last executing test programs: 39.835665296s ago: executing program 3 (id=91): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000f80)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)={0x40, 0x13, 0x6, @random="0000000200"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000d00)={0x2c, &(0x7f0000000ac0)={0x40, 0x0, 0x3, "e32724"}, 0x0, 0x0, 0x0, 0x0}) 37.806819923s ago: executing program 3 (id=117): r0 = accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000000)) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x401, 0x0, 0x1, 0x3, 0x81b1, 0x9ed}, &(0x7f0000000080)=0x20) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f0000000100)={0xee, @tick, 0x7c, {0x7}, 0x7, 0x1}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r1, 0xc058534b, &(0x7f0000000180)={0x3, 0x6, 0x8, 0x80000000, 0x3, 0x81}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000200)={0x1, 0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000005c0)=0xffffffffffffffff, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000700)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8}}, './file0\x00'}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x1d, 0x1, 0xd, 0x8, 0x8010, 0xffffffffffffffff, 0x57d5, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x0, 0x0, @value, @void, @void, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0x2a, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3000}, {}, {}, [@cb_func={0x18, 0x9, 0x4, 0x0, 0xfffffffffffffffd}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x9}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7fffffff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @exit], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000004c0)='syzkaller\x00', 0xb, 0x5e, &(0x7f0000000500)=""/94, 0x41000, 0x2, '\x00', 0x0, 0x0, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, @void, @value}, 0x94) read$FUSE(r4, &(0x7f00000008c0)={0x2020}, 0x2020) r6 = signalfd4(r5, &(0x7f0000002940)={[0xf]}, 0x8, 0x80000) getsockopt$SO_TIMESTAMP(r4, 0x1, 0x3f, &(0x7f0000002980), &(0x7f00000029c0)=0x4) getsockopt$TIPC_IMPORTANCE(r6, 0x10f, 0x7f, &(0x7f0000002a00), &(0x7f0000002a40)=0x4) syz_open_dev$sndpcmp(&(0x7f0000002a80), 0x8000, 0x1e1040) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000002b00), 0xffffffffffffffff) getpid() 37.430855022s ago: executing program 3 (id=118): setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @empty, 0xb}], 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000040)='l', 0x1, 0x810, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000640)="862686a6", 0x4, 0x40040, &(0x7f0000000580)={0xa, 0x4e23, 0x8, @dev={0xfe, 0x80, '\x00', 0x20}, 0x5}, 0x1c) 37.14771545s ago: executing program 3 (id=121): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0xb7}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) 37.0528173s ago: executing program 3 (id=123): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x5, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x4e) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='mmap_lock_acquire_returned\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0x32}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) 36.794759184s ago: executing program 3 (id=125): r0 = socket(0x18, 0x0, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x2, @empty, 'geneve1\x00'}}, 0x1e) sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00!\x00\x00', @ANYRES16=0x0, @ANYBLOB="000029bd70bb217dbe250152229f1fcd6b440f410000001400180200000f6574683a626f6e6430000000"], 0x30}}, 0x4c040) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r1, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) r2 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$qrtrtun(r2, &(0x7f0000000300)="ca0e808bb35bdabb49f35c25d456591f0c15a08769bcd5107053ea1f85250ac10e50c14ffda0a7a98740f8cb9694c01f2babb95936415d219753d982b3e6ab52070adabe6f61dce71ee97249cf86cdd7b9a6b4b3d24ddebcf8ea9f1ae197c9a9cd65f15210181d736b2d3da7d24857a899b7c335", 0xfffffc78) ioctl$PPPIOCBRIDGECHAN(r2, 0x40047435, &(0x7f0000000000)=0xf40) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x2, 0x1d, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x280000}, {}, {}, [@cb_func={0x18, 0x2, 0x4, 0x0, 0x8}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x239}}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x38, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000002c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffc}, [@call={0x85, 0x0, 0x0, 0xbc}]}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000b2a3d09d5c8876e488b73f612721642c1a0b632bc0a3e9835745de8a3b4cb8e5845fd1c0c0abcb93df48d95984d7c2eafa15f8aa21c0ca00"/71, @ANYRES16=r5, @ANYBLOB="010000000000000000000200000008000300", @ANYRESOCT, @ANYBLOB="0500180130000000050019010c0000000800260085160000"], 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) r7 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) fchdir(r7) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x159080, 0x0) r8 = inotify_init() r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r9, 0x1, 0x19, &(0x7f0000000140)='veth1_to_bridge\x00', 0x10) getsockopt$sock_buf(r9, 0x1, 0x19, &(0x7f0000000180)=""/255, &(0x7f0000000000)=0xff) inotify_add_watch(r8, &(0x7f0000000000)='.