last executing test programs: 57.745584918s ago: executing program 2 (id=298): socket$nl_generic(0x10, 0x3, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2982, 0x0) socket(0x1d, 0x2, 0x6) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x18) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa07, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) 54.834002583s ago: executing program 2 (id=305): r0 = memfd_secret(0x0) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x28, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000001000000e27f000001"], 0x48) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000005700)={{r5, 0xffffffffffffffff}, &(0x7f0000005680), 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000080000000000000008000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000004}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x1e8629867d7bdaee, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) io_submit(0x0, 0x1, &(0x7f0000000940)=[&(0x7f0000000240)={0x0, 0x0, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x4f}]) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$binfmt_elf64(r1, &(0x7f0000002600)=ANY=[], 0x1820) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r8, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=[0x7, 0x5], &(0x7f0000000240), 0x0, 0x12}}, 0x40) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0xa, 0x11, r0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) 52.888871291s ago: executing program 2 (id=307): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="0c0002800500"], 0x24}, 0x1, 0x0, 0x0, 0x881}, 0x20044014) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) socket$inet6_tcp(0xa, 0x1, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x88fd537e5e114b6f, 0x12, 0xffffffffffffffff, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x89727a31546dcc45, 0x4}) socket(0x1d, 0x2, 0x6) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000100)) syz_open_dev$sndpcmp(0x0, 0x0, 0xa2c65) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) syz_open_procfs(0x0, &(0x7f0000000280)='net/vlan/config\x00') 46.230094274s ago: executing program 2 (id=318): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 44.915885378s ago: executing program 2 (id=319): openat$tun(0xffffffffffffff9c, 0x0, 0x4082c1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8904, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x21c, &(0x7f0000001140)=ANY=[@ANYBLOB="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"]) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f0000006fc0), 0x0, 0x1, 0x0) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000030c0)=[{&(0x7f0000000340)="1400000016001963d25a80648c56915a19aa2b", 0x13}], 0x1}, 0x0) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendto$inet6(r5, &(0x7f0000000140)="f4", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00'}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000000000)={0x0, 0x0, 0x2ce9}, 0x8) 32.595581616s ago: executing program 2 (id=335): close(0x3) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) close(0x3) 17.361757825s ago: executing program 32 (id=335): close(0x3) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) close(0x3) 7.119490087s ago: executing program 1 (id=403): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x19, 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000002c0)=ANY=[@ANYBLOB="0100000000000000024d564b000000000b"]) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 6.569051683s ago: executing program 3 (id=407): r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) write$proc_mixer(r0, &(0x7f0000000180)=ANY=[@ANYBLOB='SYNTH \'Mic\''], 0x86) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer\x00', 0x0, 0x0) dup3(r1, r0, 0x0) 6.479299217s ago: executing program 3 (id=408): socket$nl_netfilter(0x10, 0x3, 0xc) openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x600d41, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) readahead(r0, 0x100000000, 0x3ff) syz_init_net_socket$ax25(0x3, 0x5, 0x0) socket(0x10, 0x803, 0x0) syz_init_net_socket$ax25(0x3, 0x3, 0x7) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x1c, 0x2, 0x1, 0x409, 0x0, 0x0, {0x2}, [@CTA_ZONE={0x6}]}, 0x1c}}, 0x40000) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000f80)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000001080)=0x8) sendmsg$nl_xfrm(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000640)=@newsa={0xfc, 0x10, 0x1, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x16}, {@in6=@loopback, 0x4d2, 0x3c}, @in6=@loopback, {0x0, 0x3, 0x0, 0x1000000000000001, 0x0, 0x0, 0x10000}, {}, {0x20000000}, 0x0, 0x10000, 0xa, 0x1, 0x0, 0x20}, [@sec_ctx={0xc, 0x8, {0x8, 0x8, 0x1, 0x7}}]}, 0xfc}}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$phonet_pipe(0x23, 0x5, 0x2) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) 6.185703665s ago: executing program 3 (id=409): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="2800000009000000000000000000000001"], 0x28) 6.092436599s ago: executing program 3 (id=410): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r0 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x14, r0, 0x1, 0x0, 0x0, {0x7}}, 0x14}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x300) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xe7, 0xcc, 0x61, 0x20, 0x10c4, 0x818a, 0x7d8f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0xc0, 0x5, [{{0x9, 0x4, 0x23, 0x0, 0x0, 0x3}}]}}]}}, 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000780)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r3, 0x0, 0x0) sendmsg$netlink(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="20000000110001000000000000000000100000e60b"], 0x20}], 0x1}, 0x0) 6.0072487s ago: executing program 1 (id=411): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80b00, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r2, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [0x80000000, 0x3, 0x3ff, 0x8, 0xfffffffd, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0xf5b1, 0xffffffff, 0x8, 0x99, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4, 0xfffffffc, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x0, 0x0, 0x1], [0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xedc0, 0x5, 0x5ee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x1ff, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffff8, 0x2, 0x0, 0x2000079, 0x400, 0x0, 0x0, 0x10000, 0x40000, 0x0, 0xc0800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x6e, 0x0, 0x0, 0x4, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x4771, 0x0, 0x0, 0xfffffffe], [0x0, 0x7f, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0xfffffffc, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4], [0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0x3, 0xfffffffc, 0x4, 0x800, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, 0xfffffffd, 0x0, 0x0, 0x0, 0x8001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x40, 0x0, 0x0, 0x200, 0x0, 0x0, 0x8000000, 0x40, 0x0, 0x0, 0x0, 0xffffe]}, 0x45c) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x5) syz_io_uring_setup(0x8d2, &(0x7f0000000a00)={0x0, 0x0, 0x3010}, &(0x7f0000000540), &(0x7f0000000080)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$inet6(0xa, 0x2, 0x0) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="043e1f0a00c9000201"], 0x22) ioctl$UI_SET_SWBIT(r2, 0x4004556d, 0x3) ioctl$UI_DEV_CREATE(r2, 0x5501) write$uinput_user_dev(r2, &(0x7f0000000580)={'syz1\x00', {0x9, 0x8, 0x5, 0x2}, 0x2c, [0x5, 0x5, 0x1, 0x9, 0x3, 0x0, 0x5, 0x0, 0x7, 0xa34, 0x6, 0x7fffffff, 0x8, 0x18, 0xe, 0x7fff, 0x9, 0x7, 0x21a, 0x9, 0x3, 0x7fffffff, 0x1, 0xa, 0x5, 0xfffffffe, 0x9, 0x7, 0x400, 0x0, 0x3, 0x800, 0x5146, 0xffff, 0x2, 0x8, 0x6, 0x7fff, 0x8, 0xfffffffe, 0x0, 0x4, 0x9, 0x49, 0x7, 0x3, 0xfffffeab, 0x0, 0x2, 0x21, 0x6, 0x4, 0x5, 0x7fffffff, 0x8, 0xa, 0xc, 0x6, 0x6ffc, 0x200, 0x1, 0x4, 0x1, 0x1b0f], [0x0, 0x4, 0x20007fff, 0x7, 0x6, 0x6, 0x5, 0x10000, 0xa, 0x10, 0x2, 0x3, 0x8, 0x3, 0x8d8f, 0x8, 0x7, 0xff, 0x1, 0xffffffff, 0x3, 0x10, 0x1, 0x800, 0x2, 0xb, 0xe, 0x401, 0x1, 0x6, 0x401, 0x8000, 0x2, 0x2, 0x1, 0x8, 0x2, 0x100, 0x1, 0x73, 0x8, 0x0, 0xe, 0x4, 0x5, 0x2, 0x1076, 0x3, 0x9, 0x6e37663b, 0x7, 0x7, 0x3, 0x8, 0x0, 0x6, 0x6, 0x8000, 0x0, 0x5, 0x7, 0xa, 0x4, 0x1], [0x7510e92a, 0x80000001, 0x8118, 0x0, 0x2, 0x5344, 0x3, 0x5, 0x4, 0x3, 0x401, 0x4, 0x3, 0x986, 0x0, 0x7f, 0xf, 0x5, 0x9, 0x3, 0x10000, 0x5, 0x0, 0x4, 0x3, 0x75, 0x31fa, 0x4, 0x17, 0x4, 0x4, 0x0, 0x4, 0x5, 0x4, 0x7, 0x7e79, 0xedd1, 0x8, 0x0, 0x3, 0x8, 0xffff, 0x3, 0x200000, 0x6, 0x6, 0xfffffff7, 0x1000, 0x9, 0x1, 0x2, 0x0, 0x3, 0x4, 0xff, 0xc, 0x3ff, 0x6, 0xff, 0x25, 0x81, 0xffff7fff, 0x64], [0x16, 0x1, 0x2, 0x8000, 0x4, 0x5, 0x8, 0xfff, 0x3, 0x9, 0x0, 0x38, 0x4, 0x4, 0x2, 0x101, 0xa80, 0x8, 0x6, 0x6, 0xaf, 0xfffffff9, 0xa1d, 0x1c, 0x0, 0x5, 0x17, 0x40, 0x2, 0x4, 0x7, 0x0, 0x5, 0x10, 0x2, 0x2e6, 0xfff, 0x5, 0x6, 0x400, 0x6, 0x9, 0xa70110d2, 0x9, 0xffffffff, 0x1, 0x80000001, 0x80000001, 0x1, 0x1e, 0x2, 0xff, 0x80, 0x8, 0x2, 0x3168, 0xa, 0x1, 0x7e, 0x8, 0x0, 0x5, 0xc4312da, 0x4]}, 0x45c) bind$pptp(0xffffffffffffffff, &(0x7f00000000c0)={0x18, 0x2, {0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1e) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000500)=0x8) r4 = openat$comedi(0xffffffffffffff9c, 0x0, 0x181001, 0x0) ioctl$COMEDI_INSN(r4, 0x8028640c, &(0x7f0000000080)={0xc000002, 0x0, 0x0, 0x2dd}) ioctl$TCFLSH(r3, 0x400455c8, 0x400000009) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000100)=0x2) r5 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_buf(r5, 0x0, 0x1a, 0x0, 0x0) write(r1, &(0x7f0000000140)="41000200010001", 0x7) close(r1) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000580)={0x2, 0x0, @ioapic={0xeeee0000, 0xb, 0xfefffffb, 0xfffffffc, 0x0, [{0xc, 0xfc, 0x8, '\x00', 0xb4}, {0x83, 0x6, 0x7, '\x00', 0x4b}, {0xf9, 0x0, 0x7, '\x00', 0xd6}, {0x0, 0x5, 0x0, '\x00', 0x8}, {0x5, 0xd, 0x8}, {0x2, 0x5, 0x6, '\x00', 0xff}, {0xe, 0xe, 0x47, '\x00', 0x6}, {0xd, 0x90, 0x4, '\x00', 0xe9}, {0xe, 0x6, 0xa7, '\x00', 0x1}, {0x9, 0xcc, 0x16, '\x00', 0x5}, {0x1, 0x9, 0x15, '\x00', 0x8}, {0x0, 0x3, 0x9b, '\x00', 0x7}, {0x1, 0xca, 0x80, '\x00', 0x4}, {0x3, 0xf1, 0x6, '\x00', 0xb2}, {0x8, 0x4, 0x0, '\x00', 0xfd}, {0x6, 0x0, 0x4, '\x00', 0x9}, {0x7, 0x2, 0x4, '\x00', 0x3}, {0xee, 0x3, 0x2, '\x00', 0xff}, {0xf, 0x41, 0x6, '\x00', 0x1}, {0x9, 0x8, 0x54, '\x00', 0xbf}, {0x1, 0x4, 0x4, '\x00', 0x6}, {0xd, 0x40, 0x7, '\x00', 0x4}, {0x5, 0xfd, 0x7, '\x00', 0x2}, {0x5, 0x6, 0xfa, '\x00', 0x40}]}}) ioctl$KVM_RUN(r7, 0xae80, 0x0) 5.888892895s ago: executing program 4 (id=412): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20a00, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000040)="6c66b8ae008ec865da00b8010000000f01d90f01df0fc7360f320fae8f00a0000066b81f018ee8b9840b00000f32", 0x2e}], 0x1, 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fd7000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000001c0)="c422b9a8370f3266ba430066ed0f01df26f848b83bd80000000000000f23d00f21f8353000000f0f23f86736460f2001b9240a0000b800000000ba008000000f300f0132c7442400e4000000c744240200380000c7442406000000000f011c24", 0x60}], 0xaaaaaaaaaaaac94, 0x60, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) openat$kvm(0xffffffffffffff9c, 0x0, 0x2800, 0x0) 5.307657541s ago: executing program 4 (id=413): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)=@id={0x1e, 0x3, 0x2, {0x4e21}}, 0x10, 0x0}, 0x200008c1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00'}) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, 0x0, 0x40) r1 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x20902, 0x0) write$sequencer(r1, 0x0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_usb_connect(0x3, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r3 = gettid() syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) read$char_usb(r2, &(0x7f00000002c0)=""/151, 0x97) 5.049883286s ago: executing program 1 (id=414): timer_create(0x3, &(0x7f00000001c0)={0x0, 0x19, 0x5, @thr={0x0, 0x0}}, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10000, 0x1) r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000900)={0x44, &(0x7f0000000980)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = socket(0x10, 0x3, 0x3) sendmmsg$alg(r2, &(0x7f00000055c0)=[{0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1, 0x0, 0x0, 0x40}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40044}], 0x2, 0x30048090) r3 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000140)={0x0, 0x0, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x33565348, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x2}]}}}) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000100)="0f", 0x1}], 0x1) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000580)={0x2c, &(0x7f00000001c0)=ANY=[@ANYRES32=r1], 0x0, 0x0, 0x0, 0x0}, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x48000, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) recvmsg(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x40) r5 = socket$kcm(0x10, 0x0, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000380)="1400000016000b63d25a80648c2594f90b24fc60", 0x14}], 0x1}, 0x0) 3.290881066s ago: executing program 0 (id=417): connect$llc(0xffffffffffffffff, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) recvmsg(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x40) 2.903349358s ago: executing program 3 (id=418): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x6) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r2, 0x4068aea3, &(0x7f0000000280)={0xbe, 0x0, 0x1}) setreuid(0x0, 0xee00) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000140)="66baf80cb8044fdc87efed660f388059e0b805000000b91e4200000f01c10f20c035000000200f22c0f20fa20f01cb36263e660f381efc660f7c150c000000b805000000b9210000000f01c1c4e17929d8", 0x51}], 0x1, 0x11, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x8, @mcast1, 0x6cb}, 0x1c) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0xd, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.829685317s ago: executing program 0 (id=419): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="2800000009000000000000000000000001"], 0x28) 2.435359521s ago: executing program 0 (id=420): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x19, 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000002c0)=ANY=[@ANYBLOB="0100000000000000024d564b000000000b"]) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 2.145326875s ago: executing program 4 (id=421): connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000640)='.