last executing test programs: 13.292860972s ago: executing program 2 (id=726): r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r1 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000040)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) readv(r0, &(0x7f0000001c80)=[{&(0x7f0000000740)=""/200, 0xc8}], 0x1) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000024002, 0x0) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder-control\x00', 0x2, 0x0) unlink(&(0x7f0000000140)='./file2\x00') 11.679821209s ago: executing program 2 (id=732): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x400000001, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) r5 = io_uring_setup(0x3eaf, &(0x7f0000000100)) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x22, 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000100)={0x40, 0xa, 0x40, 0x0, 0x3e, 0x180, 0x2, 0x0, {0x0, 0x0, 0x1}, {0x0, 0x20}, {}, {0x0, 0x2000000}, 0x1, 0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, 0x0, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x48) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) 7.412983119s ago: executing program 1 (id=745): signalfd4(0xffffffffffffffff, &(0x7f0000000500), 0x8, 0x0) syz_io_uring_setup(0x2, &(0x7f0000000580)={0x0, 0x8b2, 0x13500, 0x0, 0x304}, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="00008000", @ANYRES16, @ANYBLOB="2d01620000000900509072fb60cb080003"], 0x2c}}, 0x4000) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r5, @ANYBLOB="ff830500000700ffffff", @ANYRES8=r0], 0x4}}, 0x0) sendfile(r4, r3, 0x0, 0x100000002) 7.242432182s ago: executing program 0 (id=747): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$VIDIOC_S_OUTPUT(0xffffffffffffffff, 0xc004562f, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x1fd, 0x1, 0x0, 0x2000, &(0x7f0000bd3000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4048aecb, &(0x7f0000000200)) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100), 0xfffffd9d) r4 = socket(0x1e, 0x4, 0x0) connect$tipc(r4, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x1, 0x4}}, 0x10) sendfile(r4, r3, 0x0, 0x8010002b) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_RUN(r2, 0xae80, 0x0) 7.069513351s ago: executing program 2 (id=749): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, &(0x7f0000000340)={0x0, 0x16, 0x1, "ff"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 7.06856968s ago: executing program 1 (id=750): capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x9}) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCBRDELBR(r0, 0x89a2, 0x0) 6.883714765s ago: executing program 1 (id=752): socket$inet6_tcp(0xa, 0x1, 0x0) lsm_set_self_attr(0x66, &(0x7f0000000240)=ANY=[], 0x20, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/dev\x00') pread64(r2, &(0x7f0000019040)=""/102400, 0x19000, 0x400000000003) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x4, 0x0, 0xfffffffffffffffb, 0x9, 0x6, 0x0, 0x5}, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$amidi(&(0x7f0000000040), 0x437d, 0x101) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1f, 0x0, 0x2d) tgkill(0x0, 0x0, 0x18) r4 = socket(0x400000000010, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x4000800) ioctl$USBDEVFS_CLEAR_HALT(r3, 0xc0105502, &(0x7f0000000300)={0x1, 0x1}) 5.990641781s ago: executing program 4 (id=756): socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x6, 0x4, 0x9, 0x5}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0), &(0x7f0000000380), 0xfff, r2, 0x0, 0xa0028000}, 0x38) 5.739987262s ago: executing program 0 (id=757): socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x0, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a8230800090400bc6435fb4d0009050303"], 0x0) 4.754384089s ago: executing program 2 (id=758): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000048000000030a0103000000d700000000050000000900010073797a30000000000900030073797a320000000008000a4000000003140004800800014000000001"], 0x90}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="f80000003e000701feffffff00000000017c00000400"], 0xf8}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 4.353036993s ago: executing program 1 (id=760): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000000)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000100)={@local}) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r0, 0x7af, &(0x7f0000000040)={@hyper, 0x4d3d94ee}) ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(r0, 0x7b0, &(0x7f00000000c0)={@host, 0x8}) 4.314305997s ago: executing program 2 (id=761): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0xeb2c, 0x0, 0x7fffffffffffffff, 0x3, 0x0, 0xffffffff}, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) io_setup(0x30, &(0x7f0000000600)=0x0) r4 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_submit(r3, 0x1, &(0x7f0000000180)=[&(0x7f0000000140)={0x0, 0x0, 0x1000000, 0x1, 0x0, r4, 0x0}]) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='gid_map\x00') unshare(0x2c020400) syz_io_uring_setup(0x70f3, &(0x7f0000000180)={0x0, 0xdb0c, 0x8, 0xfffffffe, 0x24000}, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x428001) ioctl$DRM_IOCTL_MODE_GET_LEASE(r5, 0xc01064c8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)}) r6 = syz_open_dev$cec(&(0x7f00000000c0), 0x0, 0xa41) ioctl$CEC_ADAP_S_LOG_ADDRS(r6, 0xc05c6104, &(0x7f0000000200)={"1b00", 0x3, 0x5, 0x2, 0x207fe, 0x0, "0400b7e7a2aac9779bf500", '\x00', "0300", "e8cc1304", ["8bbb00fda8e45cfe00000900", "ab5286400300000000008516", '\x00', "000b000000000000001000"]}) r7 = shmget$private(0x0, 0x4000, 0xa4, &(0x7f0000ff9000/0x4000)=nil) shmat(r7, &(0x7f0000ffe000/0x2000)=nil, 0x5000) socket$nl_netfilter(0x10, 0x3, 0xc) shmctl$IPC_STAT(r7, 0x2, &(0x7f0000000300)=""/47) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001c80)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xd40}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_USE_CARRIER={0x5}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40010}, 0x8000) 4.111808516s ago: executing program 1 (id=762): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_wakeup_irq', 0x0, 0x108) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x121a02, 0x0) sendfile(r3, r2, &(0x7f0000002700)=0x23, 0x1c) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000500)=ANY=[@ANYBLOB="0b00000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000073797a3000"/196], 0x119) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)="4bec3a36aa7d831a67307d7a4139df77ecca1d10b3a440115329a83d320f26e890b914dbf220b78989ca28b57d9b5ffac5f143ee75af25f4b61dae1a08210fea2773d9077a651a900689b776e0ecc7e7fda962980857707301a425dc39e0cdc8c59d16be82c5"}], 0x127c) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r6, 0x0, 0x0) r7 = openat$cgroup_ro(r4, &(0x7f0000000380)='memory.stat\x00', 0x0, 0x0) r8 = socket$netlink(0x10, 0x3, 0x14) sendfile(r8, r7, 0x0, 0x17) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) lremovexattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=@known='system.posix_acl_default\x00') write$FUSE_STATX(r7, &(0x7f0000000540)={0x130, 0x0, 0x0, {0x3, 0x6, 0x0, '\x00', {0x2000, 0x5, 0x7, 0xc07, 0x0, 0x0, 0xc000, '\x00', 0x1, 0x3ff, 0x0, 0x3, {0x0, 0x1}, {0x4, 0x800}, {0x961, 0x6a5ad1fb}, {0xfffffffffffffffe}, 0x80000000, 0xdc, 0x7e, 0xa}}}, 0x130) syz_80211_inject_frame(0x0, 0x0, 0x0) nanosleep(0x0, 0x0) 3.653701084s ago: executing program 3 (id=764): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) syz_io_uring_setup(0x110, 0x0, &(0x7f0000000240), &(0x7f0000000280)) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r1, 0x0, 0xd}, 0x18) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x1fffffffffe, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x9}, 0x0, &(0x7f00000002c0)={0x3fb, 0x8000, 0x400000000001, 0x9, 0x40000000000000, 0xf, 0x80000002, 0x2}, 0x0, 0x0) sendmsg$rds(r0, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) 3.464972151s ago: executing program 3 (id=765): sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x40000f63c) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={0xffffffffffffffff, &(0x7f0000000100)="64738c0b4aa5f981785254a9eb", 0x0}, 0x20) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x6ee80, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) io_submit(r1, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x1f, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e8000072a, 0x1000000, 0x0, 0x10}]) 3.442956023s ago: executing program 4 (id=766): mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000180)=0x2, 0x4) 3.296033135s ago: executing program 4 (id=767): r0 = socket$inet6(0xa, 0x3, 0x9) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x6, &(0x7f0000000000)={0x12, {{0x29, 0x0, 0x4000000, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x400}}}, 0x88) 3.295674269s ago: executing program 0 (id=768): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4d8, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x0, 0x7}}}}}]}}]}}, 0x0) openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="002212"], 0x0}, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58) accept$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, &(0x7f0000000240), 0x4) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000040)="e26c", 0x2}], 0x1) 3.263075567s ago: executing program 3 (id=769): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001680)) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000040)=0x200000000) r1 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0x6, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) io_uring_enter(r1, 0x10000627, 0x800004c2, 0x3, 0x0, 0x0) 2.970753901s ago: executing program 4 (id=770): syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x12, &(0x7f0000000000)=ANY=[@ANYBLOB="a200004ef3b11f94"]) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, &(0x7f0000000000)={r2, @in={{0x2, 0x0, @empty}}}, 0x90) 2.797114636s ago: executing program 3 (id=771): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000048000000030a0103000000d700000000050000000900010073797a30000000000900030073797a320000000008000a4000000003140004800800014000000001"], 0x90}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="f80000003e000701feffffff00000000017c00000400"], 0xf8}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 2.587735765s ago: executing program 3 (id=772): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r1}, 0x10) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000000c0)={0x10002, 0x1, 0x1}) r3 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)=0x0) timer_settime(r4, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) 2.015803927s ago: executing program 4 (id=773): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r0) socket(0x10, 0x803, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x50) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e000000020013000200000000000000ff0800ed05000600200000000a0006000000000026b900000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmsg$key(r1, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002eb0e00000000000000000105000600200000000a00000040010000000500e50000070000001f00001a000000030000a95a6e870200010000e9ff070040000200000000050005000000cc580a"], 0x80}}, 0x24000000) 1.680337322s ago: executing program 4 (id=774): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="00940a37", 0x4) sendto$unix(r1, &(0x7f0000000440)="36d9a32e92c131d7", 0x8, 0x20000810, 0x0, 0x0) r2 = syz_io_uring_setup(0xbda, &(0x7f0000000640)={0x0, 0xec25, 0x8, 0x1, 0x40000333}, &(0x7f0000000dc0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0) 1.333408019s ago: executing program 0 (id=775): r0 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r0, 0x0, &(0x7f0000001480)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfffa, 0x2}, {}, {0x1c, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_IPV4_DST={0x8, 0x1d, @remote}, @TCA_FLOWER_KEY_ENC_KEY_ID={0x8, 0x1a, 0x7}]}}]}, 0x44}}, 0x24004000) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.176920242s ago: executing program 0 (id=776): socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x6, 0x4, 0x9, 0x5}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0), &(0x7f0000000380), 0xfff, r2, 0x0, 0xa0028000}, 0x38) 671.759004ms ago: executing program 1 (id=777): close(0xffffffffffffffff) r0 = syz_usb_connect(0x5, 0x0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000540)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) listen(0xffffffffffffffff, 0x9) r1 = socket(0x400000000010, 0x3, 0x0) setsockopt$RXRPC_SECURITY_KEY(r1, 0x110, 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r5 = syz_io_uring_setup(0xcaf, &(0x7f0000000100)={0x0, 0xb601, 0x1, 0x5, 0x17a}, &(0x7f00000001c0)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r4, 0xc000000, &(0x7f0000000000)=[{0x0}], 0x1, 0x1e}) io_uring_enter(r5, 0x847ba, 0x0, 0xe, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)}, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x642000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) 584.228225ms ago: executing program 3 (id=778): r0 = syz_usb_connect(0x0, 0x36, &(0x7f00000005c0)={{0x12, 0x1, 0x0, 0x3a, 0x37, 0x5, 0x20, 0x781, 0x5, 0x5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xe6, 0x2, 0x2, 0x5b, 0xbd, 0x97, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0xc000) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000006c0)={0x44, &(0x7f0000000580)={0x0, 0x16, 0x1, 'T'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, &(0x7f0000000100)={0x40, 