\x00', 0x400017e) open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) bind$inet(r3, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10) listen(r3, 0x0) 27.766139525s ago: executing program 1 (id=182): unshare(0x28000600) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x80400, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) 27.671643906s ago: executing program 1 (id=183): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x400c806, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) 27.663582804s ago: executing program 1 (id=184): openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x2902) r0 = syz_io_uring_setup(0x239, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x1206}}) io_uring_enter(r0, 0x2def, 0x0, 0x0, 0x0, 0x0) 27.57787884s ago: executing program 1 (id=185): bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x4, 0x15, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xff}, {}, {}, [@btf_id={0x18, 0x0, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x3}, @map_fd={0x18, 0x3}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8946, &(0x7f0000000900)={'wlan1\x00', @random='\x00\x00\x00 \x00'}) 27.475375194s ago: executing program 1 (id=187): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x40842, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) sendfile(r0, r1, 0x0, 0x1000000000008) 27.382686567s ago: executing program 1 (id=189): r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224"], 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$TCFLSH(r2, 0x400455c8, 0x1) syz_usb_disconnect(r0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000040)=0x3) close_range(r3, 0xffffffffffffffff, 0x0) 21.678376524s ago: executing program 32 (id=125): r0 = socket(0x18, 0x0, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x2, @empty, 'geneve1\x00'}}, 0x1e) sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00!\x00\x00', @ANYRES16=0x0, @ANYBLOB="000029bd70bb217dbe250152229f1fcd6b440f410000001400180200000f6574683a626f6e6430000000"], 0x30}}, 0x4c040) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r1, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) r2 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$qrtrtun(r2, &(0x7f0000000300)="ca0e808bb35bdabb49f35c25d456591f0c15a08769bcd5107053ea1f85250ac10e50c14ffda0a7a98740f8cb9694c01f2babb95936415d219753d982b3e6ab52070adabe6f61dce71ee97249cf86cdd7b9a6b4b3d24ddebcf8ea9f1ae197c9a9cd65f15210181d736b2d3da7d24857a899b7c335", 0xfffffc78) ioctl$PPPIOCBRIDGECHAN(r2, 0x40047435, &(0x7f0000000000)=0xf40) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x2, 0x1d, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x280000}, {}, {}, [@cb_func={0x18, 0x2, 0x4, 0x0, 0x8}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x239}}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x38, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000002c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffc}, [@call={0x85, 0x0, 0x0, 0xbc}]}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000b2a3d09d5c8876e488b73f612721642c1a0b632bc0a3e9835745de8a3b4cb8e5845fd1c0c0abcb93df48d95984d7c2eafa15f8aa21c0ca00"/71, @ANYRES16=r5, @ANYBLOB="010000000000000000000200000008000300", @ANYRESOCT, @ANYBLOB="0500180130000000050019010c0000000800260085160000"], 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) r7 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) fchdir(r7) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x159080, 0x0) r8 = inotify_init() r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r9, 0x1, 0x19, &(0x7f0000000140)='veth1_to_bridge\x00', 0x10) getsockopt$sock_buf(r9, 0x1, 0x19, &(0x7f0000000180)=""/255, &(0x7f0000000000)=0xff) inotify_add_watch(r8, &(0x7f0000000000)='.\x00', 0x400017e) open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) bind$inet(r3, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10) listen(r3, 0x0) 12.249031696s ago: executing program 33 (id=189): r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224"], 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$TCFLSH(r2, 0x400455c8, 0x1) syz_usb_disconnect(r0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000040)=0x3) close_range(r3, 0xffffffffffffffff, 0x0) 1.511142342s ago: executing program 4 (id=348): socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000002c0)='htcp\x00', 0x5) bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x7, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700) 1.420983461s ago: executing program 4 (id=350): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x402, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000793000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000040)="26260fae49000f1c70080fc7b90000008066baf80cb88cf2a689ef66bafc0cb037ee0f01dfdc7a0067670f01c381fa080000000f2c8423f47f00000f2045", 0x3e}], 0x1, 0x2a, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.35901427s ago: executing program 2 (id=351): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r0, 0x0, 0x0, 0x20010004, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x3, 0x8, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x28, r2, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}]}]}, 0x28}}, 0x10) 1.301775824s ago: executing program 2 (id=352): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0xfffffffd, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) write$binfmt_script(r0, &(0x7f0000000080), 