last executing test programs: 7m14.152878812s ago: executing program 0 (id=6425): syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0xff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = add_key$user(0x0, &(0x7f0000000300)={'syz', 0x1}, &(0x7f00000004c0)="d25a9850a9726be16838807cc61ed582f1e1dd983ba54758342b615d7a36ce462db6495d16c821c4411a9e15dd606b2812942db68742157e", 0x38, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r2, r1}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) 7m8.428063167s ago: executing program 0 (id=6432): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fef000/0x10000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000fef000/0x4000)=nil, &(0x7f0000fef000/0x2000)=nil, &(0x7f0000ff2000/0x4000)=nil, 0x0}, 0x68) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) getpid() socket$packet(0x11, 0x2, 0x300) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_ACTIVATE(r1, 0x5606, 0xff) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = add_key$user(&(0x7f0000000240), &(0x7f0000000300)={'syz', 0x1}, &(0x7f00000004c0)="d25a9850a9726be16838807cc61ed582f1e1dd983ba54758342b615d7a36ce462db6495d16c821c4411a9e15dd606b2812942db68742157e", 0x38, 0xfffffffffffffffe) r4 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r4, r3}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) mlockall(0x5) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000100)) 7m7.676770899s ago: executing program 0 (id=6433): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000400)={0x5, 0x1000086}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000640), 0x0, 0x0) 7m6.873864911s ago: executing program 0 (id=6434): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000003b810000850000007d000000850000005000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000100)='sys_exit\x00', r4}, 0x10) 7m3.303103864s ago: executing program 0 (id=6441): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fef000/0x10000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000fef000/0x4000)=nil, &(0x7f0000fef000/0x2000)=nil, &(0x7f0000ff2000/0x4000)=nil, 0x0}, 0x68) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) getpid() socket$packet(0x11, 0x2, 0x300) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_ACTIVATE(r1, 0x5606, 0xff) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = add_key$user(&(0x7f0000000240), &(0x7f0000000300)={'syz', 0x1}, &(0x7f00000004c0)="d25a9850a9726be16838807cc61ed582f1e1dd983ba54758342b615d7a36ce462db6495d16c821c4411a9e15dd606b2812942db68742157e", 0x38, 0xfffffffffffffffe) r4 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r4, r3}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) mlockall(0x5) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000100)) 7m2.093705453s ago: executing program 0 (id=6443): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000006a40)=[{{0x0, 0x0, &(0x7f0000001b00)=[{&(0x7f0000000980)="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", 0x290}], 0x1}}], 0x1, 0x800) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000040010000000000000101410000001c001700060000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) writev(r0, &(0x7f0000001400)=[{&(0x7f0000000c00)="89e7ee2c7cdad9b4b47380c988ca", 0xfdef}], 0x1) 6m46.951468608s ago: executing program 32 (id=6443): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000006a40)=[{{0x0, 0x0, &(0x7f0000001b00)=[{&(0x7f0000000980)="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", 0x290}], 0x1}}], 0x1, 0x800) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000040010000000000000101410000001c001700060000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) writev(r0, &(0x7f0000001400)=[{&(0x7f0000000c00)="89e7ee2c7cdad9b4b47380c988ca", 0xfdef}], 0x1) 10.095443989s ago: executing program 1 (id=7654): syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESOCT], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) open(0x0, 0x10000, 0x0) dup3(r0, r1, 0x80000) 8.803754459s ago: executing program 4 (id=7661): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = userfaultfd(0x80801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_WRITEPROTECT(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000800000/0x800000)=nil, 0x800000}, 0x3}) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$UFFDIO_CONTINUE(r3, 0xc020aa08, &(0x7f00000000c0)={{&(0x7f0000800000/0x800000)=nil, 0x800000}}) 6.270878877s ago: executing program 1 (id=7671): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x803, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x4, 0xdd, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r3}, 0x10) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) r5 = socket(0x10, 0x803, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=@newtfilter={0x44, 0x2c, 0xd2b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0xb, 0x3}, {}, {0x1, 0x9}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0x7, 0x6, 0x0, 0x9, 0x401, 0x1000, 0x8a0, 0xd5}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x800) 5.776733814s ago: executing program 3 (id=7672): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) read(r0, 0x0, 0x0) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x14, 0x8, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x10) 5.124840704s ago: executing program 2 (id=7673): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4000000) socketpair$unix(0x1, 0x3, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @pix={0x434c, 0x8, 0x584e4f53, 0x4, 0x2, 0x7, 0x0, 0x5, 0x1, 0x4, 0x2, 0x7}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x401c2, 0x0) ftruncate(r1, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r3, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0) sendfile(r2, r1, 0x0, 0x578410eb) socket$kcm(0x10, 0x2, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x0, @thr={&(0x7f0000000300)="b814f7d71a11c65356e286f5ba6e6102db072cdf68275873d8f0d55159fb3c5fdd7bfeab1fa931a9ca2e0c96fb967788a553715abf4c999919fd88373ed236686e11cddd374d3a5171cc2b9d1f1619503bd9181970a3f948a2ccfb6a95e4f72a6313b193082ac67fd7ecbe12696bbc5dfe8b559abef1979a743c561db9f882", &(0x7f0000000380)="c75f16175bb69c4013d0479f629c0ba46ff8ac8dc98098b878545ed70bb5bc1bacf36b28b91a23b1365fa8e67059f7c1fc1ade5eb855207f7066f96bdafb14234e8d9afeee1f3fd22e4b4fe5a61f4afde21805ae5206b87bb22d882df14583a3e6616fce86827ba486d004155a4450ce7bc978b14dadd17103787da46b699548021f41884a83569757da03e5194f8d83c3638886d844e7bed2e0440b393bdd4ec45238b77d"}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 5.114695544s ago: executing program 3 (id=7674): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) unshare(0x6020400) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) socket$nl_sock_diag(0x10, 0x3, 0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) r1 = socket$caif_stream(0x25, 0x1, 0x5) recvfrom$packet(r1, 0x0, 0x0, 0x100, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$NFT_BATCH(r2, 0x0, 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x201008, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') rmdir(&(0x7f0000000440)='./file0\x00') sendmsg$IPCTNL_MSG_CT_DELETE(r2, 0x0, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, 0x0) mount(0x0, 0x0, 0x0, 0x6000, 0x0) 5.109727404s ago: executing program 4 (id=7675): r0 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r2 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r2, 0x0, 0x0) socket(0x1d, 0x2, 0x6) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x0, 0xfffd, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x4}, {0x0, 0x4, 0x1, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@broadcast, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8) sendmmsg(r2, &(0x7f0000000480), 0x2e9, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f00000001c0)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="020100000a0000000600000000000000030006000000000002000000ffffffff0000000000000000030005000000000002000000ac1e00010000000000000000020013"], 0x50}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffe0, 0xf}, {0x0, 0x10}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x10000}}]}, 0x38}}, 0x20000000) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtclass={0x24, 0x2a, 0x1, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1, 0xfff1}, {0xffff, 0xffff}, {0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x24000880) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000000)={0x0, &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000240)={0x0, 0x0, r6, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, &(0x7f0000000300)={r7, 0x0, 0x9, 0x0, 0x0, [], [0x9, 0x0, 0x0, 0x8], [0x3, 0x0, 0x100, 0x3], [0x1000000000000, 0x0, 0xa, 0x200]}) r8 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r8, 0x0) syz_open_dev$video(&(0x7f0000000000), 0x101, 0x0) pselect6(0x900, 0x0, 0x0, &(0x7f0000000240)={0x1f}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 4.919584887s ago: executing program 1 (id=7676): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000003c0), 0x202080, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x100000, 0x5691409, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100000}}, 0x50) syz_fuse_handle_req(r1, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 4.004691131s ago: executing program 4 (id=7677): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x4, &(0x7f0000000840)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000700)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4f2c, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) sendmsg$AUDIT_USER_AVC(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x454}}, 0x0) sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, 0x0, 0x40000) shutdown(0xffffffffffffffff, 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r0, 0x0, 0x0}, 0x10) mbind(&(0x7f000023a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r4, 0x4b72, &(0x7f0000000100)={0x0, 0x0, 0x9, 0x10, 0x200, &(0x7f0000000180)="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"}) syz_open_dev$vim2m(&(0x7f0000000080), 0x7f, 0x2) 3.967191461s ago: executing program 1 (id=7678): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b70200"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0xe429, @none, 0x401}, 0xe) 3.899141702s ago: executing program 3 (id=7679): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000003b810000850000007d000000850000005000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 3.742931964s ago: executing program 1 (id=7680): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000059d360205f0501d09288000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000000)={0x2c, &(0x7f0000000a80)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 3.701683675s ago: executing program 2 (id=7681): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$key(0xf, 0x3, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="02070009"], 0x10}}, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x33}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0xffffffff}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 2.915327007s ago: executing program 4 (id=7682): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x5, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r4, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f0000000380)="10f16ae0e49e205aa9e8b47a104e02e3e7a1703106cc936c9c906d296c53ef5e2c209a87103be991662087090b5e2ff8bb803454262e68a4f88c00b2c01f9d343cacbdb9c2c0beee8fe6827b5f04739c8b1093a572", 0x55, 0x8001, 0x0, 0x0) syz_open_dev$video(0x0, 0x100000001, 0x0) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_IOC_FAIL(r5, 0x4c80, 0xffffffffffffffb6) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000000)={r2, 0x8}, &(0x7f00000000c0)=0x8) 1.922128652s ago: executing program 4 (id=7683): bind$rxrpc(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000800000/0x800000)=nil, 0x800000}, 0x3}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa08, &(0x7f00000000c0)={{&(0x7f0000800000/0x800000)=nil, 0x800000}}) 1.699127305s ago: executing program 2 (id=7684): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x803, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x4, 0xdd, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r3}, 0x10) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r5 = socket(0x10, 0x803, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=@newtfilter={0x44, 0x2c, 0xd2b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0xb, 0x3}, {}, {0x1, 0x9}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0x7, 0x6, 0x0, 0x9, 0x401, 0x1000, 0x8a0, 0xd5}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x800) 1.605883726s ago: executing program 4 (id=7685): socket$kcm(0x10, 0x2, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000000c0)={0xc}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x7, 0x406, 0x2, 0xfffffffd}, 0x14) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$SNDCTL_FM_4OP_ENABLE(0xffffffffffffffff, 0x4004510f, 0x0) r3 = socket(0x10, 0x3, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(0xffffffffffffffff, 0x40045010, &(0x7f0000000100)) syz_emit_vhci(&(0x7f0000000180)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) write(r3, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000001c0), 0x202, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, &(0x7f0000000740)={0x48}) r5 = syz_open_dev$video(&(0x7f0000000300), 0x8, 0x400) ioctl$VIDIOC_G_CROP(r5, 0xc014563b, &(0x7f0000000000)={0xa, {0x0, 0x11, 0xfffffffd, 0xc}}) 1.430286719s ago: executing program 2 (id=7686): r0 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r2 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r2, 0x0, 0x0) socket(0x1d, 0x2, 0x6) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x0, 0xfffd, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x4}, {0x0, 0x4, 0x1, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@broadcast, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8) sendmmsg(r2, &(0x7f0000000480), 0x2e9, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f00000001c0)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="020100000a0000000600000000000000030006000000000002000000ffffffff0000000000000000030005000000000002000000ac1e00010000000000000000020013"], 0x50}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffe0, 0xf}, {0x0, 0x10}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x10000}}]}, 0x38}}, 0x20000000) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtclass={0x24, 0x2a, 0x1, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1, 0xfff1}, {0xffff, 0xffff}, {0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x24000880) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000000)={0x0, &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000240)={0x0, 0x0, r6, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, &(0x7f0000000300)={r7, 0x0, 0x9, 0x0, 0x0, [], [0x9, 0x0, 0x0, 0x8], [0x3, 0x0, 0x100, 0x3], [0x1000000000000, 0x0, 0xa, 0x200]}) r8 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r8, 0x0) syz_open_dev$video(&(0x7f0000000000), 0x101, 0x0) pselect6(0x900, 0x0, 0x0, &(0x7f0000000240)={0x1f}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 1.208110522s ago: executing program 2 (id=7687): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) unshare(0x6020400) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) socket$nl_sock_diag(0x10, 0x3, 0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) r1 = socket$caif_stream(0x25, 0x1, 0x5) recvfrom$packet(r1, 0x0, 0x0, 0x100, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$NFT_BATCH(r2, 0x0, 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x201008, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') rmdir(&(0x7f0000000440)='./file0\x00') sendmsg$IPCTNL_MSG_CT_DELETE(r2, 0x0, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, 0x0) mount(0x0, 0x0, 0x0, 0x6000, 0x0) 1.047197305s ago: executing program 3 (id=7688): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b70200"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0xe429, @none, 0x401}, 0xe) 721.65305ms ago: executing program 1 (id=7689): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4000000) socketpair$unix(0x1, 0x3, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @pix={0x434c, 0x8, 0x584e4f53, 0x4, 0x2, 0x7, 0x0, 0x5, 0x1, 0x4, 0x2, 0x7}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x401c2, 0x0) ftruncate(r1, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r3, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0) sendfile(r2, r1, 0x0, 0x578410eb) socket$kcm(0x10, 0x2, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x0, @thr={&(0x7f0000000300)="b814f7d71a11c65356e286f5ba6e6102db072cdf68275873d8f0d55159fb3c5fdd7bfeab1fa931a9ca2e0c96fb967788a553715abf4c999919fd88373ed236686e11cddd374d3a5171cc2b9d1f1619503bd9181970a3f948a2ccfb6a95e4f72a6313b193082ac67fd7ecbe12696bbc5dfe8b559abef1979a743c561db9f882", &(0x7f0000000380)="c75f16175bb69c4013d0479f629c0ba46ff8ac8dc98098b878545ed70bb5bc1bacf36b28b91a23b1365fa8e67059f7c1fc1ade5eb855207f7066f96bdafb14234e8d9afeee1f3fd22e4b4fe5a61f4afde21805ae5206b87bb22d882df14583a3e6616fce86827ba486d004155a4450ce7bc978b14dadd17103787da46b699548021f41884a83569757da03e5194f8d83c3638886d844e7bed2e0440b393bdd4ec45238b77d"}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 184.732058ms ago: executing program 3 (id=7690): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000f00fc00000018000180140002006e657464657673696d300000000000000800060000fcffff08000900fc00", @ANYRES64=r2], 0x5c}, 0x1, 0x0, 0x0, 0x4000800}, 0x88010) 169.122328ms ago: executing program 2 (id=7691): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400010bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x20044091) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) unshare(0x6a040000) 0s ago: executing program 3 (id=7692): syz_open_dev$admmidi(&(0x7f0000000180), 