last executing test programs: 55.245786361s ago: executing program 4 (id=465): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000001c0)={'\x00', 0x40, 0xa, 0x401, 0x40000004, 0x10}) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0x1276, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0xc102a0, 0x101) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, 0x0, 0x0) 53.246223456s ago: executing program 4 (id=468): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280)={0x0}, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r3 = syz_open_dev$vbi(&(0x7f00000066c0), 0x1, 0x2) ioctl$VIDIOC_TRY_FMT(r3, 0xc0d05640, &(0x7f0000006700)={0x7, @raw_data="e9e643ae5c009af6ed2828af48e91e8d494a48697e643d9bef692c8569ad2cce9260c4a9cb23ef9e82ddabc1486d189c3f208a011dd6b88ae1b1c6a2c3fb3492a17be6b47bad657068b35ec112121f53262cab3d47db61897231f13c930662389c2fae1170fcc0ffb15309d396063f0d72efedf4e0b4ca96285ce944ed52e71e39c959078d40a1cdf1d9551918977d6482eb2359128b3fe23dad3af9668e437f686edc82fe6860f6dfa923c38ae6970fa02d3813f72ff79366f141304b5b9775795b14743409224c"}) ioctl$TIOCL_BLANKSCREEN(0xffffffffffffffff, 0x541c, 0x0) ioctl$TIOCL_UNBLANKSCREEN(0xffffffffffffffff, 0x541c, 0x0) socket$netlink(0x10, 0x3, 0x12) openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 51.409126709s ago: executing program 4 (id=474): syz_usb_connect(0x5, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xfe, 0x85, 0x71, 0x8, 0xb48, 0x3007, 0x4f64, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x38, 0x0, 0x0, 0x23, 0x52, 0x26}}]}}]}}, 0x0) r0 = openat$vicodec0(0xffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc0f8565c, &(0x7f0000000300)={0x0, 0x1, 0x4, {0xa, @pix_mp={0x0, 0x0, 0x22353227, 0x0, 0x0, [{0xc}, {}, {}, {}, {}, {0x0, 0x20000000}], 0x1, 0x0, 0x0, 0x1}}}) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) prctl$PR_SET_THP_DISABLE(0x29, 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 47.432066456s ago: executing program 4 (id=484): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r3 = dup2(r2, r2) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f00000001c0)={'\x00', 0x40, 0xa, 0x401, 0x40000004, 0x10}) ioctl$BLKTRACESTART(r2, 0x1274, 0x0) ioctl$BLKTRACESETUP(r3, 0x1276, 0x0) preadv(r1, &(0x7f00000004c0)=[{&(0x7f0000000500)=""/128, 0x80}], 0x1, 0xc102a0, 0x101) r4 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r4, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) 46.080882665s ago: executing program 4 (id=490): r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) pipe(&(0x7f0000000100)) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') socket$nl_generic(0x10, 0x3, 0x10) socket$inet_icmp(0x2, 0x2, 0x1) socket$kcm(0x11, 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800080000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES64=r1], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 45.203090274s ago: executing program 4 (id=493): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r5, &(0x7f00000077c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000004200)={0x50, 0x0, r6, {0x7, 0x1f, 0x0, 0x207645a}}, 0x50) syz_fuse_handle_req(r5, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000240)='afs_make_fs_calli\x00', r4, 0x0, 0x40}, 0x18) r7 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r7, &(0x7f0000000380)=""/186, 0xba) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001500)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x101, [{0x0, 0x2, 0x2}]}, @enum]}}, 0x0, 0x3e, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) ioctl$VHOST_SET_VRING_NUM(r0, 0x4008af10, &(0x7f0000000040)={0x0, 0x1}) 29.521325405s ago: executing program 32 (id=493): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r5, &(0x7f00000077c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000004200)={0x50, 0x0, r6, {0x7, 0x1f, 0x0, 0x207645a}}, 0x50) syz_fuse_handle_req(r5, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000240)='afs_make_fs_calli\x00', r4, 0x0, 0x40}, 0x18) r7 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r7, &(0x7f0000000380)=""/186, 0xba) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001500)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x101, [{0x0, 0x2, 0x2}]}, @enum]}}, 0x0, 0x3e, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) ioctl$VHOST_SET_VRING_NUM(r0, 0x4008af10, &(0x7f0000000040)={0x0, 0x1}) 21.315835976s ago: executing program 2 (id=539): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) writev(0xffffffffffffffff, &(0x7f0000000000), 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x9007}, 0x4) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r5, 0xae9a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000006c0)) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000000c0)={@ifindex, 0x33, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$KVM_RUN(r5, 0xae80, 0x0) 19.140302463s ago: executing program 2 (id=542): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x64}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x50, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_SYNPROXY={0x14, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8}, @CTA_SYNPROXY_ITS={0x8}]}, @CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_LABELS={0x4}]}, 0x50}}, 0x0) 17.284475936s ago: executing program 2 (id=547): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c", 0x15) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f000000ecc0)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000008ac0)=""/4096, 0x1000}], 0x1}, 0xffffffc0}], 0x1, 0x2, 0x0) sendmsg$alg(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000ac0)="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", 0xfc0}, {&(0x7f0000000140)="2eb376a2", 0x4}, {&(0x7f0000000280)="bf23f9d6d8383ab47286b68053d31ea7043c91fa61d09b5f9cd4b2d7bbc35a274a070390c1eaf93c3c80ea181e47d618351d2033001cc5574e6a7f3260301c0bc9c1c1cd0d5a4e2809f1fdd176", 0x4d}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x20045830}, 0x20040084) 16.409423318s ago: executing program 2 (id=549): io_setup(0x8, &(0x7f0000000000)=0x0) r1 = eventfd2(0x0, 0x80001) io_submit(r0, 0x1, &(0x7f0000000040)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) r2 = socket$inet6(0xa, 0x5, 0x0) listen(r2, 0x80) read(r2, &(0x7f0000002700)=""/55, 0x37) writev(r1, &(0x7f00000010c0)=[{&(0x7f0000000000)="894a2fca7a0d8541", 0x8}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x732}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e23, @empty}, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) iopl(0x3) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket(0x21, 0xa, 0x2b9e) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) setuid(r5) r6 = socket$kcm(0x29, 0x2, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r6, 0x119, 0x1, 0x0, 0x0) close(r6) r7 = socket$inet6(0xa, 0x2, 0x0) ioctl$PTP_EXTTS_REQUEST(0xffffffffffffffff, 0x40103d02, 0x0) setsockopt$inet6_mreq(r7, 0x29, 0x1b, &(0x7f0000000280)={@dev={0xfe, 0x80, '\x00', 0x25}}, 0x14) syz_usbip_server_init(0x142efa27c63a9ee8) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) 11.224541844s ago: executing program 2 (id=556): r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000400)='.\x00', 0x4000423) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000780)=[0xffffffffffffffff], &(0x7f00000007c0), 0x10, 0x0, @void, @value}, 0x90) socket$inet_udp(0x2, 0x2, 0x0) unshare(0x62040200) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) lstat(&(0x7f0000002180)='./file0\x00', &(0x7f0000002280)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000021c0)='maps\x00') setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000001140), 0x4) mremap(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) preadv(r1, &(0x7f0000002240)=[{&(0x7f0000001180)=""/4096, 0x1000}], 0x1, 0x29d3, 0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0400000001"], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) r3 = add_key$user(&(0x7f0000000280), &(0x7f0000000000)={'syz', 0x3}, &(0x7f00000000c0)="b8", 0x1, 0xfffffffffffffffe) r4 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000340), 0x584, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r3, r4, r4}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}}) 8.418391316s ago: executing program 3 (id=563): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x80) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000014935d1071042c03e9ba0102cc3c0902120001000000000904"], 0x0) 4.613117469s ago: executing program 0 (id=572): socket$inet6_udplite(0xa, 0x2, 0x88) socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r0) socket$kcm(0x29, 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) memfd_create(&(0x7f0000000000)='e\xf4E\x88-\x00', 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x50}, [@ldst={0x6}]}, &(0x7f0000000080)='GPL\x00', 0xa, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r1 = syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000180)=0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000040)=ANY=[@ANYRES64=r1], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x11, r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r1, 0x2d3e, 0xfffffffd, 0x0, 0x0, 0x0) 4.547701508s ago: executing program 3 (id=573): bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xf, 0x4, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 4.34370936s ago: executing program 0 (id=574): syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)) socket$netlink(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f0000000180)=0x800001, 0x4) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) r4 = gettid() r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r5, &(0x7f0000000200)=""/209, 0xd1) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r5, 0x4040534e, &(0x7f0000000080)={0x335}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r5, 0x80045300, 0x0) tkill(r4, 0x7) socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) shutdown(r6, 0x2) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000000)={0x400000000000000, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x0, 0xa, 0x0, 0x3, 0x0, [@sadb_address={0x3, 0x6, 0xff, 0x0, 0x0, @in={0x2, 0x0, @local}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4bfffffe}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @loopback}}]}, 0x50}}, 0x0) 4.343473264s ago: executing program 3 (id=575): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0xc, 0x0, &(0x7f0000000240)) 4.240472523s ago: executing program 3 (id=576): syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb2361000000010902"], 0x0) r0 = add_key$user(&(0x7f0000000200), &(0x7f0000000300)={'syz', 0x2}, &(0x7f00000002c0)="f5", 0x30, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) 2.911598499s ago: executing program 1 (id=578): r0 = gettid() r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSCTTY(r2, 0x540e, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000008c0)=[{&(0x7f0000000300)="d4b80383667cdcb27e51947c6e2c9627f9bd8279b3e4f389601cca3267b4d65f39135fc05f56", 0x26}, {&(0x7f0000000340)="619ae238e1286bedf4e4e8228308b1ebfd3549d94b08c7f981f5ba2341975dd47692d6e928ade214cf904749b9626ed5c8831cf02d1d6b49e89ed766f927f80e6c369bc7da9e68d9fad51b2f43f3d1ba9d897ea676cf1b2d823d991ea714e2c77aeef580fbf7600fea72bbe684d723e54db516f1345bc2d420bb7ea4f2a04e889e67b2c8532f7df661ee66f6b858c13f09e59bd5e723f659c8c2cdc189d4a58ec75157505920d15a8ceb0dd39c840d0d5fb9e073981a73f7c7cdef2fc0d7141ded2f379cbcece5a92a09d74261682b81389fe4cb117777ae3173d66363bd8d9883ba9444efe911acb3549be58234fe40321c739e0805fb71dc", 0xf9}, {&(0x7f0000000440)="460b201dd6515bb2807d8853fdea3c781a8a23298609ef1a9a45e8c370f698e89bdf479ec3eb5255a54614dbbce7ce06d4e2488bb1dc9f789234d928fdb30289b5e208442739d32c8d4581c94b0b2c4ba2c4d186b7fa033d0855918f67e723363a", 0x61}, {&(0x7f00000004c0)="1a6dfb2c922276b1dbcfaf29a32d277903a2cab9016bf2798913165e174f39695696a7be9a3afb3499358efb59219c97599155dc81a101ebdd4142c7cdbe15ba0cf906283096efbdea3e9bd631919fbb5751c29a0e61e9480fc07a5e2caf3aff8788b9702be0eb66c632d1ba3527a7049db83a236713b6595fc5ec5a0965a46c749120e3982b446d179861991f238257b054438fa1c0bf9791a5d856566507aca85d68e9348998d6", 0xa8}], 0x4, 0x0) vmsplice(r3, &(0x7f0000000040)=[{&(0x7f0000000240)='c', 0x1}], 0x1, 0x7) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7b, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000040)='highspeed\x00', 0xa) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x22048854, &(0x7f0000000200)={0x2, 0x4e23, @empty}, 0x10) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r4, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03859bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b037511bf746bec66ba", 0x2acf, 0x11, 0x0, 0x27) recvmsg(r4, &(0x7f0000001500)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000035c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0, 0x407006}, 0x104) syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x101502) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2a0, 0x0, 0x18c, 0x203, 0x0, 0x19030000, 0x1d8, 0x2e0, 0x2e0, 0x1d8, 0x2e0, 0x3, 0x0, {[{{@ipv6={@private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'veth1_to_batadv\x00', 'team_slave_1\x00'}, 0x300, 0xa4, 0xec}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xa4, 0xec}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x2fc) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r6, 0x40bc5311, &(0x7f0000000100)={0x1, 0x1, 'client1\x00', 0x80000002, "f9babc089e14d419", "45c069cdaaab945cbdfd3fc00d7f587aa1536ed4a748e00c5cfbbe1b2ff6a7e0", 0x1, 0x7f}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) userfaultfd(0x80001) 2.751155101s ago: executing program 1 (id=579): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000140)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f00000001c0)={{@host}, @host, 0x0, 0x0, 0x2449}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000040)={{@host, 0xfffffffd}, @host, 0x0, 0xf, 0x4, 0xfffffffffffffffd}) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r0, 0x7a4, &(0x7f0000000180)={{@host}, 0x0, 0x90, 0x2, 0x4}) 2.672243994s ago: executing program 3 (id=580): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) syz_emit_ethernet(0xd2, &(0x7f0000000d00)={@link_local, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0x9c, 0x11, 0x0, @remote, @mcast2, {[], {0x0, 0xe22, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "9b92fc056f07d114fe3b41c776904545fb44d8e5dc0e57fdbba583dbc1bf026f", "ba38149afe78e80f44a98eddddbf2b6f237458668eb2461a95cd9a215310bae58679f26df35b2d9306a4a2e1dc85e86f", "6ba2c77aea3ef00f0ac8f0e3066b25082e39f5fb07fb432ca8f22890", {"e79710a9e57f1011496e538064796900", "f9d98c0072c691ce00"}}}}}}}}, 0x0) 2.371623121s ago: executing program 3 (id=581): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x3, &(0x7f0000000040)=ANY=[], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], 0x0, 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1, 0x0, 0x20001}}, 0x20}, 0x1, 0x2}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) syz_open_dev$I2C(&(0x7f0000003000), 0x0, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f00000007c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x1400c01}, 0xc, &(0x7f0000000780)={&(0x7f0000000b80)={0x214, 0x0, 0x200, 0x70bd27, 0x25dfdbff, {}, [@HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}]}, @HEADER={0x4}, @HEADER={0xcc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}]}]}, 0x214}, 0x1, 0x0, 0x0, 0x40000}, 0x8060) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r4, &(0x7f0000000040)={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0202}}}, 0x14) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r5 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x803340) rename(&(0x7f0000000340)='./file0\x00', &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') ioctl$SG_IO(r5, 0x2285, &(0x7f00000003c0)={0x53, 0x2, 0x10, 0x6, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000380)="95c7360de9c7e3c453135b3a77b56d2a", 0x0, 0x400, 0x4, 0xffffffffffffffff, 0x0}) socket$nl_rdma(0x10, 0x3, 0x14) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(0x0, &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000240), 0x0, 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) rename(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2, 0x0, 0x0, 0x5}, [@call={0x85, 0x0, 0x0, 0x20}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0xe, 0x0, &(0x7f0000000680)="e0b9547e514b984cc9c89b9b7d4e", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 2.371434019s ago: executing program 1 (id=582): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={r0, r2}, 0x10) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) syz_emit_ethernet(0xd2, &(0x7f0000000d00)={@link_local, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0x9c, 0x11, 0x0, @remote, @mcast2, {[], {0x0, 0xe22, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "9b92fc056f07d114fe3b41c776904545fb44d8e5dc0e57fdbba583dbc1bf026f", "ba38149afe78e80f44a98eddddbf2b6f237458668eb2461a95cd9a215310bae58679f26df35b2d9306a4a2e1dc85e86f", "6ba2c77aea3ef00f0ac8f0e3066b25082e39f5fb07fb432ca8f22890", {"e79710a9e57f1011496e538064796900", "f9d98c0072c691ce00"}}}}}}}}, 0x0) 2.256035565s ago: executing program 0 (id=583): openat$dsp(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x20000000000002c7, &(0x7f0000000280)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) syz_emit_vhci(&(0x7f00000001c0)=ANY=[], 0xd) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x441, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000280), 0x1, 0x101080) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/power/resume_offset', 