0x76e5467) getpeername$inet6(r0, 0x0, &(0x7f0000000200)) 1.095599753s ago: executing program 4 (id=353): r0 = mq_open(&(0x7f0000001140)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\xe0\x9d\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xdf\x15\f]\x15\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb', 0x42, 0x0, 0x0) close(r0) mq_unlink(&(0x7f0000000000)='eth0\x00') 1.020060107s ago: executing program 4 (id=354): r0 = epoll_create(0x8002) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, 0x0) read$FUSE(r1, &(0x7f0000000380)={0x2020}, 0x2020) 1.010946373s ago: executing program 2 (id=355): openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) r0 = socket$qrtr(0x2a, 0x2, 0x0) r1 = syz_io_uring_setup(0x5132, &(0x7f0000000200)={0x0, 0x5eb2, 0x10100, 0x0, 0x36a}, &(0x7f00000002c0), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1af8, &(0x7f0000000340)={0x0, 0x22000001, 0x2, 0x40000000, 0xaa, 0x0, r1}, &(0x7f00000003c0)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r1, 0x48e9, 0x0, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x44004) connect$qrtr(r0, &(0x7f0000000080)={0x2a, 0xffffffff, 0xfffffffe}, 0xc) writev(r0, &(0x7f0000000380)=[{&(0x7f0000000100)='\x00', 0x1}], 0x1) 922.702883ms ago: executing program 2 (id=356): unshare(0x20000400) openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x2, 0x0) pselect6(0x40, &(0x7f0000000880)={0x6, 0xfbb6, 0x401, 0x40000100000000, 0x1, 0x0, 0xfffffffffffffff8, 0xd3}, 0x0, &(0x7f00000002c0)={0x3a, 0x80000003, 0x7fd, 0x63d2, 0x8, 0x7, 0x1, 0xf9d}, 0x0, 0x0) 919.934986ms ago: executing program 4 (id=357): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x37ae, &(0x7f00000003c0)={0x0, 0x800000, 0x0, 0x2, 0x22a}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) io_uring_register$IORING_UNREGISTER_PBUF_RING(r0, 0x17, &(0x7f0000000300)={0x0}, 0x1) 807.67995ms ago: executing program 4 (id=358): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='htcp\x00', 0x5) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x7, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700) 621.720514ms ago: executing program 0 (id=359): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x20000000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c0002800800014000000002080002400000001605000304000000000900010073797a30000000000900020073797a32"], 0x80}}, 0x0) 578.373097ms ago: executing program 0 (id=360): r0 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000340)='cgroup.stat\x00', 0x300, 0x0) read$FUSE(r2, 0x0, 0x0) 483.829302ms ago: executing program 0 (id=361): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000304000000000000000000007400", @ANYRES32, @ANYBLOB="0000000000000000240012800b000100627269646765000014000280060027000fff"], 0x44}}, 0x0) 482.047128ms ago: executing program 0 (id=362): socket$inet6(0xa, 0x80002, 0x0) syz_open_dev$sndpcmc(&(0x7f0000004240), 0x0, 0x0) socket$kcm(0x10, 0x2, 0x10) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$rxrpc(0x21, 0x2, 0xa) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16, @ANYBLOB="2d01620000000900509072fb60cb08000300"], 0x2c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r5, @ANYBLOB="ff830500000700ffffff", @ANYRES32=r2], 0x4}}, 0x0) sendfile(r4, r3, 0x0, 0x100000002) 392.899301ms ago: executing program 0 (id=363): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0xfffffffd, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) write$binfmt_script(r0, &(0x7f0000000080), 0x76e5467) getpeername$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @remote}, 0x0) 339.880333ms ago: executing program 0 (id=364): syz_open_dev$sndctrl(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000014da2108ab1204000000000000010902240001b30000040904410c17ff5d810009050f1f050440000009058303"], 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x4800) 346.234µs ago: executing program 2 (id=365): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) 0s ago: executing program 2 (id=366): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x749}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000040)={0x80000000}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.10.49' (ED25519) to the list of known hosts. [ 54.441591][ T5807] cgroup: Unknown subsys name 'net' [ 54.567766][ T5807] cgroup: Unknown subsys name 'cpuset' [ 54.576149][ T5807] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 55.875606][ T5807] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 60.703697][ T5821] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 60.734978][ T5831] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 60.744350][ T5831] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 60.753073][ T5833] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 60.762079][ T5833] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 60.771009][ T5833] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 60.778765][ T5833] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 60.787436][ T5833] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 60.800530][ T5834] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 60.805336][ T5833] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 60.808070][ T5834] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 