0x12, 0x1, "ec"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000001400)={0x1c, &(0x7f0000001340)={0x20, 0x16, 0x1, 't'}, 0x0, 0x0}) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0}) 153.743898ms ago: executing program 0 (id=779): getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x6, 0x0, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x20, 0xfc, 0x2, 0x0, @rand_addr=0x1c, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x6, 0x0, 0x0, 0xfa, 0x9, {0x5, 0x4, 0x0, 0x3d, 0xfff6, 0x65, 0x5, 0x1, 0x4, 0x3, @private=0xa010102, @local}}}}}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r2, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f0000000080)={0x1, 0x1, 0x4, 0x2, @vifc_lcl_addr=@loopback, @remote}, 0x10) setsockopt$MRT_ADD_MFC_PROXY(r3, 0x0, 0xd2, &(0x7f00000000c0)={@multicast1=0x1c, @empty=0xe0000300, 0x0, "8a79348df081496d0420922f45a71c1daa8b610468cd140526c41efcd3a4a422", 0x3, 0x1, 0x85}, 0x3c) 0s ago: executing program 2 (id=780): eventfd2(0x0, 0x80800) r0 = syz_io_uring_setup(0x70ca, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x3, 0x179}, &(0x7f0000000100)=0x0, &(0x7f00000007c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x40, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)="1a", 0x1}, {0x0, 0x47}], 0x2}) io_uring_enter(r0, 0x4d10, 0x2, 0x2, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.98' (ED25519) to the list of known hosts. [ 87.425495][ T5822] cgroup: Unknown subsys name 'net' [ 87.614158][ T5822] cgroup: Unknown subsys name 'cpuset' [ 87.623502][ T5822] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 89.328148][ T5822] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 91.961094][ T43] cfg80211: failed to load regulatory.db [ 93.895670][ T5839] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 93.903791][ T5839] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 93.912027][ T5839] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 93.919864][ T5839] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 93.928158][ T5839] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 93.935964][ T5839] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 93.943209][ T5843] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 93.951512][ T5843] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 93.959123][ T5843] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 93.966915][ T5843] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 93.974274][ T5839] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 93.982210][ T5843] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 93.999896][ T5843] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 94.007122][ T5843] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 94.020008][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 94.039151][ T5844] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 94.060152][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 94.067838][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 94.075984][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 94.083815][ T5844] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 94.097009][ T5844] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 94.105823][ T5844] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 94.120636][ T5844] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 94.129102][ T5844] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 94.139951][ T5844] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 94.713005][ T5837] chnl_net:caif_netlink_parms(): no params data found [ 94.828285][ T5838] chnl_net:caif_netlink_parms(): no params data found [ 94.880961][ T5845] chnl_net:caif_netlink_parms(): no params data found [ 95.005460][ T5852] chnl_net:caif_netlink_parms(): no params data found [ 95.193195][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.201595][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.208999][ T5845] bridge_slave_0: entered allmulticast mode [ 95.216925][ T5845] bridge_slave_0: entered promiscuous mode [ 95.249208][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.257114][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.264440][ T5837] bridge_slave_0: entered allmulticast mode [ 95.272128][ T5837] bridge_slave_0: entered promiscuous mode [ 95.279958][ T5849] chnl_net:caif_netlink_parms(): no params data found [ 95.299448][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.306860][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.314534][ T5845] bridge_slave_1: entered allmulticast mode [ 95.323063][ T5845] bridge_slave_1: entered promiscuous mode [ 95.374873][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.382633][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.390355][ T5838] bridge_slave_0: entered allmulticast mode [ 95.397801][ T5838] bridge_slave_0: entered promiscuous mode [ 95.405711][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.415437][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.422674][ T5837] bridge_slave_1: entered allmulticast mode [ 95.430118][ T5837] bridge_slave_1: entered promiscuous mode [ 95.471890][ T5852] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.479063][ T5852] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.486694][ T5852] bridge_slave_0: entered allmulticast mode [ 95.494166][ T5852] bridge_slave_0: entered promiscuous mode [ 95.502580][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.510090][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.517468][ T5838] bridge_slave_1: entered allmulticast mode [ 95.525418][ T5838] bridge_slave_1: entered promiscuous mode [ 95.580576][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.590335][ T5852] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.598047][ T5852] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.606380][ T5852] bridge_slave_1: entered allmulticast mode [ 95.613897][ T5852] bridge_slave_1: entered promiscuous mode [ 95.652295][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.665579][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.684406][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.728494][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.754461][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.785755][ T5845] team0: Port device team_slave_0 added [ 95.794960][ T5852] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.863180][ T5845] team0: Port device team_slave_1 added [ 95.871445][ T5852] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.898137][ T5838] team0: Port device team_slave_0 added [ 95.906889][ T5838] team0: Port device team_slave_1 added [ 95.925961][ T5849] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.933358][ T5849] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.940847][ T5849] bridge_slave_0: entered allmulticast mode [ 95.948007][ T5849] bridge_slave_0: entered promiscuous mode [ 96.001936][ T5837] team0: Port device team_slave_0 added [ 96.022086][ T5849] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.029253][ T5849] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.037460][ T5849] bridge_slave_1: entered allmulticast mode [ 96.045524][ T5849] bridge_slave_1: entered promiscuous mode [ 96.051979][ T5844] Bluetooth: hci1: command tx timeout [ 96.057392][ T51] Bluetooth: hci0: command tx timeout [ 96.078671][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.085889][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.112158][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.120294][ T5844] Bluetooth: hci3: command tx timeout [ 96.123055][ T51] Bluetooth: hci2: command tx timeout [ 96.137043][ T5852] team0: Port device team_slave_0 added [ 96.145059][ T5837] team0: Port device team_slave_1 added [ 96.167150][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.174302][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.200392][ T51] Bluetooth: hci4: command tx timeout [ 96.201029][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.245679][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.252979][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.279053][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.300893][ T5852] team0: Port device team_slave_1 added [ 96.320942][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.327947][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.354404][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.368405][ T5849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.381913][ T5849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.435129][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.442848][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.469378][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.517157][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.524390][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.551271][ T5852] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.563238][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.571188][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.597515][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.620198][ T5849] team0: Port device team_slave_0 added [ 96.641263][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.648239][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.674661][ T5852] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.725924][ T5849] team0: Port device team_slave_1 added [ 96.737573][ T5845] hsr_slave_0: entered promiscuous mode [ 96.744660][ T5845] hsr_slave_1: entered promiscuous mode [ 96.772333][ T5838] hsr_slave_0: entered promiscuous mode [ 96.778800][ T5838] hsr_slave_1: entered promiscuous mode [ 96.785651][ T5838] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 96.793622][ T5838] Cannot create hsr debugfs directory [ 96.828391][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.835518][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.861691][ T5849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.926050][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.933734][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.960457][ T5849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.995579][ T5837] hsr_slave_0: entered promiscuous mode [ 97.003297][ T5837] hsr_slave_1: entered promiscuous mode [ 97.009732][ T5837] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 97.017302][ T5837] Cannot create hsr debugfs directory [ 97.060431][ T5852] hsr_slave_0: entered promiscuous mode [ 97.066849][ T5852] hsr_slave_1: entered promiscuous mode [ 97.073481][ T5852] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 97.081478][ T5852] Cannot create hsr debugfs directory [ 97.229201][ T5849] hsr_slave_0: entered promiscuous mode [ 97.236293][ T5849] hsr_slave_1: entered promiscuous mode [ 97.243196][ T5849] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 97.250922][ T5849] Cannot create hsr debugfs directory [ 97.709178][ T5845] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 97.725085][ T5845] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 97.744440][ T5845] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 97.764152][ T5845] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 97.824082][ T5838] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 97.838448][ T5838] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 97.861808][ T5838] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 97.884879][ T5838] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 97.925487][ T5852] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 97.950470][ T5852] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 97.963692][ T5852] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 97.974490][ T5852] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 98.059199][ T5849] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 98.098980][ T5849] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 98.120790][ T5844] Bluetooth: hci0: command tx timeout [ 98.129712][ T51] Bluetooth: hci1: command tx timeout [ 98.141748][ T5849] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 98.153084][ T5849] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 98.199996][ T5844] Bluetooth: hci2: command tx timeout [ 98.205592][ T51] Bluetooth: hci3: command tx timeout [ 98.216141][ T5837] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 98.240909][ T5837] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 98.252495][ T5837] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 98.265292][ T5837] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 98.279941][ T51] Bluetooth: hci4: command tx timeout [ 98.396471][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.485944][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.505068][ T5852] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.533230][ T5845] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.549100][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.556381][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.583737][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.590892][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.611431][ T5852] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.654091][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.661316][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.682594][ T5838] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.698251][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.705397][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.736263][ T1324] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.743516][ T1324] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.761242][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.787131][ T1324] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.794285][ T1324] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.816160][ T5849] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.903829][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.933386][ T5849] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.965292][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.972480][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.014945][ T1145] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.022148][ T1145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.101843][ T78] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.109034][ T78] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.151897][ T78] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.159135][ T78] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.301914][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.375899][ T5849] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 99.388258][ T5849] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 99.598704][ T5845] veth0_vlan: entered promiscuous mode [ 99.624794][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.636785][ T5845] veth1_vlan: entered promiscuous mode [ 99.786890][ T5852] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.870769][ T5845] veth0_macvtap: entered promiscuous mode [ 99.916265][ T5845] veth1_macvtap: entered promiscuous mode [ 99.957483][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.984831][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.015026][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.046533][ T5849] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.058885][ T5845] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.071017][ T5845] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.080161][ T5845] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.088877][ T5845] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.194325][ T5852] veth0_vlan: entered promiscuous mode [ 100.200665][ T51] Bluetooth: hci1: command tx timeout [ 100.206127][ T51] Bluetooth: hci0: command tx timeout [ 100.279841][ T5844] Bluetooth: hci2: command tx timeout [ 100.285379][ T51] Bluetooth: hci3: command tx timeout [ 100.317527][ T5852] veth1_vlan: entered promiscuous mode [ 100.327297][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.336992][ T5837] veth0_vlan: entered promiscuous mode [ 100.351954][ T5837] veth1_vlan: entered promiscuous mode [ 100.361551][ T51] Bluetooth: hci4: command tx timeout [ 100.376118][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.456820][ T1145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.476044][ T1145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.504099][ T5849] veth0_vlan: entered promiscuous mode [ 100.518153][ T5837] veth0_macvtap: entered promiscuous mode [ 100.534512][ T5837] veth1_macvtap: entered promiscuous mode [ 100.544815][ T5838] veth0_vlan: entered promiscuous mode [ 100.593076][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.605030][ T5849] veth1_vlan: entered promiscuous mode [ 100.618351][ T5852] veth0_macvtap: entered promiscuous mode [ 100.628448][ T5845] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 100.632827][ T5838] veth1_vlan: entered promiscuous mode [ 100.669070][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.678984][ T5852] veth1_macvtap: entered promiscuous mode [ 100.715991][ T5837] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.725395][ T5837] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.738142][ T5837] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.750711][ T5837] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.801231][ T5937] hid-generic 0002:0004:0009.0001: unknown main item tag 0x0 [ 100.816355][ T5937] hid-generic 0002:0004:0009.0001: unknown main item tag 0x0 [ 100.842209][ T5937] hid-generic 0002:0004:0009.0001: unknown main item tag 0x0 [ 100.850450][ T5937] hid-generic 0002:0004:0009.0001: unknown main item tag 0x0 [ 100.858145][ T5937] hid-generic 0002:0004:0009.0001: unknown main item tag 0x0 [ 100.869310][ T5937] hid-generic 0002:0004:0009.0001: unknown main item tag 0x0 [ 100.878032][ T5937] hid-generic 0002:0004:0009.0001: unknown main item tag 0x0 [ 100.886857][ T5937] hid-generic 0002:0004:0009.0001: unknown main item tag 0x0 [ 100.893844][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.900019][ T5937] hid-generic 0002:0004:0009.0001: unknown main item tag 0x0 [ 100.909284][ T5937] hid-generic 0002:0004:0009.0001: unknown main item tag 0x0 [ 100.917443][ T5937] hid-generic 0002:0004:0009.0001: unknown main item tag 0x0 [ 100.918720][ T5849] veth0_macvtap: entered promiscuous mode [ 100.925976][ T5937] hid-generic 0002:0004:0009.0001: unknown main item tag 0x0 [ 100.938533][ T5937] hid-generic 0002:0004:0009.0001: unknown main item tag 0x0 [ 100.944752][ T5849] veth1_macvtap: entered promiscuous mode [ 100.952505][ T5937] hid-generic 0002:0004:0009.0001: unknown main item tag 0x0 [ 100.960535][ T5937] hid-generic 0002:0004:0009.0001: unknown main item tag 0x0 [ 100.968076][ T5937] hid-generic 0002:0004:0009.0001: unknown main item tag 0x0 [ 100.976393][ T5937] hid-generic 0002:0004:0009.0001: unknown main item tag 0x0 [ 100.991800][ T5937] hid-generic 0002:0004:0009.0001: hidraw0: HID v0.04 Device [syz0] on syz0 [ 101.071910][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.087407][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.107949][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.131866][ T5838] veth0_macvtap: entered promiscuous mode [ 101.152262][ T5852] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.165822][ T5852] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.176026][ T5852] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.188185][ T5852] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.215394][ T5838] veth1_macvtap: entered promiscuous mode [ 101.279092][ T5953] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 101.309845][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 101.345029][ T5951] fido_id[5951]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 101.359924][ T1324] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.362269][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.367763][ T1324] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.426499][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.456231][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.484405][ T5849] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.493594][ T5849] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.504360][ T5849] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.513852][ T5849] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.535475][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.557747][ T5838] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.573609][ T5838] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.582960][ T5838] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.591841][ T5838] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.958346][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.019052][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.280322][ T51] Bluetooth: hci0: command tx timeout [ 102.286364][ T5844] Bluetooth: hci1: command tx timeout [ 102.291005][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.302032][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.309870][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 102.360089][ T5844] Bluetooth: hci3: command tx timeout [ 102.365561][ T5844] Bluetooth: hci2: command tx timeout [ 102.439374][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.441390][ T5844] Bluetooth: hci4: command tx timeout [ 102.464265][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.613650][ T1145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.623935][ T1145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.820425][ T1145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.833864][ T1145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.608130][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.619727][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.571529][ T5981] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 104.680849][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 104.802118][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 104.840363][ T0] NOHZ tick-stop error: local softirq work is pending, handler #2c2!!! [ 104.852753][ T0] NOHZ tick-stop error: local softirq work is pending, handler #28a!!! [ 104.864053][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 105.800129][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 105.800447][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 105.863394][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 105.864063][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 108.783277][ T6020] netlink: 8 bytes leftover after parsing attributes in process `syz.2.20'. [ 109.481082][ T6035] netlink: 4 bytes leftover after parsing attributes in process `syz.0.27'. [ 109.969387][ T6041] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 111.975630][ T6064] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 112.087096][ T6066] pimreg: entered allmulticast mode [ 112.350388][ T6078] netlink: 148 bytes leftover after parsing attributes in process `syz.2.39'. [ 112.760477][ T6077] netlink: 28 bytes leftover after parsing attributes in process `syz.0.41'. [ 112.859940][ T24] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 113.070749][ T6077] netlink: 28 bytes leftover after parsing attributes in process `syz.0.41'. [ 113.091566][ T24] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 113.109566][ T24] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 113.137429][ T24] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 113.331665][ T24] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 113.362591][ T24] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 113.403259][ T24] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 113.412552][ T24] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 113.432320][ T24] usb 4-1: Product: syz [ 113.439400][ T24] usb 4-1: Manufacturer: syz [ 113.541602][ T24] cdc_wdm 4-1:1.0: skipping garbage [ 113.567631][ T24] cdc_wdm 4-1:1.0: skipping garbage [ 113.604618][ T24] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 113.759644][ T24] cdc_wdm 4-1:1.0: Unknown control protocol [ 114.953793][ T6083] block device autoloading is deprecated and will be removed. [ 115.016771][ T6083] Zero length message leads to an empty skb [ 115.631069][ T6103] netlink: 'syz.0.47': attribute type 4 has an invalid length. [ 116.503185][ T5844] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 116.504888][ T6107] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.49'. [ 116.526051][ T6107] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 117.182183][ T92] usb 4-1: USB disconnect, device number 2 [ 118.272145][ T6078] syz.2.39 (6078): drop_caches: 2 [ 118.481545][ T43] hid-generic 0000:0004:0000.0002: unknown main item tag 0x0 [ 118.523408][ T43] hid-generic 0000:0004:0000.0002: unknown main item tag 0x0 [ 118.541055][ T43] hid-generic 0000:0004:0000.0002: unknown main item tag 0x0 [ 118.569943][ T43] hid-generic 0000:0004:0000.0002: hidraw0: HID v0.05 Device [syz0] on syz0 [ 119.712368][ T6137] tty tty24: ldisc open failed (-12), clearing slot 23 [ 120.528816][ T6141] fido_id[6141]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 120.729883][ T6152] 9pnet_fd: Insufficient options for proto=fd [ 121.928164][ T6158] netlink: zone id is out of range [ 121.974714][ T6158] netlink: zone id is out of range [ 121.980739][ T6158] netlink: zone id is out of range [ 121.985897][ T6158] netlink: zone id is out of range [ 121.992540][ T6168] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 122.049965][ T6158] netlink: zone id is out of range [ 122.065831][ T6158] netlink: zone id is out of range [ 122.100673][ T6158] netlink: zone id is out of range [ 122.158379][ T6158] netlink: zone id is out of range [ 122.183926][ T6158] netlink: zone id is out of range [ 122.186753][ T6163] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 122.443602][ T5936] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 122.719271][ T6158] netlink: zone id is out of range [ 122.791687][ T6177] syz.3.67 uses obsolete (PF_INET,SOCK_PACKET) [ 122.922660][ T5936] usb 5-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 122.938739][ T5936] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.985400][ T5936] usb 5-1: config 0 descriptor?? [ 123.020362][ T5936] gspca_main: spca508-2.14.0 probing 8086:0110 [ 123.383176][ T5936] gspca_spca508: reg_read err -32 [ 123.401988][ T5936] gspca_spca508: reg_read err -32 [ 123.611911][ T5936] gspca_spca508: reg_read err -32 [ 123.693092][ T5936] gspca_spca508: reg_read err -32 [ 123.693648][ T6168] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.694367][ T6168] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 124.201344][ T5936] gspca_spca508: reg_read err -110 [ 124.204005][ T5936] gspca_spca508: reg write: error -32 [ 124.204063][ T5936] spca508 5-1:0.0: probe with driver