0x2, 0x0) write$tun(r6, &(0x7f0000000080)=ANY=[@ANYRESOCT], 0x6a) ioctl$DRM_IOCTL_MODE_GETPLANE(r4, 0xc02064b6, &(0x7f00000001c0)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$binfmt_aout(r3, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCXONC(r3, 0x540a, 0x2) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)) r7 = epoll_create1(0x0) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000020c0)=[@in6={0xa, 0x0, 0x0, @remote, 0x34}]}, &(0x7f0000002100)=0x10) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r8, 0x84, 0x1e, &(0x7f0000000040)=0x3, 0x4) r9 = socket$netlink(0x10, 0x3, 0x0) writev(r9, &(0x7f00000003c0)=[{0x0}], 0x1) writev(r9, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, 0xffffffffffffffff, &(0x7f0000000240)={0x20000000}) 2.055431169s ago: executing program 1 (id=584): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x68e783, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) socket$inet(0x2, 0x4000000000000001, 0x0) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x8000003d) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) fcntl$setsig(r0, 0xa, 0x21) openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0), 0x4000, 0x0) creat(&(0x7f0000002240)='./file1\x00', 0x804000000000040) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r3, 0xc048aeca, &(0x7f0000000080)=ANY=[@ANYRES16=r2]) 1.107281215s ago: executing program 2 (id=585): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001d9167204f17316a3f26010203010902120001400000000904"], 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) iopl(0x3) fchmodat(0xffffffffffffff9c, 0x0, 0xfffffe99) r3 = syz_io_uring_setup(0x238, &(0x7f00000002c0)={0x0, 0x4533, 0x10100, 0x0, 0x0, 0x0, r2}, &(0x7f0000000180)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) io_uring_enter(r3, 0x2ded, 0x4000, 0x0, 0x0, 0x0) syz_open_dev$video4linux(0x0, 0x7fff, 0x8402) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 553.381385ms ago: executing program 0 (id=586): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$packet(0x11, 0x3, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000040)=r2, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x28}}, 0x0) writev(r0, &(0x7f0000000040), 0x2) 516.648349ms ago: executing program 1 (id=587): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0500feffffff000000002100000008000300", @ANYRES32=r2, @ANYBLOB="30002d800a00000002040202020200000a00000002020202020200000a0300"], 0x4c}}, 0x0) 111.757793ms ago: executing program 1 (id=588): r0 = socket$alg(0x26, 0x5, 0x0) accept4(r0, 0x0, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) ioctl$UFFDIO_COPY(r3, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x48, &(0x7f0000000540)=ANY=[@ANYRES8], 0xd0) writev(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000080)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000040)}], 0x2) syz_io_uring_setup(0x5c7, &(0x7f0000000400)={0x0, 0xcf16, 0x10, 0x0, 0x321}, &(0x7f00000003c0), &(0x7f0000000500)) syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x2000000000000376, &(0x7f0000000480)=ANY=[@ANYRES64, @ANYBLOB="27862ee82c1a7f55ea3bea0de860e3611936abacccc0f2af1bf2ce18315104fdefd8de306ee0"], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x3, 0x9, 0x5, 0x6}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000380)=[0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x37, @void, @value}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) getpid() 94.025144ms ago: executing program 0 (id=589): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00'}, 0x10) r0 = io_uring_setup(0x664c, &(0x7f0000000480)={0x0, 0x0, 0x1880, 0x8000002}) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x1}) close_range(r0, 0xffffffffffffffff, 0x0) 0s ago: executing program 0 (id=590): r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) kernel console output (not intermixed with test programs): ragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.076776][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.089906][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.096880][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.123320][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.179853][ T5855] Bluetooth: hci0: command tx timeout [ 82.208844][ T5844] team0: Port device team_slave_0 added [ 82.219180][ T5836] hsr_slave_0: entered promiscuous mode [ 82.225819][ T5836] hsr_slave_1: entered promiscuous mode [ 82.244906][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.251986][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.278317][ T5855] Bluetooth: hci1: command tx timeout [ 82.284571][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.309396][ T5844] team0: Port device team_slave_1 added [ 82.318394][ T5834] hsr_slave_0: entered promiscuous mode [ 82.325808][ T5834] hsr_slave_1: entered promiscuous mode [ 82.332641][ T5834] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.340816][ T5855] Bluetooth: hci2: command tx timeout [ 82.341138][ T5834] Cannot create hsr debugfs directory [ 82.346786][ T5855] Bluetooth: hci4: command tx timeout [ 82.358228][ T55] Bluetooth: hci3: command tx timeout [ 82.366544][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.373660][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.399848][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.462629][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.474727][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.501881][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.540167][ T5842] hsr_slave_0: entered promiscuous mode [ 82.546555][ T5842] hsr_slave_1: entered promiscuous mode [ 82.553462][ T5842] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.561124][ T5842] Cannot create hsr debugfs directory [ 82.580131][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.587134][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.613211][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.641187][ T5845] hsr_slave_0: entered promiscuous mode [ 82.647583][ T5845] hsr_slave_1: entered promiscuous mode [ 82.654054][ T5845] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.661731][ T5845] Cannot create hsr debugfs directory [ 82.778413][ T5844] hsr_slave_0: entered promiscuous mode [ 82.789030][ T5844] hsr_slave_1: entered promiscuous mode [ 82.795251][ T5844] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.803291][ T5844] Cannot create hsr debugfs directory [ 83.068335][ T5836] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 83.080756][ T5836] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 83.093594][ T5836] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 83.118000][ T5836] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 83.191690][ T5834] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 83.208084][ T5834] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 83.236820][ T5834] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 83.256058][ T5834] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 83.324867][ T5845] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 83.358483][ T5845] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 83.388355][ T5845] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 83.398171][ T5844] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 83.411376][ T5844] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 83.421902][ T5844] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 83.441669][ T5845] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 83.463735][ T5844] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 83.547478][ T5842] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 83.575232][ T5842] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 83.586984][ T5842] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 83.606491][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.620932][ T5842] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 83.666432][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.684703][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.723079][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.730468][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.746999][ T3029] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.754266][ T3029] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.771281][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.799628][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.806775][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.815710][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.822911][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.970160][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.992760][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.022175][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.061143][ T5844] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.084376][ T5842] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.123070][ T3019] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.130263][ T3019] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.166892][ T3019] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.174253][ T3019] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.205518][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.212737][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.232480][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.239676][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.254726][ T5845] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.269208][ T5855] Bluetooth: hci0: command tx timeout [ 84.320299][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.327505][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.339131][ T5855] Bluetooth: hci1: command tx timeout [ 84.349039][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.356231][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.373896][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.419233][ T5848] Bluetooth: hci2: command tx timeout [ 84.424810][ T55] Bluetooth: hci3: command tx timeout [ 84.431089][ T5855] Bluetooth: hci4: command tx timeout [ 84.471283][ T5842] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 84.501569][ T5834] veth0_vlan: entered promiscuous mode [ 84.510221][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.610002][ T5834] veth1_vlan: entered promiscuous mode [ 84.735645][ T5834] veth0_macvtap: entered promiscuous mode [ 84.772307][ T5834] veth1_macvtap: entered promiscuous mode [ 84.835999][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.879544][ T5836] veth0_vlan: entered promiscuous mode [ 84.895916][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.928555][ T5836] veth1_vlan: entered promiscuous mode [ 84.946921][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.977119][ T5834] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.995816][ T5834] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.005822][ T5834] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.023171][ T5834] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.122509][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.147270][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.197870][ T5836] veth0_macvtap: entered promiscuous mode [ 85.267709][ T5836] veth1_macvtap: entered promiscuous mode [ 85.281821][ T3019] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.307338][ T5845] veth0_vlan: entered promiscuous mode [ 85.309000][ T3019] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.377059][ T5845] veth1_vlan: entered promiscuous mode [ 85.396195][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.408191][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.419762][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.428019][ T3019] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.437530][ T3019] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.441216][ T5842] veth0_vlan: entered promiscuous mode [ 85.484704][ T5844] veth0_vlan: entered promiscuous mode [ 85.491651][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.509628][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.524253][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.545624][ T5836] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.552985][ T5834] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 85.554879][ T5836] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.578047][ T5836] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.586924][ T5836] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.609065][ T5842] veth1_vlan: entered promiscuous mode [ 85.642029][ T5844] veth1_vlan: entered promiscuous mode [ 85.673545][ T5845] veth0_macvtap: entered promiscuous mode [ 85.741392][ T5842] veth0_macvtap: entered promiscuous mode [ 85.758119][ T5922] Zero length message leads to an empty skb [ 85.761259][ T5844] veth0_macvtap: entered promiscuous mode [ 85.772662][ T5845] veth1_macvtap: entered promiscuous mode [ 85.794727][ T5842] veth1_macvtap: entered promiscuous mode [ 85.830505][ T5844] veth1_macvtap: entered promiscuous mode [ 85.841021][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.862488][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.872940][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.883889][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.896734][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.917902][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.930033][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.941656][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.952354][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.962872][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.973804][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.986819][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.034779][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.051569][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.068722][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.084372][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.157221][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.189756][ T992] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.223189][ T992] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.284137][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.323125][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.338388][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.352190][ T55] Bluetooth: hci0: command tx timeout [ 86.362141][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.380920][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.393322][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.408902][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 86.428874][ T55] Bluetooth: hci1: command tx timeout [ 86.448574][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.499550][ T55] Bluetooth: hci3: command tx timeout [ 86.505335][ T5855] Bluetooth: hci4: command tx timeout [ 86.511502][ T5848] Bluetooth: hci2: command tx timeout [ 86.537033][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.554303][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.567703][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.606015][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.651921][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.796920][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.816226][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.833675][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.875201][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.901866][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.915952][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.929459][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.941022][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.951314][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.962234][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.972532][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.983576][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.994593][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.014593][ T5845] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.026935][ T5845] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.036093][ T5845] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.045789][ T5845] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.065998][ T5844] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.075817][ T5844] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.086869][ T5844] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.101966][ T5844] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.114119][ T5842] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.136457][ T5842] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.156784][ T5842] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.174454][ T5842] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.228070][ T2991] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.257332][ T2991] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.968393][ T2991] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.988717][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 88.000990][ T2991] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.372991][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.391491][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.429323][ T5848] Bluetooth: hci0: command tx timeout [ 88.508912][ T5848] Bluetooth: hci1: command tx timeout [ 88.586192][ T5939] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3'. [ 