0x100000001, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffdfe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x4000000000002e6, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f0000000280)="010001000000000000001000015b097ead85847817353d2dbad05dd5", 0x1c, 0xfffffffffffffffd) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f00000001c0)=0x6) syz_open_procfs(r3, &(0x7f00000000c0)='uid_map\x00') r4 = openat$rtc(0xffffffffffffff9c, 0x0, 0x20440, 0x0) ioctl$RTC_PIE_ON(r4, 0x7005) ioctl$RTC_IRQP_SET(r4, 0x4008700c, 0xe24) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0xd, 0x8, 0x0) mremap(&(0x7f00009d1000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f00002a0000/0x4000)=nil) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x7, 0x0, 0x0, 0x0) socket(0x10, 0x3, 0x0) r5 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) readv(r5, &(0x7f0000000340)=[{&(0x7f0000000080)=""/140, 0x8c}], 0x1) ioctl$IMADDTIMER(r5, 0x80044940, &(0x7f0000000000)) r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) write$cgroup_int(r6, &(0x7f0000000140)=0x3, 0x12) socket$nl_route(0x10, 0x3, 0x0) kernel console output (not intermixed with test programs): 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 1575.141327][T13812] usb 2-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 1575.158963][T13812] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1575.177294][T13812] usb 2-1: Product: syz [ 1575.187415][T13812] usb 2-1: Manufacturer: syz [ 1575.202343][T13812] usb 2-1: SerialNumber: syz [ 1575.220475][T13812] usb 2-1: config 0 descriptor?? [ 1575.249887][T13812] ums-isd200 2-1:0.0: USB Mass Storage device detected [ 1575.456056][T13812] ums-isd200: probe of 2-1:0.0 failed with error -22 [ 1576.128982][T21839] usb 2-1: USB disconnect, device number 26 [ 1576.668297][T24641] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1577.921434][T24649] tty tty22: ldisc open failed (-12), clearing slot 21 [ 1581.388566][T24741] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1588.697567][T24820] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6098'. [ 1590.769081][T20178] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 1590.859027][T11775] usb 3-1: new high-speed USB device number 127 using dummy_hcd [ 1591.008930][T20178] usb 2-1: Using ep0 maxpacket: 8 [ 1591.025481][T20178] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1591.068995][T11775] usb 3-1: Using ep0 maxpacket: 16 [ 1591.088035][T20178] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1591.104789][T20178] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1591.117313][T20178] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1591.134131][T20178] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1591.165920][T20178] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1591.419869][T20178] usb 2-1: GET_CAPABILITIES returned 0 [ 1591.425489][T20178] usbtmc 2-1:16.0: can't read capabilities [ 1591.643479][T24851] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6109'. [ 1591.742828][T24853] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1592.961896][T24857] fuse: Unknown parameter '0x0000000000000004' [ 1593.012584][ T9] usb 2-1: USB disconnect, device number 27 [ 1594.928503][T11775] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1594.951338][T11775] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 1594.969956][T11775] usb 3-1: can't read configurations, error -71 [ 1595.141499][T24881] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6118'. [ 1595.351062][T24884] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1596.986323][T24889] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1598.598975][T20178] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 1598.794251][T20178] usb 3-1: no configurations [ 1598.808677][T20178] usb 3-1: can't read configurations, error -22 [ 1598.979088][T20178] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 1599.191080][T20178] usb 3-1: no configurations [ 1599.204350][T20178] usb 3-1: can't read configurations, error -22 [ 1599.227240][T20178] usb usb3-port1: attempt power cycle [ 1599.685978][T13812] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 1601.896760][T20178] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 1601.944300][T20178] usb 3-1: no configurations [ 1601.949144][T20178] usb 3-1: can't read configurations, error -22 [ 1601.998972][T13812] usb 4-1: Using ep0 maxpacket: 8 [ 1602.025668][T13812] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1602.044705][T13812] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1602.057576][T13812] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1602.068172][T13812] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1602.082926][T13812] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1602.095521][T13812] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1602.109060][T20178] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 1602.157523][T20178] usb 3-1: no configurations [ 1602.169087][T20178] usb 3-1: can't read configurations, error -22 [ 1602.184038][T20178] usb usb3-port1: unable to enumerate USB device [ 1602.320938][T24928] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1603.563287][T13812] usb 4-1: usb_control_msg returned -71 [ 1603.721615][T13812] usbtmc 4-1:16.0: can't read capabilities [ 1603.795074][T12918] Bluetooth: hci1: command 0x0405 tx timeout [ 1603.803313][T13812] usb 4-1: USB disconnect, device number 28 [ 1606.388971][ T5809] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 1606.613004][ T5809] usb 1-1: no configurations [ 1606.628963][ T5809] usb 1-1: can't read configurations, error -22 [ 1606.789024][ T5809] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 1606.989915][ T5809] usb 1-1: no configurations [ 1606.996872][ T5809] usb 1-1: can't read configurations, error -22 [ 1607.008192][ T5809] usb usb1-port1: attempt power cycle [ 1607.325354][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.331474][T13812] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 1607.334374][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 1607.429439][ T5809] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 1607.515340][ T5809] usb 1-1: no configurations [ 1607.536012][ T5809] usb 1-1: can't read configurations, error -22 [ 1607.563246][T13812] usb 4-1: Using ep0 maxpacket: 8 [ 1607.621409][T13812] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1607.705036][T13812] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1607.750807][ T5809] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 1607.778131][T13812] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1607.860885][ T5809] usb 1-1: no configurations [ 1607.877339][T13812] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1607.902814][ T5809] usb 1-1: can't read configurations, error -22 [ 1607.954907][ T5809] usb usb1-port1: unable to enumerate USB device [ 1607.984694][T13812] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1608.062437][T13812] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1608.395007][T13812] usb 4-1: GET_CAPABILITIES returned 0 [ 1608.406349][T13812] usbtmc 4-1:16.0: can't read capabilities [ 1608.833738][T13812] usb 4-1: USB disconnect, device number 29 [ 1610.428967][T13812] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 1611.279375][T13812] usb 4-1: Using ep0 maxpacket: 32 [ 1611.290418][T13812] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1611.318888][T13812] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1611.327983][T13812] usb 4-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 1611.348926][T13812] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1611.369994][T13812] usb 4-1: config 0 descriptor?? [ 1612.074454][T13812] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 1612.109213][T20178] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 1612.259701][T13812] usb 1-1: no configurations [ 1612.264527][T13812] usb 1-1: can't read configurations, error -22 [ 1612.304576][T20178] usb 3-1: Using ep0 maxpacket: 8 [ 1612.313440][T20178] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1612.329088][T20178] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1612.344688][T20178] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1612.355969][T20178] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1612.371574][T20178] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1612.381123][T20178] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1612.429126][T13812] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 1612.744437][T20178] usb 3-1: GET_CAPABILITIES returned 0 [ 1612.751131][T20178] usbtmc 3-1:16.0: can't read capabilities [ 1612.961409][T13812] usb 1-1: no configurations [ 1612.973172][T13812] usb 1-1: can't read configurations, error -22 [ 1612.999789][T13812] usb usb1-port1: attempt power cycle [ 1613.468351][ T5809] usb 4-1: USB disconnect, device number 30 [ 1613.474616][T13812] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 1613.555251][T13812] usb 1-1: no configurations [ 1613.563960][T13812] usb 1-1: can't read configurations, error -22 [ 1613.731308][T13812] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 1613.740833][T20178] usb 3-1: USB disconnect, device number 7 [ 1613.790443][T13812] usb 1-1: no configurations [ 1613.795115][T13812] usb 1-1: can't read configurations, error -22 [ 1613.812138][T13812] usb usb1-port1: unable to enumerate USB device [ 1614.998978][T12918] Bluetooth: hci1: command 0x0405 tx timeout [ 1616.855773][T21839] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 1617.099065][T21839] usb 2-1: Using ep0 maxpacket: 32 [ 1617.107453][T21839] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1617.107534][T21839] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1617.107670][T21839] usb 2-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 1617.107752][T21839] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1617.272489][T21839] usb 2-1: config 0 descriptor?? [ 1618.579154][T21839] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 1618.845652][T21839] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1618.861034][T21839] usb 3-1: config 0 has no interfaces? [ 1618.871875][T21839] usb 3-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 1618.884429][T21839] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1618.907060][T21839] usb 3-1: Product: syz [ 1618.916605][T21839] usb 3-1: Manufacturer: syz [ 1618.924497][T21839] usb 3-1: SerialNumber: syz [ 1618.985367][T21839] usb 3-1: config 0 descriptor?? [ 1619.309225][T12918] Bluetooth: hci0: command 0x0406 tx timeout [ 1619.437016][ T5809] usb 2-1: USB disconnect, device number 28 [ 1621.450642][T21839] usb 3-1: USB disconnect, device number 8 [ 1622.128960][T21839] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 1622.336450][T21839] usb 3-1: Using ep0 maxpacket: 32 [ 1622.353475][T21839] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1622.379252][T21839] usb 3-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 1622.389718][T21839] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1622.413005][T21839] usb 3-1: config 0 descriptor?? [ 1622.679272][T12918] Bluetooth: hci0: command 0x0406 tx timeout [ 1624.856154][ T9] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 1625.101475][T13812] usb 3-1: USB disconnect, device number 9 [ 1625.298330][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1625.331037][ T9] usb 2-1: config 0 has no interfaces? [ 1625.339652][ T9] usb 2-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 1625.356217][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1625.368631][ T9] usb 2-1: Product: syz [ 1625.376253][ T9] usb 2-1: Manufacturer: syz [ 1625.381773][ T9] usb 2-1: SerialNumber: syz [ 1625.619869][ T9] usb 2-1: config 0 descriptor?? [ 1626.508961][T12918] Bluetooth: hci1: command 0x0405 tx timeout [ 1627.119068][ T5804] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 1627.359418][ T5804] usb 4-1: Using ep0 maxpacket: 32 [ 1627.392714][ T5804] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1627.433345][ T5804] usb 4-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 1627.696026][ T5804] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1627.734475][T11775] usb 2-1: USB disconnect, device number 29 [ 1627.751939][ T5804] usb 4-1: config 0 descriptor?? [ 1629.712522][T25205] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1630.988288][T21839] usb 4-1: USB disconnect, device number 31 [ 1634.014761][T25243] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1636.932226][T25279] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1637.586992][T21839] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 1638.461988][T21839] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1638.472656][T21839] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1638.486374][T21839] usb 4-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 1638.496175][T21839] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1638.504703][T21839] usb 4-1: Product: syz [ 1638.512059][T21839] usb 4-1: Manufacturer: syz [ 1638.516861][T21839] usb 4-1: SerialNumber: syz [ 1638.545879][T21839] usb 4-1: config 0 descriptor?? [ 1640.988430][ T9] usb 4-1: USB disconnect, device number 32 [ 1642.109769][T25314] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1643.469327][T12918] Bluetooth: hci1: command 0x0405 tx timeout [ 1644.268998][T21839] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 1644.439061][ T5804] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 1644.448920][T21839] usb 4-1: Using ep0 maxpacket: 32 [ 1644.468936][T21697] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 1644.500157][T21839] usb 4-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 1644.511283][T21839] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1644.544600][T21839] usb 4-1: config 0 descriptor?? [ 1644.563602][T21839] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 1644.678959][T21697] usb 2-1: Using ep0 maxpacket: 16 [ 1644.686828][ T5804] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1644.741040][ T5804] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1644.765306][ T5804] usb 3-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 1644.775491][ T5804] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1644.784287][ T5804] usb 3-1: Product: syz [ 1644.789255][ T5804] usb 3-1: Manufacturer: syz [ 1644.794125][ T5804] usb 3-1: SerialNumber: syz [ 1644.802295][ T5804] usb 3-1: config 0 descriptor?? [ 1644.962834][T21839] gspca_nw80x: reg_r err -32 [ 1644.967519][T21839] nw80x: probe of 4-1:0.0 failed with error -32 [ 1646.218077][ T23] usb 4-1: USB disconnect, device number 33 [ 1647.372438][T21697] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1647.390756][T21697] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 1647.415133][T13812] usb 3-1: USB disconnect, device number 10 [ 1647.428911][T21697] usb 2-1: can't read configurations, error -71 [ 1647.631394][T25364] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1648.743377][T12918] Bluetooth: hci0: command 0x0406 tx timeout [ 1650.298912][T25344] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 1651.558934][T25344] usb 3-1: Using ep0 maxpacket: 32 [ 1651.566644][T25344] usb 3-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 1651.577003][T25344] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1651.588704][T25344] usb 3-1: config 0 descriptor?? [ 1651.639437][T13812] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 1652.682096][T25344] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 1653.125098][T25344] gspca_nw80x: reg_r err -32 [ 1653.134916][T25344] nw80x: probe of 3-1:0.0 failed with error -32 [ 1653.410597][T13812] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1653.429228][T13812] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1653.441489][T13812] usb 4-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 1653.462873][T13812] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1653.511726][T25406] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1653.525208][T13812] usb 4-1: Product: syz [ 1653.569526][T13812] usb 4-1: Manufacturer: syz [ 1653.596650][T13812] usb 4-1: SerialNumber: syz [ 1653.658304][T13812] usb 4-1: config 0 descriptor?? [ 1654.669174][T12918] Bluetooth: hci1: command 0x0405 tx timeout [ 1654.744652][ T9] usb 3-1: USB disconnect, device number 11 [ 1656.768956][T25344] usb 4-1: USB disconnect, device number 34 [ 1657.398210][T25444] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1657.479209][ T9] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 1657.908129][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 1658.709347][ T9] usb 2-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 1658.718456][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1658.737698][ T9] usb 2-1: config 0 descriptor?? [ 1658.753687][ T9] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 1659.737148][ T9] gspca_nw80x: reg_w err -110 [ 1659.741956][ T9] nw80x: probe of 2-1:0.0 failed with error -110 [ 1660.139136][ T9] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 1660.384420][ T9] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1660.399422][ T9] usb 3-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 1660.408997][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1660.417267][ T9] usb 3-1: Product: syz [ 1660.422482][ T9] usb 3-1: Manufacturer: syz [ 1660.427275][ T9] usb 3-1: SerialNumber: syz [ 1660.436818][ T9] usb 3-1: config 0 descriptor?? [ 1660.819150][ T9] usb 2-1: USB disconnect, device number 32 [ 1662.849017][ T23] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 1663.045528][T23734] usb 3-1: USB disconnect, device number 12 [ 1663.051743][ T23] usb 1-1: config 0 has no interfaces? [ 1663.094872][ T23] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1663.116202][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1663.125973][ T23] usb 1-1: Product: syz [ 1663.132156][ T23] usb 1-1: Manufacturer: syz [ 1663.136930][ T23] usb 1-1: SerialNumber: syz [ 1663.229688][ T23] usb 1-1: config 0 descriptor?? [ 1666.568259][T23734] usb 1-1: USB disconnect, device number 28 [ 1667.469111][ T5769] Bluetooth: hci1: command 0x0405 tx timeout [ 1667.939071][ T23] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 1668.149942][ T23] usb 1-1: Using ep0 maxpacket: 16 [ 1668.754245][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 1669.157433][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 1669.462899][T25561] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1671.545852][ T23] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1671.569862][ T23] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 1671.614902][ T23] usb 1-1: can't read configurations, error -71 [ 1672.419185][ T23] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 1672.609214][ T23] usb 1-1: Using ep0 maxpacket: 32 [ 1672.624569][ T23] usb 1-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 1672.648975][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1672.665359][ T23] usb 1-1: config 0 descriptor?? [ 1672.685510][ T23] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 1673.137537][ T23] gspca_nw80x: reg_r err -32 [ 1673.162089][ T23] nw80x: probe of 1-1:0.0 failed with error -32 [ 1673.686088][T25594] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1674.993228][T20178] usb 1-1: USB disconnect, device number 30 [ 1675.759023][ T23] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 1675.998925][ T23] usb 1-1: Using ep0 maxpacket: 16 [ 1676.063787][T25618] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1678.975555][T25631] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1679.389106][ T9] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 1679.523244][ T23] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1679.540554][ T23] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 1679.548519][ T23] usb 1-1: can't read configurations, error -71 [ 1679.555352][T25636] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0) [ 1679.579852][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 1679.597595][ T9] usb 4-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 1679.617260][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1679.646852][ T9] usb 4-1: config 0 descriptor?? [ 1679.663832][ T9] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 1681.212155][ T9] gspca_nw80x: reg_r err -32 [ 1681.247656][ T9] nw80x: probe of 4-1:0.0 failed with error -32 [ 1682.386232][T25664] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0) [ 1682.630660][ T9] usb 4-1: USB disconnect, device number 35 [ 1682.999244][T20178] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 1683.228946][ T5769] Bluetooth: hci0: Opcode 0x1407 failed: -110 [ 1683.308998][ T5769] Bluetooth: hci0: command 0x0406 tx timeout [ 1684.338915][T20178] usb 3-1: Using ep0 maxpacket: 16 [ 1684.784621][T25689] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1686.778981][ T23] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 1686.808160][T20178] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1686.825450][T20178] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 1686.835210][T20178] usb 3-1: can't read configurations, error -71 [ 1686.990136][ T23] usb 2-1: Using ep0 maxpacket: 32 [ 1687.007210][ T23] usb 2-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 1687.027999][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1687.061238][ T23] usb 2-1: config 0 descriptor?? [ 1687.086143][ T23] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 1687.843995][ T23] gspca_nw80x: reg_r err -110 [ 1687.863614][ T23] nw80x: probe of 2-1:0.0 failed with error -110 [ 1688.506198][T25726] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6377'. [ 1689.595021][T20178] usb 2-1: USB disconnect, device number 33 [ 1690.437490][T25741] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1692.453580][T25757] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6386'. [ 1694.481619][T25781] tipc: Started in network mode [ 1694.489027][T20178] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 1694.500050][T25781] tipc: Node identity 2e49b2166772, cluster identity 4711 [ 1694.527887][T25781] tipc: Enabled bearer , priority 10 [ 1694.673558][T25781] tipc: Resetting bearer [ 1694.704910][T20178] usb 1-1: Using ep0 maxpacket: 32 [ 1694.712662][T20178] usb 1-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 1694.724198][T20178] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1694.739428][T25779] tipc: Resetting bearer [ 1694.774732][T20178] usb 1-1: config 0 descriptor?? [ 1694.816984][T20178] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 1695.589028][ T9] tipc: Node number set to 1228648982 [ 1695.636878][T20178] gspca_nw80x: reg_r err -32 [ 1695.654374][T20178] nw80x: probe of 1-1:0.0 failed with error -32 [ 1695.669710][T20178] usb 1-1: USB disconnect, device number 33 [ 1703.123373][T25779] tipc: Disabling bearer [ 1708.196780][T25871] tipc: Enabled bearer , priority 10 [ 1708.325313][T25871] tipc: Resetting bearer [ 1709.216596][T25870] tipc: Resetting bearer [ 1714.360156][ T5809] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 1714.919392][ T5809] usb 4-1: Using ep0 maxpacket: 16 [ 1716.220801][T25870] tipc: Disabling bearer [ 1718.762205][ T5809] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1718.780044][ T5809] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 1718.798330][ T5809] usb 4-1: can't read configurations, error -71 [ 1720.052402][ T5769] Bluetooth: hci3: command 0x0406 tx timeout [ 1720.897122][T25965] tipc: Started in network mode [ 1720.911578][T25965] tipc: Node identity 626fd21e336, cluster identity 4711 [ 1720.972824][T25965] tipc: Enabled bearer , priority 10 [ 1721.823606][T25970] tipc: Resetting bearer [ 1721.831028][T25964] tipc: Resetting bearer [ 1722.133540][ T23] tipc: Node number set to 1359991326 [ 1724.908958][ T5769] Bluetooth: hci0: command 0x0406 tx timeout [ 1727.119769][T26019] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6457'. [ 1730.194857][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.201443][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 1730.293654][T26038] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1732.870421][T26059] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6469'. [ 1735.213601][T25964] tipc: Disabling bearer [ 1736.437154][T26085] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1736.451389][T26085] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1736.462223][T26085] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1736.476500][T26085] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1736.485811][T26085] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1736.494092][T26085] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1737.025187][ T139] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1737.501508][ T139] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1737.631948][ T139] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1737.750400][ T139] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1738.589243][ T5769] Bluetooth: hci2: command tx timeout [ 1738.750909][ T139] tipc: Left network mode [ 1738.807978][T26084] chnl_net:caif_netlink_parms(): no params data found [ 1740.669293][T26085] Bluetooth: hci2: command tx timeout [ 1742.002107][T26084] bridge0: port 1(bridge_slave_0) entered blocking state [ 1742.119863][T26084] bridge0: port 1(bridge_slave_0) entered disabled state [ 1742.148690][T26084] bridge_slave_0: entered allmulticast mode [ 1742.382239][T26084] bridge_slave_0: entered promiscuous mode [ 1742.635719][T26084] bridge0: port 2(bridge_slave_1) entered blocking state [ 1742.702473][ T9] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 1742.716050][T26084] bridge0: port 2(bridge_slave_1) entered disabled state [ 1742.756651][ T5769] Bluetooth: hci2: command tx timeout [ 1742.824963][T26084] bridge_slave_1: entered allmulticast mode [ 1742.994713][T26084] bridge_slave_1: entered promiscuous mode [ 1743.083973][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 1743.212509][ T9] usb 2-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 1743.247607][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1743.435184][ T9] usb 2-1: config 0 descriptor?? [ 1743.457323][ T9] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 1743.537125][T26084] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1743.627474][T26084] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1743.938662][T26084] team0: Port device team_slave_0 added [ 1743.992932][T26084] team0: Port device team_slave_1 added [ 1744.173017][T26084] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1744.200389][T26084] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1744.246127][T26084] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1744.428297][ T139] bond0: (slave wlan1): Releasing backup interface [ 1744.517235][T26084] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1744.554507][T26084] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1744.669674][T26084] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1744.815306][ T9] gspca_nw80x: reg_w err -71 [ 1744.820224][ T9] nw80x: probe of 2-1:0.0 failed with error -71 [ 1744.829161][ T5769] Bluetooth: hci2: command tx timeout [ 1744.843941][ T9] usb 2-1: USB disconnect, device number 34 [ 1745.795714][ T139] hsr_slave_0: left promiscuous mode [ 1745.817888][ T139] hsr_slave_1: left promiscuous mode [ 1745.824419][ T139] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1745.832229][ T139] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1745.840397][ T139] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1745.847909][ T139] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1745.875170][ T139] bridge_slave_1: left allmulticast mode [ 1745.886740][ T139] bridge_slave_1: left promiscuous mode [ 1745.921318][ T139] bridge0: port 2(bridge_slave_1) entered disabled state [ 1746.022372][ T139] bridge_slave_0: left allmulticast mode [ 1746.099155][ T139] bridge_slave_0: left promiscuous mode [ 1746.174628][ T139] bridge0: port 1(bridge_slave_0) entered disabled state [ 1746.764982][ T139] veth1_macvtap: left promiscuous mode [ 1746.781551][ T139] veth0_macvtap: left promiscuous mode [ 1746.787268][ T139] veth1_vlan: left promiscuous mode [ 1746.831392][ T139] veth0_vlan: left promiscuous mode [ 1746.908988][T26085] Bluetooth: hci2: command tx timeout [ 1748.990497][T26085] Bluetooth: hci2: command tx timeout [ 1749.214055][T26216] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1749.218882][ T5809] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 1750.701590][ T5809] usb 4-1: Using ep0 maxpacket: 32 [ 1750.809929][ T139] team0 (unregistering): Port device team_slave_1 removed [ 1750.903510][ T5809] usb 4-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 1751.086995][ T5809] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1751.262780][ T139] team0 (unregistering): Port device team_slave_0 removed [ 1751.312049][ T5809] usb 4-1: config 0 descriptor?? [ 1751.321944][ T5809] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 1751.456539][ T139] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1751.771548][T20178] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 1752.164643][ T139] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1752.323874][ T5809] gspca_nw80x: reg_w err -110 [ 1752.329677][ T5809] nw80x: probe of 4-1:0.0 failed with error -110 [ 1752.519004][T20178] usb 3-1: Using ep0 maxpacket: 16 [ 1753.171162][ T139] bond0 (unregistering): Released all slaves [ 1753.295815][T26084] hsr_slave_0: entered promiscuous mode [ 1753.330890][T26084] hsr_slave_1: entered promiscuous mode [ 1753.347651][T26084] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1753.366243][ T5809] usb 4-1: USB disconnect, device number 38 [ 1753.411298][T26084] Cannot create hsr debugfs directory [ 1754.379883][T26084] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1754.421121][T26084] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1754.494170][T26084] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1754.517909][T26084] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1754.797852][T26084] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1754.863275][T26084] 8021q: adding VLAN 0 to HW filter on device team0 [ 1754.917921][ T139] bridge0: port 1(bridge_slave_0) entered blocking state [ 1754.925169][ T139] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1754.998234][ T139] bridge0: port 2(bridge_slave_1) entered blocking state [ 1755.005466][ T139] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1755.108642][T20178] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1755.139940][T20178] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 1755.173631][T20178] usb 3-1: can't read configurations, error -71 [ 1755.364767][T26270] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1757.095771][T26084] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1758.221718][T21839] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 1758.429275][T21839] usb 3-1: Using ep0 maxpacket: 32 [ 1758.442859][T21839] usb 3-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 1758.455537][T26084] veth0_vlan: entered promiscuous mode [ 1758.468970][T21839] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1758.486073][T21839] usb 3-1: config 0 descriptor?? [ 1758.495157][T26084] veth1_vlan: entered promiscuous mode [ 1758.529806][T21839] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 1758.586679][T26084] veth0_macvtap: entered promiscuous mode [ 1758.606635][T26084] veth1_macvtap: entered promiscuous mode [ 1758.647922][T26084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1758.665372][T26084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1758.675431][T26084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1758.686482][T26084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1758.703708][T26084] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1758.759731][T26084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1758.789699][T26084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1758.814606][T26084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1758.843206][T26084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1758.854056][T26084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1758.867099][T26084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1758.890724][T26084] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1758.991941][T26084] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1759.022946][T26084] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1759.052645][T26084] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1759.067056][T26084] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1759.079743][ T9] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 1759.245159][ T139] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1759.272152][ T139] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1759.299109][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 1759.322126][T22925] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1759.335565][T22925] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1759.554278][T21839] gspca_nw80x: reg_w err -71 [ 1759.563087][T21839] nw80x: probe of 3-1:0.0 failed with error -71 [ 1759.607941][T21839] usb 3-1: USB disconnect, device number 17 [ 1759.617012][T26324] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1760.227499][T26334] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1763.136267][T26369] [U] „ [ 1764.029401][ T5769] Bluetooth: hci0: command 0x0406 tx timeout [ 1764.035674][T26085] Bluetooth: hci0: Opcode 0x1407 failed: -110 [ 1764.266815][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1765.535829][ T9] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 1765.544049][ T9] usb 2-1: can't read configurations, error -71 [ 1766.865162][T26389] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1766.995138][T26395] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1768.780470][T26404] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6536'. [ 1770.192110][T26426] kAFS: unable to lookup cell '' [ 1770.225745][T26426] fuse: Unknown parameter 'group_i00000000000000000000' [ 1770.550347][T26437] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1770.688932][ T9] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 1771.018834][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 1772.185730][T26447] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1773.713956][T26473] kAFS: unable to lookup cell '' [ 1773.737368][T26473] fuse: Unknown parameter 'group_i00000000000000000000' [ 1774.397085][T26487] [U] „ [ 1774.590115][T26085] Bluetooth: hci3: command 0x0406 tx timeout [ 1775.416603][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1775.442500][ T9] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 1775.458837][ T9] usb 4-1: can't read configurations, error -71 [ 1775.529094][T26494] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1778.419007][T26520] kAFS: unable to lookup cell '' [ 1778.456538][T26520] fuse: Unknown parameter 'group_i00000000000000000000' [ 1778.729602][T26535] [U] „ [ 1779.181661][T26085] Bluetooth: hci2: command tx timeout [ 1779.396411][T26085] Bluetooth: hci1: command 0x0405 tx timeout [ 1780.216769][T26560] kAFS: unable to lookup cell '' [ 1780.237648][T26560] fuse: Unknown parameter 'group_i00000000000000000000' [ 1781.230526][ T5769] Bluetooth: hci2: command tx timeout [ 1781.469104][T26085] Bluetooth: hci1: command 0x0405 tx timeout [ 1781.541116][T13812] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 1781.814843][T13812] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1782.002693][T13812] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 