spca508 failed with error -32 [ 124.274004][ T5936] usb 5-1: USB disconnect, device number 2 [ 124.511749][ T6185] tty tty2: ldisc open failed (-12), clearing slot 1 [ 124.545204][ T6183] pty pty20: ldisc open failed (-12), clearing slot 20 [ 125.163121][ T6209] input: syz0 as /devices/virtual/input/input7 [ 125.510612][ T6219] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.76'. [ 126.758823][ T6235] netlink: 4 bytes leftover after parsing attributes in process `syz.2.81'. [ 126.767835][ T6235] bridge_slave_1: left allmulticast mode [ 126.775042][ T6235] bridge_slave_1: left promiscuous mode [ 126.782248][ T6235] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.879832][ T6235] bridge_slave_0: left allmulticast mode [ 126.889607][ T6235] bridge_slave_0: left promiscuous mode [ 126.942958][ T6235] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.636065][ T6258] netlink: 172 bytes leftover after parsing attributes in process `syz.4.85'. [ 129.810405][ T24] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 129.953779][ T6233] syz.0.80 (6233): drop_caches: 2 [ 129.993231][ T24] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 130.029780][ T24] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 130.059559][ T24] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 130.068593][ T24] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 130.117565][ T24] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 130.135688][ T24] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 130.156689][ T24] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 130.170976][ T24] usb 3-1: Product: syz [ 130.178744][ T24] usb 3-1: Manufacturer: syz [ 130.292022][ T24] cdc_wdm 3-1:1.0: skipping garbage [ 130.304376][ T24] cdc_wdm 3-1:1.0: skipping garbage [ 130.412792][ T24] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 130.520484][ T24] cdc_wdm 3-1:1.0: Unknown control protocol [ 130.958405][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -EPIPE [ 131.162178][ T24] usb 3-1: USB disconnect, device number 2 [ 132.153124][ T6320] 9pnet_fd: Insufficient options for proto=fd [ 133.800481][ T6339] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.113'. [ 134.547805][ T6345] netlink: 40 bytes leftover after parsing attributes in process `syz.4.117'. [ 134.598054][ T6345] netlink: 40 bytes leftover after parsing attributes in process `syz.4.117'. [ 134.761808][ T6352] netlink: 'syz.0.120': attribute type 12 has an invalid length. [ 135.519061][ T6362] 9pnet_fd: Insufficient options for proto=fd [ 138.055387][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.494409][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.581579][ T6384] syz.4.131 (6384): drop_caches: 2 [ 139.049724][ T24] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 139.261511][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 139.287273][ T24] usb 5-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 139.318408][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.349906][ T24] usb 5-1: config 0 descriptor?? [ 139.365073][ T6400] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 139.391941][ T6418] net_ratelimit: 19 callbacks suppressed [ 139.391988][ T6418] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 140.045224][ T24] elan 0003:04F3:0755.0003: unknown main item tag 0x0 [ 140.072811][ T24] elan 0003:04F3:0755.0003: item fetching failed at offset 3/5 [ 140.112028][ T24] elan 0003:04F3:0755.0003: Hid Parse failed [ 140.126874][ T24] elan 0003:04F3:0755.0003: probe with driver elan failed with error -22 [ 140.227972][ T24] usb 5-1: USB disconnect, device number 3 [ 143.675571][ T6464] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 149.504265][ T6497] tipc: Started in network mode [ 149.509305][ T6497] tipc: Node identity 6a5820c46bab, cluster identity 4711 [ 149.539710][ T24] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 149.558128][ T6497] tipc: Enabled bearer , priority 0 [ 149.602035][ T6497] syzkaller0: entered promiscuous mode [ 149.607582][ T6497] syzkaller0: entered allmulticast mode [ 149.741896][ T6497] tipc: Resetting bearer [ 149.748560][ T24] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 149.758946][ T24] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 149.773596][ T24] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 149.773849][ T6496] tipc: Resetting bearer [ 149.789266][ T24] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 149.805371][ T24] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 149.841021][ T24] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 149.851075][ T6496] tipc: Disabling bearer [ 149.857434][ T24] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 149.869686][ T24] usb 5-1: Product: syz [ 149.874096][ T24] usb 5-1: Manufacturer: syz [ 149.950550][ T5894] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 150.076378][ T24] cdc_wdm 5-1:1.0: skipping garbage [ 150.145575][ T24] cdc_wdm 5-1:1.0: skipping garbage [ 150.170409][ T5894] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 150.977747][ T5894] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 150.987158][ T24] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 150.993285][ T24] cdc_wdm 5-1:1.0: Unknown control protocol [ 151.010585][ T24] usb 5-1: USB disconnect, device number 4 [ 151.023174][ T5894] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 151.038760][ T5894] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.052478][ T5894] usb 1-1: Product: syz [ 151.056796][ T5894] usb 1-1: Manufacturer: syz [ 151.065527][ T5894] usb 1-1: SerialNumber: syz [ 151.265048][ T6509] syz.2.167 (6509) used greatest stack depth: 17992 bytes left [ 151.278534][ T5894] usb 1-1: 0:2 : does not exist [ 151.334792][ T5894] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 151.387105][ T6521] 9pnet_fd: Insufficient options for proto=fd [ 151.413113][ T5894] usb 1-1: USB disconnect, device number 2 [ 151.509664][ T24] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 151.582088][ T5827] udevd[5827]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 151.679670][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 151.829278][ T24] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 151.846163][ T24] usb 2-1: config 0 has no interface number 0 [ 151.859358][ T24] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 151.873329][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.883164][ T24] usb 2-1: Product: syz [ 151.887622][ T24] usb 2-1: Manufacturer: syz [ 151.896971][ T24] usb 2-1: SerialNumber: syz [ 151.948089][ T24] usb 2-1: config 0 descriptor?? [ 151.979387][ T24] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 151.997573][ T24] usb 2-1: selecting invalid altsetting 1 [ 152.027752][ T24] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 152.100864][ T24] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 152.116086][ T24] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 152.125795][ T24] usb 2-1: media controller created [ 152.306725][ T6535] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.180'. [ 152.316286][ T6535] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 152.325673][ T5844] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 152.808144][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 153.265327][ T6517] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 153.286975][ T6543] tipc: Started in network mode [ 153.302453][ T6543] tipc: Node identity 0ea9295cb0f8, cluster identity 4711 [ 153.315277][ T24] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 153.327866][ T6543] tipc: Enabled bearer , priority 0 [ 153.345448][ T24] zl10353_read_register: readreg error (reg=127, ret==-71) [ 153.370388][ T6543] syzkaller0: entered promiscuous mode [ 153.393392][ T24] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 153.401139][ T6543] syzkaller0: entered allmulticast mode [ 153.523660][ T6543] tipc: Resetting bearer [ 153.569261][ T6542] tipc: Resetting bearer [ 153.578565][ T24] usb 2-1: USB disconnect, device number 2 [ 153.641435][ T6542] tipc: Disabling bearer [ 154.092898][ T6563] 9pnet_fd: Insufficient options for proto=fd [ 154.117218][ T6562] capability: warning: `syz.1.187' uses 32-bit capabilities (legacy support in use) [ 155.410752][ T6574] netlink: 28 bytes leftover after parsing attributes in process `syz.1.191'. [ 158.105613][ T6599] capability: warning: `syz.3.200' uses deprecated v2 capabilities in a way that may be insecure [ 160.791802][ T6629] netlink: 44 bytes leftover after parsing attributes in process `syz.3.209'. [ 163.800687][ T6658] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 166.751486][ T6694] netlink: 24 bytes leftover after parsing attributes in process `syz.4.233'. [ 167.869547][ T6699] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 168.127522][ T6713] binder_alloc: 6710: binder_alloc_buf, no vma [ 169.660845][ T6734] netlink: 76 bytes leftover after parsing attributes in process `syz.3.245'. [ 171.645829][ T6757] fuse: root generation should be zero [ 172.288117][ T6764] misc userio: No port type given on /dev/userio [ 173.923513][ T30] audit: type=1326 audit(1755374428.626:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6779 comm="syz.3.259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb591f8ebe9 code=0x7ffc0000 [ 174.031696][ T30] audit: type=1326 audit(1755374428.676:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6779 comm="syz.3.259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=459 compat=0 ip=0x7fb591f8ebe9 code=0x7ffc0000 [ 174.210004][ T5844] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 174.217214][ T30] audit: type=1326 audit(1755374428.676:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6779 comm="syz.3.259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb591f8ebe9 code=0x7ffc0000 [ 174.219742][ T6785] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.260'. [ 174.248081][ T6785] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 174.703526][ T30] audit: type=1326 audit(1755374428.676:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6779 comm="syz.3.259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb591f8ebe9 code=0x7ffc0000 [ 177.423465][ T6817] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 180.232198][ T979] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 180.411982][ T979] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 180.499955][ T979] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 180.514265][ T979] usb 1-1: New USB device found, idVendor=22d4, idProduct=1503, bcdDevice= 0.00 [ 180.545813][ T979] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.594221][ T979] usb 1-1: config 0 descriptor?? [ 180.626000][ T6833] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 182.025847][ T979] glorious 0003:22D4:1503.0004: hidraw0: USB HID v0.00 Device [Glorious Model I] on usb-dummy_hcd.0-1/input0 [ 182.081690][ T979] usb 1-1: USB disconnect, device number 3 [ 182.248843][ T6864] fido_id[6864]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 183.759615][ T6883] syzkaller1: entered promiscuous mode [ 183.769339][ T6883] syzkaller1: entered allmulticast mode [ 184.234113][ T6885] team0: Port device team_slave_0 removed [ 184.983032][ T6904] netlink: 32 bytes leftover after parsing attributes in process `syz.3.304'. [ 185.003086][ T6904] openvswitch: netlink: EtherType 0 is less than min 600 [ 185.580685][ T6915] netlink: 28 bytes leftover after parsing attributes in process `syz.3.308'. [ 185.743544][ T6918] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 185.793254][ T6915] netlink: 28 bytes leftover after parsing attributes in process `syz.3.308'. [ 187.175507][ T6915] netlink: 28 bytes leftover after parsing attributes in process `syz.3.308'. [ 187.433617][ T6933] binder: BINDER_SET_CONTEXT_MGR bad uid 0 != 60929 [ 187.469591][ T6933] binder: 6932:6933 ioctl 4018620d 2000000000c0 returned -1 [ 187.491738][ T6938] netlink: 'syz.0.317': attribute type 29 has an invalid length. [ 187.582348][ T6940] netlink: 'syz.0.317': attribute type 29 has an invalid length. [ 188.801127][ T6957] netlink: 16 bytes leftover after parsing attributes in process `syz.1.324'. [ 189.129676][ T979] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 189.303091][ T979] usb 1-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 189.318535][ T979] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.336634][ T979] usb 1-1: config 0 descriptor?? [ 189.356445][ T979] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 190.384785][ T979] cpia1 1-1:0.0: unexpected state after lo power cmd: 00 [ 190.607989][ T979] gspca_cpia1: usb_control_msg 01, error -71 [ 190.638721][ T979] cpia1 1-1:0.0: only firmware version 1 is supported (got: 0) [ 190.679612][ T979] usb 1-1: USB disconnect, device number 4 [ 190.828759][ T6979] netlink: 8 bytes leftover after parsing attributes in process `syz.1.332'. [ 190.839603][ T6979] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 190.847227][ T6979] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 190.861594][ T6981] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 193.015731][ T7006] pim6reg: entered allmulticast mode [ 193.511199][ T5919] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 193.558442][ T7021] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 193.691117][ T5919] usb 2-1: Using ep0 maxpacket: 8 [ 193.711439][ T5919] usb 2-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 193.737973][ T5978] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 193.756751][ T5919] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.789947][ T5919] usb 2-1: Product: syz [ 193.794179][ T5919] usb 2-1: Manufacturer: syz [ 193.823408][ T5919] usb 2-1: SerialNumber: syz [ 193.847139][ T5919] usb 2-1: config 0 descriptor?? [ 193.895870][ T5919] radio-usb-si4713 2-1:0.0: Si4713 development board discovered: (10C4:8244) [ 193.929833][ T5978] usb 5-1: Using ep0 maxpacket: 32 [ 193.945587][ T5978] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 194.411301][ T5978] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 194.550725][ T5978] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 194.558998][ T5978] usb 5-1: Product: syz [ 194.609714][ T5978] usb 5-1: Manufacturer: syz [ 194.634531][ T5978] usb 5-1: SerialNumber: syz [ 194.675043][ T5978] usb 5-1: config 0 descriptor?? [ 194.711957][ T7017] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 194.732432][ T5978] hub 5-1:0.0: bad descriptor, ignoring hub [ 194.754512][ T5978] hub 5-1:0.0: probe with driver hub failed with error -5 [ 194.953262][ T5919] radio-usb-si4713 2-1:0.0: probe with driver radio-usb-si4713 failed with error -71 [ 195.054577][ T5919] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 195.245913][ T5919] usb 2-1: USB disconnect, device number 3 [ 195.864191][ T7040] netlink: 4 bytes leftover after parsing attributes in process `syz.1.353'. [ 197.322849][ T7060] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 199.492582][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.499096][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.584615][ T7082] netlink: 28 bytes leftover after parsing attributes in process `syz.3.368'. [ 200.142496][ T7087] tipc: Started in network mode [ 200.147596][ T7087] tipc: Node identity aea626c15c88, cluster identity 4711 [ 200.157033][ T7087] tipc: Enabled bearer , priority 0 [ 200.197640][ T7087] syzkaller0: entered promiscuous mode [ 200.203632][ T7087] syzkaller0: entered allmulticast mode [ 200.585932][ T7085] tipc: Resetting bearer [ 200.704087][ T7085] tipc: Disabling bearer [ 200.734975][ T5978] usb 5-1: USB disconnect, device number 5 [ 201.156648][ T7105] netlink: 148 bytes leftover after parsing attributes in process `syz.4.374'. [ 203.114599][ T7105] syz.4.374 (7105): drop_caches: 2 [ 206.243224][ T7154] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 212.186980][ T7207] process 'syz.4.409' launched './file2' with NULL argv: empty string added [ 215.621972][ T7254] netlink: 148 bytes leftover after parsing attributes in process `syz.0.422'. [ 215.750318][ T7254] syz.0.422 (7254): drop_caches: 2 [ 215.819634][ T5936] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 216.005235][ T5936] usb 3-1: config 0 has no interfaces? [ 216.016952][ T5936] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 216.039048][ T5936] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.065764][ T5936] usb 3-1: Product: syz [ 216.087391][ T5936] usb 3-1: Manufacturer: syz [ 216.098655][ T5936] usb 3-1: SerialNumber: syz [ 216.154424][ T7260] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 216.166374][ T5936] usb 3-1: config 0 descriptor?? [ 217.270785][ T5848] Bluetooth: hci0: command 0x0406 tx timeout [ 217.282123][ T5848] Bluetooth: hci1: command 0x0406 tx timeout [ 217.288717][ T5848] Bluetooth: hci2: command 0x0406 tx timeout [ 217.295162][ T5848] Bluetooth: hci3: command 0x0406 tx timeout [ 220.184888][ T5894] usb 3-1: USB disconnect, device number 3 [ 220.710217][ T7299] netlink: 'syz.1.442': attribute type 13 has an invalid length. [ 220.834594][ T7301] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.441'. [ 220.844252][ T7301] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 220.865191][ T51] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 221.262706][ T7293] netlink: set zone limit has 4 unknown bytes [ 222.856189][ T7299] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.864244][ T7299] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.173159][ T7299] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 223.208679][ T7299] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 223.392633][ T7299] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.402005][ T7299] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.411964][ T7299] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.428028][ T7299] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.630427][ T7314] batman_adv: batadv0: Adding interface: gretap1 [ 223.649150][ T7314] batman_adv: batadv0: Interface activated: gretap1 [ 223.832617][ T7324] binder: BINDER_SET_CONTEXT_MGR bad uid 0 != 60929 [ 223.873068][ T7324] binder: 7323:7324 ioctl 4018620d 2000000000c0 returned -1 [ 223.877327][ T7327] binder: BINDER_SET_CONTEXT_MGR bad uid 0 != 60929 [ 223.908084][ T7327] binder: 7323:7327 ioctl 4018620d 200000000040 returned -1 [ 224.059665][ T9] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 224.367746][ T7331] netlink: 104 bytes leftover after parsing attributes in process `syz.3.452'. [ 224.519623][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 224.527774][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 224.619757][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 224.680805][ T51] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 224.703330][ T7341] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.455'. [ 224.712782][ T7341] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 225.131691][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 225.221258][ T9] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 225.267677][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.293212][ T9] usb 1-1: config 0 descriptor?? [ 226.062988][ T9] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 226.091869][ T9] microsoft 0003:045E:07DA.0005: ignoring exceeding usage max [ 226.132068][ T9] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 226.139370][ T9] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 226.187634][ T7356] syzkaller1: entered promiscuous mode [ 226.210029][ T7356] syzkaller1: entered allmulticast mode [ 226.240026][ T9] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 226.267583][ T9] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 226.309800][ T9] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 226.324298][ T9] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 226.334791][ T9] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 226.345134][ T9] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 226.354399][ T9] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 226.364765][ T9] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 226.374446][ T9] microsoft 0003:045E:07DA.0005: unsupported Resolution Multiplier 0 [ 226.422566][ T9] microsoft 0003:045E:07DA.0005: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 226.441005][ T9] microsoft 0003:045E:07DA.0005: no inputs found [ 226.447606][ T9] microsoft 0003:045E:07DA.0005: could not initialize ff, continuing anyway [ 226.496031][ T9] usb 1-1: USB disconnect, device number 5 [ 226.540314][ T5978] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 226.628521][ T7362] fido_id[7362]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 226.763401][ T5978] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 226.794280][ T5978] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 226.818681][ T5978] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 226.832363][ T5978] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 226.852325][ T5978] usb 5-1: SerialNumber: syz [ 227.098312][ T51] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 227.101162][ T7371] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.468'. [ 227.129340][ T7371] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 227.169863][ T5978] usb 5-1: 0:2 : does not exist [ 227.181709][ T5978] usb 5-1: unit 1 not found! [ 227.698510][ T5978] usb 5-1: USB disconnect, device number 6 [ 227.859027][ T5827] udevd[5827]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 229.457271][ T7393] netlink: 'syz.3.477': attribute type 29 has an invalid length. [ 229.496125][ T7393] netlink: 'syz.3.477': attribute type 29 has an invalid length. [ 229.639662][ T43] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 230.767496][ T43] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 231.284210][ T43] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 231.319651][ T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 231.379302][ T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid maxpacket 224, setting to 64 [ 231.398698][ T43] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 231.452573][ T43] usb 1-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 231.465319][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 231.475087][ T43] usb 1-1: Product: syz [ 231.479361][ T43] usb 1-1: Manufacturer: syz [ 231.485308][ T43] usb 1-1: SerialNumber: syz [ 231.526664][ T43] usb 1-1: config 0 descriptor?? [ 231.538485][ T7391] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 231.792590][ T43] radio-si470x 1-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 231.799942][ T43] radio-si470x 1-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 231.978849][ T43] radio-si470x 1-1:0.0: software version 0, hardware version 0 [ 232.005980][ T43] radio-si470x 1-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 232.023115][ T43] radio-si470x 1-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 232.196541][ T43] radio-si470x 1-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 232.250923][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 232.257651][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 232.264311][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 232.270950][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 232.277599][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 232.284314][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 232.291007][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 232.297682][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 232.304321][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 232.311074][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 232.317735][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 232.324392][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 232.332043][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 232.339058][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 232.345826][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 232.352496][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 232.359066][ T7419] program syz.4.487 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 232.359193][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 232.375101][ T43] radio-si470x 1-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 232.384384][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 232.391018][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 232.397568][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 232.404244][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 232.410870][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 232.417439][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 232.424131][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 232.430778][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 232.439199][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 232.446206][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 232.454055][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 232.460850][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 232.467795][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 232.479557][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 232.486226][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 232.492898][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 232.509524][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 232.516355][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 232.529497][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 232.539975][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 232.546953][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 232.553314][ T7423] veth1_macvtap: left promiscuous mode [ 232.553578][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 232.558996][ T7423] macsec0: entered promiscuous mode [ 232.569547][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 232.570764][ T7423] macsec0: entered allmulticast mode [ 232.577341][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 232.589520][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 232.596168][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 232.602898][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 232.609537][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 232.616156][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 232.622813][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 232.629443][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 232.639925][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 232.646767][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 232.653384][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 232.660020][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 232.666639][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 232.673268][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 