88.588958][ T5848] Bluetooth: hci2: command tx timeout [ 88.601315][ T5848] Bluetooth: hci4: command tx timeout [ 88.606764][ T5848] Bluetooth: hci3: command tx timeout [ 88.915246][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.939316][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.035314][ T3029] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.054676][ T3029] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.110224][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.149943][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.195912][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.207985][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.519805][ T5952] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 90.295833][ T5952] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4'. [ 90.482909][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 91.043965][ T5955] relay: one or more items not logged [item size (56) > sub-buffer size (10)] [ 91.097341][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 91.609220][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 91.617726][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 91.626495][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 92.213791][ T25] cfg80211: failed to load regulatory.db [ 92.760858][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 93.199182][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 93.219202][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 93.292046][ T5972] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12'. [ 94.923327][ T5974] netlink: 56 bytes leftover after parsing attributes in process `syz.4.13'. [ 95.042064][ T5973] bridge0: port 3(erspan0) entered blocking state [ 95.055643][ T5973] bridge0: port 3(erspan0) entered disabled state [ 95.069460][ T5973] erspan0: entered allmulticast mode [ 95.075553][ T5973] erspan0: entered promiscuous mode [ 95.086551][ T5973] bridge0: port 3(erspan0) entered blocking state [ 95.094104][ T5973] bridge0: port 3(erspan0) entered forwarding state [ 95.754574][ T5989] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 99.609411][ T6007] bridge0: port 3(erspan0) entered blocking state [ 99.618353][ T6007] bridge0: port 3(erspan0) entered disabled state [ 99.627053][ T6007] erspan0: entered allmulticast mode [ 99.637702][ T6007] erspan0: entered promiscuous mode [ 99.644804][ T6007] bridge0: port 3(erspan0) entered blocking state [ 99.651498][ T6007] bridge0: port 3(erspan0) entered forwarding state [ 101.605090][ T6030] netlink: 16 bytes leftover after parsing attributes in process `syz.0.31'. [ 101.625486][ T6030] ip6gretap0: entered promiscuous mode [ 101.665605][ T6030] ip6gretap0: left promiscuous mode [ 104.053102][ T6052] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 106.533666][ T6063] syz.3.43 uses obsolete (PF_INET,SOCK_PACKET) [ 106.651838][ T6067] netlink: 8 bytes leftover after parsing attributes in process `syz.4.41'. [ 107.589218][ T6070] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 107.641048][ T6072] netlink: 12 bytes leftover after parsing attributes in process `syz.0.44'. [ 108.669233][ T6084] netlink: 8 bytes leftover after parsing attributes in process `syz.2.49'. [ 109.851196][ T6097] hub 6-0:1.0: USB hub found [ 109.874200][ T6097] hub 6-0:1.0: 1 port detected [ 110.006967][ T6103] netlink: 8 bytes leftover after parsing attributes in process `syz.2.52'. [ 110.107358][ T5920] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 110.739834][ T5920] usb 5-1: Using ep0 maxpacket: 16 [ 110.745411][ T6107] relay: one or more items not logged [item size (56) > sub-buffer size (10)] [ 110.800944][ T5920] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 110.810087][ T5920] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 110.836339][ T5920] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 110.989956][ T5920] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 111.008688][ T5920] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.051050][ T5920] usb 5-1: Product: syz [ 111.055279][ T5920] usb 5-1: Manufacturer: syz [ 111.091533][ T5920] usb 5-1: SerialNumber: syz [ 111.410004][ T5920] usb 5-1: 0:2 : does not exist [ 112.129664][ T5920] usb 5-1: USB disconnect, device number 2 [ 112.330832][ T6126] netlink: 8 bytes leftover after parsing attributes in process `syz.0.56'. [ 113.568801][ T5849] udevd[5849]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 114.746237][ T6149] GUP no longer grows the stack in syz.1.62 (6149): 20006000-2000a000 (20005000) [ 114.848842][ T6149] CPU: 0 UID: 0 PID: 6149 Comm: syz.1.62 Not tainted 6.13.0-rc3-next-20241218-syzkaller #0 [ 114.848875][ T6149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 114.848892][ T6149] Call Trace: [ 114.848900][ T6149] [ 114.848909][ T6149] dump_stack_lvl+0x241/0x360 [ 114.848948][ T6149] ? __pfx_dump_stack_lvl+0x10/0x10 [ 114.848972][ T6149] ? __pfx__printk+0x10/0x10 [ 114.849002][ T6149] ? find_vma+0xf9/0x170 [ 114.849032][ T6149] ? vma_is_secretmem+0xd/0x50 [ 114.849064][ T6149] ? check_vma_flags+0x4db/0x550 [ 114.849098][ T6149] __get_user_pages+0x3b04/0x4140 [ 114.849147][ T6149] ? lockdep_hardirqs_on+0x99/0x150 [ 114.849194][ T6149] ? __pfx___get_user_pages+0x10/0x10 [ 114.849249][ T6149] __gup_longterm_locked+0x49a/0x17f0 [ 114.849281][ T6149] ? __pfx___might_resched+0x10/0x10 [ 114.849324][ T6149] ? __pfx___gup_longterm_locked+0x10/0x10 [ 114.849352][ T6149] ? down_read+0x82b/0xa40 [ 114.849380][ T6149] ? is_valid_gup_args+0x124/0x200 [ 114.849411][ T6149] pin_user_pages+0x137/0x1f0 [ 114.849451][ T6149] ? __pfx_pin_user_pages+0x10/0x10 [ 114.849477][ T6149] ? trace_kmalloc+0x1f/0xd0 [ 114.849511][ T6149] xdp_umem_create+0x978/0xf30 [ 114.849553][ T6149] xsk_setsockopt+0x732/0x950 [ 114.849581][ T6149] ? __pfx_xsk_setsockopt+0x10/0x10 [ 114.849614][ T6149] ? __pfx_lock_acquire+0x10/0x10 [ 114.849641][ T6149] ? aa_sock_opt_perm+0x79/0x120 [ 114.849671][ T6149] ? __pfx_xsk_setsockopt+0x10/0x10 [ 114.849695][ T6149] do_sock_setsockopt+0x3af/0x720 [ 114.849737][ T6149] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 114.849777][ T6149] ? __fget_files+0x395/0x410 [ 114.849798][ T6149] ? __fget_files+0x2a/0x410 [ 114.849830][ T6149] __x64_sys_setsockopt+0x1ee/0x280 [ 114.849872][ T6149] do_syscall_64+0xf3/0x230 [ 114.849892][ T6149] ? clear_bhb_loop+0x35/0x90 [ 114.849926][ T6149] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.849955][ T6149] RIP: 0033:0x7f80f2185d29 [ 114.849975][ T6149] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 114.849994][ T6149] RSP: 002b:00007f80f2ef8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 114.850023][ T6149] RAX: ffffffffffffffda RBX: 00007f80f2376080 RCX: 00007f80f2185d29 [ 114.850037][ T6149] RDX: 0000000000000004 RSI: 000000000000011b RDI: 0000000000000005 [ 114.850048][ T6149] RBP: 00007f80f2201a20 R08: 0000000000000020 R09: 0000000000000000 [ 114.850059][ T6149] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000000 [ 114.850070][ T6149] R13: 0000000000000000 R14: 00007f80f2376080 R15: 00007ffd24615108 [ 114.850096][ T6149] [ 115.284156][ T6162] netlink: 8 bytes leftover after parsing attributes in process `syz.4.65'. [ 116.480574][ T6169] bridge0: port 4(syz_tun) entered blocking state [ 116.487682][ T6169] bridge0: port 4(syz_tun) entered disabled state [ 116.497454][ T6169] syz_tun: entered allmulticast mode [ 116.511318][ T6169] syz_tun: entered promiscuous mode [ 116.519639][ T6169] bridge0: port 4(syz_tun) entered blocking state [ 116.526696][ T6169] bridge0: port 4(syz_tun) entered forwarding state [ 117.183666][ T29] audit: type=1326 audit(1734568603.236:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6164 comm="syz.3.69" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47a2f85d29 code=0x7fc00000 [ 117.719053][ T29] audit: type=1326 audit(1734568603.236:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6164 comm="syz.3.69" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f47a2f85d29 code=0x7fc00000 [ 117.958769][ T29] audit: type=1326 audit(1734568603.236:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6164 comm="syz.3.69" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47a2f85d29 code=0x7fc00000 [ 118.408713][ T29] audit: type=1326 audit(1734568603.236:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6164 comm="syz.3.69" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47a2f85d29 code=0x7fc00000 [ 118.497698][ T29] audit: type=1326 audit(1734568603.236:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6164 comm="syz.3.69" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47a2f85d29 code=0x7fc00000 [ 118.516613][ T6181] netlink: 8 bytes leftover after parsing attributes in process `syz.4.71'. [ 118.585709][ T29] audit: type=1326 audit(1734568603.236:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6164 comm="syz.3.69" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47a2f85d29 code=0x7fc00000 [ 118.644733][ T29] audit: type=1326 audit(1734568603.236:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6164 comm="syz.3.69" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47a2f85d29 code=0x7fc00000 [ 118.721169][ T29] audit: type=1326 audit(1734568603.236:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6164 comm="syz.3.69" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47a2f85d29 code=0x7fc00000 [ 118.740087][ T6185] netlink: 28 bytes leftover after parsing attributes in process `syz.0.73'. [ 118.798800][ T6185] netlink: 28 bytes leftover after parsing attributes in process `syz.0.73'. [ 118.828516][ T6185] erspan0: entered promiscuous mode [ 118.835740][ T29] audit: type=1326 audit(1734568603.236:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6164 comm="syz.3.69" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47a2f85d29 code=0x7fc00000 [ 118.879699][ T6185] batadv_slave_1: entered promiscuous mode [ 118.914819][ T29] audit: type=1326 audit(1734568603.236:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6164 comm="syz.3.69" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47a2f85d29 code=0x7fc00000 [ 119.853131][ T6205] bridge0: port 3(syz_tun) entered blocking state [ 119.860028][ T6205] bridge0: port 3(syz_tun) entered disabled state [ 119.867748][ T6205] syz_tun: entered allmulticast mode [ 119.881589][ T6205] syz_tun: entered promiscuous mode [ 119.889037][ T6205] bridge0: port 3(syz_tun) entered blocking state [ 119.895623][ T6205] bridge0: port 3(syz_tun) entered forwarding state [ 125.345175][ T6235] netlink: 12 bytes leftover after parsing attributes in process `syz.1.91'. [ 126.082723][ T6245] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 128.754612][ T6256] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 130.163137][ T6265] netlink: 8 bytes leftover after parsing attributes in process `syz.1.97'. [ 131.200060][ T6271] netlink: 12 bytes leftover after parsing attributes in process `syz.4.102'. [ 131.578806][ T5892] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 132.585745][ T5892] usb 3-1: Using ep0 maxpacket: 32 [ 133.015035][ T5892] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 133.037692][ T5892] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 133.085696][ T5892] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 133.256078][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.263228][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.271604][ T5892] usb 3-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 133.280832][ T5892] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.292838][ T5892] usb 3-1: config 0 descriptor?? [ 134.404646][ T6293] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 135.619074][ T5892] usbhid 3-1:0.0: can't add hid device: -71 [ 135.625290][ T5892] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 135.690032][ T5892] usb 3-1: USB disconnect, device number 2 [ 136.125966][ T6300] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 137.126061][ T6294] ip6gretap0: entered promiscuous mode [ 137.133976][ T6294] batadv_slave_0: entered promiscuous mode [ 137.189110][ T6294] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 137.264991][ T6294] Cannot create hsr debugfs directory [ 137.683310][ T6312] netlink: 12 bytes leftover after parsing attributes in process `syz.2.113'. [ 139.685369][ T6328] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 140.552231][ T6314] relay: one or more items not logged [item size (56) > sub-buffer size (10)] [ 142.219161][ T6347] netlink: 8 bytes leftover after parsing attributes in process `syz.0.122'. [ 143.220648][ T6353] netlink: 28 bytes leftover after parsing attributes in process `syz.1.121'. [ 143.243334][ T6353] netlink: 28 bytes leftover after parsing attributes in process `syz.1.121'. [ 143.260663][ T6354] netlink: 4 bytes leftover after parsing attributes in process `syz.3.124'. [ 143.609176][ T8] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 143.735931][ T6362] bridge0: port 3(erspan0) entered blocking state [ 143.747774][ T6362] bridge0: port 3(erspan0) entered disabled state [ 143.755466][ T6362] erspan0: entered allmulticast mode [ 143.770283][ T6362] erspan0: entered promiscuous mode [ 143.777611][ T6362] bridge0: port 3(erspan0) entered blocking state [ 143.784373][ T6362] bridge0: port 3(erspan0) entered forwarding state [ 144.265154][ T6361] netlink: 8 bytes leftover after parsing attributes in process `syz.1.126'. [ 144.284783][ T8] usb 1-1: Using ep0 maxpacket: 32 [ 144.304273][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 144.319488][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 144.338801][ T8] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 144.362751][ T8] usb 1-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 144.467245][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.492609][ T8] usb 1-1: config 0 descriptor?? [ 145.133491][ T6365] relay: one or more items not logged [item size (56) > sub-buffer size (10)] [ 145.402291][ T8] input: HID 0458:5011 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5011.0001/input/input5 [ 145.421950][ T8] input: HID 0458:5011 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5011.0001/input/input6 [ 145.450127][ T8] kye 0003:0458:5011.0001: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.0-1/input0 [ 146.681896][ T8] usb 1-1: reset high-speed USB device number 2 using dummy_hcd [ 147.377807][ T6284] Set syz1 is full, maxelem 65536 reached [ 147.772109][ T5892] usb 1-1: USB disconnect, device number 2 [ 149.553712][ T6396] bridge0: port 3(syz_tun) entered blocking state [ 149.560622][ T6396] bridge0: port 3(syz_tun) entered disabled state [ 149.570255][ T6396] syz_tun: entered allmulticast mode [ 150.385686][ T29] kauditd_printk_skb: 122 callbacks suppressed [ 150.385704][ T29] audit: type=1326 audit(1734568636.316:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6392 comm="syz.4.136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd672f85d29 code=0x7fc00000 [ 150.428398][ T29] audit: type=1326 audit(1734568636.326:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6392 comm="syz.4.136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd672f85d29 code=0x7fc00000 [ 150.450855][ T29] audit: type=1326 audit(1734568636.326:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6392 comm="syz.4.136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd672f85d29 code=0x7fc00000 [ 150.488752][ T29] audit: type=1326 audit(1734568636.326:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6392 comm="syz.4.136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd672f85d29 code=0x7fc00000 [ 150.708200][ T6396] syz_tun: entered promiscuous mode [ 150.716378][ T6396] bridge0: port 3(syz_tun) entered blocking state [ 150.723270][ T6396] bridge0: port 3(syz_tun) entered forwarding state [ 150.733285][ T29] audit: type=1326 audit(1734568636.326:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6392 comm="syz.4.136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd672f85d29 code=0x7fc00000 [ 150.788821][ T29] audit: type=1326 audit(1734568636.326:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6392 comm="syz.4.136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd672f85d29 code=0x7fc00000 [ 150.814702][ T29] audit: type=1326 audit(1734568636.326:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6392 comm="syz.4.136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd672f85d29 code=0x7fc00000 [ 150.837805][ T29] audit: type=1326 audit(1734568636.326:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6392 comm="syz.4.136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd672f85d29 code=0x7fc00000 [ 150.861187][ T29] audit: type=1326 audit(1734568636.326:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6392 comm="syz.4.136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd672f85d29 code=0x7fc00000 [ 150.883642][ T29] audit: type=1326 audit(1734568636.326:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6392 comm="syz.4.136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd672f85d29 code=0x7fc00000 [ 152.544797][ T6417] bridge0: port 4(erspan0) entered blocking state [ 152.552074][ T6417] bridge0: port 4(erspan0) entered disabled state [ 152.559623][ T6417] erspan0: entered allmulticast mode [ 152.570622][ T6417] erspan0: entered promiscuous mode [ 152.578898][ T6417] bridge0: port 4(erspan0) entered blocking state [ 152.585597][ T6417] bridge0: port 4(erspan0) entered forwarding state [ 154.589287][ T5890] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 155.010200][ T6426] relay: one or more