1782.208161][T13812] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 1782.309477][T13812] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 1782.375455][T13812] usb 3-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 1782.408987][T13812] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1783.210121][T13812] usb 3-1: Product: syz [ 1783.214408][T13812] usb 3-1: Manufacturer: syz [ 1783.219834][T13812] usb 3-1: SerialNumber: syz [ 1783.237077][T13812] usb 3-1: config 0 descriptor?? [ 1783.249959][T13812] ums-isd200 3-1:0.0: USB Mass Storage device detected [ 1783.310549][ T5769] Bluetooth: hci2: command tx timeout [ 1783.390738][T26608] kAFS: unable to lookup cell '' [ 1783.399494][T26608] fuse: Unknown parameter 'group_i00000000000000000000' [ 1783.452978][T13812] scsi host1: usb-storage 3-1:0.0 [ 1783.484992][T13812] usb 3-1: USB disconnect, device number 18 [ 1785.389603][ T5769] Bluetooth: hci2: command tx timeout [ 1785.968948][T13812] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 1787.483839][ T5769] Bluetooth: hci2: command tx timeout [ 1787.629127][T13812] usb 4-1: Using ep0 maxpacket: 16 [ 1787.742491][ T5809] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 1787.765677][T26675] net_ratelimit: 30 callbacks suppressed [ 1787.765812][T26675] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1788.321669][ T5809] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1788.339115][ T5809] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 1788.369418][ T5809] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 1788.403273][ T5809] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 1788.432864][ T5809] usb 2-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 1788.452088][ T5809] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1788.555537][ T5809] usb 2-1: Product: syz [ 1788.618351][ T5809] usb 2-1: Manufacturer: syz [ 1788.693550][ T5809] usb 2-1: SerialNumber: syz [ 1788.776015][ T5809] usb 2-1: config 0 descriptor?? [ 1788.835780][ T5809] ums-isd200 2-1:0.0: USB Mass Storage device detected [ 1789.055031][ T5809] scsi host1: usb-storage 2-1:0.0 [ 1789.103760][ T5809] usb 2-1: USB disconnect, device number 37 [ 1789.548985][ T5769] Bluetooth: hci2: command tx timeout [ 1790.579119][T13812] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1790.626276][T13812] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 1790.660673][T13812] usb 4-1: can't read configurations, error -71 [ 1791.495866][T26723] [U] „ [ 1791.872839][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 1791.879563][ T5769] Bluetooth: hci2: command tx timeout [ 1791.885423][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 1794.748911][T26085] Bluetooth: hci2: command tx timeout [ 1794.858955][T25344] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 1795.081127][T25344] usb 2-1: Using ep0 maxpacket: 16 [ 1795.560559][T26784] [U] „ [ 1799.388918][T26085] Bluetooth: hci2: command tx timeout [ 1799.411719][T25344] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1799.444364][T25344] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 1799.452691][T25344] usb 2-1: can't read configurations, error -71 [ 1800.965206][T26845] misc userio: Invalid payload size [ 1800.984244][T26845] misc userio: Invalid payload size [ 1800.994350][T26845] misc userio: The device must be registered before sending interrupts [ 1802.568744][ C0] sched: RT throttling activated [ 1802.572155][ T5769] Bluetooth: hci2: command 0x0405 tx timeout [ 1810.749091][T26085] Bluetooth: hci2: command 0x0405 tx timeout [ 1816.189602][T26085] Bluetooth: hci2: command 0x0405 tx timeout [ 1818.269089][T26085] Bluetooth: hci2: command 0x0405 tx timeout [ 1820.958896][T26085] Bluetooth: hci2: command 0x0405 tx timeout [ 1821.243791][T23734] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 1821.334539][T27086] netlink: 176 bytes leftover after parsing attributes in process `syz.3.6702'. [ 1821.428890][T23734] usb 3-1: device descriptor read/64, error -71 [ 1821.709893][T23734] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 1821.878980][T23734] usb 3-1: device descriptor read/64, error -71 [ 1822.009168][T23734] usb usb3-port1: attempt power cycle [ 1822.439142][T23734] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 1822.479556][T23734] usb 3-1: device descriptor read/8, error -71 [ 1822.758964][T23734] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 1822.799649][T23734] usb 3-1: device descriptor read/8, error -71 [ 1822.929048][T23734] usb usb3-port1: unable to enumerate USB device [ 1823.548908][ T5769] Bluetooth: hci2: command 0x0405 tx timeout [ 1825.408848][ T23] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 1825.568974][ T23] usb 3-1: device descriptor read/64, error -71 [ 1825.851430][ T23] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 1826.018950][ T23] usb 3-1: device descriptor read/64, error -71 [ 1826.245285][ T23] usb usb3-port1: attempt power cycle [ 1826.679193][ T23] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 1826.728644][ T23] usb 3-1: device descriptor read/8, error -71 [ 1827.038963][ T23] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 1827.071421][ T23] usb 3-1: device descriptor read/8, error -71 [ 1827.205866][T13812] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 1827.227498][ T23] usb usb3-port1: unable to enumerate USB device [ 1827.392725][T13812] usb 4-1: Using ep0 maxpacket: 16 [ 1827.439367][T13812] usb 4-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 1827.448898][T13812] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1827.460161][T13812] usb 4-1: Product: syz [ 1827.464777][T13812] usb 4-1: Manufacturer: syz [ 1827.478925][T13812] usb 4-1: SerialNumber: syz [ 1827.499966][T13812] usb 4-1: config 0 descriptor?? [ 1827.515984][T13812] ssu100 4-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 1828.560609][T13812] ssu100: probe of 4-1:0.0 failed with error -5 [ 1830.329137][ T9] usb 4-1: USB disconnect, device number 43 [ 1832.669145][T26085] Bluetooth: hci2: command 0x0405 tx timeout [ 1834.260105][T27222] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1837.435439][T26085] Bluetooth: hci2: command 0x0405 tx timeout [ 1837.729292][T27260] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1841.351979][T27292] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1841.888865][ T5769] Bluetooth: hci2: command 0x0405 tx timeout [ 1844.394899][T27327] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1846.108886][T26085] Bluetooth: hci2: command 0x0405 tx timeout [ 1848.105629][T20281] hid-generic 0000:0000:0000.003F: unknown main item tag 0x0 [ 1848.157484][T20281] hid-generic 0000:0000:0000.003F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1850.988968][T26085] Bluetooth: hci2: command 0x0405 tx timeout [ 1851.189042][ T23] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 1851.401889][ T23] usb 2-1: Using ep0 maxpacket: 16 [ 1851.422638][ T23] usb 2-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 1851.433381][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1851.442592][ T23] usb 2-1: Product: syz [ 1851.446914][ T23] usb 2-1: Manufacturer: syz [ 1851.455163][ T23] usb 2-1: SerialNumber: syz [ 1851.480931][ T23] usb 2-1: config 0 descriptor?? [ 1851.501070][ T23] ssu100 2-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 1852.133969][ T9] hid-generic 0000:0000:0000.0040: unknown main item tag 0x0 [ 1852.204252][ T9] hid-generic 0000:0000:0000.0040: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1852.547583][ T23] ssu100: probe of 2-1:0.0 failed with error -5 [ 1853.081731][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 1853.088512][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 1853.418898][ T23] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 1853.579006][ T23] usb 4-1: device descriptor read/64, error -71 [ 1853.809910][T25344] usb 2-1: USB disconnect, device number 40 [ 1853.851207][ T23] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 1854.029166][ T23] usb 4-1: device descriptor read/64, error -71 [ 1854.164004][ T23] usb usb4-port1: attempt power cycle [ 1854.588886][ T5769] Bluetooth: hci2: command 0x0405 tx timeout [ 1854.629970][ T23] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 1854.676615][ T23] usb 4-1: device descriptor read/8, error -71 [ 1854.958933][ T23] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 1854.968420][T25344] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 1855.009750][ T23] usb 4-1: device descriptor read/8, error -71 [ 1855.140483][ T23] usb usb4-port1: unable to enumerate USB device [ 1855.170783][T25344] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1855.183245][T25344] usb 3-1: config 0 has no interface number 0 [ 1855.192618][T25344] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1855.204144][T25344] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1855.214213][T25344] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1855.223451][T25344] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1855.254449][T25344] usb 3-1: config 0 descriptor?? [ 1855.686017][T25344] usbhid 3-1:0.1: can't add hid device: -71 [ 1855.708272][ T23] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 1855.720741][T25344] usbhid: probe of 3-1:0.1 failed with error -71 [ 1855.734542][T25344] usb 3-1: USB disconnect, device number 27 [ 1855.760770][ T23] hid-generic 0000:0000:0000.0041: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1857.219153][T13812] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 1857.458812][T13812] usb 3-1: Using ep0 maxpacket: 16 [ 1860.158633][T13812] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1860.269079][ T5769] Bluetooth: hci2: command 0x0405 tx timeout [ 1860.283143][T13812] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 1860.304473][T13812] usb 3-1: can't read configurations, error -71 [ 1860.638924][ T9] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 1860.848517][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1860.875571][ T9] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1860.908513][ T9] usb 5-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 1860.926885][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1860.953185][ T9] usb 5-1: Product: syz [ 1860.969210][ T9] usb 5-1: Manufacturer: syz [ 1860.982792][ T9] usb 5-1: SerialNumber: syz [ 1861.008349][ T9] usb 5-1: config 0 descriptor?? [ 1863.326279][T21697] hid-generic 0000:0000:0000.0042: unknown main item tag 0x0 [ 1863.365442][T21697] hid-generic 0000:0000:0000.0042: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1863.454779][T21697] usb 5-1: USB disconnect, device number 2 [ 1864.579323][ T9] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 1864.800996][ T9] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1864.843906][ T9] usb 2-1: config 0 has no interface number 0 [ 1864.874641][ T9] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1864.912388][ T9] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1864.932652][ T9] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1864.955659][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1864.978124][ T9] usb 2-1: config 0 descriptor?? [ 1865.492493][ T9] usbhid 2-1:0.1: can't add hid device: -71 [ 1865.524361][ T9] usbhid: probe of 2-1:0.1 failed with error -71 [ 1865.604714][ T9] usb 2-1: USB disconnect, device number 41 [ 1866.148967][ T5809] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 1866.468803][ T5809] usb 4-1: Using ep0 maxpacket: 16 [ 1866.520301][ T5809] usb 4-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 1866.566563][ T5809] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1866.719032][ T5809] usb 4-1: Product: syz [ 1866.776606][ T5809] usb 4-1: Manufacturer: syz [ 1866.826289][ T5809] usb 4-1: SerialNumber: syz [ 1866.910317][ T5809] usb 4-1: config 0 descriptor?? [ 1866.935394][ T5809] ssu100 4-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 1867.525923][T13812] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1867.556205][T13812] hid-generic 0000:0000:0000.0043: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1868.145908][ T5809] usb 4-1: Quatech SSU-100 USB to Serial Driver converter now attached to ttyUSB0 [ 1868.367533][T13812] usb 4-1: USB disconnect, device number 48 [ 1868.421760][T13812] ssu100 ttyUSB0: Quatech SSU-100 USB to Serial Driver converter now disconnected from ttyUSB0 [ 1868.463800][T13812] ssu100 4-1:0.0: device disconnected [ 1870.332454][T27594] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1872.883554][T27649] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1875.030781][T13812] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 1875.229357][T13812] usb 4-1: Using ep0 maxpacket: 32 [ 1875.237031][T13812] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1875.259251][T13812] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1875.482938][T13812] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1875.510222][T13812] usb 4-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 1875.519395][T13812] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1875.539988][T13812] usb 4-1: config 0 descriptor?? [ 1876.161575][ T5769] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1876.172283][ T5769] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1876.183142][ T5769] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1876.192340][ T5769] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1876.203121][ T5769] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1876.221953][ T5769] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1876.336372][T13812] input: HID 0458:5011 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5011.0044/input/input89 [ 1876.491646][T13812] input: HID 0458:5011 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5011.0044/input/input90 [ 1876.737504][T13812] kye 0003:0458:5011.0044: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0458:5011] on usb-dummy_hcd.3-1/input0 [ 1876.831864][T13812] usb 4-1: USB disconnect, device number 49 [ 1877.066082][T27683] fido_id[27683]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 1877.284836][T24673] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1877.299295][T25344] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 1877.552420][T27696] [U] „ [ 1877.639625][T25344] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1877.650429][T25344] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1877.673265][T25344] usb 5-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 1877.689852][T25344] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1877.731739][T25344] usb 5-1: Product: syz [ 1877.760677][T25344] usb 5-1: Manufacturer: syz [ 1877.780282][T25344] usb 5-1: SerialNumber: syz [ 1877.827333][T24673] netdevsim netdevsim2 netdevsim2 (unregistering): left allmulticast mode [ 1877.875229][T25344] usb 5-1: config 0 descriptor?? [ 1877.941528][T24673] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1878.277507][ T5769] Bluetooth: hci4: command tx timeout [ 1878.311865][T24673] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1878.432327][T24673] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1878.451842][T27677] chnl_net:caif_netlink_parms(): no params data found [ 1878.850359][T27677] bridge0: port 1(bridge_slave_0) entered blocking state [ 1878.857802][T27677] bridge0: port 1(bridge_slave_0) entered disabled state [ 1878.865566][T27677] bridge_slave_0: entered allmulticast mode [ 1878.874237][T27677] bridge_slave_0: entered promiscuous mode [ 1878.885765][T27677] bridge0: port 2(bridge_slave_1) entered blocking state [ 1878.895361][T27677] bridge0: port 2(bridge_slave_1) entered disabled state [ 1878.902922][T27677] bridge_slave_1: entered allmulticast mode [ 1878.910875][T27677] bridge_slave_1: entered promiscuous mode [ 1878.974396][T27677] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1879.016303][T27677] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1879.074611][T24673] tipc: Disabling bearer [ 1879.083006][T24673] tipc: Left network mode [ 1879.103299][T27677] team0: Port device team_slave_0 added [ 1879.178636][T27677] team0: Port device team_slave_1 added [ 1879.235271][T27677] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1879.242972][T27677] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1879.271802][T27677] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1879.343041][T27677] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1879.354902][T27677] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1879.394445][T27677] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1880.349605][T26085] Bluetooth: hci4: command tx timeout [ 1880.504702][ T23] usb 5-1: USB disconnect, device number 3 [ 1880.876518][T27677] hsr_slave_0: entered promiscuous mode [ 1880.886238][T27677] hsr_slave_1: entered promiscuous mode [ 1880.911301][T27677] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1880.923914][T27730] [U] „ [ 1880.934138][T27677] Cannot create hsr debugfs directory [ 1881.971908][T24673] bond0: (slave wlan1): Releasing backup interface [ 1882.429030][ T5769] Bluetooth: hci4: command tx timeout [ 1882.453940][T24673] hsr_slave_0: left promiscuous mode [ 1882.468020][T24673] hsr_slave_1: left promiscuous mode [ 1882.486005][T24673] batman_adv: batadv0: Interface deactivated: dummy0 [ 1882.506358][T24673] batman_adv: batadv0: Removing interface: dummy0 [ 1882.534568][T24673] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1882.659467][T24673] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1882.682609][T24673] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1883.415089][T24673] bridge_slave_1: left allmulticast mode [ 1883.428971][T24673] bridge_slave_1: left promiscuous mode [ 1883.439345][T24673] bridge0: port 2(bridge_slave_1) entered