last executing test programs: 2m8.20159134s ago: executing program 3 (id=148): memfd_create(0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) r1 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_memcpy_off$KVM_EXIT_HYPERCALL(0x0, 0x20, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2m2.167443763s ago: executing program 3 (id=161): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x34, 0x2c, 0x6f14cf9ac61f9c9b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfffa}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x24000000) r0 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_open_dev$audion(&(0x7f00000011c0), 0x3, 0x8c4201) 1m58.473861736s ago: executing program 3 (id=170): bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000096d132478102268d00", @ANYRES32, @ANYBLOB="0000000000000000b7080000002000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df12c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1m58.258240856s ago: executing program 3 (id=171): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r1}, 0x18) r2 = epoll_create1(0x0) r3 = epoll_create1(0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000100)={0xa000000d}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000400)={0xa}) syz_usb_connect(0x4, 0x24, 0x0, 0x0) epoll_pwait(r2, &(0x7f0000000080)=[{}], 0x1, 0x4c6, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) 1m55.657592423s ago: executing program 3 (id=180): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x34, 0x2c, 0x6f14cf9ac61f9c9b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfffa}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x24000000) r0 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_open_dev$audion(&(0x7f00000011c0), 0x3, 0x8c4201) 1m52.441682895s ago: executing program 3 (id=189): syz_open_dev$vim2m(&(0x7f00000001c0), 0x1f7ff6, 0x2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000b80), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x2, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x800, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0xffffffff}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000005c0), &(0x7f0000000600)=0xc) r5 = socket$packet(0x11, 0x2, 0x300) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="30000000100001000000ce6bb9092919507f3400", @ANYRES32=0x0, @ANYRES32=r1, @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) recvmmsg(r5, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r7, 0x400452c8, &(0x7f0000000100)) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a64000000060a0b040000000000000000020000000900010073797a30000000000900020073797a32000000003800048034000180090001007866726d0000000024000280050003000000000008000140000000000800044000000083080002400000000514000000110001000000000000001000050000"], 0x8c}}, 0x0) 1m34.677321756s ago: executing program 32 (id=189): syz_open_dev$vim2m(&(0x7f00000001c0), 0x1f7ff6, 0x2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000b80), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x2, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x800, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0xffffffff}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000005c0), &(0x7f0000000600)=0xc) r5 = socket$packet(0x11, 0x2, 0x300) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="30000000100001000000ce6bb9092919507f3400", @ANYRES32=0x0, @ANYRES32=r1, @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) recvmmsg(r5, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r7, 0x400452c8, &(0x7f0000000100)) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a64000000060a0b040000000000000000020000000900010073797a30000000000900020073797a32000000003800048034000180090001007866726d0000000024000280050003000000000008000140000000000800044000000083080002400000000514000000110001000000000000001000050000"], 0x8c}}, 0x0) 20.584275882s ago: executing program 2 (id=326): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0x6f2}, 0x18) openat$sndseq(0xffffffffffffff9c, 0x0, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newtaction={0x8c, 0x30, 0x1, 0x0, 0x0, {}, [{0x78, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4, 0x2}, {0xc}, {0xc}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0xfffffffffffffffe, 0x4}}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x8c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a88000000060a010400000000000000000a0000010900010073797a31000000005c000480580001800b0001007461726765740000480002802c0003009ac420002e2eafb9fdd672bad09dfb78c7699c74e82fa0c70000000000000000000000000000000008000240000000000e00010049444c4554494d45520000000900020073797a32"], 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) 17.908239441s ago: executing program 2 (id=332): pread64(0xffffffffffffffff, 0x0, 0x0, 0x3c) openat(0xffffffffffffffff, 0x0, 0x80380, 0x193) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) timer_create(0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x8000) r0 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = fsopen(0x0, 0x1) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000100)='\x00', 0x0) 17.21831254s ago: executing program 2 (id=336): syz_usb_connect$cdc_ecm(0x5, 0x77, &(0x7f0000000100)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x65, 0x1, 0x1, 0x0, 0x80, 0x4, [{{0x9, 0x4, 0x0, 0x9, 0x2, 0x2, 0x6, 0x0, 0xf, {{0x5}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x81, 0x4, 0x99b, 0xd1}, [@mdlm={0x15, 0x24, 0x12, 0x4}, @mdlm={0x15, 0x24, 0x12, 0x6}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x10, 0x9, 0x99, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x81, 0x2, 0xfa}}}}}]}}]}}, &(0x7f0000000280)={0x0, 0x0, 0xbf, 0x0}) 16.475555936s ago: executing program 1 (id=338): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x451d190d16813224}, 0x5) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000003, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/meminfo\x00', 0x0, 0x0) pread64(r3, &(0x7f00000001c0)=""/200, 0xc8, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000006800e9780000000000", @ANYRES8], 0x20}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 13.941315914s ago: executing program 2 (id=342): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0x6f2}, 0x18) openat$sndseq(0xffffffffffffff9c, 0x0, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newtaction={0x8c, 0x30, 0x1, 0x0, 0x0, {}, [{0x78, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4, 0x2}, {0xc}, {0xc}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0xfffffffffffffffe, 0x4}}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x8c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a88000000060a010400000000000000000a0000010900010073797a31000000005c000480580001800b0001007461726765740000480002802c0003009ac420002e2eafb9fdd672bad09dfb78c7699c74e82fa0c70000000000000000000000000000000008000240000000000e00010049444c4554494d45520000000900020073797a32"], 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) 12.989297085s ago: executing program 4 (id=344): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi0\x00', 0x48081, 0x0) socket(0x2, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pwrite64(r0, 0x0, 0x0, 0x5) 12.258964895s ago: executing program 0 (id=346): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) openat$sndseq(0xffffffffffffff9c, 0x0, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newtaction={0x8c, 0x30, 0x1, 0x0, 0x0, {}, [{0x78, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4, 0x2}, {0xc}, {0xc}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0xfffffffffffffffe, 0x4}}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x8c}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a88000000060a010400000000000000000a0000010900010073797a31000000005c000480580001800b0001007461726765740000480002802c0003009ac420002e2eafb9fdd672bad09dfb78c7699c74e82fa0c70000000000000000000000000000000008000240000000000e00010049444c4554494d45520000000900020073797a32"], 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) 12.159689497s ago: executing program 2 (id=347): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x121403, 0x0) mount(&(0x7f0000000000)=@nullb, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)='cramfs\x00', 0x800, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) mount(&(0x7f0000000100)=@nullb, &(0x7f0000000040)='.\x00', &(0x7f0000000300)='btrfs\x00', 0x5, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2c00000058000701fefffffffcffffff017c0000040042801000018006000600800a00000400008004000280"], 0x2c}, 0x1, 0x0, 0x0, 0x4000c000}, 0xc000) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000003c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000000)=0x1) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000140)=@multiplanar_mmap={0x0, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x0, "a730b801"}, 0x0, 0x1, {0x0}}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0200000004000000e27f000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000134c2651638af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000e80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) epoll_create1(0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0x19}, @NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x1}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x4004090}, 0x0) epoll_create1(0x0) syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x100}, &(0x7f0000000040), &(0x7f0000000000)) 10.725838595s ago: executing program 4 (id=348): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000140)=[{0x16, 0x0, 0x0, 0x40}]}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40000000, 0x0) read$FUSE(r0, &(0x7f0000003680)={0x2020}, 0x2020) 10.542035755s ago: executing program 0 (id=349): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x23, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) sched_setscheduler(0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42400) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)) r4 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f00000002c0)={0x9, @pix={0x0, 0x0, 0x33565348, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}) syz_emit_ethernet(0x85, &(0x7f0000000000)=ANY=[], 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) 9.388662574s ago: executing program 4 (id=350): r0 = syz_open_dev$vcsa(&(0x7f0000000080), 0x2, 0x8000) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0), 0x8) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, 0x0, 0x20000050) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) read$msr(0xffffffffffffffff, 0x0, 0x0) gettid() timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x1d2) fcntl$setlease(r4, 0x400, 0x0) bind$inet(r1, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) ioctl$BTRFS_IOC_QGROUP_LIMIT(r2, 0x8030942b, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, 0x0, 0x0) sendto(r1, &(0x7f0000000740)="50fbdf12a30d7a48b2c5c84948f3426077a9f0ca1475183db3bf52a6b2cdb77ef9af2a603a3e78adff59fbb22bae1b2443011fd801251bcef8f165533aac58c7556dd51edc5a6865d4e29f0bbd0ed602050000000000002944de604d849a1e3b32905b0d26e9ff34b83f38a2ae8b1c6748ef8b87ef2a359249c3e294931489ba57f83f96048684434854ab3b6ad59f45e832972639508fe4dcb371c013bc129572e996a7db94fae8d71a076ec54a28a926e37c7a678a5e16c121f27527bf75fb49d3", 0xc2, 0x0, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f00000003c0)='}', 0x1) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000100)={0x0, 0xffffa811}, 0x8) sendto$inet(r1, &(0x7f00000002c0)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a660bbf56352083db9d40454a67f8010000004bd29585885c89773ca3ba28a1e85ffe2a9220e0ecd440e345b745bf2146835ad015c801f95be5b890e44fb3dfbe8e88a1e5176e584c970207f23b0073ca5375abddf56331be396eaa2398ea66b93a74fd4147e826abed1b5d1de578682288c19ac23c1ccc1cdd936d2571c3510b0000000000000000000000000000000000f32bb3874c926a8944caa4677d2eae3bc831e748000000", 0xfffffffffffffe88, 0x52, 0x0, 0x0) 9.360438133s ago: executing program 1 (id=351): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000033c0)=ANY=[@ANYBLOB="0600000004000000ff0f000005"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000004000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r1}, 0x10) 9.159332596s ago: executing program 0 (id=352): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4d8, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x0, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect(0x5, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000c29afc4094225a42adae000000010902240001000000000904003c02573adf7a09050e00ff0307960609050d"], 0x0) syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000040)='Pb') 9.076655188s ago: executing program 1 (id=353): r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000640)='\xf0\x891\xb8R\xe6\x8d\x12\xe5\xe3+\xcd24\x01\x80\x1a\xc9A\x93\xb1@\xbf\x89K\xd0\x86\xd9\x86\x18\xc4:\xc3\xe0\xac\xed~\x97\a\xbe\xfb1d\xbe\xa1\xc1N\xd2p\xf0\xc6\xf3\x8eD\x1b\xc7q\x99?9\xf1\xe6\f\xa9\x90\xec:\x037\xe8\x0f\rX6\xf2\x88\x8d\r\xd2\xfc+\x19\x9a}\x9c\xd9\x1a\xef\xf1\x16d>ah\xa2\xa7\x02U\x06\xe1\xe1PY\x90\x17\xf0p\x01*!I\xd3$\xd00C\x88*NA\xc3\x95`\xb2\xf1\xb1\xed\x91\xe4\x87\xcf_9\x1eIpAfN\x99\xa9\v)\x98p\xea[\xc5&D\xe7\xf3\xba/\xcd\xdb\x9dz\xb2\xbf\xc6\xea?