232.679899][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 232.686496][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 232.693114][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 232.699762][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 232.706380][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 232.713051][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 232.719703][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 232.726325][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 232.732949][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 232.749920][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 232.756957][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 232.763962][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 232.770603][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 232.777210][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 232.783831][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 232.790477][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 232.797091][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 232.803702][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 232.810328][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 232.816950][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 232.823573][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 232.830210][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 232.836837][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 232.850139][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 232.857017][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 232.863655][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 232.870318][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 232.876942][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 232.883551][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 232.890176][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 232.896804][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 232.903427][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 232.910066][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 232.916685][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 232.923526][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 232.930166][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 232.936778][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 232.949871][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 232.956803][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 232.963457][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 232.970088][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 232.976709][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 232.983371][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 232.989985][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 232.996600][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 233.003255][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 233.009873][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 233.016488][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 233.023124][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 233.029755][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 233.036367][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 233.042989][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 233.059899][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 233.066909][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 233.073551][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 233.080179][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 233.086812][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 233.093505][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 233.100189][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 233.106834][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 233.113477][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 233.120121][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 233.126763][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 233.133415][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 233.140075][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 233.149926][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 233.156747][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 233.163367][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 233.169991][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 233.176636][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 233.183248][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 233.189894][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 233.196524][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 233.203158][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 233.209873][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 233.216518][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 233.223186][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 233.229831][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 233.236454][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 233.243108][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 233.260081][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 233.266991][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 233.273629][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 233.280287][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 233.286948][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 233.293588][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 233.300210][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 233.306812][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 233.313416][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 233.320057][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 233.326700][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 233.333310][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 233.339948][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 233.346598][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 233.359855][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 233.366803][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 233.373447][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 233.380083][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 233.386727][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 233.393350][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 233.399985][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 233.406636][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 233.413271][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 233.419886][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 233.426489][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 233.433146][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 233.439809][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 233.446532][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 233.453228][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 233.469749][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 233.476586][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 233.483274][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 233.489944][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 233.496610][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 233.503519][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 233.510192][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 233.516845][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 233.523637][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 233.530321][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 233.536961][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 233.543609][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 233.550273][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 233.557707][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 233.564332][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 233.570951][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 233.577571][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 233.584325][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 233.591044][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 233.597692][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 233.604341][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 233.611012][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 233.617660][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 233.624307][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 233.630974][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 233.637626][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 233.644272][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 233.650980][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 233.657633][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 233.669288][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 233.676481][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 233.683221][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 233.690092][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 233.696814][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 233.703507][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 233.710210][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 233.716907][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 233.723534][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 233.730233][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 233.737021][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 233.743689][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 233.750349][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 233.756964][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 233.764126][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 233.771229][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 233.780909][ T43] radio-si470x 1-1:0.0: probe with driver radio-si470x failed with error -22 [ 234.192893][ T43] usb 1-1: USB disconnect, device number 6 [ 235.254847][ T7446] vivid-000: ================= START STATUS ================= [ 235.264712][ T7446] vivid-000: Test Pattern: 75% Colorbar [ 235.270673][ T7446] vivid-000: Fill Percentage of Frame: 100 [ 235.276629][ T7446] vivid-000: Horizontal Movement: No Movement [ 235.283657][ T7446] vivid-000: Vertical Movement: No Movement [ 235.289792][ T7446] vivid-000: OSD Text Mode: All [ 235.294749][ T7446] vivid-000: Show Border: false [ 235.300563][ T7446] vivid-000: Show Square: false [ 235.305504][ T7446] vivid-000: Sensor Flipped Horizontally: false [ 235.312530][ T7446] vivid-000: Sensor Flipped Vertically: false [ 235.318882][ T7446] vivid-000: Insert SAV Code in Image: false [ 235.349062][ T7446] vivid-000: Insert EAV Code in Image: false [ 235.355299][ T7446] vivid-000: Insert Video Guard Band: false [ 235.361414][ T7446] vivid-000: Reduced Framerate: false [ 235.368023][ T7446] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 235.376042][ T7446] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 235.384403][ T7446] vivid-000: Enable Capture Cropping: true [ 235.390332][ T7446] vivid-000: Enable Capture Composing: true [ 235.396309][ T7446] vivid-000: Enable Capture Scaler: true [ 235.403097][ T7446] vivid-000: Timestamp Source: End of Frame [ 235.409061][ T7446] vivid-000: Colorspace: sRGB [ 235.413865][ T7446] vivid-000: Transfer Function: Default [ 235.449796][ T7446] vivid-000: Y'CbCr Encoding: Default [ 235.455473][ T7446] vivid-000: HSV Encoding: Hue 0-179 [ 235.461089][ T7446] vivid-000: Quantization: Default [ 235.466407][ T7446] vivid-000: Apply Alpha To Red Only: false [ 235.472790][ T7446] vivid-000: Standard Aspect Ratio: 4x3 [ 235.478510][ T7446] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 235.486648][ T7446] vivid-000: DV Timings: 640x480p59 inactive [ 235.493032][ T7446] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 235.500540][ T7446] vivid-000: Maximum EDID Blocks: 2 [ 235.506642][ T7446] vivid-000: Limited RGB Range (16-235): false [ 235.513691][ T7446] vivid-000: Rx RGB Quantization Range: Automatic [ 235.520345][ T7446] vivid-000: Power Present: 0x00000001 [ 235.525984][ T7446] tpg source WxH: 320x240 (Y'CbCr) [ 235.531278][ T7446] tpg field: 1 [ 235.534801][ T7446] tpg crop: (0,0)/320x240 [ 235.539283][ T7446] tpg compose: (0,0)/320x240 [ 235.544115][ T7446] tpg colorspace: 8 [ 235.548072][ T7446] tpg transfer function: 0/0 [ 235.552982][ T7446] tpg Y'CbCr encoding: 0/0 [ 235.557539][ T7446] tpg quantization: 0/0 [ 235.561873][ T7446] tpg RGB range: 0/2 [ 235.565885][ T7446] vivid-000: ================== END STATUS ================== [ 239.466895][ T7480] mmap: syz.2.505 (7480) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 239.505804][ T7480] binder: BINDER_SET_CONTEXT_MGR bad uid 0 != 60929 [ 239.513040][ T7480] binder: 7475:7480 ioctl 4018620d 200000000480 returned -1 [ 242.466454][ T7492] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input9 [ 243.019004][ T7495] team_slave_1: entered promiscuous mode [ 243.040173][ T7495] vlan2: entered promiscuous mode [ 243.081604][ T7495] team0: entered promiscuous mode [ 245.769535][ T9] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 