disabled state [ 1883.458469][T24673] bridge_slave_0: left allmulticast mode [ 1883.465039][T24673] bridge_slave_0: left promiscuous mode [ 1883.475232][T24673] bridge0: port 1(bridge_slave_0) entered disabled state [ 1883.552346][T24673] veth1_macvtap: left promiscuous mode [ 1883.558034][T24673] veth0_macvtap: left promiscuous mode [ 1883.564386][T24673] veth1_vlan: left promiscuous mode [ 1883.569947][T24673] veth0_vlan: left promiscuous mode [ 1883.767579][T24673] pimreg (unregistering): left allmulticast mode [ 1883.776130][ T5809] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 1883.853507][T27767] [U] „ [ 1883.981334][ T5809] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1883.995257][ T5809] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1884.012648][ T5809] usb 4-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 1884.021939][ T5809] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1884.030284][ T5809] usb 4-1: Product: syz [ 1884.034577][ T5809] usb 4-1: Manufacturer: syz [ 1884.039547][ T5809] usb 4-1: SerialNumber: syz [ 1884.048050][ T5809] usb 4-1: config 0 descriptor?? [ 1884.056588][ T5809] ums-isd200 4-1:0.0: USB Mass Storage device detected [ 1884.351736][T24673] team0 (unregistering): Port device team_slave_1 removed [ 1884.406847][T24673] team0 (unregistering): Port device team_slave_0 removed [ 1884.470736][T24673] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1884.516068][ T5769] Bluetooth: hci4: command tx timeout [ 1884.522820][T24673] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1885.073861][T24673] bond0 (unregistering): Released all slaves [ 1886.510177][ T5809] usb 4-1: USB disconnect, device number 50 [ 1886.599087][ T5769] Bluetooth: hci4: command tx timeout [ 1886.654021][T24673] IPVS: stop unused estimator thread 0... [ 1886.869649][T27677] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1886.895540][T27677] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1886.920732][T27677] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1886.945414][T27677] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1887.246451][T27677] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1887.390925][T27677] 8021q: adding VLAN 0 to HW filter on device team0 [ 1887.418012][ T3426] bridge0: port 1(bridge_slave_0) entered blocking state [ 1887.425396][ T3426] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1887.450113][T27805] [U] „ [ 1887.491516][T24688] bridge0: port 2(bridge_slave_1) entered blocking state [ 1887.498822][T24688] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1888.759181][T26085] Bluetooth: hci4: command tx timeout [ 1888.923282][T27677] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1889.999538][T27835] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1890.092519][T27677] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1890.098505][T27829] 9pnet: Could not find request transport: vir [ 1890.245278][T27677] veth0_vlan: entered promiscuous mode [ 1890.295817][T27677] veth1_vlan: entered promiscuous mode [ 1890.491158][T27844] [U] „ [ 1890.522563][T27677] veth0_macvtap: entered promiscuous mode [ 1890.553376][T27677] veth1_macvtap: entered promiscuous mode [ 1890.726761][T27677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1890.787635][T27677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1890.827986][T27677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1890.848948][ T5769] Bluetooth: hci4: command tx timeout [ 1890.895464][T27677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1890.911340][T27677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1890.930973][T27677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1891.016606][T27677] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1891.085155][T27677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1891.152279][T27677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1891.164017][T27677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1891.281147][T27677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1891.304582][T27677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1891.316899][T27677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1891.953287][T27677] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1891.971975][T27677] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1891.982153][T27677] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1892.000081][T27677] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1892.012215][T27677] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1892.254089][T24677] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1892.279053][T24677] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1892.385951][T24688] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1892.421064][T24688] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1892.909046][ T5769] Bluetooth: hci4: command tx timeout [ 1895.488219][T27903] netlink: 136 bytes leftover after parsing attributes in process `syz.3.6931'. [ 1895.660204][T27902] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 1895.666761][T27902] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1895.674627][T27902] vhci_hcd vhci_hcd.0: Device attached [ 1895.898409][T27904] vhci_hcd: connection closed [ 1895.903266][ T3426] vhci_hcd: stop threads [ 1895.930879][ T3426] vhci_hcd: release socket [ 1895.951005][T26085] Bluetooth: hci4: command tx timeout [ 1895.982237][ T3426] vhci_hcd: disconnect device [ 1896.039067][ T9] vhci_hcd: vhci_device speed not set [ 1896.632857][T20281] hid-generic 0000:0000:0000.0045: unknown main item tag 0x0 [ 1896.685942][T20281] hid-generic 0000:0000:0000.0045: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1896.748879][T26085] Bluetooth: hci2: command 0x0405 tx timeout [ 1901.319137][ T5769] Bluetooth: hci4: command 0x0405 tx timeout [ 1903.559696][T20281] hid-generic 0000:0000:0000.0046: unknown main item tag 0x0 [ 1903.581122][T20281] hid-generic 0000:0000:0000.0046: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1904.578999][T26085] Bluetooth: hci4: command 0x0405 tx timeout [ 1905.768946][ T5809] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 1906.588855][T26085] Bluetooth: hci4: command 0x0405 tx timeout [ 1907.129234][ T5809] usb 4-1: Using ep0 maxpacket: 16 [ 1909.644534][T28062] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6963'. [ 1910.908860][ T5769] Bluetooth: hci1: command 0x0405 tx timeout [ 1912.199057][ T5809] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1912.408784][ T5769] Bluetooth: hci4: command 0x0405 tx timeout [ 1912.418795][ T5809] usb 4-1: unable to read config index 0 descriptor/start: -32 [ 1912.426525][ T5809] usb 4-1: chopping to 0 config(s) [ 1912.433706][ T5809] usb 4-1: can't read configurations, error -32 [ 1912.848898][T21839] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 1913.135360][T21839] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1913.499024][T21839] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1913.547851][T21839] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 1913.578803][T21839] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1913.626273][T21839] usb 5-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 1913.651580][T21839] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1913.663388][T21839] usb 5-1: Product: syz [ 1913.667807][T21839] usb 5-1: Manufacturer: syz [ 1913.681601][T21839] usb 5-1: SerialNumber: syz [ 1913.733742][T21839] usb 5-1: config 0 descriptor?? [ 1913.842419][T21839] ums-isd200 5-1:0.0: USB Mass Storage device detected [ 1914.438971][ T5769] Bluetooth: hci4: command 0x0405 tx timeout [ 1914.519473][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 1914.525844][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 1915.616199][T20281] usb 5-1: USB disconnect, device number 4 [ 1916.525673][ T5769] Bluetooth: hci4: command 0x0405 tx timeout [ 1918.118857][ T5769] Bluetooth: hci1: command 0x0405 tx timeout [ 1918.518886][ T5809] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 1918.613786][T28144] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1918.708238][T28146] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6988'. [ 1918.769068][ T5809] usb 4-1: Using ep0 maxpacket: 16 [ 1922.252303][T28164] Failed to get privilege flags for destination (handle=0x2:0x7) [ 1923.789002][ T5809] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1924.865422][ T5809] usb 4-1: unable to read config index 0 descriptor/start: -32 [ 1924.878761][ T5809] usb 4-1: chopping to 0 config(s) [ 1924.888844][ T5809] usb 4-1: can't read configurations, error -32 [ 1925.108889][ T5809] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 1926.069035][T28166] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(10) [ 1926.075695][T28166] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1926.085616][T28166] vhci_hcd vhci_hcd.0: Device attached [ 1926.097429][ T5809] usb 4-1: device descriptor read/64, error -32 [ 1926.161842][T28177] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1926.279141][ T5809] usb usb4-port1: attempt power cycle [ 1926.289853][T21839] vhci_hcd: vhci_device speed not set [ 1926.357251][T28174] vhci_hcd: connection closed [ 1926.357453][T24673] vhci_hcd: stop threads [ 1926.371156][T21839] usb 35-1: new high-speed USB device number 2 using vhci_hcd [ 1926.393197][T24673] vhci_hcd: release socket [ 1926.401738][T24673] vhci_hcd: disconnect device [ 1927.258805][ T5809] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 1927.309136][ T5809] usb 4-1: device descriptor read/8, error -32 [ 1931.908335][T28213] netlink: 224 bytes leftover after parsing attributes in process `syz.2.7009'. [ 1931.917679][T28213] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7009'. [ 1932.009239][T21839] vhci_hcd: vhci_device speed not set [ 1933.898662][T28235] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7014'. [ 1933.938930][ T9] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 1934.128772][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 1935.173394][T28247] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1937.621777][T28257] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7024'. [ 1939.206968][T28271] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1939.379806][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1940.176886][ T9] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 1940.269585][ T9] usb 2-1: can't read configurations, error -71 [ 1940.562545][T28277] (null): rxe_set_mtu: Set mtu to 1024 [ 1940.650329][T28277] infiniband syz0: set active [ 1940.655535][T28277] infiniband syz0: added bond_slave_1 [ 1940.728944][T28277] RDS/IB: syz0: added [ 1940.736174][T28277] smc: adding ib device syz0 with port count 1 [ 1940.742800][T28277] smc: ib device syz0 port 1 has pnetid [ 1942.085594][T28289] [U] „ [ 1944.438240][T28310] CIFS: iocharset name too long [ 1946.099661][T28317] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1949.719096][T26085] Bluetooth: hci2: command 0x0405 tx timeout [ 1952.439157][T25344] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 1952.644553][T25344] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1952.654544][T25344] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 1952.664510][T25344] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 1952.683474][T25344] usb 4-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 1952.693015][T25344] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1952.749034][T25344] usb 4-1: Product: syz [ 1952.756407][T25344] usb 4-1: Manufacturer: syz [ 1952.761616][T25344] usb 4-1: SerialNumber: syz [ 1952.791817][T25344] usb 4-1: config 0 descriptor?? [ 1952.812420][T25344] ums-isd200 4-1:0.0: USB Mass Storage device detected [ 1954.872229][T23734] usb 4-1: USB disconnect, device number 57 [ 1954.976610][T28392] fuse: Bad value for 'fd' [ 1955.229661][ T5769] Bluetooth: hci2: command 0x0405 tx timeout [ 1956.678812][ T5769] Bluetooth: hci4: command 0x0405 tx timeout [ 1956.983048][T28417] fuse: Bad value for 'fd' [ 1957.208870][ T23] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 1958.043184][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1958.057531][ T23] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 1958.075443][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 1958.101702][ T23] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 1958.131895][ T23] usb 4-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 1958.146107][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1958.163384][ T23] usb 4-1: Product: syz [ 1958.172225][ T23] usb 4-1: Manufacturer: syz [ 1958.182282][ T23] usb 4-1: SerialNumber: syz [ 1958.205568][ T23] usb 4-1: config 0 descriptor?? [ 1958.222741][ T23] ums-isd200 4-1:0.0: USB Mass Storage device detected [ 1958.443445][ T23] scsi host1: usb-storage 4-1:0.0 [ 1958.493346][ T23] usb 4-1: USB disconnect, device number 58 [ 1959.046573][T28443] fuse: Bad value for 'fd' [ 1959.069118][T26085] Bluetooth: hci4: command 0x0405 tx timeout [ 1961.798849][T26085] Bluetooth: hci4: command 0x0405 tx timeout [ 1963.330469][T28493] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1965.976823][T28519] overlayfs: failed to resolve './file1/file0': -2 [ 1967.209857][T20178] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 1967.550218][T20178] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1967.691004][T20178] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1967.776121][T20178] usb 5-1: config 0 has no interface number 0 [ 1967.788886][T20178] usb 5-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1967.818054][T20178] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1967.851935][T20178] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1967.880203][T20178] usb 5-1: config 0 descriptor?? [ 1967.912836][T20178] usbhid 5-1:0.1: couldn't find an input interrupt endpoint [ 1969.482633][T28554] overlayfs: failed to resolve './file1/file0': -2 [ 1970.365489][ T9] usb 5-1: USB disconnect, device number 5 [ 1971.332232][T28583] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1972.697325][T28590] overlayfs: failed to resolve './file1/file0': -2 [ 1973.018951][ T9] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 1973.384691][ T9] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1973.452638][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1973.518816][ T9] usb 3-1: config 0 has no interface number 0 [ 1973.548070][ T9] usb 3-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1973.599891][ T9] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1973.656734][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1973.723012][ T9] usb 3-1: config 0 descriptor?? [ 1973.747694][ T9] usbhid 3-1:0.1: couldn't find an input interrupt endpoint [ 1974.835486][T28613] netlink: 44 bytes leftover after parsing attributes in process `syz.3.7139'. [ 1975.764267][ T9] usb 3-1: USB disconnect, device number 30 [ 1975.967923][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 1975.975530][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 1977.539112][T28647] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 1977.545678][T28647] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1977.568742][T28647] vhci_hcd vhci_hcd.0: Device attached [ 1977.581883][T28649] vhci_hcd: connection closed [ 1977.584949][ T11] vhci_hcd: stop threads [ 1977.594952][ T11] vhci_hcd: release socket [ 1977.602761][ T11] vhci_hcd: disconnect device [ 1977.735371][T28655] netlink: 44 bytes leftover after parsing attributes in process `syz.3.7152'. [ 1977.848817][T26085] Bluetooth: hci1: command 0x0405 tx timeout [ 1986.348794][T26085] Bluetooth: hci4: command 0x0405 tx timeout [ 1987.008775][T25344] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 1987.244972][T25344] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1987.397122][T25344] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1987.639205][T25344] usb 2-1: config 0 has no interface number 0 [ 1987.645513][T25344] usb 2-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1987.826953][T25344] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1987.850546][T25344] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1987.865768][T25344] usb 2-1: config 0 descriptor?? [ 1987.877734][T25344] usbhid 2-1:0.1: couldn't find an input interrupt endpoint [ 1989.199659][ T9] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 1989.294976][T28795] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1989.390008][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 1989.437994][ T9] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 1989.438063][ T9] usb 5-1: config 0 has no interface number 0 [ 1989.438202][ T9] usb 5-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1989.473064][ T9] usb 5-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1989.473147][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1989.473208][ T9] usb 5-1: Product: syz [ 1989.473224][ T9] usb 5-1: Manufacturer: syz [ 1989.473240][ T9] usb 5-1: SerialNumber: syz [ 1989.605506][ T9] usb 5-1: config 0 descriptor?? [ 1989.891034][ T9] em28xx 5-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 1990.022663][ T9] em28xx 5-1:0.132: Video interface 132 found: [ 1990.630881][T21839] usb 2-1: USB disconnect, device number 44 [ 1990.855983][ T9] em28xx 5-1:0.132: unknown em28xx chip ID (0) [ 1991.559414][ T9] em28xx 5-1:0.132: failed to read eeprom (err=-110) [ 1991.871537][ T9] em28xx 5-1:0.132: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-110] [ 1992.052030][ T9] em28xx 5-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 1992.078800][ T9] em28xx 5-1:0.132: analog set to bulk mode. [ 1992.094894][T20178] em28xx 5-1:0.132: Registering V4L2 extension [ 1992.138986][ T9] usb 5-1: USB disconnect, device number 6 [ 1992.149847][ T9] em28xx 5-1:0.132: Disconnecting em28xx [ 1992.676851][T20178] em28xx 