180.275210][ T7387] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.275222][ T7387] ? clear_bhb_loop+0x60/0xb0 [ 180.275235][ T7387] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.275248][ T7387] RIP: 0033:0x7f1a19d8e929 [ 180.275268][ T7387] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 180.275280][ T7387] RSP: 002b:00007f1a1ac67038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 180.275299][ T7387] RAX: ffffffffffffffda RBX: 00007f1a19fb5fa0 RCX: 00007f1a19d8e929 [ 180.275309][ T7387] RDX: 0000000000000002 RSI: 0000200000000100 RDI: 0000000000000006 [ 180.275318][ T7387] RBP: 00007f1a19e10b39 R08: 0000000000000000 R09: 0000000000000000 [ 180.275327][ T7387] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 180.275335][ T7387] R13: 0000000000000000 R14: 00007f1a19fb5fa0 R15: 00007fff09f6c0a8 [ 180.275349][ T7387] [ 180.284265][ T7389] netlink: 'syz.0.475': attribute type 10 has an invalid length.