items not logged [item size (56) > sub-buffer size (10)] [ 155.071506][ T5890] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 155.091132][ T5890] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 155.115239][ T5890] usb 1-1: config 1 has no interface number 0 [ 155.148741][ T5890] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 155.176191][ T5890] usb 1-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 155.217104][ T5890] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 155.242261][ T5890] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.326430][ T5890] usb 1-1: Product: syz [ 155.451815][ T5890] usb 1-1: Manufacturer: syz [ 155.456705][ T5890] usb 1-1: SerialNumber: syz [ 156.563639][ T6445] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 157.470337][ T5890] cdc_ncm 1-1:1.1: bind() failure [ 157.919597][ T6448] netlink: 12 bytes leftover after parsing attributes in process `syz.3.149'. [ 158.347459][ T5890] usb 1-1: USB disconnect, device number 3 [ 159.166183][ T6462] netlink: 12 bytes leftover after parsing attributes in process `syz.3.155'. [ 159.686013][ T974] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 159.829858][ T6468] netlink: 16 bytes leftover after parsing attributes in process `syz.3.157'. [ 159.840209][ T974] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 159.843302][ T6468] ip6gretap0: entered promiscuous mode [ 159.855993][ T974] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 159.867279][ T6468] ip6gretap0: left promiscuous mode [ 159.903013][ T974] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 159.925935][ T974] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.934682][ T974] usb 1-1: Product: syz [ 159.948058][ T974] usb 1-1: Manufacturer: syz [ 159.953346][ T974] usb 1-1: SerialNumber: syz [ 160.608713][ T974] usb 1-1: 0:2 : does not exist [ 160.635952][ T974] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 160.686897][ T974] usb 1-1: USB disconnect, device number 4 [ 160.952461][ T6371] udevd[6371]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 161.170103][ T6477] netlink: 4 bytes leftover after parsing attributes in process `syz.3.159'. [ 162.987128][ T6493] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 165.822635][ T29] kauditd_printk_skb: 56 callbacks suppressed [ 165.822696][ T29] audit: type=1326 audit(1734568651.806:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6530 comm="syz.3.175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47a2f85d29 code=0x7fc00000 [ 165.852674][ T29] audit: type=1326 audit(1734568651.806:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6530 comm="syz.3.175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f47a2f85d29 code=0x7fc00000 [ 165.875297][ T29] audit: type=1326 audit(1734568651.806:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6530 comm="syz.3.175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47a2f85d29 code=0x7fc00000 [ 165.897869][ T29] audit: type=1326 audit(1734568651.806:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6530 comm="syz.3.175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47a2f85d29 code=0x7fc00000 [ 165.920456][ T29] audit: type=1326 audit(1734568651.806:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6530 comm="syz.3.175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47a2f85d29 code=0x7fc00000 [ 165.943322][ T29] audit: type=1326 audit(1734568651.806:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6530 comm="syz.3.175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47a2f85d29 code=0x7fc00000 [ 165.966395][ T29] audit: type=1326 audit(1734568651.806:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6530 comm="syz.3.175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47a2f85d29 code=0x7fc00000 [ 165.989437][ T29] audit: type=1326 audit(1734568651.806:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6530 comm="syz.3.175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47a2f85d29 code=0x7fc00000 [ 166.063443][ T29] audit: type=1326 audit(1734568651.806:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6530 comm="syz.3.175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47a2f85d29 code=0x7fc00000 [ 166.092282][ T29] audit: type=1326 audit(1734568651.806:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6530 comm="syz.3.175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47a2f85d29 code=0x7fc00000 [ 169.914496][ T6559] netlink: 12 bytes leftover after parsing attributes in process `syz.2.181'. [ 170.533804][ T6566] bridge0: port 4(syz_tun) entered blocking state [ 170.540768][ T6566] bridge0: port 4(syz_tun) entered disabled state [ 170.548538][ T6566] syz_tun: entered allmulticast mode [ 170.561725][ T6566] syz_tun: entered promiscuous mode [ 170.569051][ T6566] bridge0: port 4(syz_tun) entered blocking state [ 170.575581][ T6566] bridge0: port 4(syz_tun) entered forwarding state [ 170.828613][ T29] kauditd_printk_skb: 79 callbacks suppressed [ 170.828634][ T29] audit: type=1326 audit(1734568657.326:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6561 comm="syz.1.183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80f2185d29 code=0x7fc00000 [ 171.279378][ T29] audit: type=1326 audit(1734568657.326:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6561 comm="syz.1.183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80f2185d29 code=0x7fc00000 [ 171.320750][ T29] audit: type=1326 audit(1734568657.326:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6561 comm="syz.1.183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80f2185d29 code=0x7fc00000 [ 171.380897][ T29] audit: type=1326 audit(1734568657.326:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6561 comm="syz.1.183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80f2185d29 code=0x7fc00000 [ 171.464227][ T29] audit: type=1326 audit(1734568657.326:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6561 comm="syz.1.183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80f2185d29 code=0x7fc00000 [ 171.562088][ T29] audit: type=1326 audit(1734568657.326:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6561 comm="syz.1.183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80f2185d29 code=0x7fc00000 [ 171.642162][ T29] audit: type=1326 audit(1734568657.326:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6561 comm="syz.1.183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80f2185d29 code=0x7fc00000 [ 171.778807][ T5892] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 171.824746][ T29] audit: type=1326 audit(1734568657.326:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6561 comm="syz.1.183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80f2185d29 code=0x7fc00000 [ 171.916637][ T29] audit: type=1326 audit(1734568657.326:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6561 comm="syz.1.183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80f2185d29 code=0x7fc00000 [ 171.948468][ T29] audit: type=1326 audit(1734568657.336:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6561 comm="syz.1.183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80f2185d29 code=0x7fc00000 [ 171.974896][ T5892] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 171.996208][ T5892] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 172.988745][ T5892] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 173.008692][ T5892] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.048139][ T5892] usb 3-1: Product: syz [ 173.087305][ T5892] usb 3-1: Manufacturer: syz [ 173.177299][ T6581] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 174.021754][ T5892] usb 3-1: SerialNumber: syz [ 174.244424][ T5892] usb 3-1: 0:2 : does not exist [ 174.254428][ T5892] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 174.408797][ T47] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 174.835456][ T47] usb 5-1: too many endpoints for config 1 interface 0 altsetting 253: 68, using maximum allowed: 30 [ 174.852710][ T47] usb 5-1: config 1 interface 0 altsetting 253 has 1 endpoint descriptor, different from the interface descriptor's value: 68 [ 174.904350][ T47] usb 5-1: config 1 interface 0 has no altsetting 0 [ 174.944362][ T47] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 174.984848][ T5892] usb 3-1: USB disconnect, device number 3 [ 174.993266][ T47] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.071094][ T47] usb 5-1: Product: syz [ 175.075330][ T47] usb 5-1: Manufacturer: syz [ 175.087045][ T47] usb 5-1: SerialNumber: syz [ 175.280690][ T6371] udevd[6371]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 175.547255][ T6509] Set syz1 is full, maxelem 65536 reached [ 176.368979][ T6605] bridge0: port 4(syz_tun) entered blocking state [ 176.375970][ T6605] bridge0: port 4(syz_tun) entered disabled state [ 176.382850][ T6605] syz_tun: entered allmulticast mode [ 176.390229][ T6605] syz_tun: entered promiscuous mode [ 176.397254][ T6605] bridge0: port 4(syz_tun) entered blocking state [ 176.404044][ T6605] bridge0: port 4(syz_tun) entered forwarding state [ 176.773073][ T29] kauditd_printk_skb: 33 callbacks suppressed [ 176.773097][ T29] audit: type=1326 audit(1734568663.206:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6599 comm="syz.2.194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdd3785d29 code=0x7fc00000 [ 176.807941][ T29] audit: type=1326 audit(1734568663.206:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6599 comm="syz.2.194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbdd3785d29 code=0x7fc00000 [ 177.555410][ T29] audit: type=1326 audit(1734568663.206:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6599 comm="syz.2.194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdd3785d29 code=0x7fc00000 [ 177.583260][ T29] audit: type=1326 audit(1734568663.206:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6599 comm="syz.2.194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=213 compat=0 ip=0x7fbdd3785d29 code=0x7fc00000 [ 177.605607][ T29] audit: type=1326 audit(1734568663.206:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6599 comm="syz.2.194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdd3785d29 code=0x7fc00000 [ 177.628724][ T29] audit: type=1326 audit(1734568663.206:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6599 comm="syz.2.194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdd3785d29 code=0x7fc00000 [ 177.651703][ T29] audit: type=1326 audit(1734568663.206:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6599 comm="syz.2.194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdd3785d29 code=0x7fc00000 [ 177.674264][ T29] audit: type=1326 audit(1734568663.206:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6599 comm="syz.2.194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdd3785d29 code=0x7fc00000 [ 177.696794][ T29] audit: type=1326 audit(1734568663.206:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6599 comm="syz.2.194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdd3785d29 code=0x7fc00000 [ 177.720965][ T29] audit: type=1326 audit(1734568663.206:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6599 comm="syz.2.194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdd3785d29 code=0x7fc00000 [ 177.764448][ T47] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 177.792497][ T47] usb 5-1: USB disconnect, device number 3 [ 177.965615][ T47] usblp0: removed [ 179.542601][ T6631] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 181.878692][ T47] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 182.108778][ T47] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 182.128721][ T47] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 182.152105][ T47] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 182.161650][ T47] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.175995][ T47] usb 3-1: Product: syz [ 182.181318][ T47] usb 3-1: Manufacturer: syz [ 182.186081][ T47] usb 3-1: SerialNumber: syz [ 182.451414][ T47] usb 3-1: 0:2 : does not exist [ 182.474636][ T47] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 182.532988][ T47] usb 3-1: USB disconnect, device number 4 [ 182.749778][ T6371] udevd[6371]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 185.264768][ T6586] Set syz1 is full, maxelem 65536 reached [ 185.678700][ T47] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 185.835340][ T6676] netlink: 8 bytes leftover after parsing attributes in process `syz.0.214'. [ 186.959211][ T47] usb 2-1: Using ep0 maxpacket: 8 [ 187.012826][ T6682] netlink: 8 bytes leftover after parsing attributes in process `syz.4.215'. [ 187.493316][ T47] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 187.509811][ T47] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.518826][ T47] usb 2-1: Product: syz [ 187.523574][ T47] usb 2-1: Manufacturer: syz [ 187.528670][ T47] usb 2-1: SerialNumber: syz [ 187.537397][ T47] usb 2-1: config 0 descriptor?? [ 188.001084][ T6685] vlan2: entered promiscuous mode [ 188.078479][ T47] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 188.348872][ T6695] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 190.064556][ T47] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 190.154491][ T47] usb 2-1: USB disconnect, device number 2 [ 190.335905][ T6714] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 190.568982][ T5890] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 191.388654][ T5890] usb 4-1: Using ep0 maxpacket: 16 [ 191.395716][ T5890] usb 4-1: config 8 has an invalid interface number: 97 but max is 0 [ 191.410318][ T5890] usb 4-1: config 8 has no interface number 0 [ 191.416483][ T5890] usb 4-1: config 8 interface 97 has no altsetting 0 [ 191.468237][ T5890] usb 4-1: New USB device found, idVendor=05ac, idProduct=0249, bcdDevice=8b.87 [ 191.503773][ T5890] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.522368][ T5890] usb 4-1: Product: syz [ 191.526615][ T5890] usb 4-1: Manufacturer: syz [ 191.550384][ T5890] usb 4-1: SerialNumber: syz [ 191.573986][ T5890] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:8.97/input/input7 [ 191.799585][ T6730] netlink: 8 bytes leftover after parsing attributes in process `syz.1.233'. [ 191.819437][ T5193] bcm5974 4-1:8.97: could not read from device [ 192.074907][ T5193] bcm5974 4-1:8.97: could not read from device [ 192.113413][ T6731] netlink: 28 bytes leftover after parsing attributes in process `syz.0.234'. [ 192.204163][ T6731] netlink: 28 bytes leftover after parsing attributes in process `syz.0.234'. [ 192.413613][ T5890] usb 4-1: USB disconnect, device number 2 [ 192.420330][ T5193] bcm5974 4-1:8.97: could not read from device [ 194.593225][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.599601][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.708656][ T6749] netlink: 8 bytes leftover after parsing attributes in process `syz.3.239'. [ 195.257447][ T6751] ip6gretap0: entered promiscuous mode [ 195.455096][ T6751] batadv_slave_0: entered promiscuous mode [ 195.686425][ T6761] netlink: 12 bytes leftover after parsing attributes in process `syz.3.244'. [ 195.850578][ T974] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 196.182999][ T974] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 196.331834][ T974] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 196.374881][ T47] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 196.517576][ T974] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 196.625799][ T974] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.634298][ T974] usb 2-1: Product: syz [ 196.638605][ T974] usb 2-1: Manufacturer: syz [ 196.644061][ T974] usb 2-1: SerialNumber: syz [ 196.648971][ T47] usb 4-1: Using ep0 maxpacket: 16 [ 196.696056][ T47] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 196.827365][ T47] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 196.901723][ T47] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 197.090747][ T47] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 197.124008][ T47] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 197.143171][ T47] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.152117][ T47] usb 4-1: Product: syz [ 197.156293][ T47] usb 4-1: Manufacturer: syz [ 197.177037][ T974] usb 2-1: 0:2 : does not exist [ 197.187355][ T974] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 197.441198][ T47] usb 4-1: SerialNumber: syz [ 197.706150][ T974] usb 2-1: USB disconnect, device number 3 [ 199.651413][ T2151] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 199.670971][ T47] usb 4-1: USB disconnect, device number 3 [ 199.778827][ T5848] Bluetooth: hci0: command 0x0406 tx timeout [ 200.144354][ T2151] usb 3-1: Using ep0 maxpacket: 16 [ 200.170416][ T2151] usb 3-1: config 8 has an invalid interface number: 97 but max is 0 [ 200.442003][ T6798] netlink: 4 bytes leftover after parsing attributes in process `syz.4.257'. [ 200.679109][ T6371] udevd[6371]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 200.699306][ T2151] usb 3-1: config 8 has no interface number 0 [ 200.705605][ T2151] usb 3-1: config 8 interface 97 has no altsetting 0 [ 200.744184][ T2151] usb 3-1: New USB device found, idVendor=05ac, idProduct=0249, bcdDevice=8b.87 [ 200.758789][ T2151] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.759494][ T5849] udevd[5849]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 200.766859][ T2151] usb 3-1: Product: syz [ 200.787422][ T2151] usb 3-1: Manufacturer: syz [ 200.792650][ T2151] usb 3-1: SerialNumber: syz [ 200.810027][ T2151] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:8.97/input/input8 [ 201.066333][ T5193] bcm5974 3-1:8.97: could not read from device [ 201.191559][ T5193] bcm5974 3-1:8.97: could not read from device [ 201.487477][ T2151] usb 3-1: USB disconnect, device number 5 [ 201.551185][ T29] kauditd_printk_skb: 56 callbacks suppressed [ 201.551206][ T29] audit: type=1326 audit(1734568688.076:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6807 comm="syz.3.260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47a2f85d29 code=0x7fc00000 [ 201.700959][ T29] audit: type=1326 audit(1734568688.076:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6807 comm="syz.3.260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f47a2f85d29 code=0x7fc00000 [ 201.723140][ C1] vkms_vblank_simulate: vblank timer overrun [ 201.789552][ T47] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 201.792138][ T29] audit: type=1326 audit(1734568688.076:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6807 comm="syz.3.260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47a2f85d29 code=0x7fc00000 [ 201.819830][ T29] audit: type=1326 audit(1734568688.076:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6807 comm="syz.3.260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47a2f85d29 code=0x7fc00000 [ 201.842765][ T29] audit: type=1326 audit(1734568688.076:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6807 comm="syz.3.260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47a2f85d29 code=0x7fc00000 [ 201.884315][ T29] audit: type=1326 audit(1734568688.076:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6807 comm="syz.3.260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47a2f85d29 code=0x7fc00000 [ 201.948515][ T29] audit: type=1326 audit(1734568688.076:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6807 comm="syz.3.260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47a2f85d29 code=0x7fc00000 [ 201.962797][ T47] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 201.988714][ T29] audit: type=1326 audit(1734568688.076:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6807 comm="syz.3.260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47a2f85d29 code=0x7fc00000 [ 202.015837][ T29] audit: type=1326 audit(1734568688.076:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6807 comm="syz.3.260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47a2f85d29 code=0x7fc00000 [ 202.109842][ T29] audit: type=1326 audit(1734568688.076:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6807 comm="syz.3.260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47a2f85d29 code=0x7fc00000 [ 202.332455][ T47] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 202.346891][ T47] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 202.356290][ T47] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.364461][ T47] usb 2-1: Product: syz [ 202.459088][ T47] usb 2-1: Manufacturer: syz [ 202.465046][ T47] usb 2-1: SerialNumber: syz [ 203.102026][ T47] usb 2-1: 0:2 : does not exist [ 203.112476][ T47] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 203.155550][ T47] usb 2-1: USB disconnect, device number 4 [ 203.581658][ T2151] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 203.637973][ T6371] udevd[6371]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 203.779174][ T2151] usb 5-1: Using ep0 maxpacket: 8 [ 204.068491][ T2151] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 204.593629][ T2151] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.601805][ T2151] usb 5-1: Product: syz [ 204.606049][ T2151] usb 5-1: Manufacturer: syz [ 204.610802][ T2151] usb 5-1: SerialNumber: syz [ 204.633791][ T2151] usb 5-1: config 0 descriptor?? [ 204.884871][ T2151] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 205.994144][ T974] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 206.126769][ T6856] netlink: 12 bytes leftover after parsing attributes in process `syz.3.275'. [ 206.219018][ T5838] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 206.257664][ T974] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 206.407154][ T974] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 206.411943][ T5838] usb 1-1: too many endpoints for config 1 interface 0 altsetting 253: 68, using maximum allowed: 30 [ 206.434973][ T5838] usb 1-1: config 1 interface 0 altsetting 253 has 1 endpoint descriptor, different from the interface descriptor's value: 68 [ 206.462106][ T5838] usb 1-1: config 1 interface 0 has no altsetting 0 [ 206.495599][ T5838] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 206.525051][ T974] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 206.525768][ T5838] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.555058][ T5838] usb 1-1: Product: syz [ 206.558663][ T974] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.560168][ T5838] usb 1-1: Manufacturer: syz [ 206.576812][ T5838] usb 1-1: SerialNumber: syz [ 206.644320][ T974] usb 2-1: Product: syz [ 206.683020][ T974] usb 2-1: Manufacturer: syz [ 206.688485][ T974] usb 2-1: SerialNumber: syz [ 206.898680][ T5851] Bluetooth: hci4: command 0x0406 tx timeout [ 206.904910][ T5851] Bluetooth: hci2: command 0x0406 tx timeout [ 206.949213][ T974] usb 2-1: 0:2 : does not exist [ 206.978758][ T5856] Bluetooth: hci1: command 0x0406 tx timeout [ 206.984934][ T5851] Bluetooth: hci0: command 0x0406 tx timeout [ 206.991402][ T5851] Bluetooth: hci3: command 0x0406 tx timeout [ 207.019013][ T974] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 207.067828][ T974] usb 2-1: USB disconnect, device number 5 [ 207.274064][ T6371] udevd[6371]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 208.430892][ T2151] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 208.467324][ T2151] usb 5-1: USB disconnect, device number 4 [ 209.089228][ T5855] Bluetooth: hci2: command 0x0406 tx timeout [ 209.284437][ T5838] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 5 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 209.326090][ T5838] usb 1-1: USB disconnect, device number 5 [ 209.336841][ T5838] usblp0: removed [ 209.580670][ T6886] netlink: 8 bytes leftover after parsing attributes in process `syz.3.284'. [ 212.014561][ T29] kauditd_printk_skb: 122 callbacks suppressed [ 212.014586][ T29] audit: type=1326 audit(1734568698.476:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6897 comm="syz.2.287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdd3785d29 code=0x7fc00000 [ 212.693257][ T29] audit: type=1326 audit(1734568698.476:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6897 comm="syz.2.287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbdd3785d29 code=0x7fc00000 [ 212.737383][ T6902] netlink: 12 bytes leftover after parsing attributes in process `syz.0.291'. [ 212.755554][ T29] audit: type=1326 audit(1734568698.476:532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6897 comm="syz.2.287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdd3785d29 code=0x7fc00000 [ 212.789329][ T29] audit: type=1326 audit(1734568698.476:533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6897 comm="syz.2.287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdd3785d29 code=0x7fc00000 [ 212.847268][ T29] audit: type=1326 audit(1734568698.476:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6897 comm="syz.2.287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdd3785d29 code=0x7fc00000 [ 212.920158][ T29] audit: type=1326 audit(1734568698.476:535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6897 comm="syz.2.287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdd3785d29 code=0x7fc00000 [ 213.027847][ T29] audit: type=1326 audit(1734568698.476:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6897 comm="syz.2.287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdd3785d29 code=0x7fc00000 [ 213.100974][ T29] audit: type=1326 audit(1734568698.476:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6897 comm="syz.2.287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdd3785d29 code=0x7fc00000 [ 213.165949][ T29] audit: type=1326 audit(1734568698.476:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6897 comm="syz.2.287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdd3785d29 code=0x7fc00000 [ 213.208686][ T5838] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 213.248367][ T29] audit: type=1326 audit(1734568698.476:539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6897 comm="syz.2.287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdd3785d29 code=0x7fc00000 [ 213.408664][ T5838] usb 4-1: Using ep0 maxpacket: 32 [ 213.487275][ T5838] usb 4-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 213.497834][ T6912] netlink: 28 bytes leftover after parsing attributes in process `syz.2.294'. [ 213.506816][ T5838] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.516804][ T6912] netlink: 28 bytes leftover after parsing attributes in process `syz.2.294'. [ 213.529760][ T5838] usb 4-1: config 0 descriptor?? [ 213.556719][ T5838] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 214.781647][ T5838] gspca_vc032x: reg_w err -110 [ 214.786583][ T5838] gspca_vc032x: I2c Bus Busy Wait 00 [ 214.971782][ T5838] gspca_vc032x: I2c Bus Busy Wait 00 [ 214.992649][ T5838] gspca_vc032x: I2c Bus Busy Wait 00 [ 214.998084][ T5838] gspca_vc032x: I2c Bus Busy Wait 00 [ 215.004473][ T5838] gspca_vc032x: I2c Bus Busy Wait 00 [ 215.011073][ T5838] gspca_vc032x: I2c Bus Busy Wait 00 [ 215.794585][ T5838] gspca_vc032x: I2c Bus Busy Wait 00 [ 215.800042][ T5838] gspca_vc032x: I2c Bus Busy Wait 00 [ 215.805365][ T5838] gspca_vc032x: I2c Bus Busy Wait 00 [ 216.718600][ T5838] gspca_vc032x: I2c Bus Busy Wait 00 [ 216.723973][ T5838] gspca_vc032x: I2c Bus Busy Wait 00 [ 216.733731][ T5838] gspca_vc032x: I2c Bus Busy Wait 00 [ 216.739287][ T5838] gspca_vc032x: I2c Bus Busy Wait 00 [ 216.746099][ T5838] gspca_vc032x: I2c Bus Busy Wait 00 [ 216.756963][ T5838] gspca_vc032x: I2c Bus Busy Wait 00 [ 216.762460][ T5838] gspca_vc032x: I2c Bus Busy Wait 00 [ 216.767788][ T5838] gspca_vc032x: I2c Bus Busy Wait 00 [ 216.778708][ T5838] gspca_vc032x: I2c Bus Busy Wait 00 [ 216.784060][ T5838] gspca_vc032x: Unknown sensor... [ 216.789294][ T5838] vc032x 4-1:0.0: probe with driver vc032x failed with error -22 [ 217.085676][ T5920] usb 4-1: USB disconnect, device number 4 [ 217.199347][ T5889] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 217.244571][ T6943] netlink: 8 bytes leftover after parsing attributes in process `syz.0.299'. [ 217.472611][ T5889] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 217.485878][ T5889] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 217.824765][ T5889] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 217.837392][ T5889] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.875456][ T5889] usb 3-1: Product: syz [ 217.880275][ T5889] usb 3-1: Manufacturer: syz [ 217.885094][ T5889] usb 3-1: SerialNumber: syz [ 218.103957][ T6950] netlink: 8 bytes leftover after parsing attributes in process `syz.1.304'. [ 218.616554][ T5889] usb 3-1: 0:2 : does not exist [ 218.675983][ T5889] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 218.757921][ T5889] usb 3-1: USB disconnect, device number 6 [ 219.026703][ T6371] udevd[6371]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 220.625541][ T6968] netlink: 28 bytes leftover after parsing attributes in process `syz.2.309'. [ 220.661813][ T6968] netlink: 28 bytes leftover after parsing attributes in process `syz.2.309'. [ 222.128622][ T29] kauditd_printk_skb: 57 callbacks suppressed [ 222.128642][ T29] audit: type=1326 audit(1734568708.606:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6974 comm="syz.4.312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd672f85d29 code=0x7fc00000 [ 222.364859][ T29] audit: type=1326 audit(1734568708.606:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6974 comm="syz.4.312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd672f85d29 code=0x7fc00000 [ 222.514366][ T29] audit: type=1326 audit(1734568708.606:599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6974 comm="syz.4.312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd672f85d29 code=0x7fc00000 [ 222.591329][ T29] audit: type=1326 audit(1734568708.606:600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6974 comm="syz.4.312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd672f85d29 code=0x7fc00000 [ 222.778821][ T29] audit: type=1326 audit(1734568708.606:601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6974 comm="syz.4.312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd672f85d29 code=0x7fc00000 [ 222.844574][ T29] audit: type=1326 audit(1734568708.606:602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6974 comm="syz.4.312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd672f85d29 code=0x7fc00000 [ 222.917783][ T29] audit: type=1326 audit(1734568708.606:603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6974 comm="syz.4.312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd672f85d29 code=0x7fc00000 [ 222.940379][ T29] audit: type=1326 audit(1734568708.606:604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6974 comm="syz.4.312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd672f85d29 code=0x7fc00000 [ 222.953173][ T6988] netlink: 8 bytes leftover after parsing attributes in process `syz.2.314'. [ 222.962663][ T29] audit: type=1326 audit(1734568708.606:605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6974 comm="syz.4.312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd672f85d29 code=0x7fc00000 [ 223.018648][ T29] audit: type=1326 audit(1734568708.616:606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6974 comm="syz.4.312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd672f85d29 code=0x7fc00000 [ 224.590891][ T7002] netlink: 4 bytes leftover after parsing attributes in process `syz.4.318'. [ 225.297600][ T7018] netlink: 8 bytes leftover after parsing attributes in process `syz.4.321'. [ 226.319180][ T974] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 226.540412][ T974] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 226.560043][ T974] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 226.596416][ T974] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 226.606030][ T974] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.614300][ T974] usb 2-1: Product: syz [ 226.640034][ T974] usb 2-1: Manufacturer: syz [ 226.644677][ T974] usb 2-1: SerialNumber: syz [ 226.746683][ T7031] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 228.335740][ T974] usb 2-1: 0:2 : does not exist [ 228.434902][ T974] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 228.563925][ T7050] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 232.380358][ T974] usb 2-1: USB disconnect, device number 6 [ 233.268105][ T29] kauditd_printk_skb: 57 callbacks suppressed [ 233.268152][ T29] audit: type=1326 audit(1734568719.736:664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7062 comm="syz.4.334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd672f85d29 code=0x7fc00000 [ 233.808649][ T29] audit: type=1326 audit(1734568719.736:665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7062 comm="syz.4.334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd672f85d29 code=0x7fc00000 [ 233.844027][ T29] audit: type=1326 audit(1734568719.736:666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7062 comm="syz.4.334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd672f85d29 code=0x7fc00000 [ 233.867019][ T29] audit: type=1326 audit(1734568719.736:667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7062 comm="syz.4.334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd672f85d29 code=0x7fc00000 [ 233.889643][ T29] audit: type=1326 audit(1734568719.736:668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7062 comm="syz.4.334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd672f85d29 code=0x7fc00000 [ 233.912054][ T29] audit: type=1326 audit(1734568719.736:669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7062 comm="syz.4.334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd672f85d29 code=0x7fc00000 [ 233.934496][ T29] audit: type=1326 audit(1734568719.736:670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7062 comm="syz.4.334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd672f85d29 code=0x7fc00000 [ 233.968279][ T29] audit: type=1326 audit(1734568719.736:671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7062 comm="syz.4.334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd672f85d29 code=0x7fc00000 [ 233.991239][ T29] audit: type=1326 audit(1734568719.736:672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7062 comm="syz.4.334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd672f85d29 code=0x7fc00000 [ 234.091578][ T29] audit: type=1326 audit(1734568719.736:673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7062 comm="syz.4.334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd672f85d29 code=0x7fc00000 [ 234.530445][ T7071] netlink: 12 bytes leftover after parsing attributes in process `syz.2.336'. [ 234.934276][ T6371] udevd[6371]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 235.238918][ T25] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 235.440434][ T7067] netlink: 8 bytes leftover after parsing attributes in process `syz.0.332'. [ 235.580488][ T25] usb 5-1: Using ep0 maxpacket: 8 [ 235.636321][ T25] usb 5-1: config 0 has an invalid interface number: 56 but max is 0 [ 235.653699][ T25] usb 5-1: config 0 has no interface number 0 [ 235.693081][ T25] usb 5-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 235.713705][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.738431][ T7089] netlink: 243 bytes leftover after parsing attributes in process `syz.2.340'. [ 235.758965][ T25] usb 5-1: Product: syz [ 235.768123][ T25] usb 5-1: Manufacturer: syz [ 235.798872][ T7089] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 235.807983][ T25] usb 5-1: SerialNumber: syz [ 235.840173][ T25] usb 5-1: config 0 descriptor?? [ 235.879313][ T25] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 235.916840][ T25] pctv452e: pctv452e_power_ctrl: 1 [ 235.916840][ T25] [ 235.955319][ T25] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 235.955319][ T25] [ 236.012063][ T25] dvb-usb: bulk message failed: -22 (5/0) [ 236.045071][ T25] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 236.074117][ T25] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 236.102965][ T25] usb 5-1: media controller created [ 236.128760][ T6864] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 236.139104][ T25] dvb-usb: bulk message failed: -22 (8/0) [ 236.145131][ T25] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 236.163174][ T25] dvb-usb: MAC address reading failed. [ 236.201020][ T25] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 236.330385][ T6864] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 236.342143][ T6864] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 236.359426][ T5838] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 236.399805][ T6864] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 236.429913][ T6864] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.440567][ T25] DVB: Unable to find symbol stb0899_attach() [ 236.450662][ T7101] ip6gretap0: entered promiscuous mode [ 236.462154][ T25] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 236.471367][ T6864] usb 4-1: Product: syz [ 236.471524][ T7101] batadv_slave_0: entered promiscuous mode [ 236.475565][ T6864] usb 4-1: Manufacturer: syz [ 236.490222][ T7101] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 236.498468][ T6864] usb 4-1: SerialNumber: syz [ 236.508103][ T7101] Cannot create hsr debugfs directory [ 236.536770][ T5838] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 236.784353][ T5838] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 236.797110][ T5838] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 236.806362][ T5838] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.814997][ T5838] usb 3-1: Product: syz [ 236.820013][ T5838] usb 3-1: Manufacturer: syz [ 236.824717][ T5838] usb 3-1: SerialNumber: syz [ 236.831873][ T25] rc_core: IR keymap rc-tt-1500 not found [ 236.837978][ T25] Registered IR keymap rc-empty [ 236.854646][ T25] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0 [ 236.877588][ T25] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input9 [ 236.955095][ T6864] usb 4-1: 0:2 : does not exist [ 236.999895][ T25] dvb-usb: schedule remote query interval to 100 msecs. [ 237.010692][ T25] pctv452e: pctv452e_power_ctrl: 0 [ 237.010692][ T25] [ 237.018922][ T25] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 237.254275][ T5889] dvb-usb: bulk message failed: -22 (4/0) [ 237.284871][ T5889] dvb-usb: error -22 while querying for an remote control event. [ 237.654151][ T2151] dvb-usb: bulk message failed: -22 (4/0) [ 237.660071][ T2151] dvb-usb: error -22 while querying for an remote control event. [ 237.689755][ T6864] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 237.723530][ T5838] usb 3-1: 0:2 : does not exist [ 237.742848][ T5838] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 237.751094][ T6864] usb 4-1: USB disconnect, device number 5 [ 237.769837][ T25] dvb-usb: bulk message failed: -22 (4/0) [ 237.775694][ T25] dvb-usb: error -22 while querying for an remote control event. [ 237.810265][ T5838] usb 3-1: USB disconnect, device number 7 [ 237.843383][ T974] usb 5-1: USB disconnect, device number 5 [ 238.010090][ T6371] udevd[6371]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 238.062516][ T974] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 238.170575][ T5920] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 238.188364][ T7111] udevd[7111]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 238.343030][ T5920] usb 2-1: Using ep0 maxpacket: 8 [ 238.525754][ T5920] usb 2-1: config 0 has an invalid interface number: 56 but max is 0 [ 239.394905][ T5920] usb 2-1: config 0 has no interface number 0 [ 239.521721][ T29] kauditd_printk_skb: 56 callbacks suppressed [ 239.521742][ T29] audit: type=1326 audit(1734568725.306:730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7120 comm="syz.4.349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd672f85d29 code=0x7fc00000 [ 239.589984][ T29] audit: type=1326 audit(1734568725.306:731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7120 comm="syz.4.349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd672f85d29 code=0x7fc00000 [ 239.623553][ T29] audit: type=1326 audit(1734568725.306:732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7120 comm="syz.4.349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd672f85d29 code=0x7fc00000 [ 239.820968][ T5920] usb 2-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 239.868577][ T5920] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.178763][ T29] audit: type=1326 audit(1734568725.306:733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7120 comm="syz.4.349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd672f85d29 code=0x7fc00000 [ 240.225911][ T5920] usb 2-1: Product: syz [ 240.237526][ T29] audit: type=1326 audit(1734568725.306:734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7120 comm="syz.4.349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd672f85d29 code=0x7fc00000 [ 240.261340][ T7135] netlink: 1267 bytes leftover after parsing attributes in process `syz.3.353'. [ 240.412708][ T29] audit: type=1326 audit(1734568725.306:735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7120 comm="syz.4.349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd672f85d29 code=0x7fc00000 [ 240.439439][ T7135] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 240.454459][ T29] audit: type=1326 audit(1734568725.306:736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7120 comm="syz.4.349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd672f85d29 code=0x7fc00000 [ 240.456535][ T5920] usb 2-1: Manufacturer: syz [ 240.485497][ T5920] usb 2-1: SerialNumber: syz [ 240.499994][ T5920] usb 2-1: config 0 descriptor?? [ 240.522758][ T5920] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 240.531320][ T5920] pctv452e: pctv452e_power_ctrl: 1 [ 240.531320][ T5920] [ 240.541785][ T5920] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 240.541785][ T5920] [ 240.546988][ T29] audit: type=1326 audit(1734568725.306:737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7120 comm="syz.4.349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd672f85d29 code=0x7fc00000 [ 240.552156][ T5920] dvb-usb: bulk message failed: -22 (5/0) [ 240.640613][ T29] audit: type=1326 audit(1734568725.316:738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7120 comm="syz.4.349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd672f85d29 code=0x7fc00000 [ 240.664576][ T5920] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 240.678870][ T5920] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 240.687373][ T5920] usb 2-1: media controller created [ 240.692793][ T5920] dvb-usb: bulk message failed: -22 (8/0) [ 240.696682][ T29] audit: type=1326 audit(1734568725.316:739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7120 comm="syz.4.349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd672f85d29 code=0x7fc00000 [ 240.698708][ T5920] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 240.730477][ T5920] dvb-usb: MAC address reading failed. [ 240.749437][ T5920] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 242.267077][ T7156] netlink: 8 bytes leftover after parsing attributes in process `syz.3.356'. [ 242.978034][ T5920] DVB: Unable to find symbol stb0899_attach() [ 242.998736][ T5920] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 243.166348][ T7173] netlink: 8 bytes leftover after parsing attributes in process `syz.2.360'. [ 244.098667][ T5920] rc_core: IR keymap rc-tt-1500 not found [ 244.104443][ T5920] Registered IR keymap rc-empty [ 244.137959][ T5920] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 244.193962][ T5920] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input10 [ 244.302231][ T5920] dvb-usb: schedule remote query interval to 100 msecs. [ 244.463414][ T5920] pctv452e: pctv452e_power_ctrl: 0 [ 244.463414][ T5920] [ 244.583343][ T5892] dvb-usb: bulk message failed: -22 (4/0) [ 244.590743][ T5892] dvb-usb: error -22 while querying for an remote control event. [ 245.305297][ T5920] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 246.309324][ T8] dvb-usb: bulk message failed: -22 (4/0) [ 246.315163][ T8] dvb-usb: error -22 while querying for an remote control event. [ 246.324063][ T5920] usb 2-1: USB disconnect, device number 7 [ 246.425752][ T7195] netlink: 1267 bytes leftover after parsing attributes in process `syz.1.366'. [ 246.441489][ T7195] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 247.091912][ T974] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 247.127696][ T5920] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 247.639011][ T974] usb 5-1: Using ep0 maxpacket: 32 [ 248.664534][ T29] kauditd_printk_skb: 56 callbacks suppressed [ 248.664555][ T29] audit: type=1326 audit(1734568735.196:796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7199 comm="syz.2.368" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbdd3785d29 code=0x0 [ 249.464790][ T29] audit: type=1326 audit(1734568735.236:797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7201 comm="syz.0.369" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5bb8385d29 code=0x0 [ 249.755454][ T974] usb 5-1: device descriptor read/all, error -71 [ 250.067694][ T7216] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 251.732927][ T7227] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 253.748850][ T5889] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 253.782895][ T7233] netlink: 12 bytes leftover after parsing attributes in process `syz.3.377'. [ 253.959840][ T5889] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 253.994804][ T5889] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 255.010007][ T5889] usb 1-1: config 1 has no interface number 0 [ 255.016462][ T5889] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 255.027896][ T5889] usb 1-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 256.032582][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.038982][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.070605][ T5889] usb 1-1: string descriptor 0 read error: -71 [ 257.077184][ T5889] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 257.700078][ T5889] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.740239][ T5889] usb 1-1: can't set config #1, error -71 [ 257.751922][ T5889] usb 1-1: USB disconnect, device number 6 [ 259.018749][ T5920] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 259.396692][ T7274] bridge0: port 4(erspan0) entered blocking state [ 259.403970][ T7274] bridge0: port 4(erspan0) entered disabled state [ 259.421186][ T7274] erspan0: entered allmulticast mode [ 259.458859][ T7274] erspan0: left allmulticast mode [ 259.594005][ T5920] usb 4-1: Using ep0 maxpacket: 32 [ 259.701671][ T5920] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 259.789082][ T5920] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 259.848841][ T5920] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 8704, setting to 1024 [ 259.948025][ T5920] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 260.020963][ T5920] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 260.055083][ T5920] usb 4-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 260.067750][ T5920] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.085586][ T5920] usb 4-1: Product: syz [ 260.123678][ T5920] usb 4-1: Manufacturer: syz [ 260.136573][ T5920] usb 4-1: SerialNumber: syz [ 260.214130][ T5920] usb 4-1: config 0 descriptor?? [ 261.400748][ T7290] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 261.959126][ T5920] iforce 4-1:0.0: usb_submit_urb failed: -110 [ 261.965988][ T5920] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 261.972651][ T5920] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 261.990218][ T5920] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 261.996635][ T5920] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 262.004883][ T5920] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 262.555667][ T5920] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 262.562189][ T5920] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 262.595795][ T5920] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 262.633489][ T5920] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 262.654117][ T5920] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 262.677983][ T5920] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 262.745185][ T5920] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 262.759366][ T7284] netlink: 12 bytes leftover after parsing attributes in process `syz.0.393'. [ 262.770467][ T5920] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 262.777192][ T5920] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 262.788453][ T5920] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 262.798967][ T5920] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 262.806140][ T5920] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 262.813175][ T5920] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 262.823244][ T5920] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 262.832181][ T5920] input input11: Timeout waiting for response from device. [ 262.843883][ T5920] usb 4-1: USB disconnect, device number 6 [ 266.858888][ T2151] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 267.385614][ T2151] usb 2-1: Using ep0 maxpacket: 8 [ 267.400082][ T2151] usb 2-1: config 0 has an invalid interface number: 56 but max is 0 [ 267.415499][ T2151] usb 2-1: config 0 has no interface number 0 [ 267.441353][ T2151] usb 2-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 267.464273][ T2151] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.505882][ T2151] usb 2-1: Product: syz [ 267.510467][ T2151] usb 2-1: Manufacturer: syz [ 267.521023][ T2151] usb 2-1: SerialNumber: syz [ 267.606696][ T7363] netlink: 8 bytes leftover after parsing attributes in process `syz.4.416'. [ 267.743051][ T2151] usb 2-1: config 0 descriptor?? [ 267.958682][ T2151] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 267.966932][ T2151] pctv452e: pctv452e_power_ctrl: 1 [ 267.966932][ T2151] [ 267.974656][ T2151] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 267.974656][ T2151] [ 267.985991][ T2151] dvb-usb: bulk message failed: -22 (5/0) [ 268.270052][ T2151] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 269.199014][ T2151] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 269.207473][ T2151] usb 2-1: media controller created [ 269.212841][ T2151] dvb-usb: bulk message failed: -22 (8/0) [ 269.218881][ T2151] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 269.228900][ T2151] dvb-usb: MAC address reading failed. [ 269.253686][ T2151] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 269.548122][ T2151] DVB: Unable to find symbol stb0899_attach() [ 269.554429][ T2151] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 269.642788][ T2151] rc_core: IR keymap rc-tt-1500 not found [ 269.648760][ T2151] Registered IR keymap rc-empty [ 269.673592][ T2151] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 269.715461][ T2151] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input12 [ 269.735920][ T2151] dvb-usb: schedule remote query interval to 100 msecs. [ 269.759451][ T2151] pctv452e: pctv452e_power_ctrl: 0 [ 269.759451][ T2151] [ 269.767033][ T2151] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 269.858840][ T2151] usb 2-1: USB disconnect, device number 8 [ 270.365597][ T2151] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 270.979563][ T2151] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 271.059230][ T5890] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 271.208954][ T2151] usb 3-1: Using ep0 maxpacket: 16 [ 271.215616][ T2151] usb 3-1: too many configurations: 60, using maximum allowed: 8 [ 271.228689][ T5890] usb 5-1: Using ep0 maxpacket: 32 [ 271.236731][ T5890] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 271.260814][ T2151] usb 3-1: New USB device found, idVendor=0471, idProduct=032c, bcdDevice=ba.e9 [ 271.280645][ T2151] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=204 [ 271.344048][ T5890] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 271.363553][ T2151] usb 3-1: Product: syz [ 271.369403][ T5890] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 8704, setting to 1024 [ 271.398797][ T2151] usb 3-1: Manufacturer: syz [ 271.403493][ T2151] usb 3-1: SerialNumber: syz [ 271.424193][ T5890] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 271.458608][ T5890] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 271.967474][ T2151] usb 3-1: config 0 descriptor?? [ 271.973834][ T5889] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 271.987428][ T2151] pwc: Philips SPC 880NC USB webcam detected. [ 271.995284][ T5890] usb 5-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 272.004563][ T5890] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.012733][ T5890] usb 5-1: Product: syz [ 272.016958][ T5890] usb 5-1: Manufacturer: syz [ 272.021779][ T5890] usb 5-1: SerialNumber: syz [ 272.029241][ T5890] usb 5-1: config 0 descriptor?? [ 272.138613][ T5889] usb 1-1: Using ep0 maxpacket: 16 [ 272.160171][ T5889] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 272.171332][ T5889] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 272.193293][ T2151] pwc: Warning: more than 1 configuration available. [ 272.206719][ T2151] pwc: Failed to set LED on/off time (-71) [ 272.213409][ T2151] pwc: send_video_command error -71 [ 272.228666][ T5889] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 272.240424][ T2151] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 272.258760][ T2151] Philips webcam 3-1:0.0: probe with driver Philips webcam failed with error -71 [ 272.268645][ T5889] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 272.311565][ T2151] usb 3-1: USB disconnect, device number 8 [ 272.340606][ T5889] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 272.350507][ T5889] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.359197][ T5889] usb 1-1: Product: syz [ 272.363442][ T5889] usb 1-1: Manufacturer: syz [ 272.368117][ T5889] usb 1-1: SerialNumber: syz [ 272.453506][ T7392] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 272.471534][ T7392] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 272.504205][ T5890] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 272.517418][ T5890] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 272.524063][ T5890] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 272.539201][ T5890] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 272.552324][ T5890] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 272.568957][ T5890] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 272.578678][ T5890] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 272.621420][ T5890] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 272.627871][ T5889] usb 1-1: USB disconnect, device number 7 [ 272.635368][ T5890] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 272.655883][ T5890] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 272.672237][ T5890] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 272.687469][ T5890] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 272.693992][ T5890] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 272.718660][ T5890] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 272.725928][ T5890] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 272.734727][ T5890] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 272.741320][ T5890] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 272.747650][ T5890] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 272.754081][ T5890] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 272.761484][ T5890] input input13: Timeout waiting for response from device. [ 272.809516][ T5890] usb 5-1: USB disconnect, device number 8 [ 272.890819][ T7111] udevd[7111]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 273.585251][ T7409] netlink: 12 bytes leftover after parsing attributes in process `syz.3.428'. [ 273.853700][ T7412] netlink: 8 bytes leftover after parsing attributes in process `syz.2.430'. [ 278.400197][ T29] audit: type=1326 audit(1734568764.446:798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7438 comm="syz.2.438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdd3785d29 code=0x7fc00000 [ 278.469087][ T29] audit: type=1326 audit(1734568764.446:799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7438 comm="syz.2.438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbdd3785d29 code=0x7fc00000 [ 278.506179][ T29] audit: type=1326 audit(1734568764.446:800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7438 comm="syz.2.438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdd3785d29 code=0x7fc00000 [ 278.570424][ T29] audit: type=1326 audit(1734568764.446:801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7438 comm="syz.2.438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdd3785d29 code=0x7fc00000 [ 278.661550][ T29] audit: type=1326 audit(1734568764.446:802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7438 comm="syz.2.438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdd3785d29 code=0x7fc00000 [ 278.744093][ T29] audit: type=1326 audit(1734568764.456:803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7438 comm="syz.2.438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdd3785d29 code=0x7fc00000 [ 278.859189][ T29] audit: type=1326 audit(1734568764.456:804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7438 comm="syz.2.438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdd3785d29 code=0x7fc00000 [ 278.926806][ T29] audit: type=1326 audit(1734568764.456:805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7438 comm="syz.2.438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdd3785d29 code=0x7fc00000 [ 279.077225][ T29] audit: type=1326 audit(1734568764.456:806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7438 comm="syz.2.438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdd3785d29 code=0x7fc00000 [ 279.138939][ T29] audit: type=1326 audit(1734568764.456:807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7438 comm="syz.2.438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdd3785d29 code=0x7fc00000 [ 280.023688][ T7462] netlink: 8 bytes leftover after parsing attributes in process `syz.2.445'. [ 281.398685][ T2151] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 281.550763][ T2151] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 281.588252][ T2151] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 281.616811][ T2151] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 281.649836][ T2151] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.668060][ T2151] usb 5-1: Product: syz [ 281.678572][ T2151] usb 5-1: Manufacturer: syz [ 281.688934][ T2151] usb 5-1: SerialNumber: syz [ 281.953292][ T2151] usb 5-1: 0:2 : does not exist [ 281.977703][ T2151] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 282.071010][ T2151] usb 5-1: USB disconnect, device number 9 [ 282.122740][ T7486] netlink: 28 bytes leftover after parsing attributes in process `syz.2.455'. [ 282.172986][ T7486] netlink: 28 bytes leftover after parsing attributes in process `syz.2.455'. [ 282.381223][ T5920] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 282.392979][ T7486] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 282.418722][ T7486] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 282.607858][ T7111] udevd[7111]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 283.328643][ T5920] usb 1-1: Using ep0 maxpacket: 8 [ 283.346507][ T5920] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 283.372310][ T5920] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.398719][ T5920] usb 1-1: Product: syz [ 283.402982][ T5920] usb 1-1: Manufacturer: syz [ 283.428626][ T5920] usb 1-1: SerialNumber: syz [ 283.610052][ T5920] usb 1-1: config 0 descriptor?? [ 285.578129][ T5920] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 285.705615][ T7518] netlink: 12 bytes leftover after parsing attributes in process `syz.1.464'. [ 287.594819][ T29] kauditd_printk_skb: 187 callbacks suppressed [ 287.594872][ T29] audit: type=1326 audit(1734568774.026:995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7529 comm="syz.1.469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80f2185d29 code=0x7fc00000 [ 288.015784][ T5920] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 288.034975][ T5920] usb 1-1: USB disconnect, device number 8 [ 288.058702][ T29] audit: type=1326 audit(1734568774.026:996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7529 comm="syz.1.469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f80f2185d29 code=0x7fc00000 [ 288.112349][ T29] audit: type=1326 audit(1734568774.026:997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7529 comm="syz.1.469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80f2185d29 code=0x7fc00000 [ 288.136148][ T29] audit: type=1326 audit(1734568774.026:998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7529 comm="syz.1.469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80f2185d29 code=0x7fc00000 [ 288.166049][ T29] audit: type=1326 audit(1734568774.026:999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7529 comm="syz.1.469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80f2185d29 code=0x7fc00000 [ 288.263373][ T29] audit: type=1326 audit(1734568774.026:1000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7529 comm="syz.1.469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80f2185d29 code=0x7fc00000 [ 288.384326][ T29] audit: type=1326 audit(1734568774.026:1001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7529 comm="syz.1.469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80f2185d29 code=0x7fc00000 [ 288.423742][ T29] audit: type=1326 audit(1734568774.026:1002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7529 comm="syz.1.469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80f2185d29 code=0x7fc00000 [ 288.487579][ T29] audit: type=1326 audit(1734568774.026:1003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7529 comm="syz.1.469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80f2185d29 code=0x7fc00000 [ 288.578861][ T29] audit: type=1326 audit(1734568774.026:1004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7529 comm="syz.1.469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80f2185d29 code=0x7fc00000 [ 288.918699][ T25] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 289.088709][ T5890] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 289.096824][ T25] usb 5-1: Using ep0 maxpacket: 8 [ 289.115368][ T25] usb 5-1: config 0 has an invalid interface number: 56 but max is 0 [ 289.129155][ T25] usb 5-1: config 0 has no interface number 0 [ 289.191270][ T25] usb 5-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 289.218767][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.248487][ T25] usb 5-1: Product: syz [ 290.023585][ T25] usb 5-1: Manufacturer: syz [ 290.028370][ T25] usb 5-1: SerialNumber: syz [ 290.522185][ T25] usb 5-1: config 0 descriptor?? [ 290.528260][ T5890] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 290.541124][ T25] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 290.558605][ T5890] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 290.567716][ T25] pctv452e: pctv452e_power_ctrl: 1 [ 290.567716][ T25] [ 290.588753][ T25] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 290.588753][ T25] [ 290.606046][ T25] dvb-usb: bulk message failed: -22 (5/0) [ 290.625456][ T5890] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 290.646156][ T25] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 290.655685][ T5890] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 290.667136][ T25] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 290.676459][ T5890] usb 1-1: SerialNumber: syz [ 290.680209][ T7568] netlink: 12 bytes leftover after parsing attributes in process `syz.1.480'. [ 290.682757][ T25] usb 5-1: media controller created [ 290.696974][ T25] dvb-usb: bulk message failed: -22 (8/0) [ 290.702887][ T25] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 290.711505][ T25] dvb-usb: MAC address reading failed. [ 290.840919][ T25] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 292.408796][ T25] DVB: Unable to find symbol stb0899_attach() [ 292.414957][ T25] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 292.566186][ T5892] usb 1-1: USB disconnect, device number 9 [ 293.408614][ T25] rc_core: IR keymap rc-tt-1500 not found [ 293.428649][ T25] Registered IR keymap rc-empty [ 293.458350][ T25] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0 [ 293.507402][ T25] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input14 [ 293.575917][ T25] dvb-usb: schedule remote query interval to 100 msecs. [ 293.613795][ T25] pctv452e: pctv452e_power_ctrl: 0 [ 293.613795][ T25] [ 293.642384][ T25] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 293.680494][ T7576] relay: one or more items not logged [item size (56) > sub-buffer size (10)] [ 293.718970][ T5890] dvb-usb: bulk message failed: -22 (4/0) [ 293.724889][ T5890] dvb-usb: error -22 while querying for an remote control event. [ 293.905097][ T25] usb 5-1: USB disconnect, device number 10 [ 294.158769][ T5838] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 294.338807][ T5838] usb 4-1: Using ep0 maxpacket: 16 [ 294.456893][ T5838] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 294.487984][ T25] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 294.507563][ T5838] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 294.558385][ T5838] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 294.576886][ T5838] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.625269][ T7601] hub 6-0:1.0: USB hub found [ 294.636868][ T5838] usb 4-1: config 0 descriptor?? [ 294.658163][ T7601] hub 6-0:1.0: 1 port detected [ 296.873368][ T5838] usbhid 4-1:0.0: can't add hid device: -71 [ 296.889606][ T5838] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 297.226547][ T5838] usb 4-1: USB disconnect, device number 7 [ 297.818395][ T7620] netlink: 4 bytes leftover after parsing attributes in process `syz.0.495'. [ 299.976804][ T7634] netlink: 4 bytes leftover after parsing attributes in process `syz.0.497'. [ 301.952968][ T7648] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 304.409233][ T25] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 304.598662][ T25] usb 1-1: Using ep0 maxpacket: 16 [ 304.617870][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 304.629311][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 304.680580][ T25] usb 1-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 304.699640][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.720953][ T25] usb 1-1: config 0 descriptor?? [ 304.848783][ T7669] netlink: 28 bytes leftover after parsing attributes in process `syz.3.509'. [ 305.447383][ T25] usbhid 1-1:0.0: can't add hid device: -71 [ 305.455020][ T25] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 305.613275][ T25] usb 1-1: USB disconnect, device number 10 [ 306.045884][ T7689] netlink: 8 bytes leftover after parsing attributes in process `syz.3.513'. [ 306.836637][ T7693] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 311.941903][ T5855] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 311.950858][ T5855] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 311.960259][ T5855] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 312.007388][ T5855] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 312.015212][ T5855] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 312.037563][ T5855] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 312.579202][ T7743] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 314.098712][ T5855] Bluetooth: hci5: command tx timeout [ 314.821402][ T7624] bridge0: port 3(syz_tun) entered disabled state [ 316.511807][ T5855] Bluetooth: hci5: command tx timeout [ 316.577826][ T7624] syz_tun (unregistering): left allmulticast mode [ 316.778644][ T7624] syz_tun (unregistering): left promiscuous mode [ 316.786224][ T7624] bridge0: port 3(syz_tun) entered disabled state [ 317.529669][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.536088][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.929035][ T7732] chnl_net:caif_netlink_parms(): no params data found [ 318.665639][ T55] Bluetooth: hci5: command tx timeout [ 319.232063][ T2991] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.764731][ T55] Bluetooth: hci5: command tx timeout [ 321.015098][ T7813] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 321.178480][ T2991] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.756932][ T7732] bridge0: port 1(bridge_slave_0) entered blocking state [ 321.915068][ T7732] bridge0: port 1(bridge_slave_0) entered disabled state [ 322.491931][ T7732] bridge_slave_0: entered allmulticast mode [ 322.499965][ T7732] bridge_slave_0: entered promiscuous mode [ 322.830727][ T2991] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.939550][ T2151] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 323.155960][ T7732] bridge0: port 2(bridge_slave_1) entered blocking state [ 323.298423][ T7732] bridge0: port 2(bridge_slave_1) entered disabled state [ 323.326699][ T2151] usb 1-1: Using ep0 maxpacket: 32 [ 323.417675][ T7732] bridge_slave_1: entered allmulticast mode [ 323.445322][ T7732] bridge_slave_1: entered promiscuous mode [ 323.451449][ T2151] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 323.451580][ T2151] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 323.451650][ T2151] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 323.458782][ T2151] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 323.585225][ T2151] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 323.595143][ T2151] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 323.627804][ T2991] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.709645][ T2151] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 323.720357][ T2151] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 323.737813][ T2151] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 323.776055][ T2151] usb 1-1: New USB device found, idVendor=0451, idProduct=5152, bcdDevice=c0.b9 [ 323.804204][ T2151] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.833807][ T2151] usb 1-1: Product: syz [ 323.838042][ T2151] usb 1-1: Manufacturer: syz [ 323.855084][ T7732] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 323.869730][ T7732] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 323.882145][ T2151] usb 1-1: SerialNumber: syz [ 323.925080][ T2151] usb 1-1: config 0 descriptor?? [ 323.953627][ T2151] ti_usb_3410_5052 1-1:0.0: TI USB 5052 2 port adapter converter detected [ 323.995060][ T2151] ti_usb_3410_5052 1-1:0.0: missing endpoints [ 324.637889][ T7732] team0: Port device team_slave_0 added [ 324.856039][ T7821] netlink: 16 bytes leftover after parsing attributes in process `syz.0.544'. [ 324.857641][ T7732] team0: Port device team_slave_1 added [ 324.866090][ T2151] usb 1-1: USB disconnect, device number 11 [ 325.162776][ T7732] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 325.245888][ T7732] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 325.445062][ T7732] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 326.049236][ T7732] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 326.056256][ T7732] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 326.167363][ T7863] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 326.288688][ T7732] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 327.516381][ T2991] erspan0: left allmulticast mode [ 327.521902][ T2991] erspan0: left promiscuous mode [ 327.528745][ T2991] bridge0: port 4(erspan0) entered disabled state [ 327.769779][ T2991] bridge_slave_1: left allmulticast mode [ 327.778608][ T2991] bridge_slave_1: left promiscuous mode [ 327.784418][ T2991] bridge0: port 2(bridge_slave_1) entered disabled state [ 328.791573][ T2991] bridge_slave_0: left allmulticast mode [ 328.797723][ T2991] bridge_slave_0: left promiscuous mode [ 328.823042][ T2991] bridge0: port 1(bridge_slave_0) entered disabled state [ 329.561459][ T2991] ip6gretap0 (unregistering): left promiscuous mode [ 331.543619][ T2991] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 331.563143][ T2991] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 331.576303][ T2991] bond0 (unregistering): Released all slaves [ 331.622779][ T7874] vlan2: entered promiscuous mode [ 331.811915][ T7732] hsr_slave_0: entered promiscuous mode [ 331.879193][ T7732] hsr_slave_1: entered promiscuous mode [ 331.897528][ T7732] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 332.114523][ T7732] Cannot create hsr debugfs directory [ 333.918607][ T5892] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 334.109449][ T5892] usb 2-1: Using ep0 maxpacket: 8 [ 334.121621][ T5892] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 334.147267][ T5892] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.168615][ T9] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 334.196432][ T5892] usb 2-1: Product: syz [ 334.202651][ T5892] usb 2-1: Manufacturer: syz [ 334.207424][ T5892] usb 2-1: SerialNumber: syz [ 334.269534][ T5892] usb 2-1: config 0 descriptor?? [ 334.338859][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 334.345725][ T9] usb 4-1: too many configurations: 60, using maximum allowed: 8 [ 334.409960][ T9] usb 4-1: New USB device found, idVendor=0471, idProduct=032c, bcdDevice=ba.e9 [ 334.422305][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=204 [ 334.431527][ T9] usb 4-1: Product: syz [ 334.435764][ T9] usb 4-1: Manufacturer: syz [ 334.441282][ T9] usb 4-1: SerialNumber: syz [ 334.501029][ T5892] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 334.513140][ T9] usb 4-1: config 0 descriptor?? [ 334.549332][ T9] pwc: Philips SPC 880NC USB webcam detected. [ 334.685483][ T2991] batadv_slave_0: left promiscuous mode [ 334.699416][ T2991] hsr_slave_0: left promiscuous mode [ 334.734365][ T9] pwc: Warning: more than 1 configuration available. [ 334.774134][ T9] pwc: Failed to set LED on/off time (-71) [ 334.809692][ T2991] hsr_slave_1: left promiscuous mode [ 334.810725][ T9] pwc: send_video_command error -71 [ 334.838617][ T9] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 334.838713][ T2991] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 334.857227][ T9] Philips webcam 4-1:0.0: probe with driver Philips webcam failed with error -71 [ 334.858723][ T2991] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 334.890067][ T2991] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 334.897599][ T2991] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 334.905362][ T9] usb 4-1: USB disconnect, device number 8 [ 334.939518][ T2991] veth1_macvtap: left promiscuous mode [ 334.945615][ T2991] veth0_macvtap: left promiscuous mode [ 334.952368][ T2991] veth1_vlan: left promiscuous mode [ 334.959174][ T2991] veth0_vlan: left promiscuous mode [ 336.102571][ T7944] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 336.116746][ T2991] team0 (unregistering): Port device team_slave_1 removed [ 336.124509][ T5838] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 336.267371][ T2991] team0 (unregistering): Port device team_slave_0 removed [ 336.288719][ T5838] usb 4-1: Using ep0 maxpacket: 8 [ 336.329411][ T5838] usb 4-1: config 0 has no interfaces? [ 336.338338][ T5892] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 336.357662][ T5892] usb 2-1: USB disconnect, device number 9 [ 336.411576][ T5838] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 336.452939][ T5838] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 336.497089][ T5838] usb 4-1: config 0 descriptor?? [ 336.778903][ T5838] usb 4-1: USB disconnect, device number 9 [ 338.383219][ T7979] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 338.471149][ T7979] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 338.477585][ T7979] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 338.661063][ T7989] netlink: 'syz.0.583': attribute type 4 has an invalid length. [ 338.788132][ T7979] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 338.828758][ T7979] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 338.896114][ T7732] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 338.975051][ T7979] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 339.006937][ T7979] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 339.039482][ T7732] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 339.080151][ T7979] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 339.086199][ T7979] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 339.126989][ T7732] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 339.179471][ T7732] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 339.239459][ T7979] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 339.403550][ T7732] 8021q: adding VLAN 0 to HW filter on device bond0 [ 339.444155][ T7732] 8021q: adding VLAN 0 to HW filter on device team0 [ 339.509554][ T6478] bridge0: port 1(bridge_slave_0) entered blocking state [ 339.517801][ T6478] bridge0: port 1(bridge_slave_0) entered forwarding state [ 339.532749][ T6478] bridge0: port 2(bridge_slave_1) entered blocking state [ 339.539954][ T6478] bridge0: port 2(bridge_slave_1) entered forwarding state [ 339.618665][ T25] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 339.682743][ T7732] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 339.938967][ T25] usb 3-1: Using ep0 maxpacket: 32 [ 340.087609][ T25] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 340.097202][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.126542][ T25] usb 3-1: Product: syz [ 340.136692][ T25] usb 3-1: Manufacturer: syz [ 340.146868][ T25] usb 3-1: SerialNumber: syz [ 340.170181][ T8014] [ 340.172585][ T8014] ============================================ [ 340.179895][ T8014] WARNING: possible recursive locking detected [ 340.186624][ T8014] 6.13.0-rc3-next-20241218-syzkaller #0 Not tainted [ 340.193228][ T8014] -------------------------------------------- [ 340.199574][ T8014] syz.1.588/8014 is trying to acquire lock: [ 340.205655][ T8014] ffff8880217ea348 (vm_lock){++++}-{0:0}, at: move_pages+0x26b/0x1680 [ 340.213896][ T8014] [ 340.213896][ T8014] but task is already holding lock: [ 340.221297][ T8014] ffff88807c6980c8 (vm_lock){++++}-{0:0}, at: uffd_lock_vma+0x20/0x2c0 [ 340.229699][ T8014] [ 340.229699][ T8014] other info that might help us debug this: [ 340.237796][ T8014] Possible unsafe locking scenario: [ 340.237796][ T8014] [ 340.245264][ T8014] CPU0 [ 340.248816][ T8014] ---- [ 340.252192][ T8014] lock(vm_lock); [ 340.256016][ T8014] lock(vm_lock); [ 340.260096][ T8014] [ 340.260096][ T8014] *** DEADLOCK *** [ 340.260096][ T8014] [ 340.268293][ T8014] May be due to missing lock nesting notation [ 340.268293][ T8014] [ 340.276639][ T8014] 2 locks held by syz.1.588/8014: [ 340.281778][ T8014] #0: ffff88807c6980c8 (vm_lock){++++}-{0:0}, at: uffd_lock_vma+0x20/0x2c0 [ 340.290798][ T8014] #1: ffffffff8e937d20 (rcu_read_lock){....}-{1:3}, at: lock_vma_under_rcu+0x1dd/0xa40 [ 340.301101][ T8014] [ 340.301101][ T8014] stack backtrace: [ 340.307146][ T8014] CPU: 1 UID: 0 PID: 8014 Comm: syz.1.588 Not tainted 6.13.0-rc3-next-20241218-syzkaller #0 [ 340.307171][ T8014] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 340.307184][ T8014] Call Trace: [ 340.307193][ T8014] [ 340.307203][ T8014] dump_stack_lvl+0x241/0x360 [ 340.307229][ T8014] ? __pfx_dump_stack_lvl+0x10/0x10 [ 340.307247][ T8014] ? __pfx__printk+0x10/0x10 [ 340.307275][ T8014] ? lockdep_unlock+0x16a/0x300 [ 340.307299][ T8014] print_deadlock_bug+0x483/0x620 [ 340.307316][ T8014] ? validate_chain+0x11e/0x5920 [ 340.307343][ T8014] validate_chain+0x15e2/0x5920 [ 340.307370][ T8014] ? __pfx_validate_chain+0x10/0x10 [ 340.307409][ T8014] ? __pfx_validate_chain+0x10/0x10 [ 340.307436][ T8014] ? __pfx_validate_chain+0x10/0x10 [ 340.307464][ T8014] ? mark_lock+0x9a/0x360 [ 340.307490][ T8014] ? __lock_acquire+0x1397/0x2100 [ 340.307515][ T8014] ? validate_chain+0x11e/0x5920 [ 340.307543][ T8014] ? reacquire_held_locks+0x3eb/0x690 [ 340.307570][ T8014] ? mark_lock+0x9a/0x360 [ 340.307595][ T8014] __lock_acquire+0x1397/0x2100 [ 340.307625][ T8014] lock_acquire+0x1ed/0x550 [ 340.307648][ T8014] ? move_pages+0x26b/0x1680 [ 340.307668][ T8014] ? __pfx_lock_acquire+0x10/0x10 [ 340.307696][ T8014] ? mas_walk+0x1f3/0x280 [ 340.307718][ T8014] lock_vma_under_rcu+0x370/0xa40 [ 340.307739][ T8014] ? move_pages+0x26b/0x1680 [ 340.307755][ T8014] ? lock_vma_under_rcu+0x1dd/0xa40 [ 340.307775][ T8014] ? move_pages+0x26b/0x1680 [ 340.307793][ T8014] ? __pfx_lock_vma_under_rcu+0x10/0x10 [ 340.307819][ T8014] ? uffd_lock_vma+0x91/0x2c0 [ 340.307838][ T8014] move_pages+0x26b/0x1680 [ 340.307855][ T8014] ? __pfx___might_resched+0x10/0x10 [ 340.307875][ T8014] ? __might_fault+0xaa/0x120 [ 340.307897][ T8014] ? preempt_count_add+0x93/0x190 [ 340.307916][ T8014] ? __pfx_move_pages+0x10/0x10 [ 340.307933][ T8014] ? __might_fault+0xc6/0x120 [ 340.307955][ T8014] userfaultfd_ioctl+0x5221/0x6840 [ 340.307984][ T8014] ? __pfx_userfaultfd_ioctl+0x10/0x10 [ 340.308005][ T8014] ? stack_trace_save+0x118/0x1d0 [ 340.308024][ T8014] ? __pfx_stack_trace_save+0x10/0x10 [ 340.308044][ T8014] ? stack_depot_save_flags+0x37/0x940 [ 340.308074][ T8014] ? kasan_save_track+0x51/0x80 [ 340.308097][ T8014] ? kasan_save_track+0x3f/0x80 [ 340.308118][ T8014] ? kasan_save_free_info+0x40/0x50 [ 340.308137][ T8014] ? __kasan_slab_free+0x59/0x70 [ 340.308161][ T8014] ? kfree+0x196/0x430 [ 340.308176][ T8014] ? tomoyo_path_number_perm+0x679/0x860 [ 340.308193][ T8014] ? security_file_ioctl+0xc6/0x2a0 [ 340.308208][ T8014] ? __se_sys_ioctl+0x46/0x170 [ 340.308229][ T8014] ? do_syscall_64+0xf3/0x230 [ 340.308244][ T8014] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 340.308270][ T8014] ? do_vfs_ioctl+0xf07/0x2e40 [ 340.308295][ T8014] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 340.308319][ T8014] ? mark_lock+0x9a/0x360 [ 340.308349][ T8014] ? tomoyo_path_number_perm+0x206/0x860 [ 340.308367][ T8014] ? __pfx_lock_release+0x10/0x10 [ 340.308390][ T8014] ? tomoyo_path_number_perm+0x679/0x860 [ 340.308417][ T8014] ? tomoyo_path_number_perm+0x679/0x860 [ 340.308436][ T8014] ? tomoyo_path_number_perm+0x6f9/0x860 [ 340.308452][ T8014] ? __lock_acquire+0x1397/0x2100 [ 340.308477][ T8014] ? tomoyo_path_number_perm+0x206/0x860 [ 340.308497][ T8014] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 340.308530][ T8014] ? __fget_files+0x2a/0x410 [ 340.308549][ T8014] ? __fget_files+0x2a/0x410 [ 340.308567][ T8014] ? __pfx_userfaultfd_ioctl+0x10/0x10 [ 340.308591][ T8014] __se_sys_ioctl+0xf5/0x170 [ 340.308614][ T8014] do_syscall_64+0xf3/0x230 [ 340.308630][ T8014] ? clear_bhb_loop+0x35/0x90 [ 340.308655][ T8014] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 340.308679][ T8014] RIP: 0033:0x7f80f2185d29 [ 340.308704][ T8014] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 340.308720][ T8014] RSP: 002b:00007f80f2f19038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 340.308740][ T8014] RAX: ffffffffffffffda RBX: 00007f80f2375fa0 RCX: 00007f80f2185d29 [ 340.308755][ T8014] RDX: 0000000020000040 RSI: 00000000c028aa05 RDI: 0000000000000006 [ 340.308768][ T8014] RBP: 00007f80f2201a20 R08: 0000000000000000 R09: 0000000000000000 [ 340.308781][ T8014] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 340.308792][ T8014] R13: 0000000000000000 R14: 00007f80f2375fa0 R15: 00007ffd24615108 [ 340.308810][ T8014] [ 340.780795][ T55] Bluetooth: hci0: command 0x0406 tx timeout [ 340.786929][ T55] Bluetooth: hci1: command 0x0406 tx timeout [ 340.802906][ T25] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 340.831773][ T8028] netlink: 4 bytes leftover after parsing attributes in process `syz.0.591'. [ 340.854947][ T5855] Bluetooth: hci3: command 0x0406 tx timeout [ 340.981591][ T5855] Bluetooth: hci4: command 0x0406 tx timeout [ 341.006164][ T7732] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 341.139702][ T5855] Bluetooth: hci5: command 0x0c1a tx timeout [ 341.350220][ T7732] veth0_vlan: entered promiscuous mode [ 341.393456][ T7732] veth1_vlan: entered promiscuous mode [ 341.443836][ T25] gspca_stk1135: reg_w 0x0 err -71 [ 341.450377][ T25] gspca_stk1135: serial bus timeout: status=0x00 [ 341.456750][ T25] gspca_stk1135: Sensor write failed [ 341.462725][ T25] gspca_stk1135: serial bus timeout: status=0x00 [ 341.471219][ T25] gspca_stk1135: Sensor write failed [ 341.476537][ T7732] veth0_macvtap: entered promiscuous mode [ 341.476577][ T25] gspca_stk1135: serial bus timeout: status=0x00 [ 341.488951][ T25] gspca_stk1135: Sensor read failed [ 341.494250][ T25] gspca_stk1135: serial bus timeout: status=0x00 [ 341.500696][ T25] gspca_stk1135: Sensor read failed [ 341.505932][ T25] gspca_stk1135: Detected sensor type unknown (0x0) [ 341.512853][ T25] gspca_stk1135: serial bus timeout: status=0x00 [ 341.518222][ T7732] veth1_macvtap: entered promiscuous mode [ 341.519357][ T25] gspca_stk1135: Sensor read failed [ 341.531298][ T25] gspca_stk1135: serial bus timeout: status=0x00 [ 341.538136][ T25] gspca_stk1135: Sensor read failed [ 341.543509][ T25] gspca_stk1135: serial bus timeout: status=0x00 [ 341.550053][ T25] gspca_stk1135: Sensor write failed [ 341.555483][ T25] gspca_stk1135: serial bus timeout: status=0x00 [ 341.562410][ T25] gspca_stk1135: Sensor write failed [ 341.568834][ T25] stk1135 3-1:64.0: probe with driver stk1135 failed with error -71 [ 341.577579][ T7732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 341.585448][ T25] usb 3-1: USB disconnect, device number 9 [ 341.594051][ T7732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 341.594073][ T7732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 341.594091][ T7732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 341.594103][ T7732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 341.594118][ T7732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 341.594130][ T7732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 341.594144][ T7732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 341.595384][ T7732] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 341.685920][ T7732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 341.697585][ T7732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 341.709020][ T7732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 341.720155][ T7732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 341.730517][ T7732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 341.741796][ T7732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 341.752005][ T7732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 341.762952][ T7732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 341.775030][ T7732] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 341.797653][ T7732] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.808107][ T7732] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.817484][ T7732] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.826833][ T7732] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.862074][ T7732] ieee80211 phy14: Selected rate control algorithm 'minstrel_ht' [ 341.888399][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 341.892478][ T7732] ieee80211 phy15: Selected rate control algorithm 'minstrel_ht' [ 341.907815][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 341.939539][ T992] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 341.947518][ T992] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 342.818804][ T5855] Bluetooth: hci1: command 0x0406 tx timeout [ 342.899055][ T5855] Bluetooth: hci3: command 0x0406 tx timeout [ 343.070570][ T5855] Bluetooth: hci4: command 0x0406 tx timeout [ 343.228711][ T5855] Bluetooth: hci5: command 0x0c1a tx timeout [ 345.298698][ T5855] Bluetooth: hci5: command 0x0c1a tx timeout