5-1:0.132: Config register raw data: 0xffffffed [ 1992.715485][T20178] em28xx 5-1:0.132: AC97 chip type couldn't be determined [ 1992.743129][T20178] em28xx 5-1:0.132: No AC97 audio processor [ 1992.841666][T28831] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1992.960236][T20178] usb 5-1: Decoder not found [ 1992.960342][T20178] em28xx 5-1:0.132: failed to create media graph [ 1992.960478][T20178] em28xx 5-1:0.132: V4L2 device video103 deregistered [ 1993.159018][T20178] em28xx 5-1:0.132: Remote control support is not available for this card. [ 1993.207870][T25344] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 1993.326029][ T9] em28xx 5-1:0.132: Closing input extension [ 1993.835718][ T9] em28xx 5-1:0.132: Freeing device [ 1994.353472][T25344] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1994.372582][T25344] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1994.427627][T25344] usb 2-1: config 0 has no interface number 0 [ 1994.466560][T25344] usb 2-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1994.498836][T25344] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1994.517959][T25344] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1994.539932][T25344] usb 2-1: config 0 descriptor?? [ 1994.566211][T25344] usbhid 2-1:0.1: couldn't find an input interrupt endpoint [ 1995.878323][T25344] usb 2-1: USB disconnect, device number 45 [ 1995.972349][T28866] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1998.500151][T20178] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 1998.541704][T28887] netlink: 44 bytes leftover after parsing attributes in process `syz.3.7227'. [ 1998.770849][T20178] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1998.788028][T20178] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 1998.810488][T20178] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 1998.871463][T20178] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 1998.918342][T20178] usb 3-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 1998.985276][T20178] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1999.210543][T20178] usb 3-1: Product: syz [ 1999.270971][T20178] usb 3-1: Manufacturer: syz [ 1999.300710][T20178] usb 3-1: SerialNumber: syz [ 1999.324402][T20178] usb 3-1: config 0 descriptor?? [ 1999.341845][T20178] ums-isd200 3-1:0.0: USB Mass Storage device detected [ 1999.776835][T20178] scsi host1: usb-storage 3-1:0.0 [ 1999.807807][T20178] usb 3-1: USB disconnect, device number 31 [ 2000.023728][T28905] [U] „ [ 2001.044540][T26085] Bluetooth: hci2: command 0x0405 tx timeout [ 2002.984891][T28932] [U] „ [ 2003.061316][T28937] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 2005.428812][T26085] Bluetooth: hci1: command 0x0405 tx timeout [ 2009.629039][T26085] Bluetooth: hci4: command 0x0405 tx timeout [ 2011.132894][T24692] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2011.326463][ T5769] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2011.328123][T24692] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2011.349983][ T5769] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2011.362960][ T5769] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2011.374630][ T5769] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2011.382213][T13812] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 2011.391532][ T5769] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 2011.404387][ T5769] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2011.445257][T24692] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2011.520243][T24692] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2011.578908][T13812] usb 5-1: Using ep0 maxpacket: 32 [ 2011.594872][T13812] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 2011.618099][T13812] usb 5-1: config 0 has no interface number 0 [ 2011.634495][T13812] usb 5-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2011.661009][T13812] usb 5-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 2011.679910][T13812] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2011.696228][T13812] usb 5-1: Product: syz [ 2011.701346][T13812] usb 5-1: Manufacturer: syz [ 2011.703940][T29004] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 2011.717708][T13812] usb 5-1: SerialNumber: syz [ 2011.756554][T13812] usb 5-1: config 0 descriptor?? [ 2011.778154][T13812] em28xx 5-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 2011.812545][T13812] em28xx 5-1:0.132: Video interface 132 found: [ 2011.824903][T24692] tipc: Left network mode [ 2012.194687][T13812] em28xx 5-1:0.132: unknown em28xx chip ID (0) [ 2012.831153][T13812] em28xx 5-1:0.132: failed to trigger write to i2c address 0xa0 (error=-5) [ 2012.850417][T13812] em28xx 5-1:0.132: failed to read eeprom (err=-5) [ 2012.867403][T13812] em28xx 5-1:0.132: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-5] [ 2012.953633][T13812] em28xx 5-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 2012.972099][T13812] em28xx 5-1:0.132: analog set to bulk mode. [ 2012.978213][ T5809] em28xx 5-1:0.132: Registering V4L2 extension [ 2013.016423][T13812] usb 5-1: USB disconnect, device number 7 [ 2013.028451][T13812] em28xx 5-1:0.132: Disconnecting em28xx [ 2013.147776][T29001] chnl_net:caif_netlink_parms(): no params data found [ 2013.304216][ T5809] em28xx 5-1:0.132: Config register raw data: 0xffffffed [ 2013.335876][ T5809] em28xx 5-1:0.132: AC97 chip type couldn't be determined [ 2013.379291][ T5809] em28xx 5-1:0.132: No AC97 audio processor [ 2013.434509][ T5809] usb 5-1: Decoder not found [ 2013.440900][ T5809] em28xx 5-1:0.132: failed to create media graph [ 2013.453737][ T5809] em28xx 5-1:0.132: V4L2 device video103 deregistered [ 2013.478066][T26085] Bluetooth: hci1: command tx timeout [ 2013.579009][ T5809] em28xx 5-1:0.132: Remote control support is not available for this card. [ 2013.729806][T13812] em28xx 5-1:0.132: Closing input extension [ 2013.992787][T13812] em28xx 5-1:0.132: Freeing device [ 2014.350995][T29001] bridge0: port 1(bridge_slave_0) entered blocking state [ 2014.369395][T29001] bridge0: port 1(bridge_slave_0) entered disabled state [ 2014.388330][T29001] bridge_slave_0: entered allmulticast mode [ 2014.417081][T29001] bridge_slave_0: entered promiscuous mode [ 2014.558604][T29048] overlayfs: overlapping lowerdir path [ 2016.050754][T26085] Bluetooth: hci1: command tx timeout [ 2016.132774][T29001] bridge0: port 2(bridge_slave_1) entered blocking state [ 2016.171856][T29001] bridge0: port 2(bridge_slave_1) entered disabled state [ 2016.205708][T29001] bridge_slave_1: entered allmulticast mode [ 2016.250319][T29001] bridge_slave_1: entered promiscuous mode [ 2017.333455][T29055] netlink: 44 bytes leftover after parsing attributes in process `syz.2.7271'. [ 2017.431385][T29001] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2017.503802][T29001] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2017.601839][T24692] hsr_slave_0: left promiscuous mode [ 2017.620518][T24692] hsr_slave_1: left promiscuous mode [ 2017.646080][T24692] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2017.664308][T24692] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2017.703758][T24692] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2017.719089][T24692] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2017.759343][T24692] bridge_slave_1: left allmulticast mode [ 2017.772794][T24692] bridge_slave_1: left promiscuous mode [ 2017.798445][T24692] bridge0: port 2(bridge_slave_1) entered disabled state [ 2017.826496][T24692] bridge_slave_0: left allmulticast mode [ 2017.846444][T24692] bridge_slave_0: left promiscuous mode [ 2017.867857][T24692] bridge0: port 1(bridge_slave_0) entered disabled state [ 2018.003383][T24692] veth1_macvtap: left promiscuous mode [ 2018.010217][T24692] veth0_macvtap: left promiscuous mode [ 2018.023122][T24692] veth1_vlan: left promiscuous mode [ 2018.053116][T24692] veth0_vlan: left promiscuous mode [ 2018.108970][T26085] Bluetooth: hci1: command tx timeout [ 2018.531912][T24692] pimreg (unregistering): left allmulticast mode [ 2018.636021][T29085] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 2019.593495][T29095] overlayfs: overlapping lowerdir path [ 2020.188798][T26085] Bluetooth: hci1: command tx timeout [ 2020.568064][T24692] team0 (unregistering): Port device team_slave_1 removed [ 2020.646990][T29099] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 2020.729641][T24692] team0 (unregistering): Port device team_slave_0 removed [ 2020.960336][T24692] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2021.323127][T24692] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2022.478217][T24692] bond0 (unregistering): Released all slaves [ 2022.630786][T29110] netlink: 44 bytes leftover after parsing attributes in process `syz.4.7281'. [ 2022.832593][T29001] team0: Port device team_slave_0 added [ 2023.070906][T29001] team0: Port device team_slave_1 added [ 2023.481313][T29001] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2023.488370][T29001] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2023.569127][T29001] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2023.641900][T29001] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2023.650254][T29001] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2023.676498][ C0] vkms_vblank_simulate: vblank timer overrun [ 2023.731912][T29001] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2023.899823][T29001] hsr_slave_0: entered promiscuous mode [ 2023.921315][T29001] hsr_slave_1: entered promiscuous mode [ 2025.326237][T29160] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 2026.084568][T29162] netlink: 44 bytes leftover after parsing attributes in process `syz.2.7292'. [ 2026.361817][T29168] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7295'. [ 2026.689447][T29001] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 2026.740165][T29001] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 2026.791766][T29001] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 2026.820864][T29001] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 2027.154297][T29001] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2027.215609][T29001] 8021q: adding VLAN 0 to HW filter on device team0 [ 2027.258024][T24692] bridge0: port 1(bridge_slave_0) entered blocking state [ 2027.265334][T24692] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2027.315221][T24692] bridge0: port 2(bridge_slave_1) entered blocking state [ 2027.322487][T24692] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2027.643019][T29001] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2028.350356][T29207] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 2028.988245][T29001] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2029.024081][T29001] veth0_vlan: entered promiscuous mode [ 2029.033744][T29001] veth1_vlan: entered promiscuous mode [ 2029.051179][T29001] veth0_macvtap: entered promiscuous mode [ 2029.059626][T29001] veth1_macvtap: entered promiscuous mode [ 2029.092416][T29001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2029.108799][T29001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2029.121035][T29001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2029.131661][T29001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2029.147261][T29001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2029.408133][T29001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2029.603710][T29001] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2029.718941][T26085] Bluetooth: hci4: command 0x0405 tx timeout [ 2029.811691][T29001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2029.826925][T29001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2029.837581][T29001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2029.851229][T29001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2029.888770][T29001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2029.907345][T29001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2029.934317][T29001] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2030.005153][T29001] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2030.037775][T29001] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2030.060061][T29001] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2030.070919][T29001] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2030.089691][T29221] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7305'. [ 2030.564501][T29228] netlink: 136 bytes leftover after parsing attributes in process `syz.3.7304'. [ 2030.737506][T29219] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 2030.744112][T29219] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 2030.761497][T29219] vhci_hcd vhci_hcd.0: Device attached [ 2030.861291][T29230] vhci_hcd: connection closed [ 2030.863228][T24671] vhci_hcd: stop threads [ 2030.884472][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2030.899635][T24671] vhci_hcd: release socket [ 2030.916446][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2030.919852][T24671] vhci_hcd: disconnect device [ 2030.986444][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2031.009480][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2031.832998][T29264] netlink: 44 bytes leftover after parsing attributes in process `syz.1.7312'. [ 2032.586952][T13812] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 2032.840596][T13812] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 2032.861769][T13812] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 2032.888922][T13812] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 2032.925336][T13812] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 2032.957989][T13812] usb 5-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 2032.976678][T13812] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2032.987092][T13812] usb 5-1: Product: syz [ 2032.999751][T13812] usb 5-1: Manufacturer: syz [ 2033.004409][T13812] usb 5-1: SerialNumber: syz [ 2033.015363][T13812] usb 5-1: config 0 descriptor?? [ 2033.062969][T13812] ums-isd200 5-1:0.0: USB Mass Storage device detected [ 2033.297909][T29303] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7322'. [ 2033.559778][T26085] Bluetooth: hci2: command 0x0405 tx timeout [ 2033.636568][T13812] scsi host1: usb-storage 5-1:0.0 [ 2034.139261][T13812] usb 5-1: USB disconnect, device number 8 [ 2034.879725][T29335] netlink: 44 bytes leftover after parsing attributes in process `syz.1.7327'. [ 2035.190070][T29341] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7331'. [ 2036.610418][T13812] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 2036.842392][T13812] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 2036.878767][T13812] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 2036.888574][T13812] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 2036.922282][T13812] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 2036.976791][T13812] usb 3-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 2037.018119][T13812] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2037.041763][T13812] usb 3-1: Product: syz [ 2037.046089][T13812] usb 3-1: Manufacturer: syz [ 2037.068921][T13812] usb 3-1: SerialNumber: syz [ 2037.081589][T13812] usb 3-1: config 0 descriptor?? [ 2037.100396][T13812] ums-isd200 3-1:0.0: USB Mass Storage device detected [ 2037.395045][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 2037.409712][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 2037.547347][T13812] scsi host1: usb-storage 3-1:0.0 [ 2037.572146][T13812] usb 3-1: USB disconnect, device number 32 [ 2038.138303][T29395] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 2039.862412][T29422] netlink: 44 bytes leftover after parsing attributes in process `syz.1.7348'. [ 2042.628802][ T5809] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 2042.872145][T29443] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 2042.921411][ T5809] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 2042.954571][ T5809] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 2042.954625][ T5809] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 2042.954676][ T5809] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 2042.986172][ T5809] usb 4-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 2042.986245][ T5809] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2042.986306][ T5809] usb 4-1: Product: syz [ 2042.986370][ T5809] usb 4-1: Manufacturer: syz [ 2042.986441][ T5809] usb 4-1: SerialNumber: syz [ 2044.244939][ T5809] usb 4-1: config 0 descriptor?? [ 2044.269747][ T5809] usb 4-1: can't set config #0, error -71 [ 2044.298192][ T5809] usb 4-1: USB disconnect, device number 59 [ 2047.819186][ T5809] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 2047.868820][T11775] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 2047.918265][T29477] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 2048.053779][ T5809] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 2048.053846][ T5809] usb 5-1: config 0 has no interface number 0 [ 2048.053933][ T5809] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2048.054122][ T5809] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 2048.054191][ T5809] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2048.077358][ T5809] usb 5-1: config 0 descriptor?? [ 2048.087186][ T5809] usbhid 5-1:0.1: couldn't find an input interrupt endpoint [ 2048.905042][T11775] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 2049.256529][T11775] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 2049.275331][T11775] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 2049.298763][T11775] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 2049.321031][T11775] usb 4-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 2049.338730][T11775] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2049.346795][T11775] usb 