\x00', 0x101000, 0x110) renameat2(r0, 0x0, r0, 0x0, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078008001240000000000500140008000000050005000a000000050001000600000011000300686173683a69702c706f7274"], 0x60}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c000000090601080000000000000000070000000900020073797a31000000000500010007000000340007801800018014000240fe8000000000000000000000000000bb060004400e1f00cd050007008800000006000540"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) 1.669714028s ago: executing program 1 (id=422): openat$mice(0xffffffffffffff9c, &(0x7f0000000200), 0x101000) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip6_mr_vif\x00') fchdir(r0) open(&(0x7f0000000000)='./bus\x00', 0x4427e, 0x9a) 1.546749029s ago: executing program 3 (id=423): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r1) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000400000014000500fc01000000000000000000000000080008000200050000000a0006"], 0x4c}}, 0x4000) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="b00000000314010026bd7000fcdbdf250900020073797a3200000000080041007278650014003300766c616e3000000000000000000000000900020073797a3200000000080041007369770014003300636169663000000000000000000000000900020073797a300000000008004100727865001400330074756e4c3000000000000000000000000900020073797a310000000008004100727865001400330076657468305f746f5f7465616d0000008078d3bb065c0b9f7d11da3689fb75e89699eef64c3dca34a904cc4802188f45d182228246a3082847b86c1527ff319db2402d338f8fc5a1d7b2c7927237a9c9cd0c4d278923e82e790924eba06c82d56a4eee969011240e6dfde0eb3b37b28d9dc57260473ee36296ce62e39e7c9d518773fcbf1d0a96ccee6da825296576fedaeec3de359d50"], 0xb0}, 0x1, 0x0, 0x0, 0x8011}, 0x0) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001b1401002abdd444d446df250800010000000000090002"], 0x24}, 0x1, 0x0, 0x0, 0x4000801}, 0x40810) 1.225407127s ago: executing program 0 (id=424): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x34004811) 1.066324537s ago: executing program 1 (id=425): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port1\x00', 0x72, 0x11cfa, 0x0, 0x8000007, 0x3, 0x4, 0x1, 0x0, 0x6}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x40505330, &(0x7f00000001c0)={0x800100, 0xffffffff, 0x22, 0xe1d9, 0x1101, 0xff}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 835.399922ms ago: executing program 4 (id=426): r0 = syz_open_dev$sndctrl(&(0x7f0000000e00), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc1105511, 0x0) 674.95665ms ago: executing program 1 (id=427): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002980)=[{{0x0, 0x0, 0x0}, 0x10001}], 0x1, 0x62, 0x0) recvmmsg(r0, &(0x7f0000006e00)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x0, 0x0) 580.094817ms ago: executing program 4 (id=428): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="20000000110001000000000000000000100000e60b"], 0x20}], 0x1}, 0x0) 216.36935ms ago: executing program 0 (id=429): openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x41, 0x0) link(&(0x7f00000020c0)='./file1\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000040)='trans=rdma,') 116.038033ms ago: executing program 4 (id=430): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d3e457201e040b40e73e000000010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 0s ago: executing program 0 (id=431): ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x24, 0x0, &(0x7f0000000600)="4bb16fc96dcf827965e297e4bcdc4cc27c7f5cce42d3404ebf85cb80c1e0f1800190544f"}) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000600)=ANY=[@ANYBLOB="120100001d9167204f17316a3f26010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0xfffffffffffffffe) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.11' (ED25519) to the list of known hosts. [ 81.912922][ T5791] cgroup: Unknown subsys name 'net' [ 82.161147][ T5791] cgroup: Unknown subsys name 'cpuset' [ 82.217150][ T5791] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 83.894857][ T5791] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 86.552048][ T61] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 86.554128][ T61] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 86.554977][ T61] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 86.557502][ T61] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 86.576464][ T61] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 86.670393][ T61] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 86.674314][ T61] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 86.675068][ T61] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 86.676970][ T61] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 86.678748][ T61] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 86.742185][ T5811] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 86.744928][ T5811] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 86.745846][ T5811] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 86.757035][ T5811] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 86.757843][ T5811] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 86.857761][ T5811] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 86.859927][ T5811] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 86.861489][ T5811] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 86.863840][ T5811] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 86.866053][ T5811] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 86.924350][ T61] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 86.938188][ T61] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 86.939284][ T61] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 86.940523][ T61] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 86.941345][ T61] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 87.002852][ T31] cfg80211: failed to load regulatory.db [ 87.764391][ T5803] chnl_net:caif_netlink_parms(): no params data found [ 87.850750][ T5807] chnl_net:caif_netlink_parms(): no params data found [ 87.855746][ T5809] chnl_net:caif_netlink_parms(): no params data found [ 88.253100][ T5815] chnl_net:caif_netlink_parms(): no params data found [ 88.304453][ T5814] chnl_net:caif_netlink_parms(): no params data found [ 88.667847][ T5811] Bluetooth: hci0: command tx timeout [ 88.717339][ T5803] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.718353][ T5803] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.718702][ T5803] bridge_slave_0: entered allmulticast mode [ 88.720318][ T5803] bridge_slave_0: entered promiscuous mode [ 88.746283][ T5811] Bluetooth: hci1: command tx timeout [ 88.826451][ T5811] Bluetooth: hci2: command tx timeout [ 88.948693][ T5803] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.948784][ T5803] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.948915][ T5803] bridge_slave_1: entered allmulticast mode [ 88.950625][ T5803] bridge_slave_1: entered promiscuous mode [ 88.961121][ T5807] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.961244][ T5807] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.961434][ T5807] bridge_slave_0: entered allmulticast mode [ 88.964162][ T5807] bridge_slave_0: entered promiscuous mode [ 88.970451][ T5809] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.970574][ T5809] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.970750][ T5809] bridge_slave_0: entered allmulticast mode [ 88.973300][ T5809] bridge_slave_0: entered promiscuous mode [ 88.986560][ T5811] Bluetooth: hci3: command tx timeout [ 88.986567][ T61] Bluetooth: hci4: command tx timeout [ 89.089186][ T5807] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.089276][ T5807] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.089395][ T5807] bridge_slave_1: entered allmulticast mode [ 89.090851][ T5807] bridge_slave_1: entered promiscuous mode [ 89.091658][ T5809] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.091753][ T5809] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.091866][ T5809] bridge_slave_1: entered allmulticast mode [ 89.093327][ T5809] bridge_slave_1: entered promiscuous mode [ 89.459277][ T5803] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.739193][ T5803] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.739475][ T5815] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.739545][ T5815] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.739805][ T5815] bridge_slave_0: entered allmulticast mode [ 89.741279][ T5815] bridge_slave_0: entered promiscuous mode [ 89.749518][ T5807] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.757216][ T5809] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.898664][ T5815] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.898755][ T5815] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.898873][ T5815] bridge_slave_1: entered allmulticast mode [ 89.900400][ T5815] bridge_slave_1: entered promiscuous mode [ 89.904661][ T5807] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.908667][ T5809] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.117611][ T5814] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.117785][ T5814] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.117974][ T5814] bridge_slave_0: entered allmulticast mode [ 90.120752][ T5814] bridge_slave_0: entered promiscuous mode [ 90.427186][ T5814] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.427292][ T5814] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.427461][ T5814] bridge_slave_1: entered allmulticast mode [ 90.428994][ T5814] bridge_slave_1: entered promiscuous mode [ 90.431372][ T5803] team0: Port device team_slave_0 added [ 90.678584][ T5803] team0: Port device team_slave_1 added [ 90.682885][ T5815] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.697667][ T5807] team0: Port device team_slave_0 added [ 90.701922][ T5809] team0: Port device team_slave_0 added [ 90.746397][ T5811] Bluetooth: hci0: command tx timeout [ 90.826417][ T5811] Bluetooth: hci1: command tx timeout [ 90.849316][ T5815] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.850876][ T5807] team0: Port device team_slave_1 added [ 90.853389][ T5809] team0: Port device team_slave_1 added [ 90.867472][ T5814] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.906447][ T5811] Bluetooth: hci2: command tx timeout [ 91.066686][ T5811] Bluetooth: hci4: command tx timeout [ 91.066720][ T5811] Bluetooth: hci3: command tx timeout [ 91.189256][ T5814] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.190206][ T5803] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.190216][ T5803] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.190230][ T5803] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.767758][ T5803] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.767771][ T5803] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.767784][ T5803] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.770507][ T5815] team0: Port device team_slave_0 added [ 91.771622][ T5807] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.771637][ T5807] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.771657][ T5807] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.772946][ T5809] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.772958][ T5809] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.772979][ T5809] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.880234][ T5815] team0: Port device team_slave_1 added [ 91.881568][ T5807] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.881580][ T5807] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.881603][ T5807] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.883481][ T5809] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.883494][ T5809] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.883516][ T5809] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.888806][ T5814] team0: Port device team_slave_0 added [ 91.997793][ T5814] team0: Port device team_slave_1 added [ 92.228562][ T5815] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.228576][ T5815] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.228589][ T5815] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.388225][ T5815] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.388239][ T5815] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.388255][ T5815] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.677614][ T5814] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.677626][ T5814] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.677640][ T5814] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.693148][ T5803] hsr_slave_0: entered promiscuous mode [ 92.694722][ T5803] hsr_slave_1: entered promiscuous mode [ 92.827829][ T5811] Bluetooth: hci0: command tx timeout [ 92.858225][ T5814] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.858241][ T5814] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.858263][ T5814] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.868863][ T5807] hsr_slave_0: entered promiscuous mode [ 92.870285][ T5807] hsr_slave_1: entered promiscuous mode [ 92.871324][ T5807] debugfs: 'hsr0' already exists in 'hsr' [ 92.871435][ T5807] Cannot create hsr debugfs directory [ 92.881722][ T5809] hsr_slave_0: entered promiscuous mode [ 92.883132][ T5809] hsr_slave_1: entered promiscuous mode [ 92.884366][ T5809] debugfs: 'hsr0' already exists in 'hsr' [ 92.884388][ T5809] Cannot create hsr debugfs directory [ 92.906573][ T5811] Bluetooth: hci1: command tx timeout [ 92.986355][ T5811] Bluetooth: hci2: command tx timeout [ 93.146439][ T61] Bluetooth: hci3: command tx timeout [ 93.146525][ T5811] Bluetooth: hci4: command tx timeout [ 93.350825][ T5815] hsr_slave_0: entered promiscuous mode [ 93.351644][ T5815] hsr_slave_1: entered promiscuous mode [ 93.352181][ T5815] debugfs: 'hsr0' already exists in 'hsr' [ 93.352202][ T5815] Cannot create hsr debugfs directory [ 93.652137][ T5814] hsr_slave_0: entered promiscuous mode [ 93.653500][ T5814] hsr_slave_1: entered promiscuous mode [ 93.654044][ T5814] debugfs: 'hsr0' already exists in 'hsr' [ 93.654063][ T5814] Cannot create hsr debugfs directory [ 94.859322][ T5803] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 94.904516][ T5803] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 94.916359][ T5811] Bluetooth: hci0: command tx timeout [ 94.920556][ T5803] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 94.985052][ T5803] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 94.986414][ T5811] Bluetooth: hci1: command tx timeout [ 95.077153][ T5811] Bluetooth: hci2: command tx timeout [ 95.113236][ T5807] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 95.153725][ T5807] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 95.178293][ T5807] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 95.225052][ T5807] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 95.226621][ T5811] Bluetooth: hci4: command tx timeout [ 95.226650][ T5811] Bluetooth: hci3: command tx timeout [ 95.343635][ T5809] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 95.384822][ T5809] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 95.406319][ T5809] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 95.462505][ T5809] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 95.596458][ T5815] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 95.633868][ T5815] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 95.664210][ T5815] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 95.718611][ T5815] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 95.854752][ T5814] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 95.903792][ T5814] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 95.935299][ T5803] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.940226][ T5814] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 95.982704][ T5814] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 96.072401][ T5803] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.098051][ T5807] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.120324][ T1170] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.121205][ T1170] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.153362][ T994] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.153487][ T994] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.195697][ T5807] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.228978][ T5809] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.234962][ T3013] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.235708][ T3013] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.283347][ T1170] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.283451][ T1170] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.339962][ T5809] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.373538][ T5815] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.392193][ T994] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.392334][ T994] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.432763][ T994] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.432889][ T994] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.502965][ T5815] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.545265][ T5814] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.554912][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.555610][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.605584][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.605729][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.699191][ T5814] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.744433][ T994] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.744657][ T994] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.800076][ T3629] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.800212][ T3629] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.902024][ T5803] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.141846][ T5807] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.232947][ T5809] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.259408][ T5803] veth0_vlan: entered promiscuous mode [ 97.322502][ T5803] veth1_vlan: entered promiscuous mode [ 97.463626][ T5807] veth0_vlan: entered promiscuous mode [ 97.483427][ T5815] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.532197][ T5803] veth0_macvtap: entered promiscuous mode [ 97.534354][ T5807] veth1_vlan: entered promiscuous mode [ 97.551573][ T5809] veth0_vlan: entered promiscuous mode [ 97.564868][ T5814] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.582517][ T5803] veth1_macvtap: entered promiscuous mode [ 97.619188][ T5809] veth1_vlan: entered promiscuous mode [ 97.659955][ T5803] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.718871][ T5803] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.774112][ T3013] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.790898][ T5807] veth0_macvtap: entered promiscuous mode [ 97.805999][ T3013] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.824572][ T3013] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.842848][ T3013] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.857907][ T5807] veth1_macvtap: entered promiscuous mode [ 97.931844][ T5809] veth0_macvtap: entered promiscuous mode [ 97.933696][ T5814] veth0_vlan: entered promiscuous mode [ 98.001143][ T5809] veth1_macvtap: entered promiscuous mode [ 98.070139][ T5807] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.071596][ T5814] veth1_vlan: entered promiscuous mode [ 98.119218][ T5807] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.178944][ T5809] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.182381][ T3013] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.201518][ T3013] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.212805][ T3013] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.212830][ T3013] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.238316][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.243825][ T5809] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.265411][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.277449][ T5815] veth0_vlan: entered promiscuous mode [ 98.350416][ T1170] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.363754][ T1170] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.381396][ T1170] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.438296][ T1170] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.444188][ T1161] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.444209][ T1161] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.445015][ T5815] veth1_vlan: entered promiscuous mode [ 98.469138][ T5814] veth0_macvtap: entered promiscuous mode [ 98.599984][ T5814] veth1_macvtap: entered promiscuous mode [ 98.760565][ T1170] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.760585][ T1170] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.819651][ T5814] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.904673][ T5814] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.956036][ T1170] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.956055][ T1170] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.974873][ T5815] veth0_macvtap: entered promiscuous mode [ 99.006078][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.046496][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.088020][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.088752][ T5815] veth1_macvtap: entered promiscuous mode [ 99.094618][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.165473][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.165492][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.117415][ T1161] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.117436][ T1161] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.892854][ T5926] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6'. [ 100.898563][ T5928] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 100.969212][ T5815] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.275776][ T5815] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.482311][ T3013] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.498587][ T5793] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 101.527311][ T3013] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.558321][ T1170] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.558617][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.558630][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.558876][ T1170] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.721992][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 101.737390][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 101.744009][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 101.745251][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 101.745529][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 101.745654][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 101.745878][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 101.745987][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 101.828444][ T5793] usb 2-1: Using ep0 maxpacket: 8 [ 101.857546][ T5793] usb 2-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 101.857565][ T5793] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.857577][ T5793] usb 2-1: Product: syz [ 101.857584][ T5793] usb 2-1: Manufacturer: syz [ 101.857591][ T5793] usb 2-1: SerialNumber: syz [ 101.929516][ T5793] usb 2-1: config 0 descriptor?? [ 102.206197][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 102.386180][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 102.636003][ T5793] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 102.682738][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.682758][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.033801][ T1161] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.033817][ T1161] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.422110][ T5936] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7'. [ 103.422923][ T5936] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7'. [ 103.452944][ T1170] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.452959][ T1170] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.485260][ T5947] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 103.677244][ T5793] gspca_sunplus: reg_w_riv err -110 [ 103.677306][ T5793] sunplus 2-1:0.0: probe with driver sunplus failed with error -110 [ 104.261501][ T5961] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 104.270647][ T5961] cramfs: wrong magic [ 105.171309][ T5875] usb 2-1: USB disconnect, device number 2 [ 107.503303][ T5975] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 108.942072][ T5995] @: renamed from vlan0 (while UP) [ 111.306807][ T61] Bluetooth: hci3: command 0x0405 tx timeout [ 111.593137][ T5999] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 111.593912][ T5999] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 111.789231][ T5811] Bluetooth: hci0: command 0x0c1a tx timeout [ 112.088532][ T5999] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 112.203155][ T5999] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 112.203251][ T5999] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 112.414749][ T5999] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 112.634952][ T5999] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 112.635048][ T5999] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 112.784411][ T5999] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 112.840965][ T5999] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 112.841039][ T5999] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 112.928958][ T5999] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 112.988142][ T5999] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 112.988191][ T5999] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 113.077809][ T5999] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 113.697024][ T6029] Zero length message leads to an empty skb [ 113.894696][ T61] Bluetooth: hci0: command 0x0c1a tx timeout [ 114.317503][ T61] Bluetooth: hci1: command 0x0c1a tx timeout [ 114.467462][ T6037] process 'syz.1.24' launched './file0' with NULL argv: empty string added [ 114.860029][ T61] Bluetooth: hci2: command 0x0c1a tx timeout [ 115.213291][ T5811] Bluetooth: hci3: command 0x0405 tx timeout [ 115.219519][ T61] Bluetooth: hci4: command 0x0c1a tx timeout [ 115.956270][ T61] Bluetooth: hci0: command 0x0c1a tx timeout [ 116.067865][ T6038] 9pnet_fd: Insufficient options for proto=fd [ 116.371289][ T61] Bluetooth: hci1: command 