last executing test programs: 22.172290386s ago: executing program 1 (id=1127): r0 = socket(0x2000000000000021, 0x2, 0x2) shutdown(r0, 0x2) shutdown(r0, 0x2) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e21, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x2}}, 0x9, 0x5, 0x5312, 0x7, 0x65, 0x80, 0x13}, &(0x7f0000000200)=0x9c) setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000240)=@assoc_value={r1, 0x400}, 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd/nfsv4leasetime\x00', 0x1, 0xd0) write(r2, 0x0, 0x0) 22.036012343s ago: executing program 1 (id=1129): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r2, @ANYBLOB="08002600940900000800b7"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0xe8381, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r4, 0x4048aec9, &(0x7f0000000980)={0x1, 0x0, @ioapic={0xfee00, 0x296a, 0x4, 0x3, 0x0, [{0x98, 0x37, 0x81, '\x00', 0x7f}, {0x41, 0x8, 0x30, '\x00', 0xf5}, {0xe9, 0x1, 0x9, '\x00', 0x11}, {0x7, 0x9, 0x3, '\x00', 0x8f}, {0x3, 0x7f, 0x91, '\x00', 0xa}, {0xf, 0xe3, 0x8, '\x00', 0xaa}, {0x6, 0x8, 0x6, '\x00', 0x8}, {0x1, 0x3, 0x8, '\x00', 0x67}, {0x2, 0x7, 0xa, '\x00', 0x8}, {0x8, 0x2, 0x13, '\x00', 0x9f}, {0xf, 0x8, 0x6, '\x00', 0x3}, {0x3, 0x4c, 0x3, '\x00', 0xa}, {0x1e, 0x6, 0x3, '\x00', 0xa6}, {0x8, 0x0, 0x8, '\x00', 0x9}, {0x2, 0x4c, 0xa2, '\x00', 0x1}, {0x8, 0x5e, 0x4, '\x00', 0x3}, {0x5, 0xa0, 0x47, '\x00', 0x4}, {0x7, 0x3, 0x2, '\x00', 0xa7}, {0x5, 0x0, 0xf, '\x00', 0x7}, {0x5e, 0xa, 0xa}, {0x7f, 0x6, 0x7, '\x00', 0x4}, {0x93, 0x44, 0x9, '\x00', 0x10}, {0x2, 0x8, 0x0, '\x00', 0xfc}, {0x6, 0xc, 0xc6, '\x00', 0x8}]}}) 20.864809383s ago: executing program 1 (id=1133): r0 = memfd_create(&(0x7f0000000500)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x1c\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\x83\x11\v}k+\xeb\xc3\xc0O\xae\xd2\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb901nEy\x82\x83\x80\xd3O\x00|hP\x00\x00\x00\x00\x00\x00\x00\x05\x86\xfe\xd9\xa5\xc6\nSy\xa3N\xba-]\'q\xc6\xfb\x02\x9a\xa9Z\xa8\x80Bx\xbd74\xcf\"\xa5\xea$\x95\xfd\x06T\xef\x89\xe4j\x06\xdc\x15\xe7\xc3\xb5H\xf7\xdc\xee\x182\xab\xe2?\"\xbewm\x9d\xd8x\xd92\xeeS/\xd2\xcd[\x9dcO1\xcb\x12lZ$\xa7\x9d\xf8b\xf6}\xc5``\xfe0\x8a\'v-\x99`?\x97\x8c\xdd\xd6\xfa\xa2\x06>\xf3\xe2uI\xe65C\xdb\x84\xe6eU\xe8RK\xd6=s\xcd\x9d\x1f#3\xc5\x16\xd0\xbbD\xc5\xde\xc8/\v\xa5W\xbep\x87\x15\x10\xcdm\xa7\x93\x01\x1c,9V8\xdc\xfd\xb7\xc0\xfc\x04\x00p\xad\x12\xb2\xbf\xfbFZ\x1a\f\x99\x05\xe4\x1eP\xed\x87\x89\xbeo\xfbv\xb6\x8a\xee\xf6Oc8\xaf\x11[\xc3\x98w-\xf0\xb2z\xc7\xaf;\x92\xad4\x1b\x92L\x97<\xbdh\x80\xf2\xc0\xd0n)K\xf2#Ncp\xe4\xb4\xfb\x94\x18\xc2-TWA\x13\xfe\xea\xad\v\xc4\xa5\x02\xf9\xed]\xf4\\\x01\xab\xdc\xb6\xcdP\x93\xf2\xc3\x96\xf2\xc0\xd6-x\xd5\xd6\xc7\x9d\xa5\x1f\xd2t\xd7\x8f}b\x9749\xd4a7\x18\xe0\x91KV7[\xb8\x8dL\xc8\xc8\x8f>sbE\xf5\xa7\xdb|\xb0m\x16c\x84\r\"\xf2\x92s\xeb\xaf\x1c\x00\xf4\x8dL\xa5\x10\x89FB\xfb8\xf9\x9d\xcbm\x1c\x91\xe9fd$5\xdc\xad\xec\xef\x90\xd9\xefX\xd2m\x9e\xec\x94w\xb3\xf9\xd9\x0eu-z\x81\xbb\xa6\xc0\x00\xa1\xd9\xcbI\xda\xa3\b\x9e@\xb8\xc8k\xdeQ/\xb8X\x9c\xff4Np~\xc4\xc1_\x1c#zX\a\xd41\x1c\x7fH\x91\xd9k\x05\x1f\n\b\b\x88\xd6\xcf4i\xa0B\xe7\x9c\x9c\xe6\xcax\xca\xa1E#6\xe9\xf31W\xd0\x1bY3/\x00I#\xfa\xb0\f\xd5!\x9fR[\x0e\xdb`\xdb\x82M\'k\x16(\xfa\xc2\xec\x96e\\Q\xe9\x19\xe1u\x86\xcb\xc3\xb0\xb8\x19\xb9l\x1fk!R\xb1P\x8b\xda\xffE\x89\x97\n\x17m\xd10\x1a\xe7Qz\xd8\bi\x8dRw+\xa1^N\xaf\x1b\x1dg\x8f$\xbe\x93\x8d\x8b\xfd\r\xee<\x84\x95\x82)TH\xcac9\x98\x13WW@;\xb4\xd5\x0f\xa1\xb3xX(\x80\xe8\x89\xed e.\xe04\xba\x9c=\xc6\x04\f\xbf\x06\xce5\xf99GD8@\xd2\r\xd0\xdf@\xe3\xbe\"qq#]\x86W\tA\xa7\x91\x85\xae\x9c\x8dO\xa6\xa3\xf9i\x83\xc5\xa8C\x164\xef\xa4\\\a\xaa%\x94!3k]\xd5\xbe\'U\xf17', 0x1) dup(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 20.777279717s ago: executing program 1 (id=1134): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r2, @ANYBLOB="08002600940900000800b70099"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r3, @ANYBLOB="010026bd7000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="0600cd00000000006c003300802009000802110000010802110000005050505050"], 0x90}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 20.56584097s ago: executing program 1 (id=1136): socket(0x1d, 0x80802, 0x6) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x141500, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$pppl2tp(0x18, 0x1, 0x1) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x6004, 0x1) r0 = open(&(0x7f0000000280)='.\x00', 0x80, 0x28) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)=0x10) link(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file1\x00') close(0xffffffffffffffff) socket$unix(0x1, 0x2, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socket$unix(0x1, 0x2, 0x0) memfd_create(&(0x7f0000000000)='y\x105\xfb\x14u\x83%:r\xc2\x00!\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x99\x04M\xc0]\xde\x19\n\xd7\xf5\x00\xf6\xc5\x90\xd0\xea\x90\xbc\x1e\x9d5v9\xf2. \x15\x16\xa1\xd7\x9fY\'\xfe\x85\xbb\xad&\xd6\xa2\xf1P\x99_p\xc6\xb9\x1d\\\x11\xad\xe0\xbd\"\xce\xcb\xe6\x93\x828\xea\x04\x00\x00\x00\xe9x\xabyq\xbe\xdf\x1f\xad\xa6(\xc2M\xea$\x01~\x13\xda\xc9|@\xee\xab\xab#TS\xf9)+\x00\x00\x8f\xa6i\xbb\x96>\xc916\x86\xecn\x00\x95^am\xf3\xbb)\xcb\xed\"`\xc8/\t\xe2U\xd225\xe2\x02\xc9\x15\x04#\xe3\x06{V\x9d\xfb\x9a\x9d\xc7\x9af\xe3-\fr\x03\xe7R~M\xa2\xbdG\x96\xf4\xf1\xb7&S\xf1\xbd\x9e\xb91\xd0]g\xd0Z\v\xd4X\xec\x8a\xb9w\xcby\xfe\xf9\xe1\xac\x91\xaa\xb1?\xe1\x1bi\x93\xff\xf0\xf6 \xf6\xd6\x8c1\xd6P\xd3\xd1\x03!\x12\xbeb\xb6\xf8u\r\xfcI\xdbB9\x1d\x03\x11({Jb8@x\x8b\xc2\xc1\x9eL\x85\x04\x98}o\xad\xb7X\xed\xa5\x82\x99\xf2\b\xde\xdf\xbdn\x82N\xdbDX\xe9\xb9\xad\xd2\xcd1\xac\xbf\xc2\xf0e=\xf6V0p\x1c7\xa4\xae`\x13\xf1H\x18*\x10O\x17\xad~\xc9k\x16\xf6\x8bm\xf4\x8atY\xb1D\x83\xb8\n\x84\x8fr(\x81\x94\x15d>\xd0\xdaf\xd4u\xc9\xf4#\v\xd7\x84\x8f`%\x89@\x82~2\x968\xe6\x9f\x8ey\x9e\xc2;@\xcb\x85\x85\x8e\xa46-P2\x86W\x12\xf2\xdf\xabC\xf9\xb2\x14\xdc\t`\xb8\xdf\xcc\x15[(AfJ \xa6\x98\x19\x89\xae\xb4I;\f\\\v\xa2\x158\xd8\xbe\x99k\xa6\xd9\x99\xf9Uu\x90\xd4\xfd\x90\xd3z\x98w\x8e\xe7\xb5\xe8\xb4\xa3Z\x15\xafTo\xa1\no\x1d\xd9V#8\x7f\xa8r\xef\xa6\xee\xbe7a\r\xfaM\xbf\x15K\xc3\xdc\x02\xd8w\xa5\xeb0\x94\x97\xa6\xaf;n\xc6\xafr\xe7\x05\x7f\xc31v&\x7fd\x03\xe0\xdc\xfd\xc8)\x8a\xda\xce\xbd\xf9\xb5\x92\x8a<\xba\xd6^g\x11\x86\xee\xcfjB\x91\xd4Q\xf5{\xeb}\xd5\xfe\x02X8\"\xdd\x1c-\xa3\x8c\xba\x150*d\xef\x83\xael;~K\x9e7q\x0fi=\xef\b\xc5g\xf6\a\xd5\xe6\t\xa4_\r\xc1\x91G\xe9\xc9E\x88\xd8N3\x9a/S5\xd4Rj\xf4\xea\x7f\xf4\xf90\b\xde\xae%\x8b/$[X\x86I\xeehB\x12\x03*\xecv\xa9\xda\xe2\xbf\xe4\xd7R\x925_\xa2\x99Hf\xda8|F\x14]H\xdae\xb9\x83\\\xbe\x9f\xc8\xb7\xc6\xc1\xb7\xc4\x80\xe4\xee+\xcbl\xb7\x16\x0f #\x93\xa2\x04\x95\x86\x97\xa5\xa0\xe7\xd7\x9a\x1cB\x7f\x128j\x14{b\x8f\xc3\xbb\x9d\x1c\x85\xbc\x9fM\x17\xb9\xc8f\xaa\xcf\xb9\xacY\xc1\xd6*W\xa2j\x1e\xf5\x12\xe4\xdb@\xba\xf0Sx\x9d\xd2\x06\xd9jaL:\x82lc\xf1>\xe9*g\xb7\x82.\x7f\xbb\x10\xc0~\xcc\x85\xe4L\xa6P(\xf6\xec\xa6\xbc\xcf\xe2\xe0\xfa\xa4\xc3.\x1b\x8e\xc8\xc1\xf5\xeav\xb7\xaa\x93\x02\xe9b\xbf8\x966\x8c\xab\vL :|\xb4\x84\xbd\x0fOO\xc0EnYE\x9c(%\xc9x\x1e\x82\x1fHA\xe4\xd7\x98\x83S\xe65\xe5\xdf\x96\xf2N\xe41.\x82R\xf7!\xf9\xb4\xa8\xd3\xe1\xcaFn}N\xc8\x06B\xa0\x82\x05\xcc\xdc\x13\xf7\xc4\xb8$F\xf0*\xb6\xfb\xddg', 0x8) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000080)=ANY=[@ANYRES16=r1], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r1, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETKMSGREDIRECT(r2, 0x541c, &(0x7f0000000000)) 20.489042531s ago: executing program 1 (id=1137): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000dc3f6e4013080100083a000000010902120001000000000904"], 0x0) r2 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_GET_PROPERTY(r2, 0x80106f53, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f00000009c0)={0x84, &(0x7f0000000440)={0x40, 0x31, 0x1, "01"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) writev(r3, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='nv', 0x2) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f0000000540)={0x0, 0xcc8a}, &(0x7f0000000580)=0x8) sendmsg$inet_sctp(r4, &(0x7f00000006c0)={&(0x7f0000000140)=@in6={0xa, 0x4e22, 0x1d2, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffff7}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000180)}, {&(0x7f0000000380)="3893c4bc835ef376e2815e708103e19efad10fedabed6691a238c201d6ab2c82aa07ccd5b0c0eabb75ec6560a8caf06e658029c9f94427bcddf5e11909f902d59a181d3997a4ce0bdb949ace69d16013fc2c97968bab9100206322aef87bac2b9b20726cefb23e6b051c165ea444217ce24a703e259f39633ab0e510e22bb558b8903334775c03452278baf551408eea445086a714f2d1542bca9dfc76124eaa3bc13188c32ed442b324c8ed72eb741ae7e20929d407177ee1b5cc22ff901937909d9de61fe383299557a596c36da35224f78200fefb4dd1f18b1907657d4aaa9ac507d47a9c81dacf88e46bc16e5be1865e", 0xf2}, {&(0x7f0000000480)="241cc6a99f6eba215f46148387596812be013e9915e5c671d6969b92777d92", 0x1f}], 0x3, &(0x7f00000005c0)=[@sndinfo={0x20, 0x84, 0x2, {0xd, 0xc, 0x0, 0x2, r5}}, @init={0x18, 0x84, 0x0, {0x7, 0x5, 0x4, 0xf}}, @authinfo={0x18, 0x84, 0x6, {0xfff}}, @dstaddrv4={0x18, 0x84, 0x7, @local}, @prinfo={0x18, 0x84, 0x5, {0x0, 0x800}}, @dstaddrv6={0x20, 0x84, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @prinfo={0x18, 0x84, 0x5, {0x20, 0x3}}, @sndrcv={0x30, 0x84, 0x1, {0x7f, 0x3, 0x2, 0x401, 0xffffff81, 0x3ff, 0x7ff, 0x81}}], 0xe8}, 0x8000400) sendmmsg$inet(r0, &(0x7f00000032c0)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000700)='D', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000002e40)=[{&(0x7f0000001e00)="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", 0x136}], 0x1}}], 0x2, 0x0) sendmmsg(r0, &(0x7f000000b440)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000001c0)="9c2ad08e4b99b8baf6b3992f4df15c0f545c5b71f2faef60df2bee8ebb7054284f0e516b7c9fc967d6186b0dd98fe540d360212684f94c06dec5a0e23b35d1cbcea0e3379c660ff9bfed231e4a321d3d5cfd4bfe08870f4b6c70085084a23482a3135cb51ed2958bf2590f53f3d80e", 0x6f}], 0x1}}], 0x1, 0x4004) r6 = accept4$x25(0xffffffffffffffff, &(0x7f0000000040), &(0x7f00000000c0)=0x12, 0x80800) ioctl$SIOCX25GCALLUSERDATA(r6, 0x89e4, &(0x7f00000002c0)={0x58, "5992242df997a46238b625bd23d841f286370c433d919c3bfc5d7b3337cb1ba77d289038294be8739ba764a5475d0440084a4ab20e5ad22390db4ce84168866edf8bdc533b7fd79ed34ecd48c4545be51fd5ba289e3dc89794d832b03f65b835eff2400c7fcf21f3d3eb78f550602dbdad196552cb95219e01a2ecbf7d546342"}) 9.651433349s ago: executing program 2 (id=1180): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x3b, 0x301, 0x2270bd24, 0x25dfdbff, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4008}, 0x40000) socket$kcm(0x11, 0x200000000000002, 0x300) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1001}) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={'syzkaller0\x00', 0x1}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syzkaller0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000180)={@local, 0x40, r2}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x14c, 0x10, 0x401, 0x0, 0x0, {{@in6=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0xa}, {@in6=@local, 0x4d2, 0x33}, @in6=@remote, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x5c, 0x1, {{'sha1\x00'}, 0x80, 0x60, "00112233445566778899aabbccddeeff"}}]}, 0x14c}}, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000500)={@void, @void, @ipv6=@generic={0x0, 0x6, '\x00', 0x18, 0x33, 0x40, @remote, @local, {[], "3b010000000004d20000000100"/24}}}, 0x40) 9.340380834s ago: executing program 2 (id=1181): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32, @ANYBLOB="08002600940900000800b70099"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r2, @ANYBLOB="010026bd7000000000003b00000008000300", @ANYRES32, @ANYBLOB="0600cd00000000006c003300802009000802110000010802110000005050505050"], 0x90}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 9.206698599s ago: executing program 2 (id=1182): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000980)='#\n$)-.\x02\xcc\xd7\xb2f\xcdY\xb9\xc7\x9d\xb2a\r\xd7\xef\xc5\x112s\x88\n\x13:\xd6\xfa\xd5?\xc7\xfd&\x8d*\xbb|&#\xe9\xa3\'\x91>C\x1bV\x87\xeb\xfe\xda\x89\xb7}@\xab%+C\x97\x18\xce\x92\xc9\xa8\x1c\x9d\\C\xfeI%\xae\x8fKHq\x89\x83\xbb\x9dC\xd6H\x9fs\xd66y\xfao\x04\xa4\xb6\x88\xdb\xa1b\xae\xa7\x87\xcc\xc7\xa4\xdc\n=/o\xf3\x96\xaf\b1\x1b48\bu\x01\xab\x90Q\xe8r\xe7\r\'-06,\xff\x84x\'+\xd5\xd4?[e\x19\xa3\xe495\x12B\x06\xe5\x8f\x83Vb\xf1\xbc\xb9E\x1a\x9bH$\x1f^\x9dX\xd0\xca\xcc\xc9\x86\xaa\x90\x9c\xc0\x82\xabE\xcc{\xcd\xd3\xdb\x97\x1e.y\xb0\x9f\x8f\xefv\x9c\xbd%\x84\xbf\"\xd9\xb4Vm\t.\x15\xf1)\xd6\xd8\x1cb\xc5\xd9=c\xb5<|+K*\x9f\x01u\x00\x00\x00\x00\x00', 0xfeffffff00000000) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000880)=ANY=[@ANYBLOB="d8010000", @ANYRES16, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="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"], 0x1d8}, 0x1, 0x0, 0x0, 0x805}, 0x2400c004) 6.882173943s ago: executing program 2 (id=1191): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000b00)=ANY=[@ANYBLOB="12010002000000406a080001010000000001090212000101008032090400"], 0x0) write(0xffffffffffffffff, &(0x7f0000000600)='1\x00', 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./sys/class/firmware/emi26!loader.fw/loading\x00', 0x1, 0x0) write(r0, &(0x7f0000000a00)='0\x00', 0x2) 6.726886268s ago: executing program 3 (id=1185): syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 6.450475454s ago: executing program 3 (id=1187): symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000009e602206d0414c340000000000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0xf7, 0x18, 0x7, 0x4, "7eccadc8", "24b23d48"}}, 0x0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) rmdir(&(0x7f0000000040)='./file1\x00') chdir(&(0x7f0000000000)='./bus\x00') unlink(&(0x7f0000000100)='./file0\x00') 5.491210249s ago: executing program 0 (id=1189): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x3b, 0x301, 0x2270bd24, 0x25dfdbff, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4008}, 0x40000) socket$kcm(0x11, 0x200000000000002, 0x300) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1001}) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={'syzkaller0\x00', 0x1}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syzkaller0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000180)={@local, 0x40, r2}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x14c, 0x10, 0x401, 0x0, 0x0, {{@in6=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0xa}, {@in6=@local, 0x4d2, 0x33}, @in6=@remote, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x5c, 0x1, {{'sha1\x00'}, 0x80, 0x60, "00112233445566778899aabbccddeeff"}}]}, 0x14c}}, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000500)={@void, @void, @ipv6=@generic={0x0, 0x6, '\x00', 0x18, 0x33, 0x40, @remote, @local, {[], "3b010000000004d20000000100"/24}}}, 0x40) 5.182732376s ago: executing program 0 (id=1190): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32, @ANYBLOB="08002600940900000800b70099"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r2, @ANYBLOB="010026bd7000000000003b00000008000300", @ANYRES32, @ANYBLOB="0600cd00000000006c003300802009000802110000010802110000005050505050"], 0x90}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 5.151570365s ago: executing program 32 (id=1137): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000dc3f6e4013080100083a000000010902120001000000000904"], 0x0) r2 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_GET_PROPERTY(r2, 0x80106f53, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f00000009c0)={0x84, &(0x7f0000000440)={0x40, 0x31, 0x1, "01"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) writev(r3, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='nv', 0x2) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f0000000540)={0x0, 0xcc8a}, &(0x7f0000000580)=0x8) sendmsg$inet_sctp(r4, &(0x7f00000006c0)={&(0x7f0000000140)=@in6={0xa, 0x4e22, 0x1d2, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffff7}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000180)}, {&(0x7f0000000380)="3893c4bc835ef376e2815e708103e19efad10fedabed6691a238c201d6ab2c82aa07ccd5b0c0eabb75ec6560a8caf06e658029c9f94427bcddf5e11909f902d59a181d3997a4ce0bdb949ace69d16013fc2c97968bab9100206322aef87bac2b9b20726cefb23e6b051c165ea444217ce24a703e259f39633ab0e510e22bb558b8903334775c03452278baf551408eea445086a714f2d1542bca9dfc76124eaa3bc13188c32ed442b324c8ed72eb741ae7e20929d407177ee1b5cc22ff901937909d9de61fe383299557a596c36da35224f78200fefb4dd1f18b1907657d4aaa9ac507d47a9c81dacf88e46bc16e5be1865e", 