\x13(\x15\xc1\tm\xe7t,[\x14|bM\xfa\xeb\x91\xb0\xdfAR\xf3\xe2\xdf', &(0x7f00000007c0)='{\xe0e%m\"\x92\xb5\xcb\x00\x01\x0e!5\xd8\xf2\x92\x97\x86\xf9\xa8\xe7;\xdff3\x83\xb1a\xf2j\t\x7f??,\xd9\xe28\xae\xd6>\xbaN\x1d_N\xcbdIP2$\xbc\xc9\x89\xb5\n\x90-i%\xe2\x94\fH\xf1\xed\r\b\x1c\x81>\t\xc30-\xe2\xb3\xb00x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r2, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r3, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 7.277843475s ago: executing program 1 (id=355): pread64(0xffffffffffffffff, 0x0, 0x0, 0x3c) openat(0xffffffffffffffff, 0x0, 0x80380, 0x193) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) timer_create(0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x8000) r0 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = fsopen(&(0x7f0000000240)='virtiofs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, 0x0, &(0x7f0000000100)='\x00', 0x0) 6.469291908s ago: executing program 1 (id=356): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0, 0x0, 0x6f2}, 0x18) openat$sndseq(0xffffffffffffff9c, 0x0, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newtaction={0x8c, 0x30, 0x1, 0x0, 0x0, {}, [{0x78, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4, 0x2}, {0xc}, {0xc}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0xfffffffffffffffe, 0x4}}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x8c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a88000000060a010400000000000000000a0000010900010073797a31000000005c000480580001800b0001007461726765740000480002802c0003009ac420002e2eafb9fdd672bad09dfb78c7699c74e82fa0c70000000000000000000000000000000008000240000000000e00010049444c4554494d45520000000900020073797a32"], 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) 6.038917898s ago: executing program 0 (id=357): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x7fff, 0x0, 0x1}}, 0x40) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/246, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x73, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000002c0)={0x1, r2}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) 5.869758295s ago: executing program 2 (id=358): getpid() r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x18) bind$inet(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e1f0a"], 0x22) ioctl$VIDIOC_S_FREQUENCY(0xffffffffffffffff, 0x402c5639, &(0x7f00000000c0)={0x1, 0x1, 0x1}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x24, 0x24, 0xd0f, 0x470bd2d, 0xfffffffd, {0x60, 0x0, 0x0, r2, {0x0, 0xfff2}, {0xfff1, 0xffff}, {0x0, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x24000040}, 0x44080) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) close(r7) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r7, 0x10, &(0x7f0000000280)={0x7fffffff, 0x0, &(0x7f0000000680)=[{&(0x7f0000000300)=""/244, 0xf4}, {&(0x7f0000000180)=""/92, 0x5c}, {&(0x7f0000000400)=""/231, 0xe7}, {&(0x7f0000000500)=""/249, 0xf9}, {&(0x7f0000000600)=""/79, 0x4f}], &(0x7f0000000200)=[0x3], 0x5}, 0x20) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@newtfilter={0x24, 0x2a, 0xd27, 0xec0, 0x0, {0x0, 0x0, 0x0, r2, {0xffe0, 0xfff1}, {0x0, 0xffff}, {0xffe0, 0xf}}}, 0x24}}, 0x0) 4.08044981s ago: executing program 4 (id=359): syz_usb_connect(0x0, 0x24, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioprio_set$pid(0x1, 0x0, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)={0x20, r0, 0x103, 0x70bd29, 0x0, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}, @NL80211_ATTR_REG_RULES={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x48011}, 0x8000) 4.079373375s ago: executing program 1 (id=360): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x451d190d16813224}, 0x5) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000003, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/meminfo\x00', 0x0, 0x0) pread64(r3, &(0x7f00000001c0)=""/200, 0xc8, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000006800e9780000000000", @ANYRES8], 0x20}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 3.139557852s ago: executing program 0 (id=361): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x23, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42400) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r4 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f00000002c0)={0x9, @pix={0x0, 0x0, 0x33565348, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}) syz_emit_ethernet(0x85, &(0x7f0000000000)=ANY=[], 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) 3.135908664s ago: executing program 4 (id=362): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000440)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$nl_route(0x10, 0x3, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000280)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r4, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r3, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r4, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r3, 0x3ba0, &(0x7f0000000180)={0x48, 0x7, r5, 0x0, 0x10001, 0x0, 0x1, 0xd6fe2, 0x3d3b4e}) 0s ago: executing program 0 (id=363): socket$packet(0x11, 0x3, 0x300) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0f000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.193' (ED25519) to the list of known hosts. [ 79.921780][ T5826] cgroup: Unknown subsys name 'net' [ 80.152068][ T5826] cgroup: Unknown subsys name 'cpuset' [ 80.218178][ T5826] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 81.993719][ T5826] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 86.303115][ T5844] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 86.304933][ T5844] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 86.305728][ T5844] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 86.307346][ T5844] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 86.318210][ T5844] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 86.375455][ T5844] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 86.385633][ T5844] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 86.394739][ T5844] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 86.410814][ T5855] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 86.421865][ T5859] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 86.430648][ T5859] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 86.431976][ T5859] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 86.432791][ T5859] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 86.433459][ T5859] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 86.435351][ T5859] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 86.435894][ T5859] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 86.441764][ T5859] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 86.442134][ T5859] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 86.442826][ T5859] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 86.444175][ T5859] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 86.444985][ T5859] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 86.445317][ T5859] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 86.451172][ T5859] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 86.464027][ T5844] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 86.498503][ T59] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 86.782885][ T990] cfg80211: failed to load regulatory.db [ 87.302526][ T5840] chnl_net:caif_netlink_parms(): no params data found [ 87.461348][ T5849] chnl_net:caif_netlink_parms(): no params data found [ 87.579417][ T5846] chnl_net:caif_netlink_parms(): no params data found [ 87.636714][ T5847] chnl_net:caif_netlink_parms(): no params data found [ 87.656411][ T5845] chnl_net:caif_netlink_parms(): no params data found [ 88.174454][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.175837][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.176195][ T5840] bridge_slave_0: entered allmulticast mode [ 88.178026][ T5840] bridge_slave_0: entered promiscuous mode [ 88.318966][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.319062][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.319195][ T5840] bridge_slave_1: entered allmulticast mode [ 88.320652][ T5840] bridge_slave_1: entered promiscuous mode [ 88.369014][ T5855] Bluetooth: hci0: command tx timeout [ 88.527826][ T5855] Bluetooth: hci4: command tx timeout [ 88.527835][ T5859] Bluetooth: hci2: command tx timeout [ 88.607995][ T5855] Bluetooth: hci1: command tx timeout [ 88.608159][ T5855] Bluetooth: hci3: command tx timeout [ 88.654369][ T5849] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.654511][ T5849] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.654617][ T5849] bridge_slave_0: entered allmulticast mode [ 88.656159][ T5849] bridge_slave_0: entered promiscuous mode [ 88.839191][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.839352][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.839519][ T5846] bridge_slave_0: entered allmulticast mode [ 88.842256][ T5846] bridge_slave_0: entered promiscuous mode [ 88.919235][ T5849] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.919373][ T5849] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.919535][ T5849] bridge_slave_1: entered allmulticast mode [ 88.922264][ T5849] bridge_slave_1: entered promiscuous mode [ 88.931307][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.018494][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.018626][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.018803][ T5846] bridge_slave_1: entered allmulticast mode [ 89.020594][ T5846] bridge_slave_1: entered promiscuous mode [ 89.140381][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.140615][ T5847] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.140737][ T5847] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.140845][ T5847] bridge_slave_0: entered allmulticast mode [ 89.142295][ T5847] bridge_slave_0: entered promiscuous mode [ 89.239148][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.239306][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.239803][ T5845] bridge_slave_0: entered allmulticast mode [ 89.242556][ T5845] bridge_slave_0: entered promiscuous mode [ 89.408628][ T5847] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.408759][ T5847] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.408936][ T5847] bridge_slave_1: entered allmulticast mode [ 89.410938][ T5847] bridge_slave_1: entered promiscuous mode [ 89.489861][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.490005][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.490347][ T5845] bridge_slave_1: entered allmulticast mode [ 89.491818][ T5845] bridge_slave_1: entered promiscuous mode [ 89.583778][ T5849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.741145][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.802681][ T5849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.804686][ T5840] team0: Port device team_slave_0 added [ 89.913535][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.053738][ T5840] team0: Port device team_slave_1 added [ 90.061270][ T5847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.142492][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.300833][ T5847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.382609][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.392919][ T5849] team0: Port device team_slave_0 added [ 90.448428][ T5859] Bluetooth: hci0: command tx timeout [ 90.529850][ T5846] team0: Port device team_slave_0 added [ 90.607739][ T5859] Bluetooth: hci2: command tx timeout [ 90.610713][ T5849] team0: Port device team_slave_1 added [ 90.611795][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.611804][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.611817][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.617963][ T5859] Bluetooth: hci4: command tx timeout [ 90.698012][ T5859] Bluetooth: hci3: command tx timeout [ 90.698043][ T5859] Bluetooth: hci1: command tx timeout [ 90.709751][ T5846] team0: Port device team_slave_1 added [ 91.039151][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.039162][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.039175][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.040801][ T5847] team0: Port device team_slave_0 added [ 91.121024][ T5845] team0: Port device team_slave_0 added [ 91.213026][ T5847] team0: Port device team_slave_1 added [ 91.300528][ T5845] team0: Port device team_slave_1 added [ 91.301378][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.301387][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.301399][ T5849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.388873][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.388884][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.388897][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.471040][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.471055][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.471078][ T5849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.559310][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.559325][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.559348][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.718987][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.718997][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.719010][ T5847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.726558][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.726571][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.726593][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.850440][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.850456][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.850469][ T5847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.852654][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.852666][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.852683][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.914462][ T5840] hsr_slave_0: entered promiscuous mode [ 91.917092][ T5840] hsr_slave_1: entered promiscuous mode [ 92.370444][ T5849] hsr_slave_0: entered promiscuous mode [ 92.371370][ T5849] hsr_slave_1: entered promiscuous mode [ 92.371982][ T5849] debugfs: 'hsr0' already exists in 'hsr' [ 92.372067][ T5849] Cannot create hsr debugfs directory [ 92.381694][ T5846] hsr_slave_0: entered promiscuous mode [ 92.383244][ T5846] hsr_slave_1: entered promiscuous mode [ 92.384110][ T5846] debugfs: 'hsr0' already exists in 'hsr' [ 92.384130][ T5846] Cannot create hsr debugfs directory [ 92.527893][ T5855] Bluetooth: hci0: command tx timeout [ 92.687733][ T5855] Bluetooth: hci4: command tx timeout [ 92.687762][ T5855] Bluetooth: hci2: command tx timeout [ 92.689502][ T5847] hsr_slave_0: entered promiscuous mode [ 92.690917][ T5847] hsr_slave_1: entered promiscuous mode [ 92.691789][ T5847] debugfs: 'hsr0' already exists in 'hsr' [ 92.691811][ T5847] Cannot create hsr debugfs directory [ 92.767837][ T5859] Bluetooth: hci1: command tx timeout [ 92.767866][ T5859] Bluetooth: hci3: command tx timeout [ 92.796270][ T5845] hsr_slave_0: entered promiscuous mode [ 92.797044][ T5845] hsr_slave_1: entered promiscuous mode [ 92.798269][ T5845] debugfs: 'hsr0' already exists in 'hsr' [ 92.798291][ T5845] Cannot create hsr debugfs directory [ 94.544696][ T5840] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 94.596338][ T5840] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 94.607889][ T5855] Bluetooth: hci0: command tx timeout [ 94.613294][ T5840] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 94.650042][ T5840] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 94.763440][ T5849] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 94.777808][ T5859] Bluetooth: hci4: command tx timeout [ 94.777851][ T5855] Bluetooth: hci2: command tx timeout [ 94.809979][ T5849] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 94.846692][ T5849] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 94.855765][ T5855] Bluetooth: hci3: command tx timeout [ 94.855795][ T5855] Bluetooth: hci1: command tx timeout [ 94.905806][ T5849] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 95.045784][ T5846] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 95.082558][ T5846] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 95.122597][ T5846] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 95.172742][ T5846] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 95.321369][ T5847] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 95.360979][ T5847] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 95.410054][ T5847] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 95.458195][ T5847] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 95.596930][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.636415][ T5845] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 95.686188][ T5845] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 95.725487][ T5845] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 95.757537][ T5845] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 95.835503][ T5840] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.896741][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.897404][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.910207][ T5849] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.950655][ T3631] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.950753][ T3631] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.037371][ T5849] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.091587][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.091795][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.096704][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.145226][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.145325][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.237309][ T5846] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.255068][ T5847] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.287403][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.287527][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.359435][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.359673][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.448291][ T5847] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.520899][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.537536][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.537828][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.615655][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.618000][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.731020][ T5845] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.784886][ T1236] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.785952][ T1236] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.882855][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.883074][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.967511][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.069923][ T5849] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.408265][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.415244][ T5840] veth0_vlan: entered promiscuous mode [ 97.484051][ T5840] veth1_vlan: entered promiscuous mode [ 97.741888][ T5847] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.772832][ T5846] veth0_vlan: entered promiscuous mode [ 97.787546][ T5840] veth0_macvtap: entered promiscuous mode [ 97.826959][ T5840] veth1_macvtap: entered promiscuous mode [ 97.854484][ T5846] veth1_vlan: entered promiscuous mode [ 97.930032][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.951203][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.993911][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.036387][ T5849] veth0_vlan: entered promiscuous mode [ 98.043329][ T3631] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.064206][ T3631] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.087427][ T3631] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.107444][ T3631] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.120076][ T5846] veth0_macvtap: entered promiscuous mode [ 98.121795][ T5847] veth0_vlan: entered promiscuous mode [ 98.196547][ T5849] veth1_vlan: entered promiscuous mode [ 98.201777][ T5846] veth1_macvtap: entered promiscuous mode [ 98.288618][ T5847] veth1_vlan: entered promiscuous mode [ 98.435336][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.498314][ T5845] veth0_vlan: entered promiscuous mode [ 98.504039][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.508532][ T1742] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.508553][ T1742] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.578839][ T1742] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.609524][ T5845] veth1_vlan: entered promiscuous mode [ 98.610430][ T1742] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.625367][ T1742] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.651450][ T1025] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.652447][ T5849] veth0_macvtap: entered promiscuous mode [ 98.663129][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.663146][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.676746][ T5847] veth0_macvtap: entered promiscuous mode [ 98.734946][ T5849] veth1_macvtap: entered promiscuous mode [ 98.766712][ T5847] veth1_macvtap: entered promiscuous mode [ 99.073868][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.084756][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.096425][ T1025] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.096442][ T1025] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.108412][ T5845] veth0_macvtap: entered promiscuous mode [ 99.134636][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.166426][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.171325][ T5845] veth1_macvtap: entered promiscuous mode [ 