4-1: Product: syz [ 2049.368707][T11775] usb 4-1: Manufacturer: syz [ 2049.373516][T11775] usb 4-1: SerialNumber: syz [ 2049.422268][T11775] usb 4-1: config 0 descriptor?? [ 2049.553617][T11775] ums-isd200 4-1:0.0: USB Mass Storage device detected [ 2049.709738][T29473] Bluetooth: hci4: command 0x0405 tx timeout [ 2049.957657][T11775] scsi host1: usb-storage 4-1:0.0 [ 2049.995268][T11775] usb 4-1: USB disconnect, device number 60 [ 2050.189006][T25344] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 2050.848390][T25344] usb 2-1: Using ep0 maxpacket: 32 [ 2051.083291][ T5809] usb 5-1: USB disconnect, device number 9 [ 2051.103620][T25344] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 2051.112017][T25344] usb 2-1: config 0 has no interface number 0 [ 2051.120260][T25344] usb 2-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2051.134426][T25344] usb 2-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 2051.144806][T25344] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2051.153828][T25344] usb 2-1: Product: syz [ 2051.158090][T25344] usb 2-1: Manufacturer: syz [ 2051.162835][T25344] usb 2-1: SerialNumber: syz [ 2051.178113][T25344] usb 2-1: config 0 descriptor?? [ 2051.197977][T25344] em28xx 2-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 2051.209545][T25344] em28xx 2-1:0.132: Video interface 132 found: [ 2051.371282][T29509] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 2051.857730][T25344] em28xx 2-1:0.132: unknown em28xx chip ID (0) [ 2052.548438][T25344] em28xx 2-1:0.132: failed to get i2c transfer status from bridge register (error=-5) [ 2052.653619][T25344] em28xx 2-1:0.132: board has no eeprom [ 2052.768806][T25344] em28xx 2-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 2052.776707][T25344] em28xx 2-1:0.132: analog set to bulk mode. [ 2052.849728][T21697] em28xx 2-1:0.132: Registering V4L2 extension [ 2052.863680][T25344] usb 2-1: USB disconnect, device number 46 [ 2053.001353][T25344] em28xx 2-1:0.132: Disconnecting em28xx [ 2053.914731][T29528] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(10) [ 2053.921432][T29528] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 2053.935431][T29528] vhci_hcd vhci_hcd.0: Device attached [ 2053.956466][T29530] vhci_hcd: connection closed [ 2053.956818][ T139] vhci_hcd: stop threads [ 2053.968450][ T139] vhci_hcd: release socket [ 2053.984685][ T139] vhci_hcd: disconnect device [ 2054.020507][T21697] em28xx 2-1:0.132: Config register raw data: 0xffffffed [ 2054.045219][T21697] em28xx 2-1:0.132: AC97 chip type couldn't be determined [ 2054.075955][T21697] em28xx 2-1:0.132: No AC97 audio processor [ 2054.100772][T21697] usb 2-1: Decoder not found [ 2054.105179][T29538] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7384'. [ 2054.108232][T21697] em28xx 2-1:0.132: failed to create media graph [ 2054.128845][T21697] em28xx 2-1:0.132: V4L2 device video103 deregistered [ 2054.139836][T21697] em28xx 2-1:0.132: Remote control support is not available for this card. [ 2054.158897][T25344] em28xx 2-1:0.132: Closing input extension [ 2054.187953][T25344] em28xx 2-1:0.132: Freeing device [ 2054.211793][T28168] udevd[28168]: setting owner of /dev/bus/usb/002/046 to uid=0, gid=0 failed: No such file or directory [ 2054.349089][ T5809] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 2054.581840][T29545] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 2054.588390][T29545] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 2054.602011][T29546] netlink: 136 bytes leftover after parsing attributes in process `syz.2.7387'. [ 2054.612072][T29545] vhci_hcd vhci_hcd.0: Device attached [ 2054.978852][T29547] vhci_hcd: connection closed [ 2054.980726][ T5809] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 2054.998841][T29434] vhci_hcd: stop threads [ 2055.004167][T29434] vhci_hcd: release socket [ 2055.023389][ T5809] usb 4-1: config 0 has no interface number 0 [ 2055.029700][T29035] vhci_hcd: vhci_device speed not set [ 2055.035639][ T5809] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2055.039021][T29434] vhci_hcd: disconnect device [ 2055.049801][ T5809] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2055.069662][ T5809] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 2055.079655][ T5809] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2055.096485][ T5809] usb 4-1: config 0 descriptor?? [ 2055.102668][T29035] usb 37-1: new full-speed USB device number 2 using vhci_hcd [ 2055.111493][T29035] usb 37-1: enqueue for inactive port 0 [ 2055.188921][T29035] vhci_hcd: vhci_device speed not set [ 2055.534301][ T5809] usbhid 4-1:0.1: can't add hid device: -71 [ 2055.554278][ T5809] usbhid: probe of 4-1:0.1 failed with error -71 [ 2055.588780][ T5809] usb 4-1: USB disconnect, device number 61 [ 2056.843663][T29582] netlink: 136 bytes leftover after parsing attributes in process `syz.4.7403'. [ 2056.875649][T29585] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 2056.882329][T29585] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 2056.895311][T29585] vhci_hcd vhci_hcd.0: Device attached [ 2056.911198][T29590] vhci_hcd: connection closed [ 2056.911420][T29435] vhci_hcd: stop threads [ 2056.923150][T29435] vhci_hcd: release socket [ 2056.929960][T29435] vhci_hcd: disconnect device [ 2059.048731][T13812] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 2059.987642][T13812] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 2059.998843][T13812] usb 2-1: config 0 has no interface number 0 [ 2060.004997][T13812] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2060.049492][T13812] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2060.078792][T13812] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 2060.092961][T13812] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2060.108106][T13812] usb 2-1: config 0 descriptor?? [ 2060.835962][T13812] usbhid 2-1:0.1: can't add hid device: -71 [ 2060.842516][T13812] usbhid: probe of 2-1:0.1 failed with error -71 [ 2060.850484][T29641] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 2060.857047][T29641] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 2060.864622][T29641] vhci_hcd vhci_hcd.0: Device attached [ 2060.876755][T13812] usb 2-1: USB disconnect, device number 47 [ 2060.893832][T29641] netlink: 136 bytes leftover after parsing attributes in process `syz.2.7426'. [ 2060.905417][T29645] vhci_hcd: connection closed [ 2060.916361][ T5965] vhci_hcd: stop threads [ 2060.953928][ T5965] vhci_hcd: release socket [ 2060.975429][ T5965] vhci_hcd: disconnect device [ 2065.255253][T29673] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10) [ 2065.261985][T29673] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 2065.269544][T29673] vhci_hcd vhci_hcd.0: Device attached [ 2065.276627][T29687] vhci_hcd: connection closed [ 2065.277015][T24671] vhci_hcd: stop threads [ 2065.296602][T24671] vhci_hcd: release socket [ 2065.307375][T24671] vhci_hcd: disconnect device [ 2065.656389][T29694] [U] „ [ 2066.124465][T29712] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7444'. [ 2068.110092][T26085] Bluetooth: hci1: command tx timeout [ 2071.858779][T29473] Bluetooth: hci2: command 0x0405 tx timeout [ 2073.643115][T29785] netlink: 44 bytes leftover after parsing attributes in process `syz.4.7466'. [ 2078.798792][T29836] netlink: 44 bytes leftover after parsing attributes in process `syz.2.7483'. [ 2081.744627][T26085] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2081.760439][T26085] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2081.775197][T26085] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2081.829506][T26085] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2081.857122][T26085] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 2081.873109][T26085] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2082.288367][ T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2083.157899][ T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2083.180756][T29884] netlink: 44 bytes leftover after parsing attributes in process `syz.2.7497'. [ 2083.699703][ T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2083.984223][ T11] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2084.109039][T26085] Bluetooth: hci3: command tx timeout [ 2084.190187][T21697] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 2084.304360][T29869] chnl_net:caif_netlink_parms(): no params data found [ 2084.403432][T21697] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2084.441025][T21697] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 2084.472616][T21697] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2084.486255][ T11] tipc: Left network mode [ 2084.513194][T21697] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 2084.557691][T21697] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 2084.596277][T21697] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2084.606198][T21697] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2084.615868][T21697] usb 5-1: Product: syz [ 2084.620215][T21697] usb 5-1: Manufacturer: syz [ 2084.631617][T21697] cdc_wdm 5-1:1.0: skipping garbage [ 2084.636887][T21697] cdc_wdm 5-1:1.0: skipping garbage [ 2084.650624][T21697] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 2084.656923][T21697] cdc_wdm 5-1:1.0: Unknown control protocol [ 2084.794715][T29869] bridge0: port 1(bridge_slave_0) entered blocking state [ 2084.808820][T29869] bridge0: port 1(bridge_slave_0) entered disabled state [ 2084.826128][T29869] bridge_slave_0: entered allmulticast mode [ 2084.901328][T29869] bridge_slave_0: entered promiscuous mode [ 2085.306534][T29869] bridge0: port 2(bridge_slave_1) entered blocking state [ 2085.315535][T29869] bridge0: port 2(bridge_slave_1) entered disabled state [ 2085.324000][T29869] bridge_slave_1: entered allmulticast mode [ 2085.344113][T29869] bridge_slave_1: entered promiscuous mode [ 2085.489528][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 2085.496661][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 2085.504975][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 2085.511597][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 2085.517841][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 2085.524421][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 2085.530715][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 2085.537729][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 2085.543981][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 2085.550561][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 2085.556803][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 2085.563380][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 2085.569605][T13812] usb 5-1: USB disconnect, device number 10 [ 2085.575557][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 2085.575566][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 2085.575573][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 2085.704043][T29869] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2085.733620][T29869] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2086.229370][T29473] Bluetooth: hci3: command tx timeout [ 2086.417116][T29869] team0: Port device team_slave_0 added [ 2086.639414][T29869] team0: Port device team_slave_1 added [ 2086.811295][T29869] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2086.840149][T29869] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2086.907345][T29869] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2087.031804][T29869] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2087.039123][T29869] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2087.073827][T29869] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2087.909202][T29869] hsr_slave_0: entered promiscuous mode [ 2088.037671][T29869] hsr_slave_1: entered promiscuous mode [ 2088.110523][T29869] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2088.131062][T29869] Cannot create hsr debugfs directory [ 2088.270034][T29473] Bluetooth: hci3: command tx timeout [ 2090.348928][T29473] Bluetooth: hci3: command tx timeout [ 2090.605350][ T11] hsr_slave_0: left promiscuous mode [ 2090.625491][ T11] hsr_slave_1: left promiscuous mode [ 2090.636552][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2090.668197][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2090.700063][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2090.707861][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2090.789538][ T11] bridge_slave_1: left allmulticast mode [ 2090.795257][ T11] bridge_slave_1: left promiscuous mode [ 2090.814560][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 2090.824296][ T11] bridge_slave_0: left allmulticast mode [ 2090.832980][ T11] bridge_slave_0: left promiscuous mode [ 2090.839265][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 2090.895663][ T11] veth1_macvtap: left promiscuous mode [ 2090.904782][ T11] veth0_macvtap: left promiscuous mode [ 2090.915545][ T11] veth1_vlan: left promiscuous mode [ 2090.934821][ T11] veth0_vlan: left promiscuous mode [ 2091.198001][ T11] pimreg (unregistering): left allmulticast mode [ 2091.682158][ T11] team0 (unregistering): Port device team_slave_1 removed [ 2091.737841][ T11] team0 (unregistering): Port device team_slave_0 removed [ 2091.790370][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2091.842597][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2092.394361][ T11] bond0 (unregistering): Released all slaves [ 2093.640218][ T28] audit: type=1326 audit(1750329757.656:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30005 comm="syz.2.7527" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6375f8e929 code=0x0 [ 2095.130709][T29869] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 2095.173610][T29869] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 2095.202803][T29869] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 2095.235812][T29869] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 2095.535009][T29869] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2095.661728][T29869] 8021q: adding VLAN 0 to HW filter on device team0 [ 2096.270203][T22925] bridge0: port 1(bridge_slave_0) entered blocking state [ 2096.277402][T22925] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2096.368936][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 2096.376191][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2097.070636][T29869] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2097.207409][T29869] veth0_vlan: entered promiscuous mode [ 2097.285516][T29869] veth1_vlan: entered promiscuous mode [ 2097.636439][T29869] veth0_macvtap: entered promiscuous mode [ 2097.800461][T29869] veth1_macvtap: entered promiscuous mode [ 2098.451774][T29869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2098.473062][T29869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2098.493380][T29869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2098.514239][T29869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2098.546759][T29869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2098.578896][T29869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2098.620498][T29869] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2098.647119][T29869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2098.667991][T29869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2098.688792][T29869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2098.732451][T29869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2098.734952][T30094] netlink: 60 bytes leftover after parsing attributes in process `syz.4.7548'. [ 2098.755932][T29869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2098.782089][T29869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2098.850176][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 2098.853077][T29869] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2098.859030][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 2099.069428][T30095] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 2099.075993][T30095] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 2099.085921][T30095] vhci_hcd vhci_hcd.0: Device attached [ 2099.099176][T30094] netlink: 60 bytes leftover after parsing attributes in process `syz.4.7548'. [ 2099.259637][T29869] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2099.288528][T30095] netlink: 136 bytes leftover after parsing attributes in process `syz.1.7549'. [ 2099.376129][T29869] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2099.437907][T13812] vhci_hcd: vhci_device speed not set [ 2099.470432][T29869] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2099.499251][T29869] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2099.525389][T30089] netlink: 60 bytes leftover after parsing attributes in process `syz.4.7548'. [ 2099.530064][T30096] vhci_hcd: connection closed [ 2099.534653][T13812] usb 35-1: new full-speed USB device number 3 using vhci_hcd [ 2099.559806][T22925] vhci_hcd: stop threads [ 2099.564130][T22925] vhci_hcd: release socket [ 2099.586086][T22925] vhci_hcd: disconnect device [ 2099.807464][T22925] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2099.840324][T22925] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2100.902149][T29434] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2101.100371][T29434] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2104.079434][T11775] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 2104.308829][T11775] usb 4-1: Using ep0 maxpacket: 32 [ 2104.329193][T11775] usb 4-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 2104.338771][T11775] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2104.418809][T30160] netlink: 136 bytes leftover after parsing attributes in process `syz.1.7561'. [ 2104.519435][T11775] usb 4-1: config 0 descriptor?? [ 2104.547362][T30159] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 