0xf2}, {&(0x7f0000000480)="241cc6a99f6eba215f46148387596812be013e9915e5c671d6969b92777d92", 0x1f}], 0x3, &(0x7f00000005c0)=[@sndinfo={0x20, 0x84, 0x2, {0xd, 0xc, 0x0, 0x2, r5}}, @init={0x18, 0x84, 0x0, {0x7, 0x5, 0x4, 0xf}}, @authinfo={0x18, 0x84, 0x6, {0xfff}}, @dstaddrv4={0x18, 0x84, 0x7, @local}, @prinfo={0x18, 0x84, 0x5, {0x0, 0x800}}, @dstaddrv6={0x20, 0x84, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @prinfo={0x18, 0x84, 0x5, {0x20, 0x3}}, @sndrcv={0x30, 0x84, 0x1, {0x7f, 0x3, 0x2, 0x401, 0xffffff81, 0x3ff, 0x7ff, 0x81}}], 0xe8}, 0x8000400) sendmmsg$inet(r0, &(0x7f00000032c0)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000700)='D', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000002e40)=[{&(0x7f0000001e00)="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", 0x136}], 0x1}}], 0x2, 0x0) sendmmsg(r0, &(0x7f000000b440)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000001c0)="9c2ad08e4b99b8baf6b3992f4df15c0f545c5b71f2faef60df2bee8ebb7054284f0e516b7c9fc967d6186b0dd98fe540d360212684f94c06dec5a0e23b35d1cbcea0e3379c660ff9bfed231e4a321d3d5cfd4bfe08870f4b6c70085084a23482a3135cb51ed2958bf2590f53f3d80e", 0x6f}], 0x1}}], 0x1, 0x4004) r6 = accept4$x25(0xffffffffffffffff, &(0x7f0000000040), &(0x7f00000000c0)=0x12, 0x80800) ioctl$SIOCX25GCALLUSERDATA(r6, 0x89e4, &(0x7f00000002c0)={0x58, "5992242df997a46238b625bd23d841f286370c433d919c3bfc5d7b3337cb1ba77d289038294be8739ba764a5475d0440084a4ab20e5ad22390db4ce84168866edf8bdc533b7fd79ed34ecd48c4545be51fd5ba289e3dc89794d832b03f65b835eff2400c7fcf21f3d3eb78f550602dbdad196552cb95219e01a2ecbf7d546342"}) 5.043450574s ago: executing program 0 (id=1193): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000b00)=ANY=[@ANYBLOB="12010002000000406a080001010000000001090212000101008032090400"], 0x0) write(0xffffffffffffffff, &(0x7f0000000600)='1\x00', 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./sys/class/firmware/emi26!loader.fw/loading\x00', 0x1, 0x0) write(r0, &(0x7f0000000a00)='0\x00', 0x2) 3.829073092s ago: executing program 2 (id=1194): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x2, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80940, 0xd2) r2 = syz_usb_connect$cdc_ncm(0x2, 0x76, &(0x7f0000001200)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904010001020d0000052406000105240000000d240f0100000000000000000006241a00000008241c00000008000905810300020000000904010000020d00000904010102020d0000090582020002000000090503", @ANYRESHEX], 0x0) r3 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r3, &(0x7f0000000040)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb71658bda99b49720fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x4000) recvmsg$kcm(r3, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x202) syz_usb_connect$uac1(0x0, 0xb1, 0x0, 0x0) r4 = landlock_create_ruleset(&(0x7f00000002c0)={0x120, 0xd, 0x3}, 0x30, 0x0) r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003173610ef171e7206de010203010902f3c8010000000009040000000206"], 0x0) r6 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) read$midi(r6, &(0x7f0000000180)=""/223, 0xdf) syz_usb_control_io$rtl8150(r5, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000180)=ANY=[@ANYRESOCT=0x0, @ANYRES16=r1, @ANYRES64=r4, @ANYRES8], 0x0, 0x0, 0x0, 0x0}) landlock_restrict_self(r4, 0xe) r7 = socket$tipc(0x1e, 0x2, 0x0) futex(0x0, 0x6, 0x0, 0x0, 0x0, 0x2) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000100)={0x42, 0x3, 0x2}, 0x10) connect$tipc(r7, &(0x7f0000000000)=@name={0x1e, 0x2, 0x2, {{0x22, 0x3}, 0x4}}, 0x10) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x80, 0x1c, {0x2, 0x0, 0xe, 0x1, 0x1, 0xffff, 0x7, 0x1040, 0x6, 0xffff, 0x0, 0x1000}}, 0x0, 0x0, 0x0, 0x0}) setsockopt$sock_int(r3, 0x1, 0x3, &(0x7f0000000140)=0x1, 0x4) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) close(r1) socket$l2tp6(0xa, 0x2, 0x73) connect$x25(r1, &(0x7f0000000000), 0x12) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0xa, 0x1, 0x1, 0x0, 0x1}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405668, &(0x7f00000000c0)={0x7, 0x2, 0x1, "0000087aba50fdfffffb05001400000c044853000c00", 0x36314d59}) 1.925881282s ago: executing program 0 (id=1195): memfd_create(&(0x7f0000000500)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x1c\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\x83\x11\v}k+\xeb\xc3\xc0O\xae\xd2\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb901nEy\x82\x83\x80\xd3O\x00|hP\x00\x00\x00\x00\x00\x00\x00\x05\x86\xfe\xd9\xa5\xc6\nSy\xa3N\xba-]\'q\xc6\xfb\x02\x9a\xa9Z\xa8\x80Bx\xbd74\xcf\"\xa5\xea$\x95\xfd\x06T\xef\x89\xe4j\x06\xdc\x15\xe7\xc3\xb5H\xf7\xdc\xee\x182\xab\xe2?\"\xbewm\x9d\xd8x\xd92\xeeS/\xd2\xcd[\x9dcO1\xcb\x12lZ$\xa7\x9d\xf8b\xf6}\xc5``\xfe0\x8a\'v-\x99`?\x97\x8c\xdd\xd6\xfa\xa2\x06>\xf3\xe2uI\xe65C\xdb\x84\xe6eU\xe8RK\xd6=s\xcd\x9d\x1f#3\xc5\x16\xd0\xbbD\xc5\xde\xc8/\v\xa5W\xbep\x87\x15\x10\xcdm\xa7\x93\x01\x1c,9V8\xdc\xfd\xb7\xc0\xfc\x04\x00p\xad\x12\xb2\xbf\xfbFZ\x1a\f\x99\x05\xe4\x1eP\xed\x87\x89\xbeo\xfbv\xb6\x8a\xee\xf6Oc8\xaf\x11[\xc3\x98w-\xf0\xb2z\xc7\xaf;\x92\xad4\x1b\x92L\x97<\xbdh\x80\xf2\xc0\xd0n)K\xf2#Ncp\xe4\xb4\xfb\x94\x18\xc2-TWA\x13\xfe\xea\xad\v\xc4\xa5\x02\xf9\xed]\xf4\\\x01\xab\xdc\xb6\xcdP\x93\xf2\xc3\x96\xf2\xc0\xd6-x\xd5\xd6\xc7\x9d\xa5\x1f\xd2t\xd7\x8f}b\x9749\xd4a7\x18\xe0\x91KV7[\xb8\x8dL\xc8\xc8\x8f>sbE\xf5\xa7\xdb|\xb0m\x16c\x84\r\"\xf2\x92s\xeb\xaf\x1c\x00\xf4\x8dL\xa5\x10\x89FB\xfb8\xf9\x9d\xcbm\x1c\x91\xe9fd$5\xdc\xad\xec\xef\x90\xd9\xefX\xd2m\x9e\xec\x94w\xb3\xf9\xd9\x0eu-z\x81\xbb\xa6\xc0\x00\xa1\xd9\xcbI\xda\xa3\b\x9e@\xb8\xc8k\xdeQ/\xb8X\x9c\xff4Np~\xc4\xc1_\x1c#zX\a\xd41\x1c\x7fH\x91\xd9k\x05\x1f\n\b\b\x88\xd6\xcf4i\xa0B\xe7\x9c\x9c\xe6\xcax\xca\xa1E#6\xe9\xf31W\xd0\x1bY3/\x00I#\xfa\xb0\f\xd5!\x9fR[\x0e\xdb`\xdb\x82M\'k\x16(\xfa\xc2\xec\x96e\\Q\xe9\x19\xe1u\x86\xcb\xc3\xb0\xb8\x19\xb9l\x1fk!R\xb1P\x8b\xda\xffE\x89\x97\n\x17m\xd10\x1a\xe7Qz\xd8\bi\x8dRw+\xa1^N\xaf\x1b\x1dg\x8f$\xbe\x93\x8d\x8b\xfd\r\xee<\x84\x95\x82)TH\xcac9\x98\x13WW@;\xb4\xd5\x0f\xa1\xb3xX(\x80\xe8\x89\xed e.\xe04\xba\x9c=\xc6\x04\f\xbf\x06\xce5\xf99GD8@\xd2\r\xd0\xdf@\xe3\xbe\"qq#]\x86W\tA\xa7\x91\x85\xae\x9c\x8dO\xa6\xa3\xf9i\x83\xc5\xa8C\x164\xef\xa4\\\a\xaa%\x94!3k]\xd5\xbe\'U\xf17', 0x1) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 1.925774254s ago: executing program 3 (id=1196): syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 1.881396813s ago: executing program 3 (id=1197): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x5) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='htcp', 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) 1.786507488s ago: executing program 0 (id=1198): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x400) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000040)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000300), 0x3, r2}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000580)={0x100, 0x1, &(0x7f0000000180)=[r2], &(0x7f00000000c0)=[0x3], &(0x7f0000000640)=[r4, r3, r3], &(0x7f0000000340), 0x0, 0xffffffffffffffff}) 1.550926506s ago: executing program 0 (id=1199): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x3b, 0x301, 0x2270bd24, 0x25dfdbff, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4008}, 0x40000) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1001}) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000100)={'syzkaller0\x00', 0x1}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syzkaller0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000180)={@local, 0x40, r3}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x14c, 0x10, 0x401, 0x0, 0x0, {{@in6=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0xa}, {@in6=@local, 0x4d2, 0x33}, @in6=@remote, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x5c, 0x1, {{'sha1\x00'}, 0x80, 0x60, "00112233445566778899aabbccddeeff"}}]}, 0x14c}}, 0x0) write$tun(r1, &(0x7f0000000500)={@void, @void, @ipv6=@generic={0x0, 0x6, '\x00', 0x18, 0x33, 0x40, @remote, @local, {[], "3b010000000004d20000000100"/24}}}, 0x40) 983.498441ms ago: executing program 3 (id=1200): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32, @ANYBLOB="08002600940900000800b70099"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r2, @ANYBLOB="010026bd7000000000003b00000008000300", @ANYRES32, @ANYBLOB="0600cd00000000006c003300802009000802110000010802110000005050505050"], 0x90}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 702.844036ms ago: executing program 2 (id=1201): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000b00)=ANY=[@ANYBLOB="12010002000000406a080001010000000001090212000101008032090400"], 0x0) write(0xffffffffffffffff, &(0x7f0000000600)='1\x00', 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./sys/class/firmware/emi26!loader.fw/loading\x00', 0x1, 0x0) write(r0, &(0x7f0000000a00)='0\x00', 0x2) 0s ago: executing program 3 (id=1202): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/firmware/emi26!loader.fw/loading\x00', 0x1, 0x0) write(r0, &(0x7f0000000600)='1\x00', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./sys/class/firmware/emi26!loader.fw/loading\x00', 0x1, 0x0) write(r1, &(0x7f0000000a00)='0\x00', 0x2) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.246' (ED25519) to the list of known hosts. [ 91.581092][ T5576] cgroup: Unknown subsys name 'net' [ 91.824715][ T5576] cgroup: Unknown subsys name 'cpuset' [ 91.877379][ T5576] cgroup: Unknown subsys name 'rlimit' [ 92.087134][ T10] cfg80211: failed to load regulatory.db Setting up swapspace version 1, size = 127995904 bytes [ 93.987924][ T5576] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 96.752965][ T5602] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 96.772116][ T5602] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 96.773305][ T5602] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 96.775627][ T5602] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 96.808211][ T5602] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 96.821006][ T5602] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 96.824595][ T5602] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 96.826784][ T5602] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 96.841242][ T5607] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 96.842355][ T5602] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 96.843790][ T5602] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 96.875409][ T5602] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 96.882173][ T5602] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 96.898552][ T5605] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 96.899093][ T5605] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 96.899631][ T5602] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 96.899791][ T5607] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 96.901141][ T5607] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 96.913330][ T4906] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 96.921409][ T4906] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 99.168032][ T5605] Bluetooth: hci0: command tx timeout [ 99.247450][ T5605] Bluetooth: hci1: command tx timeout [ 99.247482][ T5599] Bluetooth: hci3: command tx timeout [ 99.247713][ T5597] Bluetooth: hci2: command tx timeout [ 99.436574][ T5593] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.445815][ T5593] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.446325][ T5593] bridge_slave_0: entered allmulticast mode [ 99.457615][ T5593] bridge_slave_0: entered promiscuous mode [ 99.522078][ T5593] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.522355][ T5593] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.522578][ T5593] bridge_slave_1: entered allmulticast mode [ 99.525279][ T5593] bridge_slave_1: entered promiscuous mode [ 99.526585][ T5592] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.532767][ T5592] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.533712][ T5592] bridge_slave_0: entered allmulticast mode [ 99.568975][ T5592] bridge_slave_0: entered promiscuous mode [ 99.588910][ T5595] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.589315][ T5595] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.589609][ T5595] bridge_slave_0: entered allmulticast mode [ 99.592948][ T5595] bridge_slave_0: entered promiscuous mode [ 99.659339][ T5592] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.659653][ T5592] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.660173][ T5592] bridge_slave_1: entered allmulticast mode [ 99.663026][ T5592] bridge_slave_1: entered promiscuous mode [ 99.665175][ T5595] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.665458][ T5595] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.665680][ T5595] bridge_slave_1: entered allmulticast mode [ 99.675893][ T5595] bridge_slave_1: entered promiscuous mode [ 99.793181][ T5594] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.793458][ T5594] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.793664][ T5594] bridge_slave_0: entered allmulticast mode [ 99.796474][ T5594] bridge_slave_0: entered promiscuous mode [ 99.830519][ T5593] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.909005][ T5594] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.909305][ T5594] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.909539][ T5594] bridge_slave_1: entered allmulticast mode [ 99.912242][ T5594] bridge_slave_1: entered promiscuous mode [ 99.940837][ T5593] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.955343][ T5592] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.972301][ T5595] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.029952][ T5592] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.034658][ T5595] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.135245][ T5594] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.149079][ T5593] team0: Port device team_slave_0 added [ 100.198099][ T5594] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.201709][ T5593] team0: Port device team_slave_1 added [ 100.205276][ T5592] team0: Port device team_slave_0 added [ 100.217782][ T5595] team0: Port device team_slave_0 added [ 100.281216][ T5592] team0: Port device team_slave_1 added [ 100.284700][ T5595] team0: Port device team_slave_1 added [ 100.374276][ T5594] team0: Port device team_slave_0 added [ 100.377937][ T5593] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.377989][ T5593] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.378061][ T5593] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.459470][ T5594] team0: Port device team_slave_1 added [ 100.461446][ T5593] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.461457][ T5593] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.461477][ T5593] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.464022][ T5592] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.464033][ T5592] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.464053][ T5592] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.466526][ T5595] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.466536][ T5595] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.466556][ T5595] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.617446][ T5592] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.617460][ T5592] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.617480][ T5592] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.626406][ T5595] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.626447][ T5595] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.626520][ T5595] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.742650][ T5594] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.742663][ T5594] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.742683][ T5594] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.766738][ T5594] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.766756][ T5594] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.766814][ T5594] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.922595][ T5593] hsr_slave_0: entered promiscuous mode [ 100.924575][ T5593] hsr_slave_1: entered promiscuous mode [ 101.215741][ T5595] hsr_slave_0: entered promiscuous mode [ 101.225455][ T5595] hsr_slave_1: entered promiscuous mode [ 101.230327][ T5595] debugfs: 'hsr0' already exists in 'hsr' [ 101.230646][ T5595] Cannot create hsr debugfs directory [ 101.249558][ T5592] hsr_slave_0: entered promiscuous mode [ 101.251353][ T5592] hsr_slave_1: entered promiscuous mode [ 101.253103][ T5592] debugfs: 'hsr0' already exists in 'hsr' [ 101.253128][ T5592] Cannot create hsr debugfs directory [ 101.257074][ T5597] Bluetooth: hci0: command tx timeout [ 101.327156][ T5597] Bluetooth: hci2: command tx timeout [ 101.327190][ T5597] Bluetooth: hci3: command tx timeout [ 101.327214][ T5597] Bluetooth: hci1: command tx timeout [ 101.378655][ T5594] hsr_slave_0: entered promiscuous mode [ 101.380462][ T5594] hsr_slave_1: entered promiscuous mode [ 101.381947][ T5594] debugfs: 'hsr0' already exists in 'hsr' [ 101.381973][ T5594] Cannot create hsr debugfs directory [ 102.269924][ T5593] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 102.320488][ T5593] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 102.340278][ T5593] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 102.374367][ T5593] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 102.376566][ T5593] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 102.434044][ T5593] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 102.470381][ T5593] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 102.496078][ T5593] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 102.687467][ T5594] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 102.723700][ T5594] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 102.741775][ T5594] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 102.772690][ T5594] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 102.790557][ T5594] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 102.833693][ T5594] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 102.862856][ T5594] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 102.882765][ T5594] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 103.052326][ T5592] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 103.084173][ T5592] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 103.099271][ T5592] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 103.135709][ T5592] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 103.148299][ T5592] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 103.181647][ T5592] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 103.220712][ T5592] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 103.255014][ T5592] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 103.328022][ T5605] Bluetooth: hci0: command tx timeout [ 103.407546][ T5605] Bluetooth: hci1: command tx timeout [ 103.407581][ T5605] Bluetooth: hci2: command tx timeout [ 103.410735][ T5597] Bluetooth: hci3: command tx timeout [ 103.432493][ T5595] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 103.468988][ T5595] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 103.499916][ T5595] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 103.531872][ T5595] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 103.536277][ T5595] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 103.582125][ T5595] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 103.607027][ T5595] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 103.652952][ T5595] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 103.692661][ T5593] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.818393][ T5593] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.878463][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.878654][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.964902][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.965044][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.989481][ T5594] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.198249][ T5594] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.253821][ T1354] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.254001][ T1354] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.292953][ T5592] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.365937][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.366116][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.504343][ T5592] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.570741][ T5595] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.636235][ T1354] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.636457][ T1354] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.715276][ T4866] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.715505][ T4866] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.812187][ T5595] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.890569][ T4866] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.891258][ T4866] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.972446][ T4866] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.972585][ T4866] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.406985][ T5597] Bluetooth: hci0: command tx timeout [ 105.488401][ T5605] Bluetooth: hci1: command tx timeout [ 105.488451][ T5599] Bluetooth: hci3: command tx timeout [ 105.488491][ T5597] Bluetooth: hci2: command tx timeout [ 105.760143][ T5593] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.256011][ T5594] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.332684][ T5593] veth0_vlan: entered promiscuous mode [ 106.444361][ T5593] veth1_vlan: entered promiscuous mode [ 106.590738][ T5592] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.724023][ T5595] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.734799][ T5594] veth0_vlan: entered promiscuous mode [ 106.750136][ T5593] veth0_macvtap: entered promiscuous mode [ 106.815334][ T5593] veth1_macvtap: entered promiscuous mode [ 106.846009][ T5594] veth1_vlan: entered promiscuous mode [ 106.962621][ T5593] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.989075][ T5592] veth0_vlan: entered promiscuous mode [ 107.006416][ T5593] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.071196][ T48] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.095916][ T48] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.114351][ T5592] veth1_vlan: entered promiscuous mode [ 107.132459][ T48] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.153155][ T48] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.172105][ T5595] veth0_vlan: entered promiscuous mode [ 107.182468][ T5594] veth0_macvtap: entered promiscuous mode [ 107.261685][ T5594] veth1_macvtap: entered promiscuous mode [ 107.363403][ T5595] veth1_vlan: entered promiscuous mode [ 107.552663][ T5594] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.617164][ T5594] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.634123][ T5592] veth0_macvtap: entered promiscuous mode [ 107.723990][ T5592] veth1_macvtap: entered promiscuous mode [ 107.746243][ T1354] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.746264][ T1354] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.802491][ T81] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.823888][ T81] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.848970][ T81] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.875352][ T81] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.954437][ T5595] veth0_macvtap: entered promiscuous mode [ 108.013282][ T1354] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.013304][ T1354] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.053087][ T5592] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.054643][ T5595] veth1_macvtap: entered promiscuous mode [ 108.211282][ T5592] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.426651][ T1354] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.463699][ T1354] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.465447][ T1354] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.534497][ T1354] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.549852][ T5595] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.604880][ T81] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.604908][ T81] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.630185][ T5595] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.771987][ T1226] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.809364][ T1226] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.871935][ T1226] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.908720][ T1226] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.093092][ T1031] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.093113][ T1031] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.766645][ T4866] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.766781][ T4866] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.008741][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.008764][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.130272][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.130291][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.500391][ T5753] process 'syz.3.7' launched '/dev/fd/4' with NULL argv: empty string added [ 110.574533][ T1350] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.574554][ T1350] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.621016][ T5754] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 110.621458][ T5754] overlayfs: overlapping lowerdir path [ 111.898895][ T5698] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 112.190774][ T5698] usb 3-1: New USB device found, idVendor=086a, idProduct=0100, bcdDevice= 0.01 [ 112.190799][ T5698] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.318743][ T5698] emi26 - firmware loader 3-1:1.0: emi26_probe start [ 112.416821][ T823] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 112.472515][ T5698] usb 3-1: Direct firmware load for emi26/loader.fw failed with error -2 [ 112.472544][ T5698] usb 3-1: Falling back to sysfs fallback for: emi26/loader.fw [ 112.577145][ T823] usb 4-1: Using ep0 maxpacket: 8 [ 112.704444][ T823] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 112.704525][ T823] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 112.704551][ T823] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 112.704576][ T823] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 112.704601][ T823] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 112.704647][ T823] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 112.704672][ T823] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.141645][ T5698] usb 3-1: emi26_load_firmware - request_firmware() failed [ 113.141671][ T5698] usb 3-1: emi26_load_firmware - error loading firmware: error = -12 [ 113.141735][ T5698] emi26 - firmware loader 3-1:1.0: probe with driver emi26 - firmware loader failed with error -5 [ 113.533692][ T5698] usb 3-1: USB disconnect, device number 2 [ 114.246055][ T5797] syz.1.17 uses obsolete (PF_INET,SOCK_PACKET) [ 114.255409][ T5798] usbtmc 4-1:16.0: simple usb_control_msg failed -32 [ 114.280793][ T5797] syzkaller1: entered promiscuous mode [ 114.280820][ T5797] syzkaller1: entered allmulticast mode [ 114.684936][ T5597] Bluetooth: hci0: unexpected cc 0x0403 length: 9 > 1 [ 115.393993][ T32] usb 4-1: USB disconnect, device number 2 [ 115.637511][ T5808] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.006814][ T5698] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 116.160544][ T5698] usb 3-1: Using ep0 maxpacket: 8 [ 116.194680][ T5698] usb 3-1: config index 0 descriptor too short (expected 74, got 45) [ 116.194742][ T5698] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 116.194771][ T5698] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 116.194798][ T5698] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 116.194824][ T5698] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 116.194848][ T5698] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 116.194890][ T5698] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 116.194914][ T5698] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.378816][ T5819] syz.3.26 (5819) used greatest stack depth: 18808 bytes left [ 116.462850][ T5808] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.551688][ T5597] Bluetooth: hci0: Dropping invalid advertising data [ 116.551718][ T5597] Bluetooth: hci0: Malformed LE Event: 0x02 [ 116.568686][ T5698] usb 3-1: usb_control_msg returned -32 [ 116.568738][ T5698] usbtmc 3-1:16.0: can't read capabilities [ 116.808875][ T5578] usb 3-1: USB disconnect, device number 3 [ 116.902487][ T5808] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.988563][ T5774] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 117.141798][ T5774] usb 4-1: unable to get BOS descriptor or descriptor too short [ 117.151335][ T5774] usb 4-1: not running at top speed; connect to a high speed hub [ 117.162893][ T5774] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 104, changing to 4 [ 117.192810][ T5774] usb 4-1: New USB device found, idVendor=17cc, idProduct=1021, bcdDevice= 0.40 [ 117.192844][ T5774] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.192866][ T5774] usb 4-1: Product: syz [ 117.192883][ T5774] usb 4-1: Manufacturer: syz [ 117.192899][ T5774] usb 4-1: SerialNumber: syz [ 117.297170][ T5834] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 117.599380][ T5808] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.698881][ T5597] Bluetooth: hci2: unknown advertising packet type: 0x09 [ 117.740307][ T5578] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 117.933165][ T5578] usb 3-1: Using ep0 maxpacket: 16 [ 117.950485][ T5578] usb 3-1: config 0 has an invalid interface number: 105 but max is 0 [ 117.950514][ T5578] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 117.950534][ T5578] usb 3-1: config 0 has no interface number 0 [ 117.987535][ T5578] usb 3-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 117.987567][ T5578] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.987588][ T5578] usb 3-1: Product: syz [ 117.987603][ T5578] usb 3-1: Manufacturer: syz [ 117.987618][ T5578] usb 3-1: SerialNumber: syz [ 118.068687][ T5578] usb 3-1: config 0 descriptor?? [ 118.230436][ T5578] uvcvideo 3-1:0.105: Found UVC 0.00 device syz (046d:08f3) [ 118.230480][ T5578] uvcvideo 3-1:0.105: No valid video chain found. [ 118.530655][ T200] usb 3-1: USB disconnect, device number 4 [ 118.693277][ T5597] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 118.701040][ T5597] Bluetooth: hci0: Injecting HCI hardware error event [ 118.703986][ T5599] Bluetooth: hci0: hardware error 0x00 [ 119.675128][ T5831] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 119.675370][ T5831] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 119.865669][ T5831] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 119.887297][ T5597] Bluetooth: hci1: command 0x0c1a tx timeout [ 119.942598][ T5831] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 119.942723][ T5831] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 119.976254][ T57] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.043428][ T5831] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 120.118058][ T5831] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 120.118213][ T5831] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 120.205010][ T5831] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 120.520510][ T5578] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 120.562709][ T5774] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 120.578236][ T5774] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 120.596048][ T5774] usb 4-1: unable to issue vendor read request (ret = -71) [ 120.608596][ T5774] usb 4-1: unable to issue vendor read request (ret = -71) [ 120.609260][ T5774] usb 4-1: unable to issue vendor read request (ret = -71) [ 120.609870][ T5774] usb 4-1: unable to issue vendor read request (ret = -71) [ 120.611605][ T5774] usb 4-1: unable to issue vendor read request (ret = -71) [ 120.612216][ T5774] usb 4-1: unable to issue vendor read request (ret = -71) [ 120.612849][ T5774] usb 4-1: unable to issue vendor read request (ret = -71) [ 120.613464][ T5774] usb 4-1: unable to issue vendor read request (ret = -71) [ 120.716804][ T5578] usb 1-1: Using ep0 maxpacket: 16 [ 120.729272][ T5578] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 120.729306][ T5578] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 120.748537][ T5578] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 120.748623][ T5578] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.748685][ T5578] usb 1-1: Product: syz [ 120.748750][ T5578] usb 1-1: Manufacturer: syz [ 120.748799][ T5578] usb 1-1: SerialNumber: syz [ 120.891536][ T5774] usb 4-1: USB disconnect, device number 3 [ 120.948367][ T5578] usb 1-1: config 0 descriptor?? [ 121.067325][ T5578] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 121.067367][ T5578] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 121.327399][ T5599] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 121.335876][ T38] audit: type=1800 audit(1785313442.589:2): pid=5854 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="syz.2.37" name="use" dev="configfs" ino=8292 res=0 errno=0 [ 121.464437][ T5826] udevd[5826]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 121.583959][ T5599] Bluetooth: hci3: Dropping invalid advertising data [ 121.583981][ T5599] Bluetooth: hci3: Malformed LE Event: 0x02 [ 121.585356][ T5578] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 121.586179][ T5578] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 121.591167][ T5578] em28xx 1-1:0.0: AC97 chip type couldn't be determined [ 121.591227][ T5578] em28xx 1-1:0.0: No AC97 audio processor [ 121.967856][ T5597] Bluetooth: hci1: command 0x0c1a tx timeout [ 121.967958][ T5599] Bluetooth: hci3: command 0x0c1a tx timeout [ 122.151434][ T5599] Bluetooth: hci2: command 0x0c1a tx timeout [ 122.216818][ T5578] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 122.367244][ T5578] usb 4-1: Using ep0 maxpacket: 8 [ 122.381893][ T5578] usb 4-1: config index 0 descriptor too short (expected 74, got 45) [ 122.381977][ T5578] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 122.382007][ T5578] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 122.382034][ T5578] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 122.382061][ T5578] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 122.382087][ T5578] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 122.382132][ T5578] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 122.382157][ T5578] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.659863][ T5579] usb 1-1: USB disconnect, device number 2 [ 122.662585][ T5579] em28xx 1-1:0.0: Disconnecting em28xx [ 122.748365][ T5579] em28xx: Freeing device [ 122.822560][ T5578] usb 4-1: usb_control_msg returned -32 [ 122.822608][ T5578] usbtmc 4-1:16.0: can't read capabilities [ 123.125454][ T5579] usb 4-1: USB disconnect, device number 4 [ 123.748708][ T5902] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.053983][ T5599] Bluetooth: hci3: command 0x0c1a tx timeout [ 124.054021][ T5599] Bluetooth: hci1: command 0x0c1a tx timeout [ 124.216968][ T5597] Bluetooth: hci2: command 0x0c1a tx timeout [ 124.812623][ T68] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.813173][ C1] Unknown status report in ack skb [ 126.127264][ T5597] Bluetooth: hci3: command 0x0c1a tx timeout [ 126.261483][ T5981] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.287093][ T5597] Bluetooth: hci2: command 0x0c1a tx timeout [ 126.956868][ T200] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 127.136946][ T200] usb 3-1: Using ep0 maxpacket: 8 [ 127.139345][ T200] usb 3-1: config index 0 descriptor too short (expected 74, got 45) [ 127.139403][ T200] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 127.139432][ T200] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 127.139458][ T200] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 127.139486][ T200] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 127.139511][ T200] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 127.139554][ T200] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 127.139578][ T200] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.485306][ T200] usb 3-1: usb_control_msg returned -32 [ 127.485368][ T200] usbtmc 3-1:16.0: can't read capabilities [ 127.649541][ T823] usb 3-1: USB disconnect, device number 5 [ 128.047838][ T5597] Bluetooth: hci3: Dropping invalid advertising data [ 128.047879][ T5597] Bluetooth: hci3: Malformed LE Event: 0x02 [ 128.290797][ T5597] Bluetooth: hci1: unexpected cc 0x0403 length: 9 > 1 [ 128.292181][ T5597] Bluetooth: hci1: unexpected event for opcode 0x0403 [ 128.476789][ T9] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 128.516601][ T6046] netlink: 24 bytes leftover after parsing attributes in process `syz.2.116'. [ 128.643626][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 128.666095][ T9] usb 1-1: config index 0 descriptor too short (expected 74, got 45) [ 128.666150][ T9] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 128.666177][ T9] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 128.666202][ T9] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 128.666230][ T9] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 128.666255][ T9] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 128.666295][ T9] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 128.666317][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.036284][ T9] usb 1-1: usb_control_msg returned -32 [ 129.036329][ T9] usbtmc 1-1:16.0: can't read capabilities [ 129.337045][ T9] usb 1-1: USB disconnect, device number 3 [ 129.461192][ T68] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.637878][ T5597] Bluetooth: hci3: Dropping invalid advertising data [ 129.637920][ T5597] Bluetooth: hci3: Malformed LE Event: 0x02 [ 129.763882][ T6076] netlink: 24 bytes leftover after parsing attributes in process `syz.3.127'. [ 130.440797][ T6098] netlink: 24 bytes leftover after parsing attributes in process `syz.2.141'. [ 130.678050][ T6100] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.760546][ T9] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 130.909123][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 130.912750][ T9] usb 1-1: config index 0 descriptor too short (expected 74, got 45) [ 130.912810][ T9] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 130.912839][ T9] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 130.912865][ T9] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 130.912893][ T9] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 130.912918][ T9] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 130.912962][ T9] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 130.913083][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.381443][ T9] usb 1-1: usb_control_msg returned -32 [ 131.381493][ T9] usbtmc 1-1:16.0: can't read capabilities [ 131.505048][ T32] usb 1-1: USB disconnect, device number 4 [ 131.691716][ T6126] syz.1.153 (6126) used greatest stack depth: 18392 bytes left [ 132.367659][ T5597] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 132.367831][ T5597] Bluetooth: hci1: Injecting HCI hardware error event [ 132.368368][ T5599] Bluetooth: hci1: hardware error 0x00 [ 132.739125][ T32] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 132.896954][ T32] usb 1-1: Using ep0 maxpacket: 8 [ 132.901008][ T32] usb 1-1: config index 0 descriptor too short (expected 74, got 45) [ 132.901080][ T32] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 132.901109][ T32] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 132.901137][ T32] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 132.901165][ T32] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 132.901191][ T32] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 132.901233][ T32] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 132.901258][ T32] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.168394][ T32] usb 1-1: usb_control_msg returned -32 [ 133.168446][ T32] usbtmc 1-1:16.0: can't read capabilities [ 133.275913][ T32] usb 1-1: USB disconnect, device number 5 [ 133.747951][ T6188] netlink: 16 bytes leftover after parsing attributes in process `syz.2.181'. [ 134.450961][ T5599] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 134.534600][ T6213] netlink: 16 bytes leftover after parsing attributes in process `syz.0.192'. [ 134.611735][ T9] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 134.769633][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 134.774518][ T9] usb 4-1: config index 0 descriptor too short (expected 74, got 45) [ 134.774585][ T9] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 134.774614][ T9] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 134.774633][ T9] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 134.774651][ T9] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 134.774668][ T9] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 134.774698][ T9] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 134.774714][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.106964][ T9] usb 4-1: usb_control_msg returned -32 [ 135.107011][ T9] usbtmc 4-1:16.0: can't read capabilities [ 135.160989][ T9] usb 4-1: USB disconnect, device number 5 [ 135.487579][ T6239] netlink: 16 bytes leftover after parsing attributes in process `syz.1.204'. [ 136.010732][ T5599] Bluetooth: hci3: unexpected cc 0x0403 length: 9 > 1 [ 136.012339][ T5599] Bluetooth: hci3: unexpected event for opcode 0x0403 [ 136.403596][ T48] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.636834][ T200] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 136.786794][ T200] usb 1-1: Using ep0 maxpacket: 8 [ 136.795416][ T200] usb 1-1: config index 0 descriptor too short (expected 74, got 45) [ 136.795478][ T200] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 136.795509][ T200] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 136.795536][ T200] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 136.795563][ T200] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 136.795589][ T200] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 136.795633][ T200] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 136.795657][ T200] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.123428][ T200] usb 1-1: usb_control_msg returned -32 [ 137.123481][ T200] usbtmc 1-1:16.0: can't read capabilities [ 137.167646][ T200] usb 1-1: USB disconnect, device number 6 [ 137.288797][ T5599] Bluetooth: hci2: unexpected cc 0x0403 length: 9 > 1 [ 137.289862][ T5599] Bluetooth: hci2: unexpected event for opcode 0x0403 [ 138.139049][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.146207][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.522748][ T200] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 138.696896][ T200] usb 3-1: Using ep0 maxpacket: 8 [ 138.716369][ T200] usb 3-1: config index 0 descriptor too short (expected 74, got 45) [ 138.716432][ T200] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 138.716461][ T200] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 138.716488][ T200] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 138.716515][ T200] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 138.716541][ T200] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 138.716586][ T200] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 138.716610][ T200] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.276912][ T200] usb 3-1: usb_control_msg returned -71 [ 139.276965][ T200] usbtmc 3-1:16.0: can't read capabilities [ 139.325147][ T200] usb 3-1: USB disconnect, device number 6 [ 139.573060][ T6339] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.048757][ T5599] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 140.074836][ T5599] Bluetooth: hci3: Injecting HCI hardware error event [ 140.076005][ T5597] Bluetooth: hci3: hardware error 0x00 [ 140.946852][ T9] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 141.098965][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 141.102578][ T9] usb 2-1: config index 0 descriptor too short (expected 74, got 45) [ 141.102638][ T9] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 141.102667][ T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 141.102694][ T9] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 141.102721][ T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 141.102745][ T9] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 141.102788][ T9] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 141.102812][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.336131][ T5599] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 141.350957][ T5599] Bluetooth: hci2: Injecting HCI hardware error event [ 141.355460][ T5605] Bluetooth: hci2: hardware error 0x00 [ 141.709545][ T9] usb 2-1: usb_control_msg returned -71 [ 141.709600][ T9] usbtmc 2-1:16.0: can't read capabilities [ 141.758138][ T9] usb 2-1: USB disconnect, device number 2 [ 142.126898][ T5597] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 142.679454][ T5597] Bluetooth: hci2: unexpected cc 0x0403 length: 9 > 1 [ 142.679488][ T5597] Bluetooth: hci2: unexpected event for opcode 0x0403 [ 142.931103][ T1350] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.294583][ T6458] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.326988][ T823] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 143.486885][ T5605] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 143.488069][ T823] usb 4-1: Using ep0 maxpacket: 8 [ 143.502849][ T823] usb 4-1: config index 0 descriptor too short (expected 74, got 45) [ 143.502910][ T823] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 143.502938][ T823] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 143.502964][ T823] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 143.502991][ T823] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 143.503014][ T823] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 143.503056][ T823] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 143.503079][ T823] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.998651][ T823] usb 4-1: usb_control_msg returned -71 [ 143.998700][ T823] usbtmc 4-1:16.0: can't read capabilities [ 144.043366][ T823] usb 4-1: USB disconnect, device number 6 [ 148.284649][ C0] Unknown status report in ack skb [ 149.858685][ C1] Unknown status report in ack skb [ 150.870230][ T6709] syzkaller1: entered promiscuous mode [ 150.870259][ T6709] syzkaller1: entered allmulticast mode [ 152.112172][ T6755] netlink: 444 bytes leftover after parsing attributes in process `syz.0.437'. [ 152.784260][ T6777] netlink: 444 bytes leftover after parsing attributes in process `syz.1.448'. [ 153.157190][ T32] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 153.316907][ T32] usb 3-1: Using ep0 maxpacket: 8 [ 153.323110][ T32] usb 3-1: config index 0 descriptor too short (expected 74, got 45) [ 153.323178][ T32] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 153.323206][ T32] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 153.323232][ T32] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 153.323255][ T32] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 153.323280][ T32] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 153.323324][ T32] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 153.323349][ T32] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.430637][ T32] usbtmc 3-1:16.0: probe with driver usbtmc failed with error -22 [ 153.700449][ T6801] netlink: 444 bytes leftover after parsing attributes in process `syz.1.459'. [ 154.485307][ T6826] netlink: 444 bytes leftover after parsing attributes in process `syz.1.470'. [ 155.391877][ T6846] netlink: 444 bytes leftover after parsing attributes in process `syz.0.479'. [ 155.907482][ T5690] usb 3-1: USB disconnect, device number 7 [ 156.125959][ T6870] netlink: 444 bytes leftover after parsing attributes in process `syz.0.488'. [ 156.856834][ T5774] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 157.039319][ T5774] usb 