0x0c1a tx timeout [ 116.906437][ T61] Bluetooth: hci2: command 0x0c1a tx timeout [ 117.237111][ T61] Bluetooth: hci4: command 0x0c1a tx timeout [ 117.237123][ T5811] Bluetooth: hci3: command 0x0405 tx timeout [ 118.102662][ T6046] netlink: 8 bytes leftover after parsing attributes in process `syz.2.26'. [ 118.429689][ T5811] Bluetooth: hci1: command 0x0c1a tx timeout [ 119.238227][ T5811] Bluetooth: hci2: command 0x0c1a tx timeout [ 119.309322][ T5811] Bluetooth: hci4: command 0x0c1a tx timeout [ 119.745416][ T5811] Bluetooth: hci3: command 0x0405 tx timeout [ 119.842001][ T6060] netlink: 'syz.2.28': attribute type 10 has an invalid length. [ 120.616318][ T5875] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 120.846299][ T5875] usb 4-1: Using ep0 maxpacket: 16 [ 120.849904][ T5875] usb 4-1: config 0 has no interfaces? [ 120.854241][ T5875] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 120.854257][ T5875] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 120.854267][ T5875] usb 4-1: Manufacturer: syz [ 120.917787][ T5875] usb 4-1: config 0 descriptor?? [ 121.597782][ T31] usb 4-1: USB disconnect, device number 2 [ 122.077449][ T6071] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 122.077993][ T6071] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 122.078762][ T6071] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 122.082186][ T6071] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 122.082467][ T6071] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 123.027256][ T6087] netlink: 8 bytes leftover after parsing attributes in process `syz.2.35'. [ 123.408314][ T61] Bluetooth: hci0: command 0x0c1a tx timeout [ 124.126217][ T61] Bluetooth: hci3: command 0x0405 tx timeout [ 124.130592][ T61] Bluetooth: hci4: command 0x0c1a tx timeout [ 124.130632][ T61] Bluetooth: hci2: command 0x0c1a tx timeout [ 124.131078][ T61] Bluetooth: hci1: command 0x0c1a tx timeout [ 125.234330][ T6110] netlink: 8 bytes leftover after parsing attributes in process `syz.3.39'. [ 125.374252][ T6106] 9pnet_fd: Insufficient options for proto=fd [ 125.381398][ T6111] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 126.007690][ T6091] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 126.010378][ T6091] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 126.010586][ T6091] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 126.011004][ T6091] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 126.016309][ T6091] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 126.149679][ T6108] tty tty1: ldisc open failed (-12), clearing slot 0 [ 127.902203][ T6124] syz.3.42 (6124) used greatest stack depth: 17464 bytes left [ 128.026383][ T5805] Bluetooth: hci4: command 0x0c1a tx timeout [ 128.026419][ T5805] Bluetooth: hci2: command 0x0c1a tx timeout [ 128.026436][ T5805] Bluetooth: hci1: command 0x0c1a tx timeout [ 128.026452][ T5805] Bluetooth: hci0: command 0x0c1a tx timeout [ 128.026498][ T5811] Bluetooth: hci3: command 0x0405 tx timeout [ 128.682388][ T5793] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 129.001582][ T5793] usb 4-1: Using ep0 maxpacket: 16 [ 129.004986][ T5793] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 129.005001][ T5793] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 129.006740][ T5793] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 129.006756][ T5793] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 129.006765][ T5793] usb 4-1: Manufacturer: syz [ 129.224964][ T5793] usb 4-1: config 0 descriptor?? [ 130.178258][ T6150] @: renamed from vlan0 (while UP) [ 130.441356][ T5894] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 130.596259][ T5894] usb 2-1: Using ep0 maxpacket: 16 [ 130.605199][ T5894] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 130.605224][ T5894] usb 2-1: can't read configurations, error -61 [ 130.756330][ T5894] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 130.776286][ T5793] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 131.036254][ T5793] usb 3-1: Using ep0 maxpacket: 32 [ 131.036646][ T5894] usb 2-1: Using ep0 maxpacket: 16 [ 131.042041][ T5894] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 131.042076][ T5894] usb 2-1: can't read configurations, error -61 [ 131.043890][ T5793] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 131.043913][ T5793] usb 3-1: config 0 has no interface number 0 [ 131.043960][ T5793] usb 3-1: config 0 interface 2 has no altsetting 0 [ 131.046050][ T5894] usb usb2-port1: attempt power cycle [ 131.084414][ T5793] usb 3-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 131.084444][ T5793] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.084461][ T5793] usb 3-1: Product: syz [ 131.084474][ T5793] usb 3-1: Manufacturer: syz [ 131.084486][ T5793] usb 3-1: SerialNumber: syz [ 131.135765][ T5793] usb 3-1: config 0 descriptor?? [ 131.468044][ T5894] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 131.500391][ T5894] usb 2-1: Using ep0 maxpacket: 16 [ 131.504908][ T5894] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 131.504944][ T5894] usb 2-1: can't read configurations, error -61 [ 131.788979][ T5894] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 131.826590][ T5894] usb 2-1: Using ep0 maxpacket: 16 [ 131.877684][ T5894] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 131.879948][ T5894] usb 2-1: can't read configurations, error -61 [ 131.893235][ T5894] usb usb2-port1: unable to enumerate USB device [ 132.235684][ T10] usb 4-1: USB disconnect, device number 3 [ 133.177225][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.177330][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.567413][ T5793] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 134.099917][ C0] vkms_vblank_simulate: vblank timer overrun [ 135.451770][ T6174] netlink: 8 bytes leftover after parsing attributes in process `syz.4.53'. [ 135.544073][ C0] vkms_vblank_simulate: vblank timer overrun [ 135.573234][ C0] vkms_vblank_simulate: vblank timer overrun [ 135.640843][ C0] vkms_vblank_simulate: vblank timer overrun [ 136.082811][ T5793] usb 3-1: USB disconnect, device number 2 [ 136.530072][ T6187] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 136.728740][ T6188] udevd[6188]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 136.881051][ C0] vkms_vblank_simulate: vblank timer overrun [ 137.041163][ C0] vkms_vblank_simulate: vblank timer overrun [ 137.507544][ C0] vkms_vblank_simulate: vblank timer overrun [ 137.622295][ C0] vkms_vblank_simulate: vblank timer overrun [ 137.797209][ C0] vkms_vblank_simulate: vblank timer overrun [ 137.967120][ C0] vkms_vblank_simulate: vblank timer overrun [ 138.007786][ T6187] cramfs: wrong magic [ 138.140112][ C0] vkms_vblank_simulate: vblank timer overrun [ 138.184998][ T6194] netlink: 20 bytes leftover after parsing attributes in process `syz.4.59'. [ 142.996300][ T1231] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 143.373959][ T1231] usb 5-1: Using ep0 maxpacket: 16 [ 143.412387][ T1231] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 143.412426][ T1231] usb 5-1: can't read configurations, error -61 [ 143.652407][ T1231] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 143.906325][ T1231] usb 5-1: Using ep0 maxpacket: 16 [ 143.968126][ T1231] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 143.968163][ T1231] usb 5-1: can't read configurations, error -61 [ 143.968597][ T1231] usb usb5-port1: attempt power cycle [ 144.346411][ T1231] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 144.387403][ T1231] usb 5-1: Using ep0 maxpacket: 16 [ 144.396921][ T1231] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 144.396956][ T1231] usb 5-1: can't read configurations, error -61 [ 144.536256][ T1231] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 144.573663][ T1231] usb 5-1: Using ep0 maxpacket: 16 [ 144.582364][ T1231] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 144.582677][ T1231] usb 5-1: can't read configurations, error -61 [ 144.607498][ T1231] usb usb5-port1: unable to enumerate USB device [ 145.207219][ T6247] netlink: 20 bytes leftover after parsing attributes in process `syz.2.71'. [ 146.498863][ T6255] netlink: 28 bytes leftover after parsing attributes in process `syz.1.73'. [ 146.631609][ T6261] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 150.029215][ T6275] netlink: 8 bytes leftover after parsing attributes in process `syz.1.77'. [ 151.818556][ T6287] ref_ctr_offset mismatch. inode: 0x72 offset: 0x0 ref_ctr_offset(old): 0xffffffff00000000 ref_ctr_offset(new): 0x0 [ 154.420024][ T6306] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 154.462741][ T6306] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 154.475137][ T6306] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 154.475510][ T6306] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 154.551672][ T6306] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 154.966814][ T5894] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 155.116317][ T5894] usb 2-1: Using ep0 maxpacket: 16 [ 155.118793][ T5894] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 155.118828][ T5894] usb 2-1: can't read configurations, error -61 [ 155.246287][ T5894] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 155.396464][ T5894] usb 2-1: Using ep0 maxpacket: 16 [ 155.400790][ T5894] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 155.400825][ T5894] usb 2-1: can't read configurations, error -61 [ 155.401258][ T5894] usb usb2-port1: attempt power cycle [ 155.736313][ T5894] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 155.757867][ T5894] usb 2-1: Using ep0 maxpacket: 16 [ 155.761256][ T5894] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 155.761291][ T5894] usb 2-1: can't read configurations, error -61 [ 155.896346][ T5894] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 155.933636][ T5894] usb 2-1: Using ep0 maxpacket: 16 [ 155.943658][ T5894] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 155.943691][ T5894] usb 2-1: can't read configurations, error -61 [ 155.957569][ T5894] usb usb2-port1: unable to enumerate USB device [ 156.428735][ T5811] Bluetooth: hci0: command 0x0c1a tx timeout [ 156.515593][ T5811] Bluetooth: hci4: command 0x0c1a tx timeout [ 156.515756][ T5811] Bluetooth: hci2: command 0x0c1a tx timeout [ 156.515849][ T61] Bluetooth: hci1: command 0x0c1a tx timeout [ 156.597461][ T5805] Bluetooth: hci3: command 0x0405 tx timeout [ 158.497718][ T6332] netlink: 8 bytes leftover after parsing attributes in process `syz.1.90'. [ 160.414484][ T6338] ref_ctr_offset mismatch. inode: 0x83 offset: 0x0 ref_ctr_offset(old): 0xffffffff00000000 ref_ctr_offset(new): 0x0 [ 162.988608][ T6370] QAT: Invalid ioctl 1076910120 [ 164.286251][ T44] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 164.481698][ T44] usb 3-1: Using ep0 maxpacket: 16 [ 164.495571][ T44] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 164.495587][ T44] usb 3-1: config 0 has no interfaces? [ 164.517632][ T44] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 164.517659][ T44] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 164.517676][ T44] usb 3-1: Manufacturer: syz [ 164.554354][ T44] usb 3-1: config 0 descriptor?? [ 165.026594][ T5875] usb 3-1: USB disconnect, device number 3 [ 166.402416][ T6387] netlink: 8 bytes leftover after parsing attributes in process `syz.3.102'. [ 167.918927][ T6395] netlink: 8 bytes leftover after parsing attributes in process `syz.2.104'. [ 168.620503][ T6402] QAT: Invalid ioctl 1076910120 [ 170.458577][ T6404] ref_ctr_offset mismatch. inode: 0x81 offset: 0x0 ref_ctr_offset(old): 0xffffffff00000000 ref_ctr_offset(new): 0x0 [ 174.944456][ T6440] netlink: 8 bytes leftover after parsing attributes in process `syz.3.115'. [ 174.950845][ C1] vkms_vblank_simulate: vblank timer overrun [ 175.355932][ C1] vkms_vblank_simulate: vblank timer overrun [ 175.993959][ T6442] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 175.998261][ T6442] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 175.998624][ T6442] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 176.002768][ T6442] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 176.009495][ T6442] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 176.842332][ C1] vkms_vblank_simulate: vblank timer overrun [ 177.006164][ T6455] QAT: Invalid ioctl 1076910120 [ 177.946584][ T5805] Bluetooth: hci0: command 0x0c1a tx timeout [ 178.026841][ T5805] Bluetooth: hci3: command 0x0405 tx timeout [ 178.026866][ T6446] Bluetooth: hci4: command 0x0c1a tx timeout [ 178.026881][ T5805] Bluetooth: hci2: command 0x0c1a tx timeout [ 178.036254][ T5118] Bluetooth: hci1: command 0x0c1a tx timeout [ 180.180727][ T6465] ref_ctr_offset mismatch. inode: 0x97 offset: 0x0 ref_ctr_offset(old): 0xffffffff00000000 ref_ctr_offset(new): 0x0 [ 186.334142][ T6492] ref_ctr_offset mismatch. inode: 0x91 offset: 0x0 ref_ctr_offset(old): 0xffffffff00000000 ref_ctr_offset(new): 0x0 [ 186.897749][ T6507] QAT: Invalid ioctl 1076910120 [ 189.329742][ T6518] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 189.330243][ T6518] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 189.331047][ T6518] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 189.331476][ T6518] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 189.367692][ T6518] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 191.080103][ T6539] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 191.081218][ T6539] cramfs: wrong magic [ 191.366645][ T5805] Bluetooth: hci0: command 0x0c1a tx timeout [ 191.396305][ T5805] Bluetooth: hci3: command 0x0405 tx timeout [ 191.396337][ T5805] Bluetooth: hci4: command 0x0c1a tx timeout [ 191.396355][ T5805] Bluetooth: hci2: command 0x0c1a