2104.553924][T30159] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 2104.818140][T11775] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 2104.867276][T30159] vhci_hcd vhci_hcd.0: Device attached [ 2105.102465][T30163] vhci_hcd: connection reset by peer [ 2105.108404][T22925] vhci_hcd: stop threads [ 2105.117327][T22925] vhci_hcd: release socket [ 2105.148885][T22925] vhci_hcd: disconnect device [ 2105.219078][T13812] vhci_hcd: vhci_device speed not set [ 2105.354891][T30176] netlink: 44 bytes leftover after parsing attributes in process `syz.4.7563'. [ 2105.644443][T11775] gspca_nw80x: reg_w err -71 [ 2105.654157][T11775] nw80x: probe of 4-1:0.0 failed with error -71 [ 2105.704495][T11775] usb 4-1: USB disconnect, device number 62 [ 2109.618869][T13812] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 2109.898745][T13812] usb 5-1: Using ep0 maxpacket: 32 [ 2109.915878][T13812] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 2109.941118][T13812] usb 5-1: config 0 has no interface number 0 [ 2110.018739][T13812] usb 5-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2110.058303][T13812] usb 5-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 2110.078815][T13812] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2110.255676][T13812] usb 5-1: Product: syz [ 2110.380906][T13812] usb 5-1: Manufacturer: syz [ 2110.385749][T13812] usb 5-1: SerialNumber: syz [ 2110.402513][T13812] usb 5-1: config 0 descriptor?? [ 2110.565186][T13812] em28xx 5-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 2110.686560][T13812] em28xx 5-1:0.132: Video interface 132 found: [ 2111.367653][T13812] em28xx 5-1:0.132: unknown em28xx chip ID (0) [ 2111.892678][T13812] em28xx 5-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5) [ 2112.181844][T13812] em28xx 5-1:0.132: board has no eeprom [ 2112.369212][T13812] em28xx 5-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 2112.452066][T13812] em28xx 5-1:0.132: analog set to bulk mode. [ 2112.458182][T29035] em28xx 5-1:0.132: Registering V4L2 extension [ 2112.533399][T13812] usb 5-1: USB disconnect, device number 11 [ 2112.600149][T13812] em28xx 5-1:0.132: Disconnecting em28xx [ 2113.852126][T30305] overlayfs: overlapping lowerdir path [ 2114.143148][T29035] em28xx 5-1:0.132: Config register raw data: 0xffffffed [ 2114.156974][T29035] em28xx 5-1:0.132: AC97 chip type couldn't be determined [ 2114.168022][T29035] em28xx 5-1:0.132: No AC97 audio processor [ 2114.188178][T29035] usb 5-1: Decoder not found [ 2114.220601][T29035] em28xx 5-1:0.132: failed to create media graph [ 2114.227125][T29035] em28xx 5-1:0.132: V4L2 device video103 deregistered [ 2115.845581][T29035] em28xx 5-1:0.132: Remote control support is not available for this card. [ 2115.854458][T13812] em28xx 5-1:0.132: Closing input extension [ 2115.879705][T13812] em28xx 5-1:0.132: Freeing device [ 2118.127684][T30353] overlayfs: overlapping lowerdir path [ 2121.168835][T25344] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 2121.391120][T25344] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2121.401125][T25344] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 2121.411882][T25344] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2121.421224][T25344] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 2121.433676][T25344] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 2121.457339][T25344] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2121.466816][T25344] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2121.475025][T25344] usb 4-1: Product: syz [ 2121.482447][T25344] usb 4-1: Manufacturer: syz [ 2121.541655][T25344] cdc_wdm 4-1:1.0: skipping garbage [ 2121.547929][T25344] cdc_wdm 4-1:1.0: skipping garbage [ 2121.604900][T25344] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 2121.620441][T25344] cdc_wdm 4-1:1.0: Unknown control protocol [ 2123.790543][T29035] usb 4-1: USB disconnect, device number 63 [ 2125.662231][T30426] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 2126.015048][T30446] fuse: Unknown parameter 'group_id00000000000000000000' [ 2126.428968][T29035] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 2126.631388][T29035] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2126.640343][T29035] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 2126.662268][T29035] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2126.675636][T29035] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 2126.697686][T29035] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 2126.721308][T29035] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2126.773075][T29035] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2126.781631][T29035] usb 4-1: Product: syz [ 2126.785970][T29035] usb 4-1: Manufacturer: syz [ 2126.908487][T29035] cdc_wdm 4-1:1.0: skipping garbage [ 2126.914168][T29035] cdc_wdm 4-1:1.0: skipping garbage [ 2126.922106][T29035] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 2126.928167][T29035] cdc_wdm 4-1:1.0: Unknown control protocol [ 2129.159021][T30473] 9pnet_fd: Insufficient options for proto=fd [ 2130.044044][T21839] usb 4-1: USB disconnect, device number 64 [ 2130.165019][T30478] fuse: Unknown parameter 'group_id00000000000000000000' [ 2132.528468][T30506] fuse: Unknown parameter 'group_id00000000000000000000' [ 2132.801472][T29035] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 2133.190105][T29035] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2133.242662][T29035] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 2133.363292][T29035] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2133.415894][T29035] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 2133.440833][T29035] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 2133.479925][T29035] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2133.494093][T29035] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2133.503872][T29035] usb 2-1: Product: syz [ 2133.508292][T29035] usb 2-1: Manufacturer: syz [ 2133.537684][T29035] cdc_wdm 2-1:1.0: skipping garbage [ 2133.543313][T29035] cdc_wdm 2-1:1.0: skipping garbage [ 2133.550781][T29035] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 2133.556730][T29035] cdc_wdm 2-1:1.0: Unknown control protocol [ 2134.204752][T30525] overlayfs: overlapping lowerdir path [ 2135.236456][T30541] fuse: Bad value for 'user_id' [ 2135.723143][T11775] usb 2-1: USB disconnect, device number 48 [ 2136.748969][T29473] Bluetooth: hci1: command 0x0406 tx timeout [ 2137.551558][T30566] fuse: Bad value for 'user_id' [ 2139.326243][T25344] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 2139.529197][T25344] usb 2-1: Using ep0 maxpacket: 32 [ 2139.577294][T25344] usb 2-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 2139.588517][T25344] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2139.646012][T25344] usb 2-1: config 0 descriptor?? [ 2139.701162][T25344] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 2140.687365][T25344] gspca_nw80x: reg_r err -32 [ 2140.695335][T25344] nw80x: probe of 2-1:0.0 failed with error -32 [ 2140.706839][T25344] usb 2-1: USB disconnect, device number 49 [ 2142.116979][T30606] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 2142.264219][T30613] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7690'. [ 2247.918563][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 2247.925610][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P30614/1:b..l P5965/1:b..l [ 2247.935454][ C0] rcu: (detected by 0, t=10502 jiffies, g=233273, q=337 ncpus=2) [ 2247.943371][ C0] task:kworker/u4:9 state:R running task stack:21800 pid:5965 ppid:2 flags:0x00004000 [ 2247.955437][ C0] Workqueue: bat_events batadv_iv_send_outstanding_bat_ogm_packet [ 2247.963296][ C0] Call Trace: [ 2247.966601][ C0] [ 2247.969576][ C0] __schedule+0x14e2/0x4580 [ 2247.974148][ C0] ? asan.module_dtor+0x20/0x20 [ 2247.979040][ C0] ? mark_lock+0x94/0x320 [ 2247.983426][ C0] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 2247.989453][ C0] ? preempt_schedule_irq+0xaa/0x140 [ 2247.994947][ C0] preempt_schedule_irq+0xb5/0x140 [ 2248.000090][ C0] ? preempt_schedule_notrace+0x110/0x110 [ 2248.005860][ C0] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 2248.011700][ C0] irqentry_exit+0x67/0x70 [ 2248.016236][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2248.022238][ C0] RIP: 0010:lock_acquire+0x2b/0x410 [ 2248.027538][ C0] Code: 0f 1e fa 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 e4 e0 48 81 ec e0 00 00 00 4c 89 4c 24 28 4c 89 44 24 30 48 89 4c 24 20 <89> d3 89 74 24 1c 49 89 fd 65 48 8b 04 25 28 00 00 00 48 89 84 24 [ 2248.047268][ C0] RSP: 0018:ffffc900050178a0 EFLAGS: 00000286 [ 2248.053366][ C0] RAX: ffffffff8a29fe33 RBX: ffff88802e1d50a0 RCX: 0000000000000002 [ 2248.061365][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff8cd2f760 [ 2248.069357][ C0] RBP: ffffc900050179a8 R08: 0000000000000000 R09: 0000000000000000 [ 2248.077444][ C0] R10: dffffc0000000000 R11: fffffbfff1c934ee R12: dffffc0000000000 [ 2248.085440][ C0] R13: dffffc0000000000 R14: 0000000000000001 R15: ffff88805cf1b8a4 [ 2248.093615][ C0] ? batadv_iv_ogm_schedule+0x3f3/0xe90 [ 2248.099212][ C0] ? batadv_iv_ogm_schedule+0x3f3/0xe90 [ 2248.104787][ C0] ? __lock_acquire+0x7c80/0x7c80 [ 2248.109845][ C0] ? batadv_primary_if_get_selected+0x7b/0x400 [ 2248.116025][ C0] ? batadv_iv_ogm_queue_add+0xcf0/0xcf0 [ 2248.121694][ C0] batadv_iv_ogm_schedule+0x417/0xe90 [ 2248.127103][ C0] ? batadv_iv_ogm_schedule+0x3f3/0xe90 [ 2248.132684][ C0] ? batadv_iv_ogm_schedule+0x3f3/0xe90 [ 2248.138259][ C0] ? batadv_iv_send_outstanding_bat_ogm_packet+0x840/0x840 [ 2248.145508][ C0] batadv_iv_send_outstanding_bat_ogm_packet+0x731/0x840 [ 2248.152567][ C0] ? process_scheduled_works+0x957/0x15b0 [ 2248.158316][ C0] process_scheduled_works+0xa45/0x15b0 [ 2248.163937][ C0] ? assign_work+0x400/0x400 [ 2248.168580][ C0] ? assign_work+0x39e/0x400 [ 2248.173235][ C0] worker_thread+0xa55/0xfc0 [ 2248.177899][ C0] kthread+0x2fa/0x390 [ 2248.182014][ C0] ? pr_cont_work+0x560/0x560 [ 2248.186755][ C0] ? kthread_blkcg+0xd0/0xd0 [ 2248.191381][ C0] ret_from_fork+0x48/0x80 [ 2248.195828][ C0] ? kthread_blkcg+0xd0/0xd0 [ 2248.200447][ C0] ret_from_fork_asm+0x11/0x20 [ 2248.205258][ C0] [ 2248.208301][ C0] task:syz.1.7689 state:R running task stack:24744 pid:30614 ppid:29001 flags:0x00004006 [ 2248.219221][ C0] Call Trace: [ 2248.222529][ C0] [ 2248.225491][ C0] __schedule+0x14e2/0x4580 [ 2248.230060][ C0] ? asan.module_dtor+0x20/0x20 [ 2248.234952][ C0] ? try_to_wake_up+0x6c5/0x10b0 [ 2248.239943][ C0] ? __lock_acquire+0x7c80/0x7c80 [ 2248.245031][ C0] ? preempt_schedule+0xab/0xc0 [ 2248.249946][ C0] preempt_schedule_common+0x82/0xc0 [ 2248.255316][ C0] preempt_schedule+0xab/0xc0 [ 2248.260051][ C0] ? schedule_preempt_disabled+0x20/0x20 [ 2248.265725][ C0] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 2248.271742][ C0] ? lock_chain_count+0x20/0x20 [ 2248.276629][ C0] preempt_schedule_thunk+0x1a/0x30 [ 2248.281899][ C0] _raw_spin_unlock_irqrestore+0xfa/0x110 [ 2248.287660][ C0] ? _raw_spin_unlock+0x40/0x40 [ 2248.292547][ C0] ? __wake_up_common+0x2a4/0x4e0 [ 2248.297604][ C0] __wake_up_sync_key+0x11f/0x190 [ 2248.302669][ C0] ? __wake_up_locked_key_bookmark+0x20/0x20 [ 2248.308694][ C0] ? _copy_to_iter+0x56d/0x10d0 [ 2248.313591][ C0] ? unix_write_space+0x22/0x370 [ 2248.318566][ C0] unix_write_space+0x1ff/0x370 [ 2248.323471][ C0] sock_wfree+0x1a0/0x610 [ 2248.327828][ C0] ? unix_destruct_scm+0x149/0x190 [ 2248.332967][ C0] unix_destruct_scm+0x151/0x190 [ 2248.337944][ C0] ? queue_oob+0x5d0/0x5d0 [ 2248.342389][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 2248.347628][ C0] skb_release_head_state+0xfa/0x240 [ 2248.352958][ C0] consume_skb+0x7b/0x110 [ 2248.357316][ C0] unix_stream_read_generic+0x1b01/0x2080 [ 2248.363097][ C0] ? unix_stream_read_actor+0xa0/0xa0 [ 2248.368552][ C0] ? wake_bit_function+0x200/0x200 [ 2248.373708][ C0] unix_stream_recvmsg+0x158/0x1b0 [ 2248.378848][ C0] ? unix_stream_sendmsg+0xba0/0xba0 [ 2248.384155][ C0] ? __lock_acquire+0x1260/0x7c80 [ 2248.389206][ C0] ? __unix_stream_recvmsg+0x130/0x130 [ 2248.394704][ C0] ? aa_sock_msg_perm+0x94/0x150 [ 2248.399681][ C0] ? bpf_lsm_socket_recvmsg+0x9/0x10 [ 2248.404995][ C0] ? security_socket_recvmsg+0x89/0xb0 [ 2248.410665][ C0] ? unix_stream_sendmsg+0xba0/0xba0 [ 2248.415995][ C0] ____sys_recvmsg+0x29e/0x5b0 [ 2248.420843][ C0] ? __sys_recvmsg_sock+0x50/0x50 [ 2248.425870][ C0] ? import_iovec+0x73/0xa0 [ 2248.430536][ C0] ___sys_recvmsg+0x1b6/0x510 [ 2248.435203][ C0] ? __sys_recvmsg+0x270/0x270 [ 2248.439977][ C0] ? __fget_files+0x44a/0x4d0 [ 2248.444667][ C0] ? __fdget+0x180/0x210 [ 2248.449074][ C0] ? do_recvmmsg+0x17a/0x7d0 [ 2248.453649][ C0] do_recvmmsg+0x360/0x7d0 [ 2248.458049][ C0] ? __sys_recvmmsg+0x280/0x280 [ 2248.462901][ C0] ? __ia32_sys_get_robust_list+0x90/0x90 [ 2248.468624][ C0] ? rcu_read_lock_sched_held+0x8a/0x100 [ 2248.474242][ C0] __x64_sys_recvmmsg+0x191/0x240 [ 2248.479333][ C0] ? do_recvmmsg+0x7d0/0x7d0 [ 2248.483901][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 2248.489077][ C0] do_syscall_64+0x55/0xb0 [ 2248.493474][ C0] ? clear_bhb_loop+0x40/0x90 [ 2248.498134][ C0] ? clear_bhb_loop+0x40/0x90 [ 2248.502790][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2248.508665][ C0] RIP: 0033:0x7f833e38e929 [ 2248.513057][ C0] RSP: 002b:00007f833f173038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 2248.521499][ C0] RAX: ffffffffffffffda RBX: 00007f833e5b6080 RCX: 00007f833e38e929 [ 2248.529540][ C0] RDX: 040000000000013c RSI: 00002000000034c0 RDI: 0000000000000006 [ 2248.537496][ C0] RBP: 00007f833e410b39 R08: 0000000000000000 R09: 0000000000000000 [ 2248.545456][ C0] R10: 0000000000000700 R11: 0000000000000246 R12: 0000000000000000 [ 2248.553426][ C0] R13: 0000000000000000 R14: 00007f833e5b6080 R15: 00007fff3c817d28 [ 2248.561384][ C0] [ 2248.564397][ C0] rcu: rcu_preempt kthread starved for 10548 jiffies! g233273 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 2248.575791][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 2248.585792][ C0] rcu: RCU grace-period kthread stack dump: [ 2248.591702][ C0] task:rcu_preempt state:R running task stack:27304 pid:17 ppid:2 flags:0x00004000 [ 2248.602525][ C0] Call Trace: [ 2248.605831][ C0] [ 2248.608800][ C0] __schedule+0x14e2/0x4580 [ 2248.613365][ C0] ? asan.module_dtor+0x20/0x20 [ 2248.618265][ C0] ? enqueue_timer+0x225/0x530 [ 2248.623066][ C0] ? __mod_timer+0x984/0xdb0 [ 2248.627697][ C0] schedule+0xbd/0x170 [ 2248.631804][ C0] schedule_timeout+0x160/0x280 [ 2248.636687][ C0] ? console_conditional_schedule+0x40/0x40 [ 2248.639074][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 2248.642596][ C0] ? update_process_times+0x1b0/0x1b0 [ 2248.654270][ C0] ? prepare_to_swait_event+0x339/0x360 [ 2248.658671][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 2248.659835][ C0] rcu_gp_fqs_loop+0x302/0x1560 [ 2248.670965][ C0] ? rcu_gp_init+0x110e/0x1510 [ 2248.674341][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 2248.675758][ C0] ? rcu_gp_kthread+0x380/0x380 [ 2248.686878][ C0] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 2248.692855][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 2248.698065][ C0] ? rcu_gp_init+0x1510/0x1510 [ 2248.702841][ C0] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 2248.708957][ C0] ? finish_swait+0xc7/0x1d0 [ 2248.713602][ C0] rcu_gp_kthread+0x99/0x380 [ 2248.718250][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 2248.723464][ C0] ? __kthread_parkme+0x7a/0x1c0 [ 2248.728435][ C0] ? __kthread_parkme+0x162/0x1c0 [ 2248.733482][ C0] kthread+0x2fa/0x390 [ 2248.737560][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 2248.742690][ C0] ? kthread_blkcg+0xd0/0xd0 [ 2248.747284][ C0] ret_from_fork+0x48/0x80 [ 2248.751709][ C0] ? kthread_blkcg+0xd0/0xd0 [ 2248.756395][ C0] ret_from_fork_asm+0x11/0x20 [ 2248.761190][ C0] [ 2248.764217][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 2248.770539][ C0] CPU: 0 PID: 0 Comm: swapper/0 Not tainted 6.6.93-syzkaller #0 [ 2248.778176][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2248.788233][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 2248.793967][ C0] Code: cc cc cc cc cc cc cc f3 0f 1e fa 0f 0b 66 2e 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 66 90 0f 00 2d 63 10 42 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 66 0f 1f 00 55 41 57 41 56 [ 2248.813580][ C0] RSP: 0018:ffffffff8ca07d80 EFLAGS: 000002c2 [ 2248.820270][ C0] RAX: 0a05bc9734c9f300 RBX: ffffffff81618a7b RCX: 0a05bc9734c9f300 [ 2248.828247][ C0] RDX: 0000000000000001 RSI: ffffffff8aaab2c0 RDI: ffffffff8afc6780 [ 2248.836225][ C0] RBP: ffffffff8ca07eb8 R08: ffff8880b8e36d4b R09: 1ffff110171c6da9 [ 2248.844203][ C0] R10: dffffc0000000000 R11: ffffed10171c6daa R12: ffffffff8e49a768 [ 2248.852274][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1952670 [ 2248.860254][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 2248.869190][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2248.875779][ C0] CR2: 00002000000d0000 CR3: 0000000025f24000 CR4: 00000000003506f0 [ 2248.883759][ C0] Call Trace: [ 2248.887043][ C0] [ 2248.889977][ C0] default_idle+0x13/0x20 [ 2248.894317][ C0] default_idle_call+0x6c/0xa0 [ 2248.899135][ C0] do_idle+0x1eb/0x510 [ 2248.903218][ C0] ? idle_inject_timer_fn+0x60/0x60 [ 2248.908429][ C0] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 2248.914093][ C0] cpu_startup_entry+0x43/0x60 [ 2248.918874][ C0] rest_init+0x2e2/0x300 [ 2248.923123][ C0] ? time_init+0x40/0x40 [ 2248.927370][ C0] arch_call_rest_init+0xe/0x10 [ 2248.932233][ C0] start_kernel+0x459/0x4e0 [ 2248.936746][ C0] x86_64_start_reservations+0x2a/0x30 [ 2248.942211][ C0] x86_64_start_kernel+0x60/0x60 [ 2248.947150][ C0] secondary_startup_64_no_verify+0x179/0x17b [ 2248.953234][ C0] [ 2250.058690][ T1288] ieee802154 phy1 wpan1: encryption failed: -22