99.249015][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.288975][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.295075][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.309799][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.325109][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.337125][ T1742] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.337141][ T1742] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.367682][ T43] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.414811][ T43] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.439152][ T43] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.498311][ T990] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 99.551326][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.590013][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.667894][ T990] usb 2-1: Using ep0 maxpacket: 16 [ 99.697815][ T990] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 99.697864][ T990] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 99.697885][ T990] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.753108][ T990] usb 2-1: config 0 descriptor?? [ 99.782364][ T1742] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.803844][ T1742] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.854258][ T1742] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.872423][ T1742] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.706072][ T990] mcp2221 0003:04D8:00DD.0001: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 100.707237][ T5960] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.719329][ T5960] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.784622][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.784641][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.054809][ T990] usb 2-1: USB disconnect, device number 2 [ 101.336094][ T1742] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.336114][ T1742] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.249425][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.249443][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.422684][ T3546] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.422701][ T3546] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.447676][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 102.467657][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 103.109236][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.109264][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.176686][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 104.275668][ T5978] : entered promiscuous mode [ 104.298919][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.298936][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.808203][ T5986] netlink: 'syz.1.10': attribute type 1 has an invalid length. [ 105.017349][ T5859] Bluetooth: hci3: unexpected cc 0x204b length: 9 > 3 [ 105.724729][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 105.724773][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 105.724807][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 105.724842][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 105.724882][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 105.724917][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 105.724951][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 107.749947][ T6011] Lens A: ================= START STATUS ================= [ 107.750002][ T6011] Lens A: Focus, Absolute: 0 [ 107.750038][ T6011] Lens A: ================== END STATUS ================== [ 108.141102][ T37] audit: type=1800 audit(1756904926.693:2): pid=6009 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.13" name="bus" dev="ramfs" ino=8516 res=0 errno=0 [ 108.402044][ T6014] ubi0: attaching mtd0 [ 108.417049][ T6014] ubi0: scanning is finished [ 108.417067][ T6014] ubi0: empty MTD device detected [ 109.717767][ T6014] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 109.717792][ T6014] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 109.717809][ T6014] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 109.717826][ T6014] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 109.717842][ T6014] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 109.717858][ T6014] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 109.717874][ T6014] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 1827844091 [ 109.717894][ T6014] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 109.720637][ T6017] ubi0: detaching mtd0 [ 109.973685][ T6017] ubi0: mtd0 is detached [ 111.928472][ T6041] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 112.621310][ T6046] syzkaller0: entered promiscuous mode [ 112.621339][ T6046] syzkaller0: entered allmulticast mode [ 112.676714][ T6046] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 114.646051][ T5859] Bluetooth: hci4: unexpected cc 0x204b length: 9 > 3 [ 118.179963][ T6085] netlink: 28 bytes leftover after parsing attributes in process `syz.4.33'. [ 124.840855][ T31] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 125.154768][ T31] usb 1-1: config 0 has no interfaces? [ 125.164260][ T31] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 125.164278][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.164288][ T31] usb 1-1: Product: syz [ 125.164295][ T31] usb 1-1: Manufacturer: syz [ 125.164302][ T31] usb 1-1: SerialNumber: syz [ 125.174339][ T31] usb 1-1: config 0 descriptor?? [ 127.055946][ T6164] virtio-fs: tag <> not found [ 127.500049][ T6165] mmap: syz.1.54 (6165) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 131.480789][ T6190] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 131.543923][ T6190] cramfs: wrong magic [ 132.277910][ T6190] vivid-000: kernel_thread() failed [ 133.571960][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.572068][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 136.208802][ T31] usb 1-1: USB disconnect, device number 2 [ 137.957725][ T5923] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 138.213531][ T5923] usb 5-1: Using ep0 maxpacket: 8 [ 138.229585][ T5923] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 138.229642][ T5923] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 138.229668][ T5923] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 138.229692][ T5923] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 138.229715][ T5923] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 138.233345][ T5923] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 138.233420][ T5923] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 138.233448][ T5923] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 138.233473][ T5923] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 138.233497][ T5923] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 138.277721][ T5923] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 138.277779][ T5923] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 138.277805][ T5923] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 138.277829][ T5923] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 138.277853][ T5923] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 138.352180][ T5923] usb 5-1: string descriptor 0 read error: -22 [ 138.352329][ T5923] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 138.352351][ T5923] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.797800][ T10] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 139.779814][ T5923] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 140.294292][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 140.298001][ T10] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 140.298024][ T10] usb 1-1: config 0 has no interface number 0 [ 140.298073][ T10] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 140.298095][ T10] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 140.298118][ T10] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 140.298142][ T10] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 140.298181][ T10] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 140.298202][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.330014][ T10] usb 1-1: config 0 descriptor?? [ 140.406175][ T10] ldusb 1-1:0.55: LD USB Device #1 now attached to major 180 minor 1 [ 140.745975][ T5905] usb 1-1: USB disconnect, device number 3 [ 140.931733][ T5905] ldusb 1-1:0.55: LD USB Device #1 now disconnected [ 141.166033][ T5905] usb 5-1: USB disconnect, device number 2 [ 146.540281][ T6328] syz.4.90 uses obsolete (PF_INET,SOCK_PACKET) [ 147.986295][ T6337] block nbd2: shutting down sockets [ 149.773057][ T6351] Lens A: ================= START STATUS ================= [ 149.773076][ T6351] Lens A: Focus, Absolute: 0 [ 149.773098][ T6351] Lens A: ================== END STATUS ================== [ 149.887959][ T5923] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 150.097650][ T5923] usb 4-1: Using ep0 maxpacket: 8 [ 150.109205][ T5923] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 150.109229][ T5923] usb 4-1: config 0 has no interface number 0 [ 150.109278][ T5923] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 150.109300][ T5923] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 150.109339][ T5923] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 150.109363][ T5923] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 150.109404][ T5923] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 150.109427][ T5923] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.410549][ T5923] usb 4-1: config 0 descriptor?? [ 151.695434][ T5923] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 151.704463][ T5923] usb 4-1: USB disconnect, device number 2 [ 151.732706][ T5923] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 158.812839][ C1] vkms_vblank_simulate: vblank timer overrun [ 159.095459][ C1] vkms_vblank_simulate: vblank timer overrun [ 159.355512][ C1] vkms_vblank_simulate: vblank timer overrun [ 160.580657][ C1] vkms_vblank_simulate: vblank timer overrun [ 160.707263][ C1] vkms_vblank_simulate: vblank timer overrun [ 160.731469][ T6431] process 'syz.0.113' launched './file0' with NULL argv: empty string added [ 160.965390][ C1] vkms_vblank_simulate: vblank timer overrun [ 161.468083][ C1] vkms_vblank_simulate: vblank timer overrun [ 162.049141][ C1] vkms_vblank_simulate: vblank timer overrun [ 162.821824][ C1] vkms_vblank_simulate: vblank timer overrun [ 163.137720][ T5851] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 163.297761][ T5851] usb 1-1: Using ep0 maxpacket: 8 [ 163.303755][ T5851] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 163.303779][ T5851] usb 1-1: config 0 has no interface number 0 [ 163.303828][ T5851] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 163.303849][ T5851] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 163.303873][ T5851] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 163.303898][ T5851] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 163.303947][ T5851] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 163.303969][ T5851] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.316831][ T5851] usb 1-1: config 0 descriptor?? [ 163.362764][ T5851] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 163.815522][ T5934] usb 1-1: USB disconnect, device number 4 [ 163.815651][ C0] ldusb 1-1:0.55: usb_submit_urb failed (-19) [ 163.878801][ T5934] ldusb 1-1:0.55: LD USB Device #0 now disconnected [ 165.041172][ T6460] block nbd2: shutting down sockets [ 167.669319][ T5859] Bluetooth: hci4: unexpected cc 0x204b length: 9 > 3 [ 172.691820][ T5855] Bluetooth: hci4: command tx timeout [ 173.779307][ T990] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 173.859723][ T5855] Bluetooth: hci4: unexpected cc 0x204b length: 9 > 3 [ 173.988428][ T990] usb 4-1: Using ep0 maxpacket: 16 [ 173.996516][ T990] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 173.996544][ T990] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 173.996556][ T990] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.045107][ T990] usb 4-1: config 0 descriptor?? [ 174.463819][ T6530] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 174.470336][ T6530] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 174.689730][ T990] usbhid 4-1:0.0: can't add hid device: -71 [ 174.689863][ T990] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 175.289115][ T990] usb 4-1: USB disconnect, device number 3 [ 180.259808][ T6574] syzkaller0: entered promiscuous mode [ 180.259836][ T6574] syzkaller0: entered allmulticast mode [ 180.294606][ T6574] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 180.467898][ T5934] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 180.589243][ C0] vkms_vblank_simulate: vblank timer overrun [ 180.678539][ T5934] usb 3-1: Using ep0 maxpacket: 8 [ 180.699649][ T5934] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 180.699705][ T5934] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 180.699732][ T5934] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 180.699758][ T5934] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 180.699783][ T5934] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 180.705513][ T5934] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 180.705568][ T5934] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 180.705595][ T5934] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 180.705620][ T5934] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 180.705645][ T5934] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 180.822801][ T5934] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 180.822856][ T5934] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 180.822883][ T5934] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 180.822907][ T5934] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 180.822932][ T5934] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 180.902420][ T5934] usb 3-1: string descriptor 0 read error: -22 [ 180.902571][ T5934] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 180.902595][ T5934] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.364447][ C0] vkms_vblank_simulate: vblank timer overrun [ 181.594139][ C0] vkms_vblank_simulate: vblank timer overrun [ 182.156511][ C0] vkms_vblank_simulate: vblank timer overrun [ 182.390537][ T5934] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 182.479270][ T5934] usb 3-1: USB disconnect, device number 2 [ 183.430635][ T5934] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 185.207161][ T6611] ubi0: attaching mtd0 [ 185.245545][ T6611] ubi0: scanning is finished [ 185.752347][ T6611] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 185.752473][ T6611] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 185.752491][ T6611] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 185.752506][ T6611] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 185.752521][ T6611] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 185.752536][ T6611] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 185.752552][ T6611] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 1827844091 [ 185.752571][ T6611] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 185.752682][ T6612] ubi0: detaching mtd0 [ 185.813939][ T6612] ubi0: mtd0 is detached [ 186.048250][ T6617] virtio-fs: tag <> not found [ 186.880299][ T6625] syzkaller0: entered promiscuous mode [ 186.880328][ T6625] syzkaller0: entered allmulticast mode [ 186.910801][ T6625] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 187.598639][ T6638] netlink: 'syz.2.163': attribute type 8 has an invalid length. [ 187.598661][ T6638] netlink: 44 bytes leftover after parsing attributes in process `syz.2.163'. [ 187.660050][ T31] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 187.817766][ T31] usb 4-1: device descriptor read/64, error -71 [ 187.827729][ T44] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 187.989061][ T44] usb 2-1: Using ep0 maxpacket: 8 [ 188.058085][ T44] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 188.058134][ T44] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 188.058149][ T44] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 188.058162][ T44] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 188.058175][ T44] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 188.059790][ T44] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 188.059821][ T44] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 188.059835][ T44] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 188.059847][ T44] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 188.059860][ T44] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 188.176535][ T44] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 188.176594][ T44] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 188.176683][ T44] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 188.176707][ T44] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 188.176732][ T44] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 188.245128][ T44] usb 2-1: string descriptor 0 read error: -22 [ 188.245275][ T44] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 188.245298][ T44] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.288166][ T31] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 188.290829][ T44] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 188.417845][ T31] usb 4-1: device descriptor read/64, error -71 [ 188.528183][ T31] usb usb4-port1: attempt power cycle [ 188.740160][ T5831] usb 2-1: USB disconnect, device number 3 [ 188.746177][ T6645] usb 2-1: Couldn't submit interrupt_out_urb -19 [ 189.047793][ T31] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 189.131896][ T31] usb 4-1: device descriptor read/8, error -71 [ 189.306388][ T6654] Lens A: ================= START STATUS ================= [ 189.306420][ T6654] Lens A: Focus, Absolute: 0 [ 189.306442][ T6654] Lens A: ================== END STATUS ================== [ 189.499405][ T5831] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 189.902674][ T5831] usb 2-1: device descriptor read/64, error -71 [ 189.907707][ T31] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 189.928557][ T31] usb 4-1: device descriptor read/8, error -71 [ 190.039861][ T31] usb usb4-port1: unable to enumerate USB device [ 190.147727][ T5831] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 190.287961][ T5831] usb 2-1: device descriptor read/64, error -71 [ 190.408083][ T5831] usb usb2-port1: attempt power cycle [ 190.605918][ T6656] virtio-fs: tag <> not found [ 192.524767][ T6676] syzkaller0: entered promiscuous mode [ 192.524795][ T6676] syzkaller0: entered allmulticast mode [ 192.547186][ T6676] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 192.867844][ T44] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 193.037760][ T44] usb 5-1: Using ep0 maxpacket: 8 [ 193.046203][ T44] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 193.046263][ T44] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 193.046290][ T44] usb 5-1: config 168 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 193.053380][ T44] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 193.053440][ T44] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 193.053466][ T44] usb 5-1: config 168 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 193.055026][ T44] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 193.055080][ T44] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 193.055106][ T44] usb 5-1: config 168 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 193.059655][ T44] usb 5-1: string descriptor 0 read error: -22 [ 193.059802][ T44] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 193.059824][ T44] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.193994][ T44] adutux 5-1:168.0: interrupt endpoints not found [ 193.868542][ T6695] virtio-fs: tag <> not found [ 194.007697][ T44] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 194.147842][ T44] usb 4-1: device descriptor read/64, error -71 [ 194.305599][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.305675][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.407853][ T44] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 194.758716][ T44] usb 4-1: device descriptor read/64, error -71 [ 194.868174][ T44] usb usb4-port1: attempt power cycle [ 195.191815][ T6710] Lens A: ================= START STATUS ================= [ 195.191840][ T6710] Lens A: Focus, Absolute: 0 [ 195.191861][ T6710] Lens A: ================== END STATUS ================== [ 195.227742][ T44] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 195.250004][ T44] usb 4-1: device descriptor read/8, error -71 [ 195.484916][ T5934] usb 5-1: USB disconnect, device number 3 [ 195.517721][ T44] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 195.538409][ T44] usb 4-1: device descriptor read/8, error -71 [ 195.659249][ T44] usb usb4-port1: unable to enumerate USB device [ 199.526800][ T6740] virtio-fs: tag <> not found [ 199.752734][ T6739] netlink: 8 bytes leftover after parsing attributes in process `syz.3.189'. [ 200.245249][ T6739] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 202.999251][ T5934] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 207.988477][ T5905] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 209.862212][ T5844] Bluetooth: hci2: unexpected cc 0x204b length: 9 > 3 [ 209.862243][ T5844] Bluetooth: hci2: unexpected event for opcode 0x204b [ 210.122574][ T6781] virtio-fs: tag <> not found [ 210.438708][ T5923] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 210.707683][ T5923] usb 3-1: Using ep0 maxpacket: 8 [ 211.309703][ T5923] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 211.309732][ T5923] usb 3-1: config 0 has no interface number 0 [ 211.309784][ T5923] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 211.309807][ T5923] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 211.309831][ T5923] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 211.309856][ T5923] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 211.309899][ T5923] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 211.309921][ T5923] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.519905][ T5923] usb 3-1: config 0 descriptor?? [ 211.539029][ T5923] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 211.780739][ T5844] Bluetooth: hci0: command 0x0406 tx timeout [ 211.780777][ T5844] Bluetooth: hci3: command 0x0406 tx timeout [ 211.786875][ T5844] Bluetooth: hci1: command 0x0406 tx timeout [ 211.819244][ T5844] Bluetooth: hci4: command 0x0406 tx timeout [ 212.837919][ T5923] usb 3-1: USB disconnect, device number 5 [ 212.860470][ T6795] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 212.881642][ T6795] cramfs: wrong magic [ 212.974175][ T5923] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 216.580649][ C1] vkms_vblank_simulate: vblank timer overrun [ 216.988671][ C1] vkms_vblank_simulate: vblank timer overrun [ 217.100538][ C1] vkms_vblank_simulate: vblank timer overrun [ 217.751502][ C1] vkms_vblank_simulate: vblank timer overrun [ 217.985208][ C1] vkms_vblank_simulate: vblank timer overrun [ 218.815399][ C1] vkms_vblank_simulate: vblank timer overrun [ 219.038954][ T5862] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 219.067818][ T5862] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 219.069052][ T5862] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 219.564566][ C1] vkms_vblank_simulate: vblank timer overrun [ 219.572632][ T5862] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 219.573401][ T5862] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 219.874606][ C1] vkms_vblank_simulate: vblank timer overrun [ 220.012157][ C1] vkms_vblank_simulate: vblank timer overrun [ 220.076261][ C1] vkms_vblank_simulate: vblank timer overrun [ 220.100850][ C1] vkms_vblank_simulate: vblank timer overrun [ 220.559330][ C1] vkms_vblank_simulate: vblank timer overrun [ 220.943570][ C1] vkms_vblank_simulate: vblank timer overrun [ 221.093497][ T6846] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 221.105836][ T6846] cramfs: wrong magic [ 221.941584][ T5862] Bluetooth: hci1: command tx timeout [ 223.027673][ T5858] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 223.140781][ T83] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.182930][ T5858] usb 2-1: Using ep0 maxpacket: 8 [ 223.185599][ T5858] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 223.185622][ T5858] usb 2-1: config 0 has no interface number 0 [ 223.185668][ T5858] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 223.185690][ T5858] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 223.185714][ T5858] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 223.185739][ T5858] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 223.185779][ T5858] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 223.185801][ T5858] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.215619][ T5858] usb 2-1: config 0 descriptor?? [ 223.237670][ T5842] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 223.285315][ T5858] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 223.398087][ T5842] usb 3-1: device descriptor read/64, error -71 [ 223.537491][ T5858] usb 2-1: USB disconnect, device number 7 [ 223.583961][ T5858] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 223.667731][ T5842] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 223.672691][ T83] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.817827][ T5842] usb 3-1: device descriptor read/64, error -71 [ 223.892028][ T83] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.928892][ T5842] usb usb3-port1: attempt power cycle [ 223.978125][ T5862] Bluetooth: hci1: command tx timeout [ 224.108269][ T83] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.526937][ T5842] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 224.556010][ T5842] usb 3-1: device descriptor read/8, error -71 [ 224.841568][ T5858] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 225.130292][ T5858] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 225.130318][ T5858] usb 1-1: config 0 has no interface number 0 [ 225.154456][ T5858] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 225.154484][ T5858] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.154503][ T5858] usb 1-1: Product: syz [ 225.154517][ T5858] usb 1-1: Manufacturer: syz [ 225.154531][ T5858] usb 1-1: SerialNumber: syz [ 225.281418][ T5842] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 225.298436][ T5842] usb 3-1: device descriptor read/8, error -71 [ 225.318723][ T5858] usb 1-1: config 0 descriptor?? [ 225.453403][ T5842] usb usb3-port1: unable to enumerate USB device [ 225.630518][ T5858] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 225.639239][ T5858] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 225.639617][ T5858] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 225.639694][ T5858] usb 1-1: media controller created [ 225.661590][ T5858] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 225.832741][ T6879] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 225.833198][ T6879] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 226.047685][ T5862] Bluetooth: hci1: command tx timeout [ 226.538487][ T5862] Bluetooth: hci0: unexpected cc 0x204b length: 9 > 3 [ 226.538509][ T5862] Bluetooth: hci0: unexpected event for opcode 0x204b [ 226.781034][ T5858] i2c i2c-1: ec100: i2c rd failed=-110 reg=33 [ 226.782111][ T6879] usb 1-1: dvb_usb_ec168: I2C read not implemented [ 226.853017][ T6825] chnl_net:caif_netlink_parms(): no params data found [ 228.597640][ T5862] Bluetooth: hci1: command tx timeout [ 228.681583][ T5858] usb 1-1: USB disconnect, device number 6 [ 230.118439][ T5905] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 230.227412][ T83] bridge_slave_1: left allmulticast mode [ 230.227505][ T83] bridge_slave_1: left promiscuous mode [ 230.243430][ T83] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.277754][ T5905] usb 1-1: Using ep0 maxpacket: 8 [ 230.283884][ T5905] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 230.283908][ T5905] usb 1-1: config 0 has no interface number 0 [ 230.283954][ T5905] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 230.283976][ T5905] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 230.284000][ T5905] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 230.284033][ T5905] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 230.284073][ T5905] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 230.284094][ T5905] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.381609][ T5905] usb 1-1: config 0 descriptor?? [ 230.427914][ T5905] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 230.469406][ T83] bridge_slave_0: left allmulticast mode [ 230.469435][ T83] bridge_slave_0: left promiscuous mode [ 230.472799][ T83] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.684073][ T5905] usb 1-1: USB disconnect, device number 7 [ 230.685430][ C1] ldusb 1-1:0.55: usb_submit_urb failed (-19) [ 230.709896][ T5905] ldusb 1-1:0.55: LD USB Device #0 now disconnected [ 231.697700][ T5831] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 231.827769][ T5831] usb 5-1: device descriptor read/64, error -71 [ 232.065686][ T5862] Bluetooth: hci3: unexpected cc 0x204b length: 9 > 3 [ 232.065718][ T5862] Bluetooth: hci3: unexpected event for opcode 0x204b [ 232.067896][ T5831] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 232.207745][ T5831] usb 5-1: device descriptor read/64, error -71 [ 232.318075][ T5831] usb usb5-port1: attempt power cycle [ 232.797683][ T5831] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 232.818607][ T5831] usb 5-1: device descriptor read/8, error -71 [ 233.077781][ T5831] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 233.104350][ T5831] usb 5-1: device descriptor read/8, error -71 [ 233.208204][ T5831] usb usb5-port1: unable to enumerate USB device [ 233.627758][ T6249] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 233.796731][ T6249] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 233.796757][ T6249] usb 1-1: config 0 has no interface number 0 [ 233.814629][ T6249] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 233.814655][ T6249] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.814672][ T6249] usb 1-1: Product: syz [ 233.814684][ T6249] usb 1-1: Manufacturer: syz [ 233.814696][ T6249] usb 1-1: SerialNumber: syz [ 233.870278][ T6249] usb 1-1: config 0 descriptor?? [ 234.083039][ T6249] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 234.138343][ T6249] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 234.138718][ T6249] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 234.138770][ T6249] usb 1-1: media controller created [ 234.210602][ T6249] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 234.294780][ T6958] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 234.296064][ T6958] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 235.402305][ T6249] i2c i2c-1: ec100: i2c rd failed=-110 reg=33 [ 235.402400][ T6958] usb 1-1: dvb_usb_ec168: I2C read not implemented [ 235.517749][ T6249] usb 1-1: USB disconnect, device number 8 [ 235.558485][ T83] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 235.651883][ T83] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 235.772527][ T83] bond0 (unregistering): Released all slaves [ 236.788896][ T6249] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 236.937751][ T6249] usb 1-1: Using ep0 maxpacket: 8 [ 236.940176][ T6249] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 236.940201][ T6249] usb 1-1: config 0 has no interface number 0 [ 236.940247][ T6249] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 236.940269][ T6249] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 236.940292][ T6249] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 236.940317][ T6249] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 236.940357][ T6249] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 236.940378][ T6249] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.079390][ T6249] usb 1-1: config 0 descriptor?? [ 237.106209][ T6249] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 237.304402][ T6249] usb 1-1: USB disconnect, device number 9 [ 237.381831][ T6249] ldusb 1-1:0.55: LD USB Device #0 now disconnected [ 237.818008][ T6825] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.818195][ T6825] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.818432][ T6825] bridge_slave_0: entered allmulticast mode [ 237.823884][ T6825] bridge_slave_0: entered promiscuous mode [ 237.947217][ T5862] Bluetooth: hci0: unexpected cc 0x204b length: 9 > 3 [ 237.947249][ T5862] Bluetooth: hci0: unexpected event for opcode 0x204b [ 238.031435][ T6825] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.031516][ T6825] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.031671][ T6825] bridge_slave_1: entered allmulticast mode [ 238.303544][ T6825] bridge_slave_1: entered promiscuous mode [ 239.864255][ T5934] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 240.348270][ T5934] usb 1-1: device descriptor read/64, error -71 [ 240.587802][ T5934] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 240.646356][ T7011] block nbd1: shutting down sockets [ 240.747704][ T5934] usb 1-1: device descriptor read/64, error -71 [ 240.862280][ T5934] usb usb1-port1: attempt power cycle [ 241.197703][ T5934] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 241.219504][ T5934] usb 1-1: device descriptor read/8, error -71 [ 241.467882][ T5934] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 241.489430][ T5934] usb 1-1: device descriptor read/8, error -71 [ 241.552551][ T6825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 241.583325][ T6825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 241.598081][ T5934] usb usb1-port1: unable to enumerate USB device [ 242.120198][ T6825] team0: Port device team_slave_0 added [ 243.622447][ T83] hsr_slave_0: left promiscuous mode [ 243.678180][ T7027] overlayfs: missing 'lowerdir' [ 243.680020][ T83] hsr_slave_1: left promiscuous mode [ 243.681003][ T83] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 243.681073][ T83] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 243.741627][ T83] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 243.741658][ T83] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 243.843139][ T83] veth1_macvtap: left promiscuous mode [ 243.843422][ T83] veth0_macvtap: left promiscuous mode [ 243.843745][ T83] veth1_vlan: left promiscuous mode [ 243.844113][ T83] veth0_vlan: left promiscuous mode [ 243.875481][ T5862] Bluetooth: hci4: unexpected cc 0x204b length: 9 > 3 [ 243.875511][ T5862] Bluetooth: hci4: unexpected event for opcode 0x204b [ 244.145179][ T5856] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 244.524588][ T5856] usb 2-1: Using ep0 maxpacket: 8 [ 245.634781][ T5856] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 245.634809][ T5856] usb 2-1: config 0 has no interface number 0 [ 245.634861][ T5856] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 245.634884][ T5856] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 245.634908][ T5856] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 245.634934][ T5856] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 245.634975][ T5856] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 245.634998][ T5856] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.741415][ T5856] usb 2-1: config 0 descriptor?? [ 246.578159][ T5856] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 246.802944][ T6249] usb 2-1: USB disconnect, device number 8 [ 246.826570][ T6249] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 249.928456][ T83] team0 (unregistering): Port device team_slave_1 removed [ 250.089788][ T83] team0 (unregistering): Port device team_slave_0 removed [ 252.081780][ T7046] : entered promiscuous mode [ 252.182739][ T6825] team0: Port device team_slave_1 added [ 252.363210][ T7067] overlayfs: missing 'lowerdir' [ 253.627830][ T5862] Bluetooth: hci2: unexpected cc 0x204b length: 9 > 3 [ 253.627864][ T5862] Bluetooth: hci2: unexpected event for opcode 0x204b [ 254.147708][ T5856] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 254.214536][ T6825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 254.214552][ T6825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 254.214575][ T6825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 254.271086][ T6825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 254.271101][ T6825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 254.271124][ T6825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 254.544118][ T5856] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 254.544154][ T5856] usb 1-1: can't read configurations, error -61 [ 254.701548][ T5856] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 254.839167][ T6825] hsr_slave_0: entered promiscuous mode [ 254.843715][ T6825] hsr_slave_1: entered promiscuous mode [ 254.844578][ T6825] debugfs: 'hsr0' already exists in 'hsr' [ 254.844601][ T6825] Cannot create hsr debugfs directory [ 254.860637][ T5856] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 254.860670][ T5856] usb 1-1: can't read configurations, error -61 [ 254.861086][ T5856] usb usb1-port1: attempt power cycle [ 254.977777][ T6249] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 255.157635][ T6249] usb 2-1: Using ep0 maxpacket: 8 [ 255.185312][ T6249] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 255.185338][ T6249] usb 2-1: config 0 has no interface number 0 [ 255.185385][ T6249] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 255.185406][ T6249] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 255.185429][ T6249] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 255.185453][ T6249] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 255.185493][ T6249] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 255.185514][ T6249] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.247681][ T5856] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 255.275445][ T5856] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 255.275480][ T5856] usb 1-1: can't read configurations, error -61 [ 255.396330][ T6249] usb 2-1: config 0 descriptor?? [ 255.457698][ T5856] usb 1-1: new full-speed USB device number 17 using dummy_hcd [ 255.513804][ T5856] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 255.513842][ T5856] usb 1-1: can't read configurations, error -61 [ 255.514697][ T5856] usb usb1-port1: unable to enumerate USB device [ 255.520134][ T6249] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 255.706014][ T6028] usb 2-1: USB disconnect, device number 9 [ 255.732739][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.732782][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.855469][ T6028] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 258.967838][ T5862] Bluetooth: hci0: unexpected cc 0x204b length: 9 > 3 [ 258.967870][ T5862] Bluetooth: hci0: unexpected event for opcode 0x204b [ 259.975453][ T7127] debugfs: 'ttyS3' already exists in 'caif_serial' [ 261.067227][ T6825] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 261.172243][ T6825] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 261.316996][ T6825] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 261.351535][ T6825] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 262.952501][ T6825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 263.180647][ T6825] 8021q: adding VLAN 0 to HW filter on device team0 [ 263.193931][ T3631] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.194545][ T3631] bridge0: port 1(bridge_slave_0) entered forwarding state [ 263.296394][ T6222] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.296479][ T6222] bridge0: port 2(bridge_slave_1) entered forwarding state [ 264.009284][ T5934] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 265.263589][ T5934] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 265.263626][ T5934] usb 2-1: can't read configurations, error -61 [ 265.289318][ T5842] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 265.387745][ T5934] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 265.442033][ T5842] usb 3-1: Using ep0 maxpacket: 8 [ 265.447404][ T5842] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 265.447431][ T5842] usb 3-1: config 0 has no interface number 0 [ 265.447503][ T5842] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 265.447833][ T5842] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 265.447859][ T5842] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 265.447883][ T5842] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 265.447924][ T5842] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 265.447946][ T5842] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.547138][ T5842] usb 3-1: config 0 descriptor?? [ 265.622347][ T5934] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 265.622383][ T5934] usb 2-1: can't read configurations, error -61 [ 265.622749][ T5934] usb usb2-port1: attempt power cycle [ 265.628595][ T5842] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 265.883030][ T5862] Bluetooth: hci4: unexpected cc 0x204b length: 9 > 3 [ 265.883059][ T5862] Bluetooth: hci4: unexpected event for opcode 0x204b [ 266.065609][ T5934] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 266.070593][ T6825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 266.095422][ T5934] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 266.095442][ T5934] usb 2-1: can't read configurations, error -61 [ 266.930949][ T7199] tty tty1: ldisc open failed (-12), clearing slot 0 [ 266.970837][ T5934] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 267.071198][ T5934] usb 2-1: device descriptor read/8, error -71 [ 267.178559][ T5934] usb usb2-port1: unable to enumerate USB device [ 268.693424][ T5851] usb 3-1: USB disconnect, device number 10 [ 268.718108][ T5851] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 269.875817][ T6825] veth0_vlan: entered promiscuous mode [ 270.050986][ T6825] veth1_vlan: entered promiscuous mode [ 271.210277][ T6825] veth0_macvtap: entered promiscuous mode [ 271.858080][ T6825] veth1_macvtap: entered promiscuous mode [ 272.206812][ T6825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 272.273439][ T6825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 272.389233][ T1025] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.417300][ T1025] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.419477][ T1025] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.420680][ T1025] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.764774][ T5862] Bluetooth: hci4: unexpected cc 0x204b length: 9 > 3 [ 272.764806][ T5862] Bluetooth: hci4: unexpected event for opcode 0x204b [ 273.478197][ T7254] netdevsim netdevsim2: Direct firmware load for . [ 273.478197][ T7254] failed with error -2 [ 273.478728][ T7254] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 273.478728][ T7254] [ 274.206307][ T7266] netlink: 8 bytes leftover after parsing attributes in process `syz.4.304'. [ 274.342098][ T3546] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 274.342118][ T3546] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 274.653354][ T3546] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 274.653373][ T3546] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 275.917661][ T6028] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 276.077701][ T6028] usb 3-1: Using ep0 maxpacket: 8 [ 276.080421][ T6028] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 276.080444][ T6028] usb 3-1: config 0 has no interface number 0 [ 276.080488][ T6028] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 276.080510][ T6028] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 276.080534][ T6028] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 276.080558][ T6028] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 276.080598][ T6028] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 276.080619][ T6028] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.093809][ T6028] usb 3-1: config 0 descriptor?? [ 276.219548][ T6028] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 276.363865][ T6028] usb 3-1: USB disconnect, device number 11 [ 276.381796][ T6028] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 276.408407][ T5156] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 276.434876][ T5156] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 276.477922][ T5156] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 276.491889][ T5156] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 276.492747][ T5156] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 278.607986][ T5156] Bluetooth: hci5: command tx timeout [ 280.688325][ T5156] Bluetooth: hci5: command tx timeout [ 282.775620][ T5156] Bluetooth: hci5: command tx timeout [ 285.007794][ T5156] Bluetooth: hci5: command tx timeout [ 285.206811][ T7330] debugfs: 'ttyS3' already exists in 'caif_serial' [ 285.487667][ T5842] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 285.641622][ T5842] usb 2-1: Using ep0 maxpacket: 8 [ 285.643915][ T5842] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 285.643937][ T5842] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 285.651224][ T5842] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 285.651249][ T5842] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.651268][ T5842] usb 2-1: Product: syz [ 285.651281][ T5842] usb 2-1: Manufacturer: syz [ 285.651293][ T5842] usb 2-1: SerialNumber: syz [ 285.672346][ T5842] usb 2-1: config 0 descriptor?? [ 285.707669][ T5831] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 285.721130][ T7287] chnl_net:caif_netlink_parms(): no params data found [ 285.741454][ T5156] Bluetooth: hci2: unexpected cc 0x204b length: 9 > 3 [ 285.741482][ T5156] Bluetooth: hci2: unexpected event for opcode 0x204b [ 285.857619][ T5831] usb 3-1: Using ep0 maxpacket: 8 [ 286.278103][ T5831] usb 3-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 286.278133][ T5831] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.278152][ T5831] usb 3-1: Product: syz [ 286.278166][ T5831] usb 3-1: Manufacturer: syz [ 286.278180][ T5831] usb 3-1: SerialNumber: syz [ 286.297457][ T5831] usb 3-1: config 0 descriptor?? [ 286.333146][ T5831] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 286.842486][ T5831] gspca_sonixj: reg_r err -71 [ 286.842587][ T5831] sonixj 3-1:0.0: probe with driver sonixj failed with error -71 [ 286.860420][ T5831] usb 3-1: USB disconnect, device number 12 [ 287.000211][ T7362] netlink: 8 bytes leftover after parsing attributes in process `syz.0.323'. [ 287.693076][ T7368] ubi0: attaching mtd0 [ 287.696442][ T7368] ubi0: scanning is finished [ 288.697385][ T6249] usb 2-1: USB disconnect, device number 14 [ 288.725787][ T7287] bridge0: port 1(bridge_slave_0) entered