3-1: Using ep0 maxpacket: 8 [ 157.042260][ T5774] usb 3-1: config index 0 descriptor too short (expected 74, got 45) [ 157.055403][ T5774] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 157.055439][ T5774] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 157.055465][ T5774] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 157.055504][ T5774] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 157.055530][ T5774] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 157.055575][ T5774] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 157.055598][ T5774] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.164475][ T5774] usbtmc 3-1:16.0: probe with driver usbtmc failed with error -22 [ 157.310477][ T6895] netlink: 444 bytes leftover after parsing attributes in process `syz.3.500'. [ 157.314868][ T6878] syz.0.492 (6878) used greatest stack depth: 16784 bytes left [ 157.835438][ T6909] syz.1.505 (6909) used greatest stack depth: 16744 bytes left [ 158.379607][ T6929] netlink: 444 bytes leftover after parsing attributes in process `syz.0.512'. [ 159.269897][ T6952] netlink: 444 bytes leftover after parsing attributes in process `syz.0.522'. [ 159.693807][ T5774] usb 3-1: USB disconnect, device number 8 [ 159.923462][ T6972] netlink: 444 bytes leftover after parsing attributes in process `syz.0.532'. [ 160.593742][ T6993] netlink: 444 bytes leftover after parsing attributes in process `syz.3.541'. [ 160.648004][ T200] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 160.799705][ T200] usb 1-1: Using ep0 maxpacket: 8 [ 160.803657][ T200] usb 1-1: config index 0 descriptor too short (expected 74, got 45) [ 160.803716][ T200] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 160.803745][ T200] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 160.803772][ T200] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 160.803795][ T200] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 160.803818][ T200] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 160.803861][ T200] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 160.803892][ T200] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.910556][ T200] usbtmc 1-1:16.0: probe with driver usbtmc failed with error -22 [ 161.281670][ T1350] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.596461][ T7016] netlink: 444 bytes leftover after parsing attributes in process `syz.1.551'. [ 162.391440][ T7030] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.404784][ T5690] usb 1-1: USB disconnect, device number 7 [ 163.479662][ T7051] netlink: 116 bytes leftover after parsing attributes in process `syz.0.567'. [ 164.526408][ T7070] netlink: 116 bytes leftover after parsing attributes in process `syz.2.576'. [ 164.798239][ T5774] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 164.927386][ T5774] usb 1-1: device descriptor read/64, error -71 [ 165.176868][ T5774] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 165.308909][ T5774] usb 1-1: device descriptor read/64, error -71 [ 165.420462][ T5774] usb usb1-port1: attempt power cycle [ 165.483581][ T1226] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.562078][ T7092] netlink: 116 bytes leftover after parsing attributes in process `syz.1.585'. [ 165.857039][ T5774] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 165.881156][ T5774] usb 1-1: device descriptor read/8, error -71 [ 166.119677][ T5774] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 166.138629][ T5774] usb 1-1: device descriptor read/8, error -71 [ 166.247529][ T5774] usb usb1-port1: unable to enumerate USB device [ 166.386503][ T7109] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.124251][ T7120] netlink: 116 bytes leftover after parsing attributes in process `syz.2.594'. [ 168.453986][ T7143] netlink: 116 bytes leftover after parsing attributes in process `syz.2.605'. [ 169.025473][ T7153] syzkaller1: entered promiscuous mode [ 169.025492][ T7153] syzkaller1: entered allmulticast mode [ 169.038496][ T5578] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 169.189016][ T5578] usb 1-1: device descriptor read/64, error -71 [ 169.426854][ T5578] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 169.556804][ T5578] usb 1-1: device descriptor read/64, error -71 [ 169.670132][ T5578] usb usb1-port1: attempt power cycle [ 169.846099][ T81] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.933681][ T7162] netlink: 116 bytes leftover after parsing attributes in process `syz.1.614'. [ 170.026943][ T5578] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 170.062865][ T5578] usb 1-1: device descriptor read/8, error -71 [ 170.307551][ T5578] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 170.330001][ T5578] usb 1-1: device descriptor read/8, error -71 [ 170.406076][ T7173] syzkaller1: entered promiscuous mode [ 170.406095][ T7173] syzkaller1: entered allmulticast mode [ 170.437363][ T5578] usb usb1-port1: unable to enumerate USB device [ 172.071485][ T7181] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.336939][ T5578] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 173.487917][ T5578] usb 3-1: device descriptor read/64, error -71 [ 173.726880][ T5578] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 173.856837][ T5578] usb 3-1: device descriptor read/64, error -71 [ 173.969980][ T5578] usb usb3-port1: attempt power cycle [ 174.316853][ T5578] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 174.337828][ T5578] usb 3-1: device descriptor read/8, error -71 [ 174.577840][ T5578] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 174.597354][ T5578] usb 3-1: device descriptor read/8, error -71 [ 174.708243][ T5578] usb usb3-port1: unable to enumerate USB device [ 174.797013][ T200] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 174.805370][ T7233] syzkaller1: entered promiscuous mode [ 174.805388][ T7233] syzkaller1: entered allmulticast mode [ 174.966723][ T200] usb 2-1: Using ep0 maxpacket: 8 [ 174.968825][ T200] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 174.968866][ T200] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 174.968883][ T200] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 174.968900][ T200] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 174.968918][ T200] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 174.968947][ T200] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 174.968964][ T200] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.884472][ C0] Unknown status report in ack skb [ 176.174085][ T7259] usbtmc 2-1:16.0: simple usb_control_msg failed -32 [ 176.996784][ T32] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 177.127704][ T32] usb 1-1: device descriptor read/64, error -71 [ 177.366945][ T32] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 177.507393][ T32] usb 1-1: device descriptor read/64, error -71 [ 177.601813][ T5697] usb 2-1: USB disconnect, device number 3 [ 177.622274][ T32] usb usb1-port1: attempt power cycle [ 177.942195][ C0] Unknown status report in ack skb [ 177.956955][ T32] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 177.977572][ T32] usb 1-1: device descriptor read/8, error -71 [ 178.218625][ T32] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 178.237562][ T32] usb 1-1: device descriptor read/8, error -71 [ 178.347328][ T32] usb usb1-port1: unable to enumerate USB device [ 179.516423][ C0] Unknown status report in ack skb [ 180.202186][ C1] Unknown status report in ack skb [ 180.688075][ T32] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 180.817497][ T32] usb 3-1: device descriptor read/64, error -71 [ 180.963861][ T7441] syzkaller1: entered promiscuous mode [ 180.963889][ T7441] syzkaller1: entered allmulticast mode [ 181.056814][ T32] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 181.214725][ T32] usb 3-1: device descriptor read/64, error -71 [ 181.317387][ T32] usb usb3-port1: attempt power cycle [ 181.656827][ T32] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 181.678036][ T32] usb 3-1: device descriptor read/8, error -71 [ 181.758360][ C1] Unknown status report in ack skb [ 181.917292][ T32] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 181.937598][ T32] usb 3-1: device descriptor read/8, error -71 [ 182.054541][ T32] usb usb3-port1: unable to enumerate USB device [ 182.139402][ T7486] netlink: 316 bytes leftover after parsing attributes in process `syz.0.741'. [ 182.251540][ T7490] syzkaller1: entered promiscuous mode [ 182.251565][ T7490] syzkaller1: entered allmulticast mode [ 182.266996][ T9] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 182.446899][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 182.449001][ T9] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 182.449060][ T9] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 182.449077][ T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 182.449094][ T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 182.449112][ T9] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 182.449141][ T9] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 182.449157][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.067249][ T7507] netlink: 316 bytes leftover after parsing attributes in process `syz.3.750'. [ 183.272693][ C1] Unknown status report in ack skb [ 183.459009][ T7518] syzkaller1: entered promiscuous mode [ 183.459046][ T7518] syzkaller1: entered allmulticast mode [ 183.695470][ T7524] usbtmc 2-1:16.0: simple usb_control_msg failed -32 [ 183.982459][ T7533] netlink: 316 bytes leftover after parsing attributes in process `syz.3.761'. [ 184.576935][ T823] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 184.707953][ T823] usb 1-1: device descriptor read/64, error -71 [ 184.956936][ T823] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 185.015806][ T5698] usb 2-1: USB disconnect, device number 4 [ 185.106927][ T823] usb 1-1: device descriptor read/64, error -71 [ 185.199688][ T7558] syzkaller1: entered promiscuous mode [ 185.199707][ T7558] syzkaller1: entered allmulticast mode [ 185.219799][ T823] usb usb1-port1: attempt power cycle [ 185.566870][ T823] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 185.590642][ T7564] netlink: 116 bytes leftover after parsing attributes in process `syz.2.772'. [ 185.605417][ T823] usb 1-1: device descriptor read/8, error -71 [ 185.836913][ T823] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 185.860550][ T823] usb 1-1: device descriptor read/8, error -71 [ 185.967957][ T823] usb usb1-port1: unable to enumerate USB device [ 186.110778][ T7579] syzkaller1: entered promiscuous mode [ 186.110796][ T7579] syzkaller1: entered allmulticast mode [ 186.177163][ T200] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 186.326852][ T200] usb 3-1: Using ep0 maxpacket: 8 [ 186.333439][ T200] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 186.333499][ T200] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 186.333524][ T200] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 186.333550][ T200] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 186.333575][ T200] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 186.333620][ T200] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 186.333645][ T200] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.924268][ T7584] netlink: 116 bytes leftover after parsing attributes in process `syz.3.781'. [ 187.533016][ T7599] usbtmc 3-1:16.0: simple usb_control_msg failed -32 [ 187.604411][ T7601] syzkaller1: entered promiscuous mode [ 187.604429][ T7601] syzkaller1: entered allmulticast mode [ 187.909426][ T7605] netlink: 116 bytes leftover after parsing attributes in process `syz.0.790'. [ 188.488562][ T823] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 188.515945][ T7618] netlink: 316 bytes leftover after parsing attributes in process `syz.3.796'. [ 188.637225][ T823] usb 2-1: Using ep0 maxpacket: 8 [ 188.639416][ T823] usb 2-1: config index 0 descriptor too short (expected 74, got 45) [ 188.639444][ T823] usb 2-1: config 16 has an invalid interface number: 48 but max is 0 [ 188.639464][ T823] usb 2-1: config 16 has an invalid descriptor of length 102, skipping remainder of the config [ 188.639483][ T823] usb 2-1: config 16 has no interface number 0 [ 188.639517][ T823] usb 2-1: too many endpoints for config 16 interface 48 altsetting 120: 102, using maximum allowed: 30 [ 188.639544][ T823] usb 2-1: config 16 interface 48 altsetting 120 has 0 endpoint descriptors, different from the interface descriptor's value: 102 [ 188.639564][ T823] usb 2-1: config 16 interface 48 has no altsetting 0 [ 188.639587][ T823] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 188.639604][ T823] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.883444][ T7622] syzkaller1: entered promiscuous mode [ 188.883464][ T7622] syzkaller1: entered allmulticast mode [ 188.981839][ T9] usb 3-1: USB disconnect, device number 17 [ 189.230240][ T823] usb 2-1: string descriptor 0 read error: -71 [ 189.251273][ T823] usb 2-1: USB disconnect, device number 5 [ 189.686858][ T9] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 189.838031][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 189.840046][ T9] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 189.840106][ T9] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 189.840130][ T9] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 189.840156][ T9] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 189.840182][ T9] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 189.840225][ T9] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 189.840248][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.965078][ T7643] netlink: 316 bytes leftover after parsing attributes in process `syz.0.805'. [ 190.682423][ T7664] syzkaller1: entered promiscuous mode [ 190.682442][ T7664] syzkaller1: entered allmulticast mode [ 190.841443][ T823] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 190.988092][ T823] usb 1-1: Using ep0 maxpacket: 8 [ 190.992363][ T823] usb 1-1: config index 0 descriptor too short (expected 74, got 45) [ 190.992393][ T823] usb 1-1: config 16 has an invalid interface number: 48 but max is 0 [ 190.992415][ T823] usb 1-1: config 16 has an invalid descriptor of length 102, skipping remainder of the config [ 190.992437][ T823] usb 1-1: config 16 has no interface number 0 [ 190.992470][ T823] usb 1-1: too many endpoints for config 16 interface 48 altsetting 120: 102, using maximum allowed: 30 [ 190.992522][ T823] usb 1-1: config 16 interface 48 altsetting 120 has 0 endpoint descriptors, different from the interface descriptor's value: 102 [ 190.992552][ T823] usb 1-1: config 16 interface 48 has no altsetting 0 [ 190.992588][ T823] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 190.992613][ T823] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.136567][ T7667] usbtmc 3-1:16.0: simple usb_control_msg failed -32 [ 191.166609][ T7668] netlink: 316 bytes leftover after parsing attributes in process `syz.1.815'. [ 191.403536][ T823] usb 1-1: string descriptor 0 read error: -71 [ 191.437125][ T823] usb 1-1: USB disconnect, device number 24 [ 192.202096][ T7694] syzkaller1: entered promiscuous mode [ 192.202124][ T7694] syzkaller1: entered allmulticast mode [ 192.475401][ T9] usb 3-1: USB disconnect, device number 18 [ 193.296918][ T9] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 193.456812][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 193.458043][ T9] usb 2-1: too many configurations: 102, using maximum allowed: 8 [ 193.461064][ T9] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 193.461103][ T9] usb 2-1: can't read configurations, error -61 [ 193.618833][ T9] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 193.767028][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 193.767710][ T9] usb 2-1: too many configurations: 102, using maximum allowed: 8 [ 193.769463][ T9] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 193.769490][ T9] usb 2-1: can't read configurations, error -61 [ 193.769901][ T9] usb usb2-port1: attempt power cycle [ 193.976863][ T823] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 194.126951][ T823] usb 4-1: Using ep0 maxpacket: 8 [ 194.131575][ T823] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 