tx timeout [ 191.396370][ T5805] Bluetooth: hci1: command 0x0c1a tx timeout [ 192.876287][ T5875] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 193.038905][ T5875] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 193.038922][ T5875] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 193.038932][ T5875] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 193.038960][ T5875] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 193.038974][ T5875] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 193.044689][ T5875] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 193.044706][ T5875] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 193.044715][ T5875] usb 2-1: Product: syz [ 193.044721][ T5875] usb 2-1: Manufacturer: syz [ 193.278252][ T5875] cdc_wdm 2-1:1.0: skipping garbage [ 193.278264][ T5875] cdc_wdm 2-1:1.0: skipping garbage [ 193.573596][ T5875] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 193.573620][ T5875] cdc_wdm 2-1:1.0: Unknown control protocol [ 193.913618][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -EPIPE [ 194.119752][ T5875] usb 2-1: USB disconnect, device number 11 [ 194.515810][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.515882][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.363464][ C0] vkms_vblank_simulate: vblank timer overrun [ 195.577532][ T6566] overlayfs: missing 'workdir' [ 196.186039][ C0] vkms_vblank_simulate: vblank timer overrun [ 196.293902][ T6574] QAT: Invalid ioctl 1076910120 [ 196.685379][ C0] vkms_vblank_simulate: vblank timer overrun [ 202.948532][ T6616] ref_ctr_offset mismatch. inode: 0x97 offset: 0x0 ref_ctr_offset(old): 0xffffffff00000000 ref_ctr_offset(new): 0x0 [ 203.030420][ T6619] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 203.047137][ T6619] cramfs: wrong magic [ 204.306742][ T6634] netlink: 'syz.3.157': attribute type 10 has an invalid length. [ 204.916315][ T5805] Bluetooth: hci3: command 0x0405 tx timeout [ 204.976064][ T6638] QAT: Invalid ioctl 1076910120 [ 204.994194][ T6638] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 204.994242][ T6638] bond0: (slave lo): Error: Device can not be enslaved while up [ 206.091401][ T6647] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 206.094829][ T6647] cramfs: wrong magic [ 211.936522][ T6681] ref_ctr_offset mismatch. inode: 0xe9 offset: 0x0 ref_ctr_offset(old): 0xffffffff00000000 ref_ctr_offset(new): 0x0 [ 213.026001][ T6698] @: renamed from vlan0 (while UP) [ 213.609037][ T1231] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 213.816412][ T1231] usb 1-1: Using ep0 maxpacket: 8 [ 213.821294][ T1231] usb 1-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 213.821311][ T1231] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.821320][ T1231] usb 1-1: Product: syz [ 213.821326][ T1231] usb 1-1: Manufacturer: syz [ 213.821333][ T1231] usb 1-1: SerialNumber: syz [ 214.288934][ T1231] usb 1-1: config 0 descriptor?? [ 214.762082][ T6703] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 214.762470][ T6703] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 214.764724][ T6703] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 214.765095][ T6703] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 214.767481][ T6703] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 215.424879][ T1231] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 215.425517][ T1231] gspca_sunplus: reg_w_riv err -71 [ 215.425605][ T1231] sunplus 1-1:0.0: probe with driver sunplus failed with error -71 [ 215.441178][ T1231] usb 1-1: USB disconnect, device number 2 [ 216.869731][ T5118] Bluetooth: hci3: command 0x0405 tx timeout [ 216.869774][ T5118] Bluetooth: hci4: command 0x0c1a tx timeout [ 216.869800][ T5118] Bluetooth: hci2: command 0x0c1a tx timeout [ 216.869827][ T5118] Bluetooth: hci1: command 0x0c1a tx timeout [ 216.869853][ T5118] Bluetooth: hci0: command 0x0c1a tx timeout [ 218.660557][ T6729] ref_ctr_offset mismatch. inode: 0xb2 offset: 0x0 ref_ctr_offset(old): 0xffffffff00000000 ref_ctr_offset(new): 0x0 [ 220.450276][ T6738] ref_ctr_offset mismatch. inode: 0xcc offset: 0x0 ref_ctr_offset(old): 0xffffffff00000000 ref_ctr_offset(new): 0x0 [ 221.636639][ T6750] ref_ctr_offset mismatch. inode: 0xc9 offset: 0x0 ref_ctr_offset(old): 0xffffffff00000000 ref_ctr_offset(new): 0x0 [ 222.147556][ C1] vkms_vblank_simulate: vblank timer overrun [ 222.381268][ C1] vkms_vblank_simulate: vblank timer overrun [ 222.694137][ C1] vkms_vblank_simulate: vblank timer overrun [ 223.679580][ T1231] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 223.826751][ T1231] usb 5-1: Using ep0 maxpacket: 16 [ 223.830978][ T1231] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 223.831001][ T1231] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 223.832779][ T1231] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 223.832808][ T1231] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 223.832826][ T1231] usb 5-1: Manufacturer: syz [ 223.949856][ T1231] usb 5-1: config 0 descriptor?? [ 224.006244][ T5793] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 224.156416][ T5793] usb 1-1: Using ep0 maxpacket: 8 [ 224.172051][ T5793] usb 1-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 224.172079][ T5793] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.172096][ T5793] usb 1-1: Product: syz [ 224.172108][ T5793] usb 1-1: Manufacturer: syz [ 224.172121][ T5793] usb 1-1: SerialNumber: syz [ 224.332195][ T5793] usb 1-1: config 0 descriptor?? [ 224.526363][ T1231] usb 5-1: USB disconnect, device number 6 [ 225.121807][ T5793] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 225.158530][ T5793] gspca_sunplus: reg_w_riv err -71 [ 225.158629][ T5793] sunplus 1-1:0.0: probe with driver sunplus failed with error -71 [ 225.213540][ T5793] usb 1-1: USB disconnect, device number 3 [ 225.982106][ T6785] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 226.006495][ T6785] cramfs: wrong magic [ 226.740555][ C1] vkms_vblank_simulate: vblank timer overrun [ 228.017935][ T6802] ref_ctr_offset mismatch. inode: 0xd3 offset: 0x0 ref_ctr_offset(old): 0xffffffff00000000 ref_ctr_offset(new): 0x0 [ 228.682423][ C1] vkms_vblank_simulate: vblank timer overrun [ 228.916293][ C1] vkms_vblank_simulate: vblank timer overrun [ 229.556619][ C1] vkms_vblank_simulate: vblank timer overrun [ 230.690014][ C1] vkms_vblank_simulate: vblank timer overrun [ 230.755810][ C1] vkms_vblank_simulate: vblank timer overrun [ 231.262356][ C1] vkms_vblank_simulate: vblank timer overrun [ 231.397908][ T6839] QAT: Invalid ioctl 1076910120 [ 232.127650][ C1] vkms_vblank_simulate: vblank timer overrun [ 232.633509][ C1] vkms_vblank_simulate: vblank timer overrun [ 233.213243][ C1] vkms_vblank_simulate: vblank timer overrun [ 234.006222][ T10] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 234.186420][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 234.191866][ T10] usb 3-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 234.191895][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.191912][ T10] usb 3-1: Product: syz [ 234.191925][ T10] usb 3-1: Manufacturer: syz [ 234.191937][ T10] usb 3-1: SerialNumber: syz [ 234.222440][ T10] usb 3-1: config 0 descriptor?? [ 234.795390][ T10] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 234.797347][ T10] gspca_sunplus: reg_w_riv err -71 [ 234.797436][ T10] sunplus 3-1:0.0: probe with driver sunplus failed with error -71 [ 234.805620][ T10] usb 3-1: USB disconnect, device number 4 [ 236.086962][ C1] vkms_vblank_simulate: vblank timer overrun [ 236.164558][ T6866] netlink: 8 bytes leftover after parsing attributes in process `syz.2.212'. [ 236.175448][ T6867] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 236.815461][ C1] vkms_vblank_simulate: vblank timer overrun [ 238.159691][ T6878] netlink: 'syz.1.215': attribute type 4 has an invalid length. [ 238.159707][ T6878] netlink: 152 bytes leftover after parsing attributes in process `syz.1.215'. [ 238.636726][ T6882] netlink: 8 bytes leftover after parsing attributes in process `syz.2.216'. [ 238.639550][ T6878] .`: renamed from bond0 (while UP) [ 239.966024][ T6896] QAT: Invalid ioctl 1076910120 [ 242.973850][ T6909] netlink: 8 bytes leftover after parsing attributes in process `syz.1.224'. [ 243.975381][ T6915] QAT: Invalid ioctl 1076910120 [ 243.993919][ T6915] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 243.993964][ T6915] bond0: (slave lo): Error: Device can not be enslaved while up [ 246.197432][ T6926] ref_ctr_offset mismatch. inode: 0x132 offset: 0x0 ref_ctr_offset(old): 0xffffffff00000000 ref_ctr_offset(new): 0x0 [ 246.835050][ C0] vkms_vblank_simulate: vblank timer overrun [ 246.986700][ T6937] QAT: Invalid ioctl 1076910120 [ 247.436354][ C0] vkms_vblank_simulate: vblank timer overrun [ 247.504386][ C0] vkms_vblank_simulate: vblank timer overrun [ 248.526891][ T6953] binder: 6952:6953 ioctl c0306201 0 returned -14 [ 248.556273][ T44] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 248.623263][ T6951] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 248.656784][ T6951] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 248.689392][ T6951] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 248.689967][ T6951] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 248.706197][ T44] usb 5-1: Using ep0 maxpacket: 8 [ 248.713600][ T44] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 248.713634][ T44] usb 5-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 248.713656][ T44] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 248.713667][ T44] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.777953][ T44] usbtmc 5-1:16.0: bulk endpoints not found [ 248.851904][ T6951] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 249.084995][ C0] vkms_vblank_simulate: vblank timer overrun [ 249.596709][ C0] vkms_vblank_simulate: vblank timer overrun [ 250.372012][ T6966] netlink: 8 bytes leftover after parsing attributes in process `syz.0.237'. [ 250.597701][ T6446] Bluetooth: hci0: command 0x0c1a tx timeout [ 250.622022][ T6967] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 250.666277][ T6446] Bluetooth: hci1: command 0x0c1a tx timeout [ 250.747922][ T6446] Bluetooth: hci2: command 0x0c1a tx timeout [ 250.747953][ T6446] Bluetooth: hci4: command 0x0c1a tx timeout [ 250.906481][ T5118] Bluetooth: hci3: command 0x0405 tx timeout [ 255.758453][ T31] usb 5-1: USB disconnect, device number 7 [ 256.130208][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.130278][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.302842][ T6976] QAT: Invalid ioctl 1076910120 [ 256.319610][ T6976] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 256.319656][ T6976] bond0: (slave lo): Error: Device can not be enslaved while up [ 257.056228][ T5890] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 258.106265][ T5890] usb 5-1: Using ep0 maxpacket: 8 [ 258.142607][ T5890] usb 5-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 258.142624][ T5890] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.142634][ T5890] usb 5-1: Product: syz [ 258.142640][ T5890] usb 5-1: Manufacturer: syz [ 258.142647][ T5890] usb 5-1: SerialNumber: syz [ 258.149014][ T5890] usb 5-1: config 0 descriptor?? [ 258.173630][ T6984] ref_ctr_offset mismatch. inode: 0x122 offset: 0x0 ref_ctr_offset(old): 0xffffffff00000000 ref_ctr_offset(new): 0x0 [ 258.461633][ T6990] QAT: Invalid ioctl 1076910120 [ 259.387478][ T5890] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 259.409762][ T5890] gspca_sunplus: reg_w_riv err -71 [ 259.409842][ T5890] sunplus 5-1:0.0: probe with driver sunplus failed with error -71 [ 259.580444][ T5890] usb 5-1: USB disconnect, device number 8 [ 260.247512][ T7000] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 262.714058][ T7018] netlink: 8 bytes leftover after parsing attributes in process `syz.3.249'. [ 262.738506][ C1] vkms_vblank_simulate: vblank timer overrun [ 264.459067][ C1] vkms_vblank_simulate: vblank timer overrun [ 266.702883][ C1] vkms_vblank_simulate: vblank timer overrun [ 268.708514][ T7032] netlink: 'syz.4.254': attribute type 4 has an invalid length. [ 269.209924][ T7032] trusted_key: encrypted_key: key user:syz not found [ 269.599053][ T31] usb 5-1: new low-speed USB device number 9 using dummy_hcd [ 269.613168][ T1231] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 269.746344][ T5793] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 269.780554][ T1231] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 269.782897][ T1231] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 269.783893][ T1231] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 269.784107][ T1231] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 269.784130][ T1231] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 269.797361][ T1231] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 269.797531][ T1231] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 269.797688][ T1231] usb 1-1: Product: syz [ 269.797701][ T1231] usb 1-1: Manufacturer: syz [ 269.895056][ T31] usb 5-1: string descriptor 0 read error: -22 [ 269.895208][ T31] usb 5-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice=56.c0 [ 269.895229][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.913020][ T5793] usb 2-1: Using ep0 maxpacket: 8 [ 269.941117][ T5793] usb 2-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 269.941144][ T5793] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.941161][ T5793] usb 2-1: Product: syz [ 269.941173][ T5793] usb 2-1: Manufacturer: syz [ 269.941186][ T5793] usb 2-1: SerialNumber: syz [ 269.967088][ T5793] usb 2-1: config 0 descriptor?? [ 270.011460][ T1231] cdc_wdm 1-1:1.0: skipping garbage [ 270.011498][ T1231] cdc_wdm 1-1:1.0: skipping garbage [ 270.148906][ T1231] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 270.148927][ T1231] cdc_wdm 1-1:1.0: Unknown control protocol [ 270.432548][ T31] usb 1-1: USB disconnect, device number 4 [ 270.583820][ T5793] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 270.584194][ T5793] gspca_sunplus: reg_w_riv err -71 [ 270.584242][ T5793] sunplus 2-1:0.0: probe with driver sunplus failed with error -71 [ 270.615889][ T5793] usb 2-1: USB disconnect, device number 12 [ 271.604275][ T7069] netlink: 8 bytes leftover after parsing attributes in process `syz.1.263'. [ 271.616275][ T5882] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 271.906420][ T5882] usb 1-1: Using ep0 maxpacket: 16 [ 271.913361][ T5882] usb 1-1: config 0 has no interfaces? [ 271.934257][ T5882] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 271.934284][ T5882] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 271.934300][ T5882] usb 1-1: Manufacturer: syz [ 271.994960][ T5882] usb 1-1: config 0 descriptor?? [ 272.341449][ T5882] usb 1-1: USB disconnect, device number 5 [ 272.596493][ T1231] usb 5-1: USB disconnect, device number 9 [ 273.592959][ T6446] Bluetooth: hci3: command 0x0405 tx timeout [ 273.753717][ T7064] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 273.757760][ T7064] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 273.758103][ T7064] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 273.758560][ T7064] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 273.759301][ T7064] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 273.960743][ T6446] Bluetooth: hci0: command 0x0c1a tx timeout [ 275.786216][ T5118] Bluetooth: hci3: command 0x0405 tx timeout [ 275.786255][ T5118] Bluetooth: hci4: command 0x0c1a tx timeout [ 275.786280][ T5118] Bluetooth: hci2: command 0x0c1a tx timeout [ 275.786305][ T5118] Bluetooth: hci1: command 0x0c1a tx timeout [ 280.524662][ T7104] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 280.525620][ T7104] cramfs: wrong magic [ 281.766252][ T10] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 281.938925][ T10] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 281.938952][ T10] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 281.938969][ T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 281.939025][ T10] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 281.939048][ T10] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 281.941846][ T10] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 281.941872][ T10] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 281.941889][ T10] usb 4-1: Product: syz [ 281.941901][ T10] usb 4-1: Manufacturer: syz [ 282.274998][ T10] cdc_wdm 4-1:1.0: skipping garbage [ 282.275010][ T10] cdc_wdm 4-1:1.0: skipping garbage [ 282.303041][ T10] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 282.303060][ T10] cdc_wdm 4-1:1.0: Unknown control protocol [ 282.495693][ T7106] netlink: 28 bytes leftover after parsing attributes in process `syz.0.271'. [ 282.553839][ T7106] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 282.738831][ T31] usb 4-1: USB disconnect, device number 4 [ 287.790610][ T7156] netlink: 8 bytes leftover after parsing attributes in process `syz.2.283'. [ 288.662514][ C1] vkms_vblank_simulate: vblank timer overrun [ 289.259850][ C1] vkms_vblank_simulate: vblank timer overrun [ 289.553228][ C1] vkms_vblank_simulate: vblank timer overrun [ 293.079011][ C1] vkms_vblank_simulate: vblank timer overrun [ 293.362935][ C1] vkms_vblank_simulate: vblank timer overrun [ 293.482975][ C1] vkms_vblank_simulate: vblank timer overrun [ 293.913627][ T7190] ref_ctr_offset mismatch. inode: 0x168 offset: 0x0 ref_ctr_offset(old): 0xffffffff00000000 ref_ctr_offset(new): 0x0 [ 295.182820][ T7202] ref_ctr_offset mismatch. inode: 0x11d offset: 0x0 ref_ctr_offset(old): 0xffffffff00000000 ref_ctr_offset(new): 0x0 [ 301.352215][ T31] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 301.383401][ T7229] netlink: 'syz.4.301': attribute type 4 has an invalid length. [ 301.383423][ T7229] netlink: 152 bytes leftover after parsing attributes in process `syz.4.301'. [ 301.517919][ T31] usb 2-1: Using ep0 maxpacket: 16 [ 301.533464][ T7229] .`: renamed from bond0 (while UP) [ 301.546252][ T31] usb 2-1: no configurations [ 301.546272][ T31] usb 2-1: can't read configurations, error -22 [ 301.676206][ T31] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 301.846663][ T31] usb 2-1: Using ep0 maxpacket: 16 [ 301.847442][ T31] usb 2-1: no configurations [ 301.847455][ T31] usb 2-1: can't read configurations, error -22 [ 301.851441][ T31] usb usb2-port1: attempt power cycle [ 302.216663][ T31] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 302.247287][ T31] usb 2-1: Using ep0 maxpacket: 16 [ 302.248187][ T31] usb 2-1: no configurations [ 302.248202][ T31] usb 2-1: can't read configurations, error -22 [ 302.468371][ T31] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 302.518528][ T31] usb 2-1: Using ep0 maxpacket: 16 [ 302.708564][ T31] usb 2-1: no configurations [ 302.708638][ T31] usb 2-1: can't read configurations, error -22 [ 302.738417][ T31] usb usb2-port1: unable to enumerate USB device [ 304.843975][ T7251] ref_ctr_offset mismatch. inode: 0x180 offset: 0x0 ref_ctr_offset(old): 0xffffffff00000000 ref_ctr_offset(new): 0x0 [ 305.878045][ C0] vkms_vblank_simulate: vblank timer overrun [ 306.617259][ C0] vkms_vblank_simulate: vblank timer overrun [ 306.705101][ C0] vkms_vblank_simulate: vblank timer overrun [ 307.846203][ T1247] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 308.014076][ T1247] usb 1-1: Using ep0 maxpacket: 16 [ 308.015720][ T1247] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 308.015735][ T1247] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 308.019936][ T1247] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 308.019961][ T1247] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 308.019978][ T1247] usb 1-1: Manufacturer: syz [ 308.031801][ T1247] usb 1-1: config 0 descriptor?? [ 308.326242][ T10] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 308.476185][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 308.526251][ C0] vkms_vblank_simulate: vblank timer overrun [ 308.528930][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 308.528946][ T10] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 308.574320][ T1247] usb 1-1: USB disconnect, device number 6 [ 308.575946][ T10] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 308.575961][ T10] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 308.575970][ T10] usb 5-1: Manufacturer: syz [ 309.428197][ C0] vkms_vblank_simulate: vblank timer overrun [ 309.474423][ C0] vkms_vblank_simulate: vblank timer overrun [ 309.616488][ C0] vkms_vblank_simulate: vblank timer overrun [ 309.654879][ T10] usb 5-1: config 0 descriptor?? [ 310.319063][ C0] vkms_vblank_simulate: vblank timer overrun [ 310.431231][ T7296] QAT: Invalid ioctl 1076910120 [ 310.443800][ T7296] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 310.443846][ T7296] bond0: (slave lo): Error: Device can not be enslaved while up [ 311.239492][ T1247] usb 5-1: USB disconnect, device number 10 [ 313.356299][ T7314] ref_ctr_offset mismatch. inode: 0x133 offset: 0x0 ref_ctr_offset(old): 0xffffffff00000000 ref_ctr_offset(new): 0x0 [ 317.399556][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.399604][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.564167][ T7351] ref_ctr_offset mismatch. inode: 0x13e offset: 0x0 ref_ctr_offset(old): 0xffffffff00000000 ref_ctr_offset(new): 0x0 [ 324.674942][ C0] vkms_vblank_simulate: vblank timer overrun [ 324.841869][ C0] vkms_vblank_simulate: vblank timer overrun [ 325.016378][ T7374] ref_ctr_offset mismatch. inode: 0x15f offset: 0x0 ref_ctr_offset(old): 0xffffffff00000000 ref_ctr_offset(new): 0x0 [ 326.279797][ C0] vkms_vblank_simulate: vblank timer overrun [ 326.524502][ T7387] syzkaller0: entered promiscuous mode [ 326.524528][ T7387] syzkaller0: entered allmulticast mode [ 327.353226][ T7401] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 327.540760][ T7401] kvm: vcpu 0: requested 16 ns lapic timer period limited to 200000 ns [ 327.540903][ T7401] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3089888063 (3089888063 ns) > initial count (2126324423 ns). Using initial count to start timer. [ 327.606900][ T7401] netlink: 'syz.0.341': attribute type 10 has an invalid length. [ 328.290689][ T7414] netlink: 88 bytes leftover after parsing attributes in process `syz.1.345'. [ 328.356222][ T1231] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 328.512974][ T1231] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 328.513001][ T1231] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.513018][ T1231] usb 4-1: Product: syz [ 328.513030][ T1231] usb 4-1: Manufacturer: syz [ 328.513043][ T1231] usb 4-1: SerialNumber: syz [ 329.024852][ T1231] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 329.024922][ T1231] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 329.246235][ T5894] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 329.416319][ T5894] usb 5-1: Using ep0 maxpacket: 32 [ 329.421370][ T5894] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 329.421395][ T5894] usb 5-1: config 0 has no interface number 0 [ 329.421444][ T5894] usb 5-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 329.421520][ T5894] usb 5-1: config 0 interface 1 has no altsetting 0 [ 329.470698][ T5894] usb 5-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 329.470726][ T5894] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.471287][ T5894] usb 5-1: Product: syz [ 329.471302][ T5894] usb 5-1: Manufacturer: syz [ 329.471314][ T5894] usb 5-1: SerialNumber: syz [ 329.530936][ T5894] usb 5-1: config 0 descriptor?? [ 329.798585][ T5894] cx231xx 5-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 329.824590][ T5894] cx231xx 5-1:0.1: Failed to read PCB config [ 329.837129][ T5894] cx231xx 5-1:0.1: probe with driver cx231xx failed with error -71 [ 329.873555][ T5894] usb 5-1: USB disconnect, device number 11 [ 330.261116][ T1231] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 330.347782][ T5894] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 330.517478][ T5894] usb 5-1: Using ep0 maxpacket: 32 [ 330.541479][ T5894] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 330.541505][ T5894] usb 5-1: config 0 has no interface number 0 [ 330.541548][ T5894] usb 5-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 330.541787][ T5894] usb 5-1: config 0 interface 1 has no altsetting 0 [ 330.599984][ T5894] usb 5-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 330.602730][ T5894] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.602753][ T5894] usb 5-1: Product: syz [ 330.602765][ T5894] usb 5-1: Manufacturer: syz [ 330.602777][ T5894] usb 5-1: SerialNumber: syz [ 330.690856][ T5894] usb 5-1: config 0 descriptor?? [ 330.857722][ T7435] evm: overlay not supported [ 330.956387][ T5894] cx231xx 5-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 330.959445][ T5894] cx231xx 5-1:0.1: Identified as Conexant Hybrid TV - RDU253S (card=4) [ 331.069375][ T5894] cx231xx 5-1:0.1: cx231xx_send_gpio_cmd: failed with status --110 [ 331.069818][ T5894] cx231xx 5-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 331.070239][ T5894] cx231xx 5-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 331.074049][ T5894] cx231xx 5-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 331.074299][ T1231] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001028. ret = -EPROTO [ 331.074963][ T1231] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 331.075019][ T1231] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 331.144788][ T5894] cx231xx 5-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 331.144811][ T5894] cx231xx 5-1:0.1: Failed to set devmode to analog: error: -32 [ 331.171676][ T1231] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 331.216602][ T1231] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 331.257421][ T1231] usb 4-1: USB disconnect, device number 5 [ 331.353309][ T5894] i2c i2c-2: Added multiplexed i2c bus 4 [ 331.376255][ T5894] i2c i2c-2: Added multiplexed i2c bus 5 [ 331.376732][ T5894] cx231xx 5-1:0.1: cx231xx_dev_init: Failed to set Power - errCode [-71]! [ 331.376757][ T5894] cx231xx 5-1:0.1: cx231xx_init_dev: cx231xx_i2c_register - errCode [-71]! [ 331.483485][ T5894] cx231xx 5-1:0.1: probe with driver cx231xx failed with error -71 [ 331.506390][ T5894] usb 5-1: USB disconnect, device number 12 [ 341.096874][ T7401] lo: entered promiscuous mode [ 341.100867][ T7401] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 341.130436][ T7448] @: renamed from vlan0 (while UP) [ 341.197712][ T7443] netdevsim netdevsim1: Direct firmware load for ÿ failed with error -2 [ 341.197738][ T7443] netdevsim netdevsim1: Falling back to sysfs fallback for: ÿ [ 341.406705][ T7455] netlink: 72 bytes leftover after parsing attributes in process `syz.4.362'. [ 341.877458][ T5118] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 341.905458][ T5118] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 341.914206][ T5118] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 341.944127][ T5118] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 341.946760][ T5118] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 341.956205][ T5894] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 342.126280][ T5894] usb 5-1: Using ep0 maxpacket: 8 [ 342.128560][ T5894] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 342.128593][ T5894] usb 5-1: config 179 has no interface number 0 [ 342.128638][ T5894] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 342.128660][ T5894] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 342.128683][ T5894] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 342.128705][ T5894] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 342.128727][ T5894] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 342.128764][ T5894] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 342.128783][ T5894] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.206168][ T5882] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 342.243399][ T7470] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 342.299202][ T31] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 342.364462][ T5882] usb 2-1: Using ep0 maxpacket: 8 [ 342.394892][ T5882] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 342.394916][ T5882] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 342.394971][ T5882] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 342.394995][ T5882] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 342.395035][ T5882] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 342.395054][ T5882] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.469052][ T5882] hub 2-1:1.0: bad descriptor, ignoring hub [ 342.469091][ T5882] hub 2-1:1.0: probe with driver hub failed with error -5 [ 342.474000][ T31] usb 4-1: config 0 has an invalid interface number: 96 but max is 0 [ 342.474024][ T31] usb 4-1: config 0 has no interface number 0 [ 342.474054][ T31] usb 4-1: config 0 interface 96 has no altsetting 0 [ 342.491776][ T5882] cdc_wdm 2-1:1.0: skipping garbage [ 342.491794][ T5882] cdc_wdm 2-1:1.0: skipping garbage [ 342.509876][ T31] usb 4-1: New USB device found, idVendor=0424, idProduct=cf30, bcdDevice=f1.73 [ 342.509914][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.509931][ T31] usb 4-1: Product: syz [ 342.509943][ T31] usb 4-1: Manufacturer: syz [ 342.509954][ T31] usb 4-1: SerialNumber: syz [ 342.549562][ T31] usb 4-1: config 0 descriptor?? [ 342.597159][ T5882] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 342.597179][ T5882] cdc_wdm 2-1:1.0: Unknown control protocol [ 342.673553][ T7480] netlink: zone id is out of range [ 342.673614][ T7480] netlink: zone id is out of range [ 342.673622][ T7480] netlink: zone id is out of range [ 342.673629][ T7480] netlink: zone id is out of range [ 342.838840][ T7470] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 342.839760][ T7470] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 342.872566][ T31] usb 4-1: USB disconnect, device number 6 [ 343.011573][ T5793] usb 2-1: USB disconnect, device number 17 [ 343.071209][ T10] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input6 [ 343.176197][ T5882] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 343.281215][ T44] usb 5-1: USB disconnect, device number 13 [ 343.281975][ C0] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 343.282040][ C0] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 343.326444][ T5882] usb 1-1: Using ep0 maxpacket: 32 [ 343.330155][ T5882] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 343.330181][ T5882] usb 1-1: config 0 has no interface number 0 [ 343.330223][ T5882] usb 1-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 343.330243][ T5882] usb 1-1: config 0 interface 1 has no altsetting 0 [ 343.343504][ T5882] usb 1-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 343.343531][ T5882] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.343548][ T5882] usb 1-1: Product: syz [ 343.343560][ T5882] usb 1-1: Manufacturer: syz [ 343.343573][ T5882] usb 1-1: SerialNumber: syz [ 343.368201][ T5882] usb 1-1: config 0 descriptor?? [ 343.515107][ T7452] udevd[7452]: setting mode of /dev/input/event4 to 020660 failed: No such file or directory [ 343.516628][ T7452] udevd[7452]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 343.702985][ T7098] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.703398][ T5882] cx231xx 1-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 343.737621][ T5882] cx231xx 1-1:0.1: Failed to read PCB config [ 343.737695][ T5882] cx231xx 1-1:0.1: probe with driver cx231xx failed with error -71 [ 343.755855][ T5882] usb 1-1: USB disconnect, device number 7 [ 343.986209][ T5793] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 344.026261][ T6446] Bluetooth: hci5: command tx timeout [ 344.087413][ T31] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 344.136185][ T5793] usb 4-1: Using ep0 maxpacket: 16 [ 344.142468][ T5793] usb 4-1: config 0 has an invalid interface number: 251 but max is 0 [ 344.142493][ T5793] usb 4-1: config 0 has no interface number 0 [ 344.142538][ T5793] usb 4-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 344.142560][ T5793] usb 4-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 344.145322][ T7098] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.145670][ T5793] usb 4-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 344.145691][ T5793] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.145708][ T5793] usb 4-1: Product: syz [ 344.145720][ T5793] usb 4-1: Manufacturer: syz [ 344.145731][ T5793] usb 4-1: SerialNumber: syz [ 344.156208][ T5882] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 344.182497][ T5793] usb 4-1: config 0 descriptor?? [ 344.184017][ T7488] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 344.184450][ T7488] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 344.256263][ T31] usb 2-1: Using ep0 maxpacket: 16 [ 344.271561][ T31] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 344.271639][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.271657][ T31] usb 2-1: Product: syz [ 344.271669][ T31] usb 2-1: Manufacturer: syz [ 344.271682][ T31] usb 2-1: SerialNumber: syz [ 344.326214][ T5882] usb 1-1: Using ep0 maxpacket: 32 [ 344.328910][ T5882] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 344.328936][ T5882] usb 1-1: config 0 has no interface number 0 [ 344.329029][ T5882] usb 1-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 344.329049][ T5882] usb 1-1: config 0 interface 1 has no altsetting 0 [ 344.334416][ T5882] usb 1-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 344.334445][ T5882] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.334461][ T5882] usb 1-1: Product: syz [ 344.334838][ T5882] usb 1-1: Manufacturer: syz [ 344.334851][ T5882] usb 1-1: SerialNumber: syz [ 344.348979][ T31] r8152-cfgselector 2-1: Unknown version 0x0000 [ 344.349002][ T31] r8152-cfgselector 2-1: config 0 descriptor?? [ 344.386841][ T5882] usb 1-1: config 0 descriptor?? [ 344.432620][ T7488] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 344.432775][ T7488] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 344.552345][ T7098] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.568093][ C1] raw-gadget.1 gadget.1: ignoring, device is not running [ 344.568314][ T31] r8152-cfgselector 2-1: Unknown version 0x0000 [ 344.573111][ T31] r8152-cfgselector 2-1: bad CDC descriptors [ 344.617823][ T31] r8152-cfgselector 2-1: USB disconnect, device number 18 [ 344.653553][ T5882] cx231xx 1-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 344.666549][ T5882] cx231xx 1-1:0.1: Identified as Conexant Hybrid TV - RDU253S (card=4) [ 344.776557][ T5882] cx231xx 1-1:0.1: cx231xx_send_gpio_cmd: failed with status --110 [ 344.776999][ T5882] cx231xx 1-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 344.777464][ T5882] cx231xx 1-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 344.777859][ T5882] cx231xx 1-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 344.778169][ T5882] cx231xx 1-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 344.778178][ T5882] cx231xx 1-1:0.1: Failed to set devmode to analog: error: -32 [ 344.941019][ T5882] i2c i2c-2: Added multiplexed i2c bus 4 [ 344.944058][ T7098] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.958205][ T6446] Bluetooth: hci4: unexpected event for opcode 0x2043 [ 345.035946][ T5882] i2c i2c-2: Added multiplexed i2c bus 5 [ 345.207412][ T5882] cx231xx 1-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 345.228763][ T5882] cx231xx 1-1:0.1: cx231xx_send_usb_command: failed with status --32 [ 345.230843][ T5882] cx231xx 1-1:0.1: cx231xx_send_usb_command: failed with status --32 [ 345.232827][ T5882] cx231xx 1-1:0.1: cx231xx_send_usb_command: failed with status --32 [ 345.233507][ T5882] cx231xx 1-1:0.1: cx231xx_send_usb_command: failed with status --32 [ 345.234403][ T5882] cx231xx 1-1:0.1: cx231xx_send_usb_command: failed with status --32 [ 345.235084][ T5882] cx231xx 1-1:0.1: cx231xx_send_usb_command: failed with status --32 [ 345.240400][ T5882] cx231xx 1-1:0.1: cx231xx_send_usb_command: failed with status --32 [ 345.241208][ T5882] cx231xx 1-1:0.1: cx231xx_dev_init: Failed to set Power - errCode [-32]! [ 345.241227][ T5882] cx231xx 1-1:0.1: cx231xx_init_dev: cx231xx_i2c_register - errCode [-32]! [ 345.357741][ T5882] cx231xx 1-1:0.1: probe with driver cx231xx failed with error -32 [ 345.384961][ T5882] usb 1-1: USB disconnect, device number 8 [ 345.399025][ T7478] udevd[7478]: setting owner of /dev/bus/usb/001/008 to uid=0, gid=0 failed: No such file or directory [ 345.569353][ T31] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 345.641017][ T7472] chnl_net:caif_netlink_parms(): no params data found [ 345.725488][ T31] usb 2-1: Using ep0 maxpacket: 8 [ 345.735013][ T31] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 345.735036][ T31] usb 2-1: config 0 has no interface number 0 [ 345.735083][ T31] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 345.735170][ T31] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 345.735190][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 345.808949][ T31] usb 2-1: config 0 descriptor?? [ 345.915068][ T31] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 346.077307][ T5793] asix 4-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 346.132870][ T6446] Bluetooth: hci5: command tx timeout [ 346.223190][ T31] usb 2-1: USB disconnect, device number 19 [ 346.278123][ T5882] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 346.279763][ T5793] asix 4-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 346.440781][ T5882] usb 1-1: Using ep0 maxpacket: 32 [ 346.536342][ T5882] usb 1-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 346.536370][ T5882] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.560723][ T5882] usb 1-1: config 0 descriptor?? [ 346.645842][ T5882] gspca_main: sunplus-2.14.0 probing 041e:400b [ 346.740613][ T7098] bridge_slave_1: left allmulticast mode [ 346.743357][ T7098] bridge_slave_1: left promiscuous mode [ 346.786150][ T7098] bridge0: port 2(bridge_slave_1) entered disabled state [ 346.909906][ T7098] bridge_slave_0: left allmulticast mode [ 346.909934][ T7098] bridge_slave_0: left promiscuous mode [ 346.910247][ T7098] bridge0: port 1(bridge_slave_0) entered disabled state [ 346.974739][ T5793] asix 4-1:0.251 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 346.974831][ T5793] asix 4-1:0.251 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 347.112634][ T5793] asix 4-1:0.251 (unnamed net_device) (uninitialized): Could not register MDIO bus [ 347.113679][ T5793] asix 4-1:0.251: probe with driver asix failed with error -5 [ 347.148860][ T5793] usb 4-1: USB disconnect, device number 7 [ 347.456203][ T31] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 347.646331][ T31] usb 2-1: Using ep0 maxpacket: 32 [ 347.669619][ T31] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 347.669644][ T31] usb 2-1: config 0 has no interface number 0 [ 347.670236][ T31] usb 2-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 347.670257][ T31] usb 2-1: config 0 interface 1 has no altsetting 0 [ 347.719277][ T31] usb 2-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 347.719294][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.719303][ T31] usb 2-1: Product: syz [ 347.719310][ T31] usb 2-1: Manufacturer: syz [ 347.719317][ T31] usb 2-1: SerialNumber: syz [ 347.767683][ T31] usb 2-1: config 0 descriptor?? [ 347.814087][ T5882] gspca_sunplus: reg_w_riv err -71 [ 347.814385][ T5882] sunplus 1-1:0.0: probe with driver sunplus failed with error -71 [ 347.856873][ T5882] usb 1-1: USB disconnect, device number 9 [ 348.045298][ T31] cx231xx 2-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 348.056560][ T31] cx231xx 2-1:0.1: Failed to read PCB config [ 348.056609][ T31] cx231xx 2-1:0.1: probe with driver cx231xx failed with error -71 [ 348.080721][ T31] usb 2-1: USB disconnect, device number 20 [ 348.186137][ T6446] Bluetooth: hci5: command tx timeout [ 348.548320][ T31] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 348.706206][ T31] usb 2-1: Using ep0 maxpacket: 32 [ 348.708617][ T31] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 348.708641][ T31] usb 2-1: config 0 has no interface number 0 [ 348.708695][ T31] usb 2-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 348.708713][ T31] usb 2-1: config 0 interface 1 has no altsetting 0 [ 348.711595][ T31] usb 2-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 348.711621][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.711634][ T31] usb 2-1: Product: syz [ 348.711641][ T31] usb 2-1: Manufacturer: syz [ 348.711647][ T31] usb 2-1: SerialNumber: syz [ 348.718041][ T31] usb 2-1: config 0 descriptor?? [ 349.000303][ T31] cx231xx 2-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 349.022766][ T31] cx231xx 2-1:0.1: Identified as Conexant Hybrid TV - RDU253S (card=4) [ 349.127210][ T31] cx231xx 2-1:0.1: cx231xx_send_gpio_cmd: failed with status --110 [ 349.127621][ T31] cx231xx 2-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 349.128064][ T31] cx231xx 2-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 349.128528][ T31] cx231xx 2-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 349.129012][ T31] cx231xx 2-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 349.129033][ T31] cx231xx 2-1:0.1: Failed to set devmode to analog: error: -32 [ 349.291786][ T31] i2c i2c-2: Added multiplexed i2c bus 4 [ 349.313708][ T31] i2c i2c-2: Added multiplexed i2c bus 5 [ 349.317186][ T31] cx231xx 2-1:0.1: cx231xx_dev_init: Failed to set Power - errCode [-71]! [ 349.317209][ T31] cx231xx 2-1:0.1: cx231xx_init_dev: cx231xx_i2c_register - errCode [-71]! [ 349.485139][ T31] cx231xx 2-1:0.1: probe with driver cx231xx failed with error -71 [ 349.494746][ T31] usb 2-1: USB disconnect, device number 21 [ 350.276146][ T6446] Bluetooth: hci5: command tx timeout [ 350.733464][ T7570] binder: 7569:7570 ioctl c0306201 0 returned -14 [ 350.739632][ T7571] netlink: 'syz.4.399': attribute type 10 has an invalid length. [ 350.787912][ T7572] binder: 7569:7572 ioctl c0306201 0 returned -14 [ 351.067372][ T7098] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 351.075444][ T7576] netlink: 8 bytes leftover after parsing attributes in process `syz.1.401'. [ 351.075467][ T7576] netlink: 8 bytes leftover after parsing attributes in process `syz.1.401'. [ 351.166864][ T7098] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 351.206294][ T7098] bond0 (unregistering): Released all slaves [ 351.266805][ T7567] warning: `syz.4.399' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 351.541492][ T7098] IPVS: stopping backup sync thread 6867 ... [ 351.562176][ T7571] wlan1: mtu less than device minimum [ 351.562194][ T7571] .