245.972287][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 245.992445][ T9] usb 5-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 246.064419][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.101436][ T9] usb 5-1: config 0 descriptor?? [ 246.642296][ T7540] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 248.039685][ T5978] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 248.436222][ T5978] usb 3-1: config 0 has no interfaces? [ 248.458671][ T5978] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 248.467854][ T5978] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.481509][ T5978] usb 3-1: Product: syz [ 248.498026][ T5978] usb 3-1: Manufacturer: syz [ 248.659615][ T5978] usb 3-1: SerialNumber: syz [ 248.694377][ T5978] usb 3-1: config 0 descriptor?? [ 249.869768][ T5978] delete_channel: no stack [ 249.984873][ T9] usbhid 5-1:0.0: can't add hid device: -71 [ 249.992561][ T9] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 250.209789][ T9] usb 5-1: USB disconnect, device number 7 [ 250.901301][ T51] Bluetooth: hci0: unexpected event for opcode 0x0c03 [ 251.389756][ T5978] usb 3-1: USB disconnect, device number 4 [ 252.170889][ T7591] kvm: requested 155885 ns i8254 timer period limited to 200000 ns [ 252.427045][ T7591] kvm: requested 147504 ns i8254 timer period limited to 200000 ns [ 252.668673][ T7591] kvm: requested 38552 ns i8254 timer period limited to 200000 ns [ 252.712223][ T7591] kvm: requested 45257 ns i8254 timer period limited to 200000 ns [ 252.767207][ T7591] kvm: requested 191923 ns i8254 timer period limited to 200000 ns [ 253.857701][ T7623] netlink: 36 bytes leftover after parsing attributes in process `syz.2.550'. [ 256.098319][ T51] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 257.668699][ T7672] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 260.933583][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 260.940084][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.545256][ T7715] netlink: 148 bytes leftover after parsing attributes in process `syz.4.576'. [ 261.585277][ T7715] syz.4.576 (7715): drop_caches: 2 [ 261.719675][ T7701] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 261.746251][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 261.773192][ T7701] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 261.799122][ T7701] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 261.805565][ T7701] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 261.826594][ T7701] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 261.833296][ T7701] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 261.929513][ T7701] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 261.945986][ T7701] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 262.135772][ T7701] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 262.210544][ T7701] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 262.301401][ T7701] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 262.759625][ T9] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 263.050277][ T7725] batadv1: entered promiscuous mode [ 263.099520][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 263.204411][ T9] usb 3-1: config 0 has an invalid interface number: 230 but max is 0 [ 263.258284][ T9] usb 3-1: config 0 has no interface number 0 [ 263.313581][ T9] usb 3-1: config 0 interface 230 has no altsetting 0 [ 263.457726][ T9] usb 3-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 263.484737][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.503106][ T9] usb 3-1: Product: syz [ 263.513239][ T9] usb 3-1: Manufacturer: syz [ 263.544934][ T9] usb 3-1: SerialNumber: syz [ 263.574706][ T9] usb 3-1: config 0 descriptor?? [ 263.615631][ T9] ums-usbat 3-1:0.230: USB Mass Storage device detected [ 263.678658][ T9] ums-usbat 3-1:0.230: Quirks match for vid 0781 pid 0005: 1 [ 263.799664][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 263.799978][ T5843] Bluetooth: hci0: command 0x0406 tx timeout [ 263.879725][ T5843] Bluetooth: hci2: command 0x0406 tx timeout [ 263.959615][ T5843] Bluetooth: hci3: command 0x0406 tx timeout [ 264.205723][ T51] Bluetooth: hci4: command 0x0c1a tx timeout [ 265.542344][ T7752] cgroup: fork rejected by pids controller in /syz4 [ 265.609658][ T7751] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 265.680477][ T7751] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 265.879797][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 265.953934][ T7801] netlink: 8 bytes leftover after parsing attributes in process `syz.2.590'. [ 265.963052][ T7801] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 265.970986][ T7801] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 266.003184][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 266.046174][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 266.107457][ T9] ums-usbat 3-1:0.230: probe with driver ums-usbat failed with error -5 [ 266.122823][ T9] usb 3-1: USB disconnect, device number 5 [ 266.308318][ T51] Bluetooth: hci4: command 0x0c1a tx timeout [ 266.634297][ T7827] netlink: 8 bytes leftover after parsing attributes in process `syz.0.592'. [ 266.713897][ T9] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 266.960668][ T9] usb 3-1: config 0 has no interfaces? [ 266.973621][ T9] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 266.983034][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.021810][ T9] usb 3-1: Product: syz [ 267.083611][ T9] usb 3-1: Manufacturer: syz [ 267.104065][ T9] usb 3-1: SerialNumber: syz [ 267.126211][ T9] usb 3-1: config 0 descriptor?? [ 267.466871][ T7801] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 267.477465][ T7801] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 268.263677][ T7844] netlink: 148 bytes leftover after parsing attributes in process `syz.3.597'. [ 268.288531][ T7844] syz.3.597 (7844): drop_caches: 2 [ 268.384413][ T51] Bluetooth: hci4: command 0x0c1a tx timeout [ 268.783729][ T5919] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 269.034867][ T5919] usb 2-1: config 0 has no interfaces? [ 269.045566][ T5919] usb 2-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice=2c.2c [ 269.066576][ T5919] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.082858][ T5919] usb 2-1: Product: syz [ 269.104341][ T5919] usb 2-1: Manufacturer: syz [ 269.109053][ T5919] usb 2-1: SerialNumber: syz [ 269.182911][ T5919] usb 2-1: config 0 descriptor?? [ 269.400602][ T5919] usb 3-1: USB disconnect, device number 6 [ 269.419850][ T5936] usb 2-1: USB disconnect, device number 4 [ 269.650903][ T7856] binder: BINDER_SET_CONTEXT_MGR bad uid 0 != 60929 [ 269.657832][ T7856] binder: 7855:7856 ioctl 4018620d 2000000000c0 returned -1 [ 269.682202][ T7856] binder: BINDER_SET_CONTEXT_MGR bad uid 0 != 60929 [ 269.709568][ T7856] binder: 7855:7856 ioctl 4018620d 200000000040 returned -1 [ 270.454065][ T7868] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=768 (1536 ns) > initial count (192 ns). Using initial count to start timer. [ 270.699649][ T5828] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 270.869657][ T5828] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 270.878787][ T5828] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.208824][ T5828] usb 1-1: config 0 descriptor?? [ 271.315270][ T5828] cp210x 1-1:0.0: cp210x converter detected [ 271.880465][ T5828] cp210x 1-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 272.100686][ T5828] usb 1-1: cp210x converter now attached to ttyUSB0 [ 272.295694][ T5828] usb 1-1: USB disconnect, device number 7 [ 272.347348][ T5828] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 272.621271][ T5828] cp210x 1-1:0.0: device disconnected [ 273.915903][ T7909] netlink: 12 bytes leftover after parsing attributes in process `syz.2.618'. [ 273.939745][ T7914] tipc: Failed to obtain node identity [ 273.959694][ T7914] tipc: Enabling of bearer rejected, failed to enable media [ 274.418513][ T7924] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 277.079566][ T5828] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 277.273075][ T5828] usb 5-1: Using ep0 maxpacket: 8 [ 277.322595][ T5828] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 277.369534][ T5828] usb 5-1: config 0 has no interface number 0 [ 277.383669][ T5828] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 277.432192][ T7969] syzkaller1: entered promiscuous mode [ 277.432218][ T7969] syzkaller1: entered allmulticast mode [ 277.460031][ T5828] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 277.460069][ T5828] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 277.460097][ T5828] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 277.460144][ T5828] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 277.460169][ T5828] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.506165][ T5828] usb 5-1: config 0 descriptor?? [ 277.523356][ T5828] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 277.831718][ T5828] usb 5-1: USB disconnect, device number 8 [ 277.867005][ T5828] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 278.812625][ T7988] netlink: 4 bytes leftover after parsing attributes in process `syz.3.649'. [ 280.109700][ T9] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 281.186591][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 281.235506][ T9] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 281.277450][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.559755][ T9] usb 1-1: config 0 descriptor?? [ 281.869559][ T5919] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 282.015659][ T9] keytouch 0003:0926:3333.0006: fixing up Keytouch IEC report descriptor [ 282.060967][ T5919] usb 4-1: Using ep0 maxpacket: 8 [ 282.063439][ T9] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0006/input/input10 [ 282.074152][ T5919] usb 4-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 282.498187][ T5919] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.514951][ T5919] usb 4-1: Product: syz [ 282.522859][ T9] keytouch 0003:0926:3333.0006: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 282.531892][ T5828] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 282.566471][ T5919] usb 4-1: Manufacturer: syz [ 282.578463][ T5919] usb 4-1: SerialNumber: syz [ 282.604998][ T5919] usb 4-1: config 0 descriptor?? [ 282.629124][ T9] usb 1-1: USB disconnect, device number 8 [ 282.655047][ T5919] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 282.723710][ T5828] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 282.756933][ T5828] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 282.772350][ T5828] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 282.784634][ T5828] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 282.794985][ T5828] usb 5-1: SerialNumber: syz [ 282.871777][ T8037] fido_id[8037]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 283.075118][ T5828] usb 5-1: 0:2 : does not exist [ 283.082515][ T5828] usb 5-1: unit 1 not found! [ 283.305084][ T5828] usb 5-1: USB disconnect, device number 9 [ 283.522021][ T6189] udevd[6189]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 283.713945][ T5919] gspca_sonixj: reg_w1 err -71 [ 283.827070][ T5919] sonixj 4-1:0.0: probe with driver sonixj failed with error -71 [ 283.908181][ T5919] usb 4-1: USB disconnect, device number 3 [ 284.345810][ T8054] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=768 (1536 ns) > initial count (192 ns). Using initial count to start timer. [ 285.189038][ T8071] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 285.829719][ T5936] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 286.069772][ T5936] usb 1-1: Using ep0 maxpacket: 16 [ 287.329540][ T5919] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 287.511486][ T5919] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 287.542331][ T5919] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 287.581818][ T5919] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 287.616972][ T5919] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.782947][ T5919] usb 5-1: config 0 descriptor?? [ 288.740011][ T5919] usb 5-1: language id specifier not provided by device, defaulting to English [ 289.139907][ T5936] usb 1-1: unable to get BOS descriptor or descriptor too short [ 289.148237][ T5936] usb 1-1: no configurations [ 289.180192][ T5936] usb 1-1: can't read configurations, error -22 [ 289.387388][ T5919] uclogic 0003:256C:006D.0007: interface is invalid, ignoring [ 289.611248][ T92] usb 5-1: USB disconnect, device number 10 [ 290.191985][ T8118] sctp: failed to load transform for md5: -2 [ 291.760362][ T8139] tipc: Enabled bearer , priority 0 [ 292.094076][ T8139] syzkaller0: entered promiscuous mode [ 292.109568][ T8139] syzkaller0: entered allmulticast mode [ 292.582157][ T8147] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.699'. [ 292.592081][ T8147] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 293.011944][ T5919] tipc: Node number set to 32710852 [ 294.471013][ T8182] loop6: detected capacity change from 0 to 7 [ 294.495034][ T8182] Dev loop6: unable to read RDB block 7 [ 294.500959][ T8182] loop6: unable to read partition table [ 294.513518][ T8182] loop6: partition table beyond EOD, truncated [ 294.536760][ T8182] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 295.092070][ T92] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 295.263805][ T92] usb 4-1: Using ep0 maxpacket: 32 [ 295.429762][ T92] usb 4-1: config 