blocking state [ 288.726403][ T7287] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.726589][ T7287] bridge_slave_0: entered allmulticast mode [ 288.750984][ T7287] bridge_slave_0: entered promiscuous mode [ 289.084898][ T7368] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 289.217319][ T1025] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.282246][ T7287] bridge0: port 2(bridge_slave_1) entered blocking state [ 289.282410][ T7287] bridge0: port 2(bridge_slave_1) entered disabled state [ 289.282636][ T7287] bridge_slave_1: entered allmulticast mode [ 289.285510][ T7287] bridge_slave_1: entered promiscuous mode [ 289.489282][ T5934] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 289.656816][ T5934] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 289.656872][ T5934] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 289.656894][ T5934] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 289.656927][ T5934] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 289.659888][ T5934] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 289.659920][ T5934] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.659939][ T5934] usb 2-1: Product: syz [ 289.659952][ T5934] usb 2-1: Manufacturer: syz [ 289.659965][ T5934] usb 2-1: SerialNumber: syz [ 289.665910][ T5934] usb 2-1: config 0 descriptor?? [ 289.768482][ T5934] garmin_gps 2-1:0.0: Garmin GPS usb/tty converter detected [ 289.803941][ T5934] garmin_gps ttyUSB0: garmin_write_bulk - usb_submit_urb(write bulk) failed with status = -8 [ 289.819069][ T5934] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -8 [ 289.887304][ T7380] fuse: Unknown parameter 'fd0x000000000000000a' [ 289.986564][ T1025] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.026709][ T7391] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 291.146413][ T7393] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 291.247647][ T5156] Bluetooth: hci0: command 0x0406 tx timeout [ 291.253029][ T7376] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 291.286686][ T5831] usb 2-1: USB disconnect, device number 15 [ 291.301920][ T5831] garmin_gps 2-1:0.0: device disconnected [ 291.378155][ T7287] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 291.394576][ T7287] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 291.424270][ T5156] Bluetooth: hci2: unexpected cc 0x204b length: 9 > 3 [ 291.424298][ T5156] Bluetooth: hci2: unexpected event for opcode 0x204b [ 292.626331][ T7403] ======================================================= [ 292.626331][ T7403] WARNING: The mand mount option has been deprecated and [ 292.626331][ T7403] and is ignored by this kernel. Remove the mand [ 292.626331][ T7403] option from the mount to silence this warning. [ 292.626331][ T7403] ======================================================= [ 292.626517][ T7403] Invalid source name [ 292.917822][ T5934] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 293.010753][ T1025] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.079192][ T5934] usb 3-1: Using ep0 maxpacket: 32 [ 293.082386][ T5934] usb 3-1: unable to get BOS descriptor or descriptor too short [ 293.084079][ T5934] usb 3-1: config 1 interface 0 altsetting 9 bulk endpoint 0x82 has invalid maxpacket 16 [ 293.084106][ T5934] usb 3-1: config 1 interface 0 altsetting 9 bulk endpoint 0x3 has invalid maxpacket 1024 [ 293.084130][ T5934] usb 3-1: config 1 interface 0 has no altsetting 0 [ 293.087241][ T5934] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 293.087266][ T5934] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.087286][ T5934] usb 3-1: Product: syz [ 293.087300][ T5934] usb 3-1: Manufacturer: syz [ 293.087314][ T5934] usb 3-1: SerialNumber: syz [ 293.225203][ T7408] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 293.225387][ T7408] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 293.252705][ T7287] team0: Port device team_slave_0 added [ 293.266261][ T7287] team0: Port device team_slave_1 added [ 293.542829][ T7417] netlink: 8 bytes leftover after parsing attributes in process `syz.1.338'. [ 293.546068][ T5934] usb 3-1: bad CDC descriptors [ 293.621631][ T5934] usb 3-1: USB disconnect, device number 13 [ 295.698873][ T1025] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.737302][ T7287] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 295.737316][ T7287] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 295.737340][ T7287] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 295.794189][ T7287] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 295.794204][ T7287] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 295.794225][ T7287] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 296.217468][ T5156] Bluetooth: hci2: unexpected cc 0x204b length: 9 > 3 [ 296.217499][ T5156] Bluetooth: hci2: unexpected event for opcode 0x204b [ 296.976069][ T7287] hsr_slave_0: entered promiscuous mode [ 296.977420][ T7287] hsr_slave_1: entered promiscuous mode [ 296.998827][ T7287] debugfs: 'hsr0' already exists in 'hsr' [ 296.998851][ T7287] Cannot create hsr debugfs directory [ 298.697430][ T37] audit: type=1326 audit(1756905117.206:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7453 comm="syz.4.348" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8b6189ebe9 code=0x0 [ 299.968680][ T7463] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 299.969688][ T7463] cramfs: wrong magic [ 301.349844][ T9] libceph: connect (1)[c::]:6789 error -101 [ 301.350221][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 301.389037][ T1025] bridge_slave_1: left allmulticast mode [ 301.389068][ T1025] bridge_slave_1: left promiscuous mode [ 301.389315][ T1025] bridge0: port 2(bridge_slave_1) entered disabled state [ 301.408989][ T9] libceph: connect (1)[c::]:6789 error -101 [ 301.409191][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 301.427721][ T5856] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 301.500127][ T1025] bridge_slave_0: left allmulticast mode [ 301.500157][ T1025] bridge_slave_0: left promiscuous mode [ 301.500435][ T1025] bridge0: port 1(bridge_slave_0) entered disabled state [ 301.517932][ T7475] ceph: No mds server is up or the cluster is laggy [ 301.588182][ T5856] usb 1-1: Using ep0 maxpacket: 16 [ 301.590516][ T5856] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 301.590562][ T5856] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 301.590583][ T5856] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.640066][ T5856] usb 1-1: config 0 descriptor?? [ 302.073867][ T7473] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 302.078511][ T7473] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 302.636410][ T5856] usbhid 1-1:0.0: can't add hid device: -71 [ 302.636536][ T5856] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 302.657885][ T5856] usb 1-1: USB disconnect, device number 18 [ 304.752546][ T1025] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 304.808143][ T1025] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 304.967632][ T1025] bond0 (unregistering): Released all slaves [ 305.702797][ T7513] netlink: 8 bytes leftover after parsing attributes in process `syz.1.360'. [ 308.317649][ T5862] Bluetooth: hci3: command 0x0406 tx timeout [ 309.290603][ T7531] BUG: sleeping function called from invalid context at kernel/locking/spinlock_rt.c:48 [ 309.290622][ T7531] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 7531, name: syz.0.363 [ 309.290639][ T7531] preempt_count: 1, expected: 0 [ 309.290648][ T7531] RCU nest depth: 1, expected: 1 [ 309.290665][ T7531] 3 locks held by syz.0.363/7531: [ 309.290676][ T7531] #0: ffffffff8d9a8bc0 (rcu_read_lock){....}-{1:3}, at: bpf_test_timer_enter+0x1a/0x140 [ 309.290738][ T7531] #1: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 309.290790][ T7531] #2: ffff888059f5ba98 (&stab->lock){+...}-{3:3}, at: sock_map_delete_elem+0xb7/0x170 [ 309.290843][ T7531] Preemption disabled at: [ 309.290849][ T7531] [] bpf_test_timer_enter+0xf8/0x140 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 309.290898][ T7531] CPU: 0 UID: 0 PID: 7531 Comm: syz.0.363 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 309.290921][ T7531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 309.290940][ T7531] Call Trace: [ 309.290948][ T7531] [ 309.290957][ T7531] dump_stack_lvl+0x189/0x250 [ 309.290993][ T7531] ? __pfx_dump_stack_lvl+0x10/0x10 [ 309.291022][ T7531] ? __pfx__printk+0x10/0x10 [ 309.291047][ T7531] ? print_lock_name+0xde/0x100 [ 309.291071][ T7531] ? bpf_test_timer_enter+0xf8/0x140 [ 309.291099][ T7531] __might_resched+0x44b/0x5d0 [ 309.291130][ T7531] ? bpf_test_timer_enter+0xf8/0x140 [ 309.291153][ T7531] ? __pfx___might_resched+0x10/0x10 [ 309.291174][ T7531] ? sock_map_delete_elem+0xb7/0x170 [ 309.291215][ T7531] rt_spin_lock+0xc7/0x2c0 [ 309.291240][ T7531] ? __pfx_rt_spin_lock+0x10/0x10 [ 309.291260][ T7531] ? ktime_get+0x3e/0x1f0 [ 309.291279][ T7531] ? seqcount_lockdep_reader_access+0x175/0x1c0 [ 309.291301][ T7531] ? __pfx___cant_migrate+0x10/0x10 [ 309.291326][ T7531] ? sock_map_delete_elem+0xa2/0x170 [ 309.291351][ T7531] sock_map_delete_elem+0xb7/0x170 [ 309.291381][ T7531] bpf_prog_a4deccfd5a7b07da+0x46/0x4e [ 309.291405][ T7531] bpf_flow_dissect+0x132/0x400 [ 309.291440][ T7531] bpf_prog_test_run_flow_dissector+0x37c/0x5c0 [ 309.291480][ T7531] ? __pfx_bpf_prog_test_run_flow_dissector+0x10/0x10 [ 309.291508][ T7531] ? __fget_files+0x2a/0x420 [ 309.291542][ T7531] ? __fget_files+0x2a/0x420 [ 309.291572][ T7531] ? __pfx_bpf_prog_test_run_flow_dissector+0x10/0x10 [ 309.291599][ T7531] bpf_prog_test_run+0x2ca/0x340 [ 309.291628][ T7531] __sys_bpf+0x581/0x870 [ 309.291654][ T7531] ? __pfx___sys_bpf+0x10/0x10 [ 309.291674][ T7531] ? __sys_connect+0xdd/0x450 [ 309.291717][ T7531] ? rcu_is_watching+0x15/0xb0 [ 309.291752][ T7531] __x64_sys_bpf+0x7c/0x90 [ 309.291775][ T7531] do_syscall_64+0xfa/0x3b0 [ 309.291800][ T7531] ? lockdep_hardirqs_on+0x9c/0x150 [ 309.291825][ T7531] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 309.291844][ T7531] ? clear_bhb_loop+0x60/0xb0 [ 309.291868][ T7531] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 309.291886][ T7531] RIP: 0033:0x7f80244eebe9 [ 309.291903][ T7531] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 309.291919][ T7531] RSP: 002b:00007f8022756038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 309.291939][ T7531] RAX: ffffffffffffffda RBX: 00007f8024725fa0 RCX: 00007f80244eebe9 [ 309.291954][ T7531] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 000000000000000a [ 309.291967][ T7531] RBP: 00007f8024571e19 R08: 0000000000000000 R09: 0000000000000000 [ 309.291979][ T7531] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 309.291991][ T7531] R13: 00007f8024726038 R14: 00007f8024725fa0 R15: 00007ffe69edd018 [ 309.292024][ T7531] [ 312.819395][ T1025] hsr_slave_0: left promiscuous mode [ 312.867743][ T1025] hsr_slave_1: left promiscuous mode [ 312.868664][ T1025] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 312.868692][ T1025] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 312.929603][ T1025] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 312.929635][ T1025] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 313.020530][ T1025] veth1_macvtap: left promiscuous mode [ 313.020648][ T1025] veth0_macvtap: left promiscuous mode [ 313.020938][ T1025] veth1_vlan: left promiscuous mode [ 313.021162][ T1025] veth0_vlan: left promiscuous mode [ 315.238473][ T1025] team0 (unregistering): Port device team_slave_1 removed [ 315.438160][ T1025] team0 (unregistering): Port device team_slave_0 removed [ 317.174738][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.174812][ T1322] ieee802154 phy1 wpan1: encryption failed: -22