`: (slave wlan1): Error -22 calling dev_set_mtu [ 352.253417][ T7595] fuse: Bad value for 'fd' [ 352.540745][ T7472] bridge0: port 1(bridge_slave_0) entered blocking state [ 352.540877][ T7472] bridge0: port 1(bridge_slave_0) entered disabled state [ 352.541102][ T7472] bridge_slave_0: entered allmulticast mode [ 352.543856][ T7472] bridge_slave_0: entered promiscuous mode [ 352.672153][ T7472] bridge0: port 2(bridge_slave_1) entered blocking state [ 352.672281][ T7472] bridge0: port 2(bridge_slave_1) entered disabled state [ 352.672629][ T7472] bridge_slave_1: entered allmulticast mode [ 352.690246][ T7472] bridge_slave_1: entered promiscuous mode [ 352.714293][ T7600] input: syz0 as /devices/virtual/input/input7 [ 352.776236][ T1231] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 352.936164][ T1231] usb 4-1: Using ep0 maxpacket: 32 [ 352.944508][ T1231] usb 4-1: config 0 has an invalid interface number: 35 but max is 0 [ 352.944533][ T1231] usb 4-1: config 0 has no interface number 0 [ 352.972474][ T1231] usb 4-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 352.972502][ T1231] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.972511][ T1231] usb 4-1: Product: syz [ 352.972518][ T1231] usb 4-1: Manufacturer: syz [ 352.972524][ T1231] usb 4-1: SerialNumber: syz [ 353.007319][ T1231] usb 4-1: config 0 descriptor?? [ 353.025437][ T1231] radio-si470x 4-1:0.35: could not find interrupt in endpoint [ 353.025510][ T1231] radio-si470x 4-1:0.35: probe with driver radio-si470x failed with error -5 [ 353.312183][ T1231] radio-raremono 4-1:0.35: this is not Thanko's Raremono. [ 353.314374][ T1231] usbhid 4-1:0.35: couldn't find an input interrupt endpoint [ 353.396189][ T5894] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 353.556265][ T5894] usb 5-1: Using ep0 maxpacket: 8 [ 353.558434][ T5894] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 353.558459][ T5894] usb 5-1: config 0 has no interface number 0 [ 353.558503][ T5894] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 353.558522][ T5894] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 353.558542][ T5894] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 353.558564][ T5894] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 353.558606][ T5894] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 353.558617][ T5894] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.563555][ T5894] usb 5-1: config 0 descriptor?? [ 353.636180][ T5793] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 353.678577][ T5894] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 353.787980][ T5793] usb 2-1: Using ep0 maxpacket: 8 [ 353.794714][ T5793] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 353.794846][ T5793] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 353.794868][ T5793] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 353.794889][ T5793] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 353.794935][ T5793] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 353.795054][ T5793] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 354.031310][ T5793] usb 2-1: GET_CAPABILITIES returned 0 [ 354.031460][ T5793] usbtmc 2-1:16.0: can't read capabilities [ 354.244865][ T7472] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 354.313703][ T7472] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 354.618020][ T7472] team0: Port device team_slave_0 added [ 354.644215][ T7472] team0: Port device team_slave_1 added [ 355.066977][ T7472] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 355.066993][ T7472] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 355.067016][ T7472] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 355.129167][ T7472] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 355.129182][ T7472] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 355.129205][ T7472] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 355.461469][ T1231] usb 4-1: USB disconnect, device number 8 [ 355.547896][ T7472] hsr_slave_0: entered promiscuous mode [ 355.550979][ T7472] hsr_slave_1: entered promiscuous mode [ 355.554202][ T7472] debugfs: 'hsr0' already exists in 'hsr' [ 355.554228][ T7472] Cannot create hsr debugfs directory [ 355.911077][ T7629] fuse: Bad value for 'fd' [ 356.144415][ T1231] usb 2-1: USB disconnect, device number 22 [ 356.224075][ T5894] usb 5-1: USB disconnect, device number 14 [ 356.266410][ T6446] Bluetooth: hci0: command 0x0c1a tx timeout [ 356.270339][ T5890] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 356.270362][ T5890] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 356.329085][ T5894] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 356.985926][ T7649] netlink: 16 bytes leftover after parsing attributes in process `syz.3.423'. [ 357.453845][ T7472] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 357.550684][ T7472] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 357.616629][ T7472] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 357.668145][ T7472] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 358.328320][ T7472] 8021q: adding VLAN 0 to HW filter on device bond0 [ 358.401123][ T7472] 8021q: adding VLAN 0 to HW filter on device team0 [ 358.435053][ T1170] bridge0: port 1(bridge_slave_0) entered blocking state [ 358.454087][ T1170] bridge0: port 1(bridge_slave_0) entered forwarding state [ 358.484332][ T1170] bridge0: port 2(bridge_slave_1) entered blocking state [ 358.485792][ T1170] bridge0: port 2(bridge_slave_1) entered forwarding state [ 358.506300][ T5890] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 358.506319][ T5890] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 358.507987][ C1] ------------[ cut here ]------------ [ 358.507999][ C1] workqueue: cannot queue hci_cmd_timeout on wq hci1 [ 358.508089][ C1] WARNING: CPU: 1 PID: 29 at kernel/workqueue.c:2258 __queue_work+0x2e5/0x1010 [ 358.508124][ C1] Modules linked in: [ 358.508154][ C1] CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 358.508178][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 358.508193][ C1] RIP: 0010:__queue_work+0x2e5/0x1010 [ 358.508219][ C1] Code: 42 80 3c 28 00 74 08 48 89 ef e8 c6 a3 96 00 48 8b 75 00 49 81 c6 68 01 00 00 48 c7 c7 20 f4 e9 8a 4c 89 f2 e8 2c 31 f9 ff 90 <0f> 0b 90 90 e9 f2 fe ff ff e8 fd eb 34 00 eb 2e e8 f6 eb 34 00 e9 [ 358.508237][ C1] RSP: 0018:ffffc90000a3f808 EFLAGS: 00010046 [ 358.508254][ C1] RAX: f41d9559c50c0f00 RBX: 0000000000000000 RCX: ffff88801baf1e00 [ 358.508270][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000100 [ 358.508283][ C1] RBP: ffff88804bc6c9a0 R08: 0000000000000000 R09: 0000000000000100 [ 358.508296][ C1] R10: dffffc0000000000 R11: ffffed101712487b R12: dffffc0000000000 [ 358.508312][ C1] R13: dffffc0000000000 R14: ffff88803d3ef968 R15: ffff88801baf294c [ 358.508328][ C1] FS: 0000000000000000(0000) GS:ffff888126ef9000(0000) knlGS:0000000000000000 [ 358.508353][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 358.508367][ C1] CR2: 00007f9bf48bf470 CR3: 000000003e31c000 CR4: 00000000003526f0 [ 358.508385][ C1] Call Trace: [ 358.508396][ C1] [ 358.508429][ C1] call_timer_fn+0x17e/0x5f0 [ 358.508457][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 358.508483][ C1] ? call_timer_fn+0xbe/0x5f0 [ 358.508509][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 358.508547][ C1] ? do_raw_spin_unlock+0x122/0x240 [ 358.508571][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 358.508600][ C1] __run_timer_base+0x709/0x970 [ 358.508642][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 358.508683][ C1] run_timer_softirq+0xb7/0x180 [ 358.508710][ C1] handle_softirqs+0x22f/0x710 [ 358.508747][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 358.508784][ C1] run_ktimerd+0xcf/0x190 [ 358.508812][ C1] ? __pfx_run_ktimerd+0x10/0x10 [ 358.508837][ C1] ? schedule+0x91/0x360 [ 358.508871][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 358.508897][ C1] smpboot_thread_fn+0x542/0xa60 [ 358.508924][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 358.508960][ C1] kthread+0x711/0x8a0 [ 358.508994][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 358.509019][ C1] ? __pfx_kthread+0x10/0x10 [ 358.509045][ C1] ? rt_spin_unlock+0x150/0x200 [ 358.509077][ C1] ? rt_spin_unlock+0x161/0x200 [ 358.509097][ C1] ? __pfx_kthread+0x10/0x10 [ 358.509128][ C1] ret_from_fork+0x4bc/0x870 [ 358.509156][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 358.509189][ C1] ? __switch_to_asm+0x39/0x70 [ 358.509213][ C1] ? __switch_to_asm+0x33/0x70 [ 358.509232][ C1] ? __pfx_kthread+0x10/0x10 [ 358.509262][ C1] ret_from_fork_asm+0x1a/0x30 [ 358.509304][ C1] [ 358.509314][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 358.509330][ C1] CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 358.509354][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 358.509366][ C1] Call Trace: [ 358.509374][ C1] [ 358.509382][ C1] dump_stack_lvl+0x99/0x250 [ 358.509413][ C1] ? __asan_memcpy+0x40/0x70 [ 358.509442][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 358.509473][ C1] ? __pfx__printk+0x10/0x10 [ 358.509513][ C1] vpanic+0x237/0x6d0 [ 358.509533][ C1] ? __pfx_vpanic+0x10/0x10 [ 358.509566][ C1] panic+0xb9/0xc0 [ 358.509585][ C1] ? __pfx_panic+0x10/0x10 [ 358.509623][ C1] __warn+0x31b/0x4b0 [ 358.509642][ C1] ? __queue_work+0x2e5/0x1010 [ 358.509669][ C1] ? __queue_work+0x2e5/0x1010 [ 358.509695][ C1] report_bug+0x2be/0x4f0 [ 358.509721][ C1] ? __queue_work+0x2e5/0x1010 [ 358.509747][ C1] ? __queue_work+0x2e5/0x1010 [ 358.509772][ C1] ? __queue_work+0x2e7/0x1010 [ 358.509798][ C1] handle_bug+0x84/0x160 [ 358.509829][ C1] exc_invalid_op+0x1a/0x50 [ 358.509858][ C1] asm_exc_invalid_op+0x1a/0x20 [ 358.509878][ C1] RIP: 0010:__queue_work+0x2e5/0x1010 [ 358.509904][ C1] Code: 42 80 3c 28 00 74 08 48 89 ef e8 c6 a3 96 00 48 8b 75 00 49 81 c6 68 01 00 00 48 c7 c7 20 f4 e9 8a 4c 89 f2 e8 2c 31 f9 ff 90 <0f> 0b 90 90 e9 f2 fe ff ff e8 fd eb 34 00 eb 2e e8 f6 eb 34 00 e9 [ 358.509922][ C1] RSP: 0018:ffffc90000a3f808 EFLAGS: 00010046 [ 358.509940][ C1] RAX: f41d9559c50c0f00 RBX: 0000000000000000 RCX: ffff88801baf1e00 [ 358.509956][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000100 [ 358.509970][ C1] RBP: ffff88804bc6c9a0 R08: 0000000000000000 R09: 0000000000000100 [ 358.509984][ C1] R10: dffffc0000000000 R11: ffffed101712487b R12: dffffc0000000000 [ 358.510001][ C1] R13: dffffc0000000000 R14: ffff88803d3ef968 R15: ffff88801baf294c [ 358.510036][ C1] ? __queue_work+0x2e4/0x1010 [ 358.510076][ C1] call_timer_fn+0x17e/0x5f0 [ 358.510103][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 358.510129][ C1] ? call_timer_fn+0xbe/0x5f0 [ 358.510156][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 358.510194][ C1] ? do_raw_spin_unlock+0x122/0x240 [ 358.510219][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 358.510249][ C1] __run_timer_base+0x709/0x970 [ 358.510292][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 358.510336][ C1] run_timer_softirq+0xb7/0x180 [ 358.510363][ C1] handle_softirqs+0x22f/0x710 [ 358.510420][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 358.510458][ C1] run_ktimerd+0xcf/0x190 [ 358.510485][ C1] ? __pfx_run_ktimerd+0x10/0x10 [ 358.510510][ C1] ? schedule+0x91/0x360 [ 358.510544][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 358.510568][ C1] smpboot_thread_fn+0x542/0xa60 [ 358.510596][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 358.510632][ C1] kthread+0x711/0x8a0 [ 358.510665][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 358.510690][ C1] ? __pfx_kthread+0x10/0x10 [ 358.510717][ C1] ? rt_spin_unlock+0x150/0x200 [ 358.510744][ C1] ? rt_spin_unlock+0x161/0x200 [ 358.510764][ C1] ? __pfx_kthread+0x10/0x10 [ 358.510795][ C1] ret_from_fork+0x4bc/0x870 [ 358.510822][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 358.510856][ C1] ? __switch_to_asm+0x39/0x70 [ 358.510876][ C1] ? __switch_to_asm+0x33/0x70 [ 358.510895][ C1] ? __pfx_kthread+0x10/0x10 [ 358.510926][ C1] ret_from_fork_asm+0x1a/0x30 [ 358.510977][ C1] [ 358.511285][ C1] Kernel Offset: disabled