0 has an invalid interface number: 48 but max is 0 [ 295.437935][ T92] usb 4-1: config 0 has no interface number 0 [ 295.444736][ T92] usb 4-1: too many endpoints for config 0 interface 48 altsetting 48: 48, using maximum allowed: 30 [ 295.459725][ T92] usb 4-1: config 0 interface 48 altsetting 48 has 0 endpoint descriptors, different from the interface descriptor's value: 48 [ 295.479109][ T92] usb 4-1: config 0 interface 48 has no altsetting 0 [ 295.488712][ T92] usb 4-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 295.499940][ T92] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.509224][ T92] usb 4-1: Product: syz [ 295.518286][ T92] usb 4-1: Manufacturer: syz [ 295.528483][ T92] usb 4-1: SerialNumber: syz [ 295.550239][ T92] usb 4-1: config 0 descriptor?? [ 295.995806][ T92] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 296.793365][ T92] gspca_ov534_9: reg_w failed -110 [ 297.279719][ T92] gspca_ov534_9: Unknown sensor 0000 [ 297.279821][ T92] ov534_9 4-1:0.48: probe with driver ov534_9 failed with error -22 [ 297.819622][ T5843] Bluetooth: hci4: command 0x0c1a tx timeout [ 298.252628][ T8144] tipc: Resetting bearer [ 298.277304][ T8138] tipc: Resetting bearer [ 298.340179][ T8138] tipc: Disabling bearer [ 298.520533][ T5936] usb 4-1: USB disconnect, device number 4 [ 299.169581][ T5828] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 299.228271][ T8223] netlink: 'syz.3.723': attribute type 2 has an invalid length. [ 299.266807][ T8223] $Hÿ: renamed from bond0 (while UP) [ 299.377045][ T8223] $Hÿ: entered promiscuous mode [ 299.383289][ T8223] bond_slave_0: entered promiscuous mode [ 299.389364][ T8223] bond_slave_1: entered promiscuous mode [ 299.534963][ T5828] usb 1-1: unable to get BOS descriptor or descriptor too short [ 299.562242][ T5828] usb 1-1: config 2 interface 0 has no altsetting 0 [ 299.590200][ T5828] usb 1-1: New USB device found, idVendor=2040, idProduct=d8e4, bcdDevice=33.cb [ 299.599306][ T5828] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.625701][ T5828] usb 1-1: Product: syz [ 299.638510][ T5828] usb 1-1: Manufacturer: syz [ 299.660832][ T5828] usb 1-1: SerialNumber: syz [ 299.994722][ T5828] usb 1-1: dvb_usb_v2: found a 'Hauppauge 138xxx DVBT' in warm state [ 300.019691][ T5828] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 300.050622][ T5828] dvbdev: DVB: registering new adapter (Hauppauge 138xxx DVBT) [ 300.058702][ T5828] usb 1-1: media controller created [ 300.217174][ T5828] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 300.321979][ T5828] usb 1-1: selecting invalid altsetting 2 [ 300.327877][ T5828] set interface failed [ 300.328452][ T5828] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 300.382592][ T5828] error writing reg: 0xff, val: 0x00 [ 300.461732][ T5828] dvb_usb_mxl111sf 1-1:2.0: probe with driver dvb_usb_mxl111sf failed with error -22 [ 300.968566][ T5828] usb 1-1: USB disconnect, device number 11 [ 303.046195][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 303.124783][ T8270] IPVS: set_ctl: invalid protocol: 50 0.0.0.0:20002 [ 303.264638][ T8276] syz.0.738 (8276): drop_caches: 2 [ 306.149703][ T5936] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 306.326259][ T5936] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 306.352701][ T5936] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 306.411290][ T5936] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.635961][ T8321] usb usb8: usbfs: process 8321 (syz.1.752) did not claim interface 0 before use [ 306.652716][ T5936] usb 3-1: config 0 descriptor?? [ 306.677028][ T5936] pwc: Askey VC010 type 2 USB webcam detected. [ 307.129476][ T5936] pwc: recv_control_msg error -32 req 02 val 2b00 [ 307.166441][ T5936] pwc: recv_control_msg error -32 req 02 val 2700 [ 307.206435][ T5936] pwc: recv_control_msg error -32 req 02 val 2c00 [ 307.246183][ T5936] pwc: recv_control_msg error -32 req 04 val 1000 [ 307.263262][ T5936] pwc: recv_control_msg error -32 req 04 val 1300 [ 307.276164][ T5936] pwc: recv_control_msg error -32 req 04 val 1400 [ 307.290141][ T5936] pwc: recv_control_msg error -32 req 02 val 2000 [ 307.307760][ T5936] pwc: recv_control_msg error -32 req 02 val 2100 [ 307.317840][ T5936] pwc: recv_control_msg error -32 req 04 val 1500 [ 307.332292][ T5936] pwc: recv_control_msg error -32 req 02 val 2500 [ 307.573106][ T5936] pwc: recv_control_msg error -71 req 02 val 2600 [ 307.584227][ T5936] pwc: recv_control_msg error -71 req 02 val 2900 [ 307.618058][ T5936] pwc: recv_control_msg error -71 req 02 val 2800 [ 307.654971][ T5936] pwc: recv_control_msg error -71 req 04 val 1100 [ 307.667583][ T5936] pwc: recv_control_msg error -71 req 04 val 1200 [ 307.699785][ T5936] pwc: Registered as video103. [ 307.709748][ T9] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 307.727325][ T5936] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input11 [ 307.818964][ T5936] usb 3-1: USB disconnect, device number 7 [ 307.909659][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 307.933882][ T9] usb 1-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 307.998604][ T9] usb 1-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 308.020673][ T9] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 308.034158][ T9] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid wMaxPacketSize 0 [ 308.045787][ T9] usb 1-1: config 168 interface 0 altsetting 188 has 1 endpoint descriptor, different from the interface descriptor's value: 100 [ 308.065338][ T9] usb 1-1: config 168 interface 0 has no altsetting 0 [ 308.083565][ T9] usb 1-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 308.131092][ T9] usb 1-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 308.189105][ T9] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 308.259470][ T9] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid wMaxPacketSize 0 [ 308.348634][ T9] usb 1-1: config 168 interface 0 altsetting 188 has 1 endpoint descriptor, different from the interface descriptor's value: 100 [ 308.394590][ T9] usb 1-1: config 168 interface 0 has no altsetting 0 [ 308.405076][ T8337] netlink: 224 bytes leftover after parsing attributes in process `syz.2.758'. [ 308.445178][ T8337] openvswitch: netlink: Flow key attr not present in new flow. [ 308.459709][ T9] usb 1-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 308.494900][ T9] usb 1-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 308.530971][ T9] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 308.581458][ T9] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid wMaxPacketSize 0 [ 308.627567][ T9] usb 1-1: config 168 interface 0 altsetting 188 has 1 endpoint descriptor, different from the interface descriptor's value: 100 [ 308.662541][ T9] usb 1-1: config 168 interface 0 has no altsetting 0 [ 308.684836][ T9] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 308.703963][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.739601][ T9] usb 1-1: Product: syz [ 308.767320][ T9] usb 1-1: Manufacturer: syz [ 308.782147][ T9] usb 1-1: SerialNumber: syz [ 309.050269][ T8351] bond1: entered promiscuous mode [ 309.093929][ T9] adutux 1-1:168.0: interrupt endpoints not found [ 309.246648][ T9] usb 1-1: USB disconnect, device number 12 [ 309.788534][ T8347] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 310.041643][ T9] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 310.148421][ T8374] netlink: 224 bytes leftover after parsing attributes in process `syz.3.771'. [ 310.205659][ T8374] openvswitch: netlink: Flow key attr not present in new flow. [ 310.229682][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 310.239261][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 310.255496][ T9] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 310.270958][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.304494][ T9] usb 1-1: config 0 descriptor?? [ 310.735179][ T9] mcp2221 0003:04D8:00DD.0008: unknown main item tag 0x0 [ 310.753365][ T9] mcp2221 0003:04D8:00DD.0008: unknown main item tag 0x0 [ 310.773592][ T9] mcp2221 0003:04D8:00DD.0008: unknown main item tag 0x0 [ 310.837510][ T9] mcp2221 0003:04D8:00DD.0008: unknown main item tag 0x0 [ 310.872714][ T9] mcp2221 0003:04D8:00DD.0008: unknown main item tag 0x0 [ 310.952709][ T9] mcp2221 0003:04D8:00DD.0008: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 311.168954][ T9] usb 1-1: USB disconnect, device number 13 [ 312.866269][ T8395] syz_tun: entered allmulticast mode [ 312.958189][ T8395] BUG: assuming non migratable context at ./include/linux/filter.h:703 [ 312.969610][ T92] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 312.985530][ T8395] in_atomic(): 0, irqs_disabled(): 0, migration_disabled() 0 pid: 8395, name: syz.0.779 [ 313.024712][ T8395] 3 locks held by syz.0.779/8395: [ 313.047216][ T8395] #0: ffffffff8f509f08 (rtnl_mutex){+.+.}-{4:4}, at: ip_mroute_setsockopt+0x107/0xf60 [ 313.073873][ T8395] #1: ffffffff8e13f0e0 (rcu_read_lock){....}-{1:3}, at: ipmr_mfc_add+0x11b/0x2850 [ 313.117684][ T8395] #2: ffffffff8e13f0e0 (rcu_read_lock){....}-{1:3}, at: nf_hook+0x9d/0x380 [ 313.139607][ T92] usb 4-1: Using ep0 maxpacket: 32 [ 313.151550][ T8395] CPU: 1 UID: 0 PID: 8395 Comm: syz.0.779 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 313.151578][ T8395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 313.151600][ T8395] Call Trace: [ 313.151614][ T8395] [ 313.151625][ T8395] dump_stack_lvl+0x189/0x250 [ 313.151662][ T8395] ? __pfx_dump_stack_lvl+0x10/0x10 [ 313.151688][ T8395] ? print_lock_name+0xde/0x100 [ 313.151712][ T8395] __cant_migrate+0x238/0x2e0 [ 313.151733][ T8395] ? __pfx___cant_migrate+0x10/0x10 [ 313.151762][ T8395] nf_hook_run_bpf+0x8f/0x1f0 [ 313.151778][ T8395] ? __pfx_ipt_do_table+0x10/0x10 [ 313.151799][ T8395] ? __pfx_nf_hook_run_bpf+0x10/0x10 [ 313.151814][ T8395] ? iptable_mangle_hook+0x189/0x4c0 [ 313.151838][ T8395] ? nf_hook+0x9d/0x380 [ 313.151850][ T8395] ? nf_nat_ipv4_out+0x2f7/0x4e0 [ 313.151870][ T8395] ? __pfx_nf_hook_run_bpf+0x10/0x10 [ 313.151886][ T8395] nf_hook_slow+0xc5/0x220 [ 313.151913][ T8395] nf_hook+0x217/0x380 [ 313.151930][ T8395] ? nf_hook+0x9d/0x380 [ 313.151943][ T8395] ? __pfx_nf_hook+0x10/0x10 [ 313.151965][ T8395] ? __pfx_ip_mc_finish_output+0x10/0x10 [ 313.151987][ T8395] ? skb_clone+0x246/0x3a0 [ 313.152004][ T8395] ip_mc_output+0x22d/0x590 [ 313.152018][ T8395] ? __pfx_ip_mc_finish_output+0x10/0x10 [ 313.152037][ T8395] ? ipmr_queue_xmit+0x1460/0x16f0 [ 313.152053][ T8395] ipmr_queue_xmit+0xf12/0x16f0 [ 313.152082][ T8395] ? __pfx_ipmr_queue_xmit+0x10/0x10 [ 313.152100][ T8395] ? __pfx_ipmr_forward_finish+0x10/0x10 [ 313.152115][ T8395] ? skb_clone+0x246/0x3a0 [ 313.152128][ T8395] ? ip_mr_forward+0x63c/0xfe0 [ 313.152169][ T8395] ipmr_mfc_add+0x1f63/0x2850 [ 313.152200][ T8395] ? ipmr_mfc_add+0x11b/0x2850 [ 313.152230][ T8395] ? __pfx_ipmr_mfc_add+0x10/0x10 [ 313.152254][ T8395] ? __might_fault+0xb0/0x130 [ 313.152292][ T8395] ip_mroute_setsockopt+0xcf1/0xf60 [ 313.152323][ T8395] ? __pfx_ip_mroute_setsockopt+0x10/0x10 [ 313.152346][ T8395] ? wake_up_q+0xca/0x110 [ 313.152379][ T8395] do_ip_setsockopt+0xf11/0x2d00 [ 313.152404][ T8395] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 313.152439][ T8395] ? __fget_files+0x2a/0x420 [ 313.152461][ T8395] ip_setsockopt+0x66/0x110 [ 313.152479][ T8395] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 313.152501][ T8395] do_sock_setsockopt+0x179/0x1b0 [ 313.152533][ T8395] __x64_sys_setsockopt+0x13f/0x1b0 [ 313.152561][ T8395] do_syscall_64+0xfa/0x3b0 [ 313.152581][ T8395] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.152595][ T8395] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 313.152610][ T8395] ? clear_bhb_loop+0x60/0xb0 [ 313.152629][ T8395] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.152645][ T8395] RIP: 0033:0x7f77b338ebe9 [ 313.152663][ T8395] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 313.152685][ T8395] RSP: 002b:00007f77b4273038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 313.152708][ T8395] RAX: ffffffffffffffda RBX: 00007f77b35b5fa0 RCX: 00007f77b338ebe9 [ 313.152725][ T8395] RDX: 00000000000000d2 RSI: 0000000000000000 RDI: 0000000000000007 [ 313.152738][ T8395] RBP: 00007f77b3411e19 R08: 000000000000003c R09: 0000000000000000 [ 313.152752][ T8395] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000000 [ 313.152766][ T8395] R13: 00007f77b35b6038 R14: 00007f77b35b5fa0 R15: 00007ffce1937758 [ 313.152800][ T8395] [ 313.161721][ T8394] syz_tun: left allmulticast mode [ 313.528931][ T92] usb 4-1: config 0 has an invalid interface number: 230 but max is 0 [ 313.540464][ T92] usb 4-1: config 0 has no interface number 0 [ 313.546616][ T92] usb 4-1: config 0 interface 230 has no altsetting 0 [ 313.561623][ T92] usb 4-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 313.570888][ T92] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.579169][ T92] usb 4-1: Product: syz [ 313.583913][ T92] usb 4-1: Manufacturer: syz [ 313.588670][ T92] usb 4-1: SerialNumber: syz [ 313.598318][ T92] usb 4-1: config 0 descriptor?? [ 313.609267][ T92] ums-usbat 4-1:0.230: USB Mass Storage device detected [ 313.642450][ T92] ums-usbat 4-1:0.230: Quirks match for vid 0781 pid 0005: 1 [ 315.890138][ T92] ums-usbat 4-1:0.230: probe with driver ums-usbat failed with error -5 [ 316.107675][ T5978] usb 4-1: USB disconnect, device number 5 [ 322.362449][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.368896][ T1301] ieee802154 phy1 wpan1: encryption failed: -22