194.131634][ T823] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 194.131658][ T823] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 194.131691][ T823] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 194.131710][ T823] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 194.131741][ T823] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 194.131757][ T823] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.202448][ T9] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 194.220847][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 194.226171][ T9] usb 2-1: too many configurations: 102, using maximum allowed: 8 [ 194.246351][ T9] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 194.246391][ T9] usb 2-1: can't read configurations, error -61 [ 194.402919][ T9] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 194.417660][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 194.421042][ T9] usb 2-1: too many configurations: 102, using maximum allowed: 8 [ 194.426118][ T9] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 194.426157][ T9] usb 2-1: can't read configurations, error -61 [ 194.426584][ T9] usb usb2-port1: unable to enumerate USB device [ 195.042224][ T7752] usbtmc 4-1:16.0: simple usb_control_msg failed -32 [ 195.043395][ T9] usb 4-1: USB disconnect, device number 7 [ 196.136063][ T7784] netlink: 380 bytes leftover after parsing attributes in process `syz.1.860'. [ 196.951955][ T7807] netlink: 380 bytes leftover after parsing attributes in process `syz.0.869'. [ 197.096856][ T823] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 197.257175][ T823] usb 2-1: Using ep0 maxpacket: 8 [ 197.260679][ T823] usb 2-1: too many configurations: 102, using maximum allowed: 8 [ 197.265806][ T823] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 197.265844][ T823] usb 2-1: can't read configurations, error -61 [ 197.296819][ T32] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 197.407326][ T823] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 197.446770][ T32] usb 1-1: Using ep0 maxpacket: 8 [ 197.449186][ T32] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 197.449251][ T32] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 197.449278][ T32] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 197.449308][ T32] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 197.449338][ T32] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 197.449383][ T32] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 197.449413][ T32] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.606824][ T823] usb 2-1: Using ep0 maxpacket: 8 [ 197.624226][ T823] usb 2-1: too many configurations: 102, using maximum allowed: 8 [ 197.626564][ T823] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 197.626601][ T823] usb 2-1: can't read configurations, error -61 [ 197.658213][ T823] usb usb2-port1: attempt power cycle [ 198.006838][ T823] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 198.035953][ T823] usb 2-1: Using ep0 maxpacket: 8 [ 198.045392][ T823] usb 2-1: too many configurations: 102, using maximum allowed: 8 [ 198.060521][ T823] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 198.060560][ T823] usb 2-1: can't read configurations, error -61 [ 198.216897][ T823] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 198.238962][ T823] usb 2-1: Using ep0 maxpacket: 8 [ 198.240451][ T823] usb 2-1: too many configurations: 102, using maximum allowed: 8 [ 198.273788][ T823] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 198.273828][ T823] usb 2-1: can't read configurations, error -61 [ 198.303001][ T823] usb usb2-port1: unable to enumerate USB device [ 198.583954][ T7827] netlink: 380 bytes leftover after parsing attributes in process `syz.3.878'. [ 199.576727][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.576935][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 200.115523][ T7849] netlink: 52 bytes leftover after parsing attributes in process `syz.1.887'. [ 201.076815][ T9] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 201.237006][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 201.238104][ T9] usb 4-1: too many configurations: 102, using maximum allowed: 8 [ 201.240999][ T9] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 201.241036][ T9] usb 4-1: can't read configurations, error -61 [ 201.292548][ T7876] netlink: 52 bytes leftover after parsing attributes in process `syz.1.898'. [ 201.366880][ T9] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 201.526705][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 201.529930][ T9] usb 4-1: too many configurations: 102, using maximum allowed: 8 [ 201.545743][ T9] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 201.545785][ T9] usb 4-1: can't read configurations, error -61 [ 201.563571][ T9] usb usb4-port1: attempt power cycle [ 201.947758][ T9] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 201.967677][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 201.969422][ T9] usb 4-1: too many configurations: 102, using maximum allowed: 8 [ 201.974141][ T9] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 201.974187][ T9] usb 4-1: can't read configurations, error -61 [ 202.106803][ T9] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 202.130678][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 202.137704][ T9] usb 4-1: too many configurations: 102, using maximum allowed: 8 [ 202.152510][ T9] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 202.152549][ T9] usb 4-1: can't read configurations, error -61 [ 202.153024][ T9] usb usb4-port1: unable to enumerate USB device [ 202.417068][ T7896] netlink: 52 bytes leftover after parsing attributes in process `syz.1.907'. [ 203.022310][ T7809] usbtmc 1-1:16.0: simple usb_control_msg failed -110 [ 203.051478][ T5698] usb 1-1: USB disconnect, device number 25 [ 203.201980][ T7911] netlink: 380 bytes leftover after parsing attributes in process `syz.2.913'. [ 203.353681][ T7915] syzkaller1: entered promiscuous mode [ 203.353701][ T7915] syzkaller1: entered allmulticast mode [ 203.416780][ T5698] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 203.576852][ T5698] usb 1-1: Using ep0 maxpacket: 16 [ 203.580676][ T5698] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 203.580718][ T5698] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 203.583095][ T5698] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 203.583122][ T5698] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.583142][ T5698] usb 1-1: Product: syz [ 203.583163][ T5698] usb 1-1: Manufacturer: syz [ 203.583175][ T5698] usb 1-1: SerialNumber: syz [ 203.634563][ T5698] usb 1-1: config 0 descriptor?? [ 203.689400][ T5698] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 203.689436][ T5698] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 203.807630][ T7919] netlink: 444 bytes leftover after parsing attributes in process `syz.1.917'. [ 204.244207][ T7931] netlink: 380 bytes leftover after parsing attributes in process `syz.3.922'. [ 204.268944][ T5698] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 204.271657][ T5698] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 204.272381][ T5698] em28xx 1-1:0.0: AC97 chip type couldn't be determined [ 204.272399][ T5698] em28xx 1-1:0.0: No AC97 audio processor [ 204.563813][ T7940] netlink: 444 bytes leftover after parsing attributes in process `syz.3.927'. [ 204.619214][ T7943] syzkaller1: entered promiscuous mode [ 204.619245][ T7943] syzkaller1: entered allmulticast mode [ 204.916806][ T200] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 205.076823][ T200] usb 4-1: Using ep0 maxpacket: 8 [ 205.100414][ T200] usb 4-1: config index 0 descriptor too short (expected 74, got 45) [ 205.100445][ T200] usb 4-1: config 120 has too many interfaces: 48, using maximum allowed: 32 [ 205.100465][ T200] usb 4-1: config 120 has an invalid descriptor of length 102, skipping remainder of the config [ 205.100489][ T200] usb 4-1: config 120 has 0 interfaces, different from the descriptor's value: 48 [ 205.100544][ T200] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 205.100561][ T200] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.514934][ T200] usb 4-1: string descriptor 0 read error: -71 [ 205.553518][ T200] usb 4-1: USB disconnect, device number 12 [ 205.606833][ T32] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 205.628352][ T7960] netlink: 380 bytes leftover after parsing attributes in process `syz.2.934'. [ 205.750158][ T7964] netlink: 444 bytes leftover after parsing attributes in process `syz.2.936'. [ 205.767207][ T32] usb 2-1: Using ep0 maxpacket: 8 [ 205.770745][ T32] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 205.770813][ T32] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 205.770839][ T32] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 205.770866][ T32] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 205.770891][ T32] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 205.770935][ T32] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 205.770960][ T32] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.040019][ T7968] syzkaller1: entered promiscuous mode [ 206.040046][ T7968] syzkaller1: entered allmulticast mode [ 206.145824][ T32] usb 1-1: USB disconnect, device number 26 [ 206.167208][ T32] em28xx 1-1:0.0: Disconnecting em28xx [ 206.266175][ T32] em28xx: Freeing device [ 206.702601][ T7982] netlink: 116 bytes leftover after parsing attributes in process `syz.2.944'. [ 207.118487][ T5774] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 207.276850][ T5774] usb 3-1: Using ep0 maxpacket: 8 [ 207.285596][ T5774] usb 3-1: config index 0 descriptor too short (expected 74, got 45) [ 207.285714][ T5774] usb 3-1: config 120 has too many interfaces: 48, using maximum allowed: 32 [ 207.285821][ T5774] usb 3-1: config 120 has an invalid descriptor of length 102, skipping remainder of the config [ 207.285843][ T5774] usb 3-1: config 120 has 0 interfaces, different from the descriptor's value: 48 [ 207.285883][ T5774] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 207.285907][ T5774] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.038403][ T200] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 208.110965][ T8003] netlink: 116 bytes leftover after parsing attributes in process `syz.0.953'. [ 208.206958][ T200] usb 4-1: Using ep0 maxpacket: 16 [ 208.231717][ T200] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 208.232140][ T200] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 208.239839][ T200] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 208.240156][ T200] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.240200][ T200] usb 4-1: Product: syz [ 208.240216][ T200] usb 4-1: Manufacturer: syz [ 208.240737][ T200] usb 4-1: SerialNumber: syz [ 208.311583][ T200] usb 4-1: config 0 descriptor?? [ 208.365211][ T200] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 208.365246][ T200] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 208.927576][ T200] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 208.928778][ T200] em28xx 4-1:0.0: Config register raw data: 0x00 [ 209.056830][ T823] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 209.216772][ T823] usb 1-1: Using ep0 maxpacket: 16 [ 209.220195][ T823] usb 1-1: config 0 has an invalid interface number: 105 but max is 0 [ 209.220223][ T823] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 209.220244][ T823] usb 1-1: config 0 has no interface number 0 [ 209.224525][ T823] usb 1-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 209.224556][ T823] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.224658][ T823] usb 1-1: Product: syz [ 209.224670][ T823] usb 1-1: Manufacturer: syz [ 209.224702][ T823] usb 1-1: SerialNumber: syz [ 209.305490][ T823] usb 1-1: config 0 descriptor?? [ 209.325427][ T823] uvcvideo 1-1:0.105: Found UVC 0.00 device syz (046d:08f3) [ 209.325465][ T823] uvcvideo 1-1:0.105: No valid video chain found. [ 209.586151][ T5698] usb 1-1: USB disconnect, device number 27 [ 210.817285][ T5698] usb 4-1: USB disconnect, device number 13 [ 210.858406][ T5698] em28xx 4-1:0.0: Disconnecting em28xx [ 210.990866][ T5698] em28xx: Freeing device [ 211.330343][ T7957] usbtmc 2-1:16.0: simple usb_control_msg failed -110 [ 211.376837][ T5774] usb 3-1: string descriptor 0 read error: -71 [ 211.408679][ T5774] usb 3-1: USB disconnect, device number 19 [ 211.436935][ T8029] netlink: 116 bytes leftover after parsing attributes in process `syz.2.962'. [ 211.441495][ T5698] usb 2-1: USB disconnect, device number 14 [ 211.977736][ T823] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 212.126802][ T823] usb 1-1: Using ep0 maxpacket: 16 [ 212.130389][ T823] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 212.130426][ T823] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 212.133167][ T823] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 212.133198][ T823] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.133220][ T823] usb 1-1: Product: syz [ 212.133235][ T823] usb 1-1: Manufacturer: syz [ 212.133251][ T823] usb 1-1: SerialNumber: syz [ 212.181775][ T5774] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 212.244324][ T823] usb 1-1: config 0 descriptor?? [ 212.264783][ T823] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 212.264821][ T823] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 212.297069][ T32] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 212.396779][ T5774] usb 2-1: Using ep0 maxpacket: 16 [ 212.412609][ T5774] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 212.412640][ T5774] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 212.412661][ T5774] usb 2-1: config 0 has no interface number 0 [ 212.415883][ T5774] usb 2-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 212.415914][ T5774] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.415936][ T5774] usb 2-1: Product: syz [ 212.415952][ T5774] usb 2-1: Manufacturer: syz [ 212.415967][ T5774] usb 2-1: SerialNumber: syz [ 212.440302][ T5774] usb 2-1: config 0 descriptor?? [ 212.491357][ T5774] uvcvideo 2-1:0.105: Found UVC 0.00 device syz (046d:08f3) [ 212.491394][ T5774] uvcvideo 2-1:0.105: No valid video chain found. [ 212.510884][ T32] usb 3-1: Using ep0 maxpacket: 8 [ 212.514218][ T32] usb 3-1: config index 0 descriptor too short (expected 74, got 45) [ 212.514248][ T32] usb 3-1: config 120 has too many interfaces: 48, using maximum allowed: 32 [ 212.514268][ T32] usb 3-1: config 120 has an invalid descriptor of length 102, skipping remainder of the config [ 212.514288][ T32] usb 3-1: config 120 has 0 interfaces, different from the descriptor's value: 48 [ 212.514383][ T32] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 212.514408][ T32] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.690022][ T5774] usb 2-1: USB disconnect, device number 15 [ 212.890556][ T823] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 212.892191][ T823] em28xx 1-1:0.0: Config register raw data: 0x00 [ 212.893343][ T32] usb 3-1: string descriptor 0 read error: -71 [ 212.930695][ T32] usb 3-1: USB disconnect, device number 20 [ 213.240748][ T8056] netlink: 444 bytes leftover after parsing attributes in process `syz.3.973'. [ 213.588022][ T32] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 213.737738][ T32] usb 2-1: Using ep0 maxpacket: 8 [ 213.740104][ T32] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 213.740171][ T32] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 213.740195][ T32] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 213.740220][ T32] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 213.740255][ T32] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 213.740307][ T32] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 213.740323][ T32] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.615828][ T8081] netlink: 444 bytes leftover after parsing attributes in process `syz.2.983'. [ 214.791887][ T32] usb 1-1: USB disconnect, device number 28 [ 214.804325][ T32] em28xx 1-1:0.0: Disconnecting em28xx [ 214.915740][ T32] em28xx: Freeing device [ 214.946985][ T5698] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 215.096694][ T5698] usb 4-1: Using ep0 maxpacket: 16 [ 215.101877][ T5698] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 215.101905][ T5698] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 215.101926][ T5698] usb 4-1: config 0 has no interface number 0 [ 215.113378][ T5698] usb 4-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 215.113408][ T5698] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.113430][ T5698] usb 4-1: Product: syz [ 215.113446][ T5698] usb 4-1: Manufacturer: syz [ 215.113461][ T5698] usb 4-1: SerialNumber: syz [ 215.201615][ T5698] usb 4-1: config 0 descriptor?? [ 215.226918][ T5698] uvcvideo 4-1:0.105: Found UVC 0.00 device syz (046d:08f3) [ 215.226954][ T5698] uvcvideo 4-1:0.105: No valid video chain found. [ 215.356967][ T32] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 215.429126][ T9] usb 4-1: USB disconnect, device number 14 [ 215.539058][ T32] usb 1-1: Using ep0 maxpacket: 8 [ 215.575976][ T32] usb 1-1: config index 0 descriptor too short (expected 74, got 45) [ 215.576009][ T32] usb 1-1: config 16 has an invalid descriptor of length 120, skipping remainder of the config [ 215.576031][ T32] usb 1-1: config 16 has 0 interfaces, different from the descriptor's value: 1 [ 215.583062][ T32] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 215.583092][ T32] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.168710][ T8062] usbtmc 2-1:16.0: simple usb_control_msg failed -110 [ 219.217904][ T9] usb 2-1: USB disconnect, device number 16 [ 219.300779][ T823] usb 1-1: USB disconnect, device number 29 [ 219.394404][ T8109] netlink: 444 bytes leftover after parsing attributes in process `syz.2.993'. [ 219.627226][ T5697] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 219.776843][ T5697] usb 4-1: Using ep0 maxpacket: 16 [ 219.779437][ T5697] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 219.779470][ T5697] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 219.782967][ T5697] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 219.782995][ T5697] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.783017][ T5697] usb 4-1: Product: syz [ 219.783032][ T5697] usb 4-1: Manufacturer: syz [ 219.783047][ T5697] usb 4-1: SerialNumber: syz [ 219.840445][ T5697] usb 4-1: config 0 descriptor?? [ 219.863871][ T5697] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 219.863896][ T5697] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 219.957448][ T9] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 220.126783][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 220.135223][ T9] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 220.135283][ T9] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 220.135420][ T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 220.135449][ T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 220.135473][ T9] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 220.135520][ T9] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 220.135551][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.465446][ T5697] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 220.472743][ T5697] em28xx 4-1:0.0: Config register raw data: 0x00 [ 221.656758][ T5774] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 221.806865][ T5774] usb 1-1: Using ep0 maxpacket: 8 [ 221.809266][ T5774] usb 1-1: config index 0 descriptor too short (expected 74, got 45) [ 221.809293][ T5774] usb 1-1: config 16 has an invalid descriptor of length 120, skipping remainder of the config [ 221.809314][ T5774] usb 1-1: config 16 has 0 interfaces, different from the descriptor's value: 1 [ 221.809352][ T5774] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 221.809377][ T5774] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.047369][ T5605] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 222.355997][ T5774] usb 4-1: USB disconnect, device number 15 [ 222.373481][ T5774] em28xx 4-1:0.0: Disconnecting em28xx [ 222.428728][ T5774] em28xx: Freeing device [ 222.752093][ T9] usb 2-1: USB disconnect, device number 17 [ 222.810395][ T5774] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 222.992755][ T5774] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 222.992797][ T5774] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 222.992817][ T5774] usb 4-1: Product: syz [ 222.992833][ T5774] usb 4-1: SerialNumber: syz [ 223.024732][ T5774] usb 4-1: config 0 descriptor?? [ 223.506046][ T5774] usb 4-1: USB disconnect, device number 16 [ 224.106801][ T5774] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 224.106931][ T32] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 224.257937][ T32] usb 3-1: Using ep0 maxpacket: 8 [ 224.260476][ T32] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 224.260532][ T32] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 224.260557][ T32] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 224.260575][ T32] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 224.260592][ T32] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 224.260622][ T32] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 224.260741][ T32] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.349312][ T5774] usb 2-1: New USB device found, idVendor=086a, idProduct=0100, bcdDevice= 0.01 [ 224.349344][ T5774] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.392459][ T5774] emi26 - firmware loader 2-1:1.0: emi26_probe start [ 224.393542][ T5774] usb 2-1: Direct firmware load for emi26/loader.fw failed with error -2 [ 224.393565][ T5774] usb 2-1: Falling back to sysfs fallback for: emi26/loader.fw [ 224.512983][ T5697] usb 1-1: USB disconnect, device number 30 [ 224.667727][ T5774] usb 2-1: emi26_load_firmware - request_firmware() failed [ 224.667752][ T5774] usb 2-1: emi26_load_firmware - error loading firmware: error = -12 [ 224.667817][ T5774] emi26 - firmware loader 2-1:1.0: probe with driver emi26 - firmware loader failed with error -5 [ 224.679629][ T5774] usb 2-1: USB disconnect, device number 18 [ 224.796896][ T9] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 224.959337][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 224.959937][ T9] usb 4-1: not running at top speed; connect to a high speed hub [ 224.961205][ T9] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 104, changing to 4 [ 224.963531][ T9] usb 4-1: New USB device found, idVendor=17cc, idProduct=1021, bcdDevice= 0.40 [ 224.963557][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.963577][ T9] usb 4-1: Product: syz [ 224.963594][ T9] usb 4-1: Manufacturer: syz [ 224.963605][ T9] usb 4-1: SerialNumber: syz [ 225.410215][ T9] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 225.415198][ T9] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 225.433035][ T9] usb 4-1: unable to issue vendor read request (ret = -71) [ 225.433668][ T9] usb 4-1: unable to issue vendor read request (ret = -71) [ 225.434313][ T9] usb 4-1: unable to issue vendor read request (ret = -71) [ 225.434908][ T9] usb 4-1: unable to issue vendor read request (ret = -71) [ 225.435870][ T9] usb 4-1: unable to issue vendor read request (ret = -71) [ 225.436510][ T9] usb 4-1: unable to issue vendor read request (ret = -71) [ 225.470691][ T9] usb 4-1: unable to issue vendor read request (ret = -71) [ 225.473662][ T9] usb 4-1: unable to issue vendor read request (ret = -71) [ 225.761826][ T9] usb 4-1: USB disconnect, device number 17 [ 225.899435][ T8186] syzkaller1: entered promiscuous mode [ 225.899463][ T8186] syzkaller1: entered allmulticast mode [ 225.964347][ T8113] udevd[8113]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 226.666805][ T5698] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 226.826815][ T5698] usb 2-1: Using ep0 maxpacket: 8 [ 226.830477][ T5698] usb 2-1: config index 0 descriptor too short (expected 74, got 45) [ 226.830571][ T5698] usb 2-1: config 16 has an invalid descriptor of length 102, skipping remainder of the config [ 226.830595][ T5698] usb 2-1: config 16 has 0 interfaces, different from the descriptor's value: 1 [ 226.830632][ T5698] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 226.830660][ T5698] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.960357][ T5774] usb 3-1: USB disconnect, device number 21 [ 228.266851][ T8227] syzkaller1: entered promiscuous mode [ 228.266880][ T8227] syzkaller1: entered allmulticast mode [ 228.577865][ C1] Unknown status report in ack skb [ 228.876751][ T5697] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 229.026738][ T5697] usb 3-1: Using ep0 maxpacket: 8 [ 229.050829][ T5697] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 229.050889][ T5697] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 229.050913][ T5697] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 229.050940][ T5697] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 229.050965][ T5697] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 229.051009][ T5697] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 229.051032][ T5697] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.438414][ T5698] usb 2-1: USB disconnect, device number 19 [ 231.660859][ T5698] usb 3-1: USB disconnect, device number 22 [ 231.987007][ T5697] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 232.144515][ T5697] usb 1-1: Using ep0 maxpacket: 8 [ 232.155713][ T5697] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 232.155774][ T5697] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 232.155799][ T5697] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 232.155817][ T5697] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 232.155834][ T5697] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 232.155866][ T5697] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 232.155882][ T5697] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.376768][ T5579] usb 2-1: new full-speed USB device number 20 using dummy_hcd [ 232.434732][ T5697] usb 1-1: usb_control_msg returned -32 [ 232.434791][ T5697] usbtmc 1-1:16.0: can't read capabilities [ 232.471677][ T5697] usb 1-1: USB disconnect, device number 31 [ 232.549984][ T5579] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 232.550016][ T5579] usb 2-1: config 0 has no interface number 0 [ 232.550065][ T5579] usb 2-1: config 0 interface 41 has no altsetting 0 [ 232.580689][ T5579] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 232.580712][ T5579] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.580727][ T5579] usb 2-1: Product: syz [ 232.580737][ T5579] usb 2-1: Manufacturer: syz [ 232.580748][ T5579] usb 2-1: SerialNumber: syz [ 232.621987][ T5579] usb 2-1: config 0 descriptor?? [ 233.035733][ T5579] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): set LINK LED failed : -71 [ 233.049891][ T5774] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 233.071262][ T5579] CoreChips 2-1:0.41: probe with driver CoreChips failed with error -71 [ 233.108967][ T5579] usb 2-1: USB disconnect, device number 20 [ 233.124093][ T8113] udevd[8113]: setting owner of /dev/bus/usb/002/020 to uid=0, gid=0 failed: No such file or directory [ 233.217219][ T5774] usb 4-1: Using ep0 maxpacket: 8 [ 233.219297][ T5774] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 233.219353][ T5774] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 233.219376][ T5774] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 233.219406][ T5774] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 233.219424][ T5774] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 233.219454][ T5774] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 233.219470][ T5774] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.524736][ T5774] usb 4-1: usb_control_msg returned -32 [ 233.524787][ T5774] usbtmc 4-1:16.0: can't read capabilities [ 233.566828][ T5698] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 233.734711][ T5698] usb 1-1: New USB device found, idVendor=086a, idProduct=0100, bcdDevice= 0.01 [ 233.734746][ T5698] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.769230][ T5698] emi26 - firmware loader 1-1:1.0: emi26_probe start [ 233.770580][ T5698] usb 1-1: Direct firmware load for emi26/loader.fw failed with error -2 [ 233.770605][ T5698] usb 1-1: Falling back to sysfs fallback for: emi26/loader.fw [ 234.076928][ T32] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 234.228928][ T32] usb 3-1: New USB device found, idVendor=086a, idProduct=0100, bcdDevice= 0.01 [ 234.228952][ T32] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.279362][ T32] emi26 - firmware loader 3-1:1.0: emi26_probe start [ 234.709494][ T8285] mmap: syz.3.1049 (8285) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 235.960348][ T5774] usb 4-1: USB disconnect, device number 18 [ 235.986766][ T5697] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 236.143185][ T5697] usb 2-1: New USB device found, idVendor=086a, idProduct=0100, bcdDevice= 0.01 [ 236.143218][ T5697] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.195838][ T5697] emi26 - firmware loader 2-1:1.0: emi26_probe start [ 236.526787][ T5774] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 236.679662][ T5774] usb 4-1: New USB device found, idVendor=086a, idProduct=0100, bcdDevice= 0.01 [ 236.679697][ T5774] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.717250][ T5774] emi26 - firmware loader 4-1:1.0: emi26_probe start [ 237.779159][ T8324] netlink: 'syz.0.1079': attribute type 29 has an invalid length. [ 237.781328][ T8324] netlink: 'syz.0.1079': attribute type 29 has an invalid length. [ 238.635451][ C0] Unknown status report in ack skb [ 242.165392][ T8386] FAULT_INJECTION: forcing a failure. [ 242.165392][ T8386] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 242.165447][ T8386] CPU: 1 UID: 0 PID: 8386 Comm: syz.2.1108 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 242.165470][ T8386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 242.165493][ T8386] Call Trace: [ 242.165501][ T8386] [ 242.165509][ T8386] dump_stack_lvl+0xe8/0x150 [ 242.165541][ T8386] should_fail_ex+0x467/0x600 [ 242.165574][ T8386] _copy_from_user+0x2d/0xb0 [ 242.165595][ T8386] iommufd_fops_ioctl+0x419/0x600 [ 242.165623][ T8386] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 242.165657][ T8386] ? __fget_files+0x3a8/0x420 [ 242.165682][ T8386] ? __fget_files+0x2a/0x420 [ 242.165707][ T8386] ? bpf_lsm_file_ioctl+0x9/0x20 [ 242.165741][ T8386] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 242.165762][ T8386] __se_sys_ioctl+0xff/0x170 [ 242.165792][ T8386] do_syscall_64+0x17b/0x530 [ 242.165813][ T8386] ? irqentry_exit+0x10f/0x8f0 [ 242.165841][ T8386] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.165864][ T8386] ? clear_bhb_loop+0x40/0x90 [ 242.165890][ T8386] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.165913][ T8386] RIP: 0033:0x7fa7fb82de99 [ 242.165938][ T8386] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 242.165956][ T8386] RSP: 002b:00007fa7f9a86028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 242.165982][ T8386] RAX: ffffffffffffffda RBX: 00007fa7fbab5fa0 RCX: 00007fa7fb82de99 [ 242.165998][ T8386] RDX: 0000200000000000 RSI: 0000000000003ba0 RDI: 0000000000000003 [ 242.166012][ T8386] RBP: 00007fa7f9a86090 R08: 0000000000000000 R09: 0000000000000000 [ 242.166025][ T8386] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 242.166036][ T8386] R13: 00007fa7fbab6038 R14: 00007fa7fbab5fa0 R15: 00007ffeef332ee8 [ 242.166069][ T8386] [ 242.416081][ T8390] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1111'. [ 246.087239][ C1] Unknown status report in ack skb [ 246.218879][ T8421] Zero length message leads to an empty skb [ 246.518096][ T8430] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1130'. [ 248.755835][ T8450] binder_alloc: 8449: binder_alloc_buf, no vma [ 248.843004][ T8452] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1138'. [ 249.614377][ T8450] syz.3.1138 (8450): drop_caches: 2 [ 253.155627][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 253.193287][ T8494] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1152'. [ 253.269042][ T8494] unsupported nlmsg_type 40 [ 253.411290][ T9] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 253.691411][ T8498] fido_id[8498]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 254.172159][ T8516] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 254.194789][ T8516] overlayfs: overlapping lowerdir path [ 254.849070][ T8534] capability: warning: `syz.3.1165' uses deprecated v2 capabilities in a way that may be insecure [ 261.021073][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.021185][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.044427][ T1338] aoe: packet could not be sent on lowpan0. consider increasing tx_queue_len [ 263.635925][ T5597] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 263.664788][ T5597] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 263.665807][ T5597] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 263.685045][ T5597] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 263.694136][ T5597] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 264.771427][ T57] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.095680][ T57] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.434372][ T57] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.554480][ T8616] bridge0: port 1(bridge_slave_0) entered blocking state [ 265.555360][ T8616] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.555583][ T8616] bridge_slave_0: entered allmulticast mode [ 265.564681][ T8616] bridge_slave_0: entered promiscuous mode [ 265.583155][ T8616] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.583617][ T8616] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.583905][ T8616] bridge_slave_1: entered allmulticast mode [ 265.601319][ T8616] bridge_slave_1: entered promiscuous mode [ 265.754861][ T57] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.879018][ T8616] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 265.884371][ T8616] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 265.888843][ T5605] Bluetooth: hci4: command tx timeout [ 265.980972][ T8616] team0: Port device team_slave_0 added [ 265.985730][ T8616] team0: Port device team_slave_1 added [ 266.044040][ T8616] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 266.044053][ T8616] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 266.044073][ T8616] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 266.054518][ T8616] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 266.054533][ T8616] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 266.054558][ T8616] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 266.249445][ T8616] hsr_slave_0: entered promiscuous mode [ 266.251257][ T8616] hsr_slave_1: entered promiscuous mode [ 266.252926][ T8616] debugfs: 'hsr0' already exists in 'hsr' [ 266.252950][ T8616] Cannot create hsr debugfs directory [ 266.997984][ T57] bridge_slave_1: left allmulticast mode [ 266.998166][ T57] bridge_slave_1: left promiscuous mode [ 267.023092][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.228264][ T57] bridge_slave_0: left allmulticast mode [ 267.228291][ T57] bridge_slave_0: left promiscuous mode [ 267.228537][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.966873][ T5605] Bluetooth: hci4: command tx timeout [ 268.259406][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 268.317501][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 268.363649][ T57] bond0 (unregistering): Released all slaves [ 268.597911][ T32] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN PTI [ 268.597935][ T32] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 268.597958][ T32] CPU: 1 UID: 0 PID: 32 Comm: kworker/1:0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 268.597978][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 268.597989][ T32] Workqueue: usb_hub_wq hub_event [ 268.598016][ T32] RIP: 0010:emi26_probe+0x283/0x1690 [ 268.598044][ T32] Code: ff 89 de e8 6f 64 97 00 85 db 0f 84 d9 01 00 00 e8 62 60 97 00 48 bb 00 00 00 00 00 fc ff df 49 8d 7e 04 48 89 f8 48 c1 e8 03 <0f> b6 04 18 84 c0 75 47 49 8d 7e 05 48 89 f8 48 c1 e8 03 0f b6 04 [ 268.598059][ T32] RSP: 0018:ffffc90000a6ed20 EFLAGS: 00010247 [ 268.598074][ T32] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: 0000000000100000 [ 268.598086][ T32] RDX: ffffc90019a01000 RSI: 000000000000e135 RDI: 0000000000000004 [ 268.598097][ T32] RBP: ffffc90000a6ee50 R08: 0000000000000000 R09: 0000000000000000 [ 268.598109][ T32] R10: dffffc0000000000 R11: fffffbfff1fa1890 R12: fffffffffffffffa [ 268.598122][ T32] R13: 1fffffffffffffff R14: 0000000000000000 R15: 1fffffffffffffff [ 268.598135][ T32] FS: 0000000000000000(0000) GS:ffff888125af2000(0000) knlGS:0000000000000000 [ 268.598150][ T32] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 268.598162][ T32] CR2: 00007f7a09465ff8 CR3: 000000005c3ac000 CR4: 00000000003526f0 [ 268.598177][ T32] Call Trace: [ 268.598184][ T32] [ 268.598196][ T32] ? __pfx_emi26_probe+0x10/0x10 [ 268.598214][ T32] ? __pm_runtime_set_status+0x977/0xc40 [ 268.598239][ T32] usb_probe_interface+0x788/0xe50 [ 268.598268][ T32] ? __pfx_usb_probe_interface+0x10/0x10 [ 268.598295][ T32] ? sysfs_do_create_link_sd+0xe0/0x110 [ 268.598314][ T32] ? driver_sysfs_add+0x1fe/0x210 [ 268.598334][ T32] ? __pfx_usb_probe_interface+0x10/0x10 [ 268.598358][ T32] really_probe+0x254/0xae0 [ 268.598381][ T32] __driver_probe_device+0x1e8/0x360 [ 268.598402][ T32] driver_probe_device+0x4f/0x240 [ 268.598426][ T32] __device_attach_driver+0x270/0x410 [ 268.598449][ T32] bus_for_each_drv+0x25b/0x2f0 [ 268.598476][ T32] ? __pfx___device_attach_driver+0x10/0x10 [ 268.598499][ T32] ? __pfx_bus_for_each_drv+0x10/0x10 [ 268.598525][ T32] ? rt_spin_unlock+0x163/0x200 [ 268.598553][ T32] __device_attach+0x2c7/0x450 [ 268.598572][ T32] ? rt_spin_unlock+0x157/0x200 [ 268.598596][ T32] ? __pfx___device_attach+0x10/0x10 [ 268.598620][ T32] device_initial_probe+0xa1/0xd0 [ 268.598640][ T32] bus_probe_device+0x12d/0x220 [ 268.598668][ T32] device_add+0x7d7/0xb80 [ 268.598687][ T32] usb_set_configuration+0x1ad8/0x2180 [ 268.598720][ T32] usb_generic_driver_probe+0x8d/0x150 [ 268.598742][ T32] usb_probe_device+0x1c3/0x3b0 [ 268.598766][ T32] ? __pfx_usb_probe_device+0x10/0x10 [ 268.598789][ T32] really_probe+0x254/0xae0 [ 268.598812][ T32] __driver_probe_device+0x1e8/0x360 [ 268.598833][ T32] driver_probe_device+0x4f/0x240 [ 268.598856][ T32] __device_attach_driver+0x270/0x410 [ 268.598879][ T32] bus_for_each_drv+0x25b/0x2f0 [ 268.598905][ T32] ? __pfx___device_attach_driver+0x10/0x10 [ 268.598927][ T32] ? __pfx_bus_for_each_drv+0x10/0x10 [ 268.598953][ T32] ? rt_spin_unlock+0x163/0x200 [ 268.598978][ T32] __device_attach+0x2c7/0x450 [ 268.598998][ T32] ? __pfx___device_attach+0x10/0x10 [ 268.599022][ T32] device_initial_probe+0xa1/0xd0 [ 268.599051][ T32] bus_probe_device+0x12d/0x220 [ 268.599083][ T32] device_add+0x7d7/0xb80 [ 268.599101][ T32] usb_new_device+0x98d/0x1610 [ 268.599117][ T32] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 268.599137][ T32] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 268.599160][ T32] ? __pfx_usb_new_device+0x10/0x10 [ 268.599181][ T32] hub_event+0x28cf/0x4cf0 [ 268.599221][ T32] ? __pfx_hub_event+0x10/0x10 [ 268.599244][ T32] ? rcu_is_watching+0x15/0xb0 [ 268.599264][ T32] ? process_one_work+0x7fd/0x1480 [ 268.599281][ T32] process_one_work+0xaaf/0x1480 [ 268.599306][ T32] ? __pfx_process_one_work+0x10/0x10 [ 268.599321][ T32] ? do_raw_spin_lock+0x12b/0x2f0 [ 268.599348][ T32] ? assign_work+0x3cf/0x5d0 [ 268.599365][ T32] worker_thread+0xb05/0x10d0 [ 268.599392][ T32] kthread+0x388/0x470 [ 268.599415][ T32] ? __pfx_worker_thread+0x10/0x10 [ 268.599432][ T32] ? __pfx_kthread+0x10/0x10 [ 268.599455][ T32] ret_from_fork+0x514/0xb70 [ 268.599481][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 268.599503][ T32] ? __switch_to+0xc89/0x1420 [ 268.599524][ T32] ? __pfx_kthread+0x10/0x10 [ 268.599548][ T32] ret_from_fork_asm+0x1a/0x30 [ 268.599579][ T32] [ 268.599585][ T32] Modules linked in: [ 268.599606][ T5774] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#2] SMP KASAN PTI [ 268.599626][ T32] ---[ end trace 0000000000000000 ]--- [ 268.599629][ T5774] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 268.599652][ T5774] CPU: 0 UID: 0 PID: 5774 Comm: kworker/0:7 Tainted: G D syzkaller #0 PREEMPT_{RT,(full)} [ 268.599682][ T5774] Tainted: [D]=DIE [ 268.599691][ T5774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 268.599704][ T5774] Workqueue: usb_hub_wq hub_event [ 268.599728][ T5774] RIP: 0010:emi26_probe+0x283/0x1690 [ 268.599745][ T5774] Code: ff 89 de e8 6f 64 97 00 85 db 0f 84 d9 01 00 00 e8 62 60 97 00 48 bb 00 00 00 00 00 fc ff df 49 8d 7e 04 48 89 f8 48 c1 e8 03 <0f> b6 04 18 84 c0 75 47 49 8d 7e 05 48 89 f8 48 c1 e8 03 0f b6 04 [ 268.599760][ T5774] RSP: 0018:ffffc9000678ed20 EFLAGS: 00010247 [ 268.599774][ T5774] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: 0000000000100000 [ 268.599787][ T5774] RDX: ffffc9001a202000 RSI: 000000000000dfa5 RDI: 0000000000000004 [ 268.599798][ T5774] RBP: ffffc9000678ee50 R08: 0000000000000000 R09: 0000000000000000 [ 268.599809][ T5774] R10: dffffc0000000000 R11: fffffbfff1fa1890 R12: fffffffffffffffa [ 268.599823][ T5774] R13: 1fffffffffffffff R14: 0000000000000000 R15: 1fffffffffffffff [ 268.599835][ T5774] FS: 0000000000000000(0000) GS:ffff8881259f2000(0000) knlGS:0000000000000000 [ 268.599850][ T5774] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 268.599862][ T5774] CR2: 000000110c3081bd CR3: 000000005c3ac000 CR4: 00000000003526f0 [ 268.599877][ T5774] Call Trace: [ 268.599884][ T5774] [ 268.599895][ T5774] ? __pfx_emi26_probe+0x10/0x10 [ 268.599911][ T5774] ? __pm_runtime_set_status+0x977/0xc40 [ 268.599936][ T5774] usb_probe_interface+0x788/0xe50 [ 268.599964][ T5774] ? __pfx_usb_probe_interface+0x10/0x10 [ 268.599991][ T5774] ? sysfs_do_create_link_sd+0xe0/0x110 [ 268.600018][ T5774] ? driver_sysfs_add+0x1fe/0x210 [ 268.600042][ T5774] ? __pfx_usb_probe_interface+0x10/0x10 [ 268.600066][ T5774] really_probe+0x254/0xae0 [ 268.600090][ T5774] __driver_probe_device+0x1e8/0x360 [ 268.600112][ T5774] driver_probe_device+0x4f/0x240 [ 268.600136][ T5774] __device_attach_driver+0x270/0x410 [ 268.600159][ T5774] bus_for_each_drv+0x25b/0x2f0 [ 268.600186][ T5774] ? __pfx___device_attach_driver+0x10/0x10 [ 268.600208][ T5774] ? __pfx_bus_for_each_drv+0x10/0x10 [ 268.600234][ T5774] ? rt_spin_unlock+0x163/0x200 [ 268.600259][ T5774] __device_attach+0x2c7/0x450 [ 268.600278][ T5774] ? rt_spin_unlock+0x157/0x200 [ 268.600301][ T5774] ? __pfx___device_attach+0x10/0x10 [ 268.600324][ T5774] device_initial_probe+0xa1/0xd0 [ 268.600344][ T5774] bus_probe_device+0x12d/0x220 [ 268.600372][ T5774] device_add+0x7d7/0xb80 [ 268.600390][ T5774] usb_set_configuration+0x1ad8/0x2180 [ 268.600422][ T5774] usb_generic_driver_probe+0x8d/0x150 [ 268.600444][ T5774] usb_probe_device+0x1c3/0x3b0 [ 268.600469][ T5774] ? __pfx_usb_probe_device+0x10/0x10 [ 268.600491][ T5774] really_probe+0x254/0xae0 [ 268.600513][ T5774] __driver_probe_device+0x1e8/0x360 [ 268.600541][ T5774] driver_probe_device+0x4f/0x240 [ 268.600564][ T5774] __device_attach_driver+0x270/0x410 [ 268.600587][ T5774] bus_for_each_drv+0x25b/0x2f0 [ 268.600614][ T5774] ? __pfx___device_attach_driver+0x10/0x10 [ 268.600636][ T5774] ? __pfx_bus_for_each_drv+0x10/0x10 [ 268.600662][ T5774] ? rt_spin_unlock+0x163/0x200 [ 268.600688][ T5774] __device_attach+0x2c7/0x450 [ 268.600709][ T5774] ? __pfx___device_attach+0x10/0x10 [ 268.600733][ T5774] device_initial_probe+0xa1/0xd0 [ 268.600754][ T5774] bus_probe_device+0x12d/0x220 [ 268.600782][ T5774] device_add+0x7d7/0xb80 [ 268.600800][ T5774] usb_new_device+0x98d/0x1610 [ 268.600817][ T5774] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 268.600836][ T5774] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 268.600859][ T5774] ? __pfx_usb_new_device+0x10/0x10 [ 268.600880][ T5774] hub_event+0x28cf/0x4cf0 [ 268.600920][ T5774] ? __pfx_hub_event+0x10/0x10 [ 268.600943][ T5774] ? rcu_is_watching+0x15/0xb0 [ 268.600964][ T5774] ? process_one_work+0x7fd/0x1480 [ 268.600980][ T5774] process_one_work+0xaaf/0x1480 [ 268.601005][ T5774] ? __pfx_process_one_work+0x10/0x10 [ 268.601020][ T5774] ? do_raw_spin_lock+0x12b/0x2f0 [ 268.601048][ T5774] ? assign_work+0x3cf/0x5d0 [ 268.601066][ T5774] worker_thread+0xb05/0x10d0 [ 268.601088][ T5774] ? __kthread_parkme+0x71/0x1f0 [ 268.601114][ T5774] kthread+0x388/0x470 [ 268.601136][ T5774] ? __pfx_worker_thread+0x10/0x10 [ 268.601154][ T5774] ? __pfx_kthread+0x10/0x10 [ 268.601177][ T5774] ret_from_fork+0x514/0xb70 [ 268.601201][ T5774] ? __pfx_ret_from_fork+0x10/0x10 [ 268.601224][ T5774] ? __switch_to+0xc89/0x1420 [ 268.601244][ T5774] ? __pfx_kthread+0x10/0x10 [ 268.601267][ T5774] ret_from_fork_asm+0x1a/0x30 [ 268.601298][ T5774] [ 268.601303][ T5774] Modules linked in: [ 268.601316][ T5697] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#3] SMP KASAN PTI [ 268.601338][ T5774] ---[ end trace 0000000000000000 ]--- [ 268.601347][ T5697] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 268.601370][ T5697] CPU: 1 UID: 0 PID: 5697 Comm: kworker/1:5 Tainted: G D syzkaller #0 PREEMPT_{RT,(full)} [ 268.601399][ T5697] Tainted: [D]=DIE [ 268.601406][ T5697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 268.601420][ T5697] Workqueue: usb_hub_wq hub_event [ 268.601445][ T5697] RIP: 0010:emi26_probe+0x283/0x1690 [ 268.601467][ T5697] Code: ff 89 de e8 6f 64 97 00 85 db 0f 84 d9 01 00 00 e8 62 60 97 00 48 bb 00 00 00 00 00 fc ff df 49 8d 7e 04 48 89 f8 48 c1 e8 03 <0f> b6 04 18 84 c0 75 47 49 8d 7e 05 48 89 f8 48 c1 e8 03 0f b6 04 [ 268.601485][ T5697] RSP: 0018:ffffc900064b6d20 EFLAGS: 00010247 [ 268.601503][ T5697] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: 0000000000100000 [ 268.601518][ T5697] RDX: ffffc90019200000 RSI: 000000000000e191 RDI: 0000000000000004 [ 268.601533][ T5697] RBP: ffffc900064b6e50 R08: 0000000000000000 R09: 0000000000000000 [ 268.601547][ T5697] R10: dffffc0000000000 R11: fffffbfff1fa1890 R12: fffffffffffffffa [ 268.601564][ T5697] R13: 1fffffffffffffff R14: 0000000000000000 R15: 1fffffffffffffff [ 268.601579][ T5697] FS: 0000000000000000(0000) GS:ffff888125af2000(0000) knlGS:0000000000000000 [ 268.601598][ T5697] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 268.601613][ T5697] CR2: 00007f7a09465ff8 CR3: 000000005c3ac000 CR4: 00000000003526f0 [ 268.601631][ T5697] Call Trace: [ 268.601639][ T5697] [ 268.601654][ T5697] ? __pfx_emi26_probe+0x10/0x10 [ 268.601674][ T5697] ? __pm_runtime_set_status+0x977/0xc40 [ 268.601703][ T5697] usb_probe_interface+0x788/0xe50 [ 268.601737][ T5697] ? __pfx_usb_probe_interface+0x10/0x10 [ 268.601769][ T5697] ? sysfs_do_create_link_sd+0xe0/0x110 [ 268.601792][ T5697] ? driver_sysfs_add+0x1fe/0x210 [ 268.601817][ T5697] ? __pfx_usb_probe_interface+0x10/0x10 [ 268.601838][ T5774] RIP: 0010:emi26_probe+0x283/0x1690 [ 268.601845][ T5697] really_probe+0x254/0xae0 [ 268.601862][ T5774] Code: ff 89 de e8 6f 64 97 00 85 db 0f 84 d9 01 00 00 e8 62 60 97 00 48 bb 00 00 00 00 00 fc ff df 49 8d 7e 04 48 89 f8 48 c1 e8 03 <0f> b6 04 18 84 c0 75 47 49 8d 7e 05 48 89 f8 48 c1 e8 03 0f b6 04 [ 268.601875][ T5697] __driver_probe_device+0x1e8/0x360 [ 268.601882][ T5774] RSP: 0018:ffffc90000a6ed20 EFLAGS: 00010247 [ 268.601903][ T5774] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: 0000000000100000 [ 268.601904][ T5697] driver_probe_device+0x4f/0x240 [ 268.601919][ T5774] RDX: ffffc90019a01000 RSI: 000000000000e135 RDI: 0000000000000004 [ 268.601935][ T5774] RBP: ffffc90000a6ee50 R08: 0000000000000000 R09: 0000000000000000 [ 268.601933][ T5697] __device_attach_driver+0x270/0x410 [ 268.601950][ T5774] R10: dffffc0000000000 R11: fffffbfff1fa1890 R12: fffffffffffffffa [ 268.601967][ T5774] R13: 1fffffffffffffff R14: 0000000000000000 R15: 1fffffffffffffff [ 268.601963][ T5697] bus_for_each_drv+0x25b/0x2f0 [ 268.601983][ T5774] FS: 0000000000000000(0000) GS:ffff8881259f2000(0000) knlGS:0000000000000000 [ 268.602001][ T5774] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 268.601997][ T5697] ? __pfx___device_attach_driver+0x10/0x10 [ 268.602016][ T5774] CR2: 000000110c3081bd CR3: 000000005c3ac000 CR4: 00000000003526f0 [ 268.602038][ T5774] Kernel panic - not syncing: Fatal exception [ 268.602026][ T5697] ? __pfx_bus_for_each_drv+0x10/0x10 [ 268.602824][ T5774] Kernel Offset: disabled