60.823269][ T5834] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 60.831977][ T5834] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 60.838267][ T5837] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 60.839822][ T5834] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 60.846593][ T5833] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 60.861083][ T5837] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 60.869247][ T5833] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 60.877675][ T5833] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 60.884868][ T5834] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 60.884980][ T5837] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 60.892722][ T5839] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 60.900383][ T5833] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 60.906893][ T5834] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 60.917446][ T5837] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 60.923541][ T5834] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 60.927095][ T5840] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 60.934192][ T5834] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 60.942124][ T5840] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 60.966183][ T5834] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 61.384467][ T5822] chnl_net:caif_netlink_parms(): no params data found [ 61.451504][ T5823] chnl_net:caif_netlink_parms(): no params data found [ 61.464715][ T5818] chnl_net:caif_netlink_parms(): no params data found [ 61.554069][ T5830] chnl_net:caif_netlink_parms(): no params data found [ 61.577425][ T5817] chnl_net:caif_netlink_parms(): no params data found [ 61.696388][ T5822] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.704218][ T5822] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.711551][ T5822] bridge_slave_0: entered allmulticast mode [ 61.719033][ T5822] bridge_slave_0: entered promiscuous mode [ 61.729654][ T5822] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.736913][ T5822] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.744516][ T5822] bridge_slave_1: entered allmulticast mode [ 61.751306][ T5822] bridge_slave_1: entered promiscuous mode [ 61.758444][ T5823] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.766095][ T5823] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.773238][ T5823] bridge_slave_0: entered allmulticast mode [ 61.780032][ T5823] bridge_slave_0: entered promiscuous mode [ 61.789678][ T5818] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.796875][ T5818] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.804058][ T5818] bridge_slave_0: entered allmulticast mode [ 61.810573][ T5818] bridge_slave_0: entered promiscuous mode [ 61.832537][ T5823] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.839908][ T5823] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.847403][ T5823] bridge_slave_1: entered allmulticast mode [ 61.854185][ T5823] bridge_slave_1: entered promiscuous mode [ 61.875018][ T5818] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.882126][ T5818] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.889558][ T5818] bridge_slave_1: entered allmulticast mode [ 61.896191][ T5818] bridge_slave_1: entered promiscuous mode [ 61.955480][ T5818] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.976515][ T5822] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.988678][ T5822] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.014540][ T5818] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.056615][ T5823] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.072341][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.079995][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.087738][ T5830] bridge_slave_0: entered allmulticast mode [ 62.094707][ T5830] bridge_slave_0: entered promiscuous mode [ 62.101477][ T5817] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.108816][ T5817] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.116146][ T5817] bridge_slave_0: entered allmulticast mode [ 62.122726][ T5817] bridge_slave_0: entered promiscuous mode [ 62.132558][ T5822] team0: Port device team_slave_0 added [ 62.140933][ T5822] team0: Port device team_slave_1 added [ 62.148449][ T5823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.171953][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.179396][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.186732][ T5830] bridge_slave_1: entered allmulticast mode [ 62.193280][ T5830] bridge_slave_1: entered promiscuous mode [ 62.208270][ T5817] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.215616][ T5817] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.222758][ T5817] bridge_slave_1: entered allmulticast mode [ 62.229766][ T5817] bridge_slave_1: entered promiscuous mode [ 62.261183][ T5818] team0: Port device team_slave_0 added [ 62.277456][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.302516][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.310028][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.336487][ T5822] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.350992][ T5823] team0: Port device team_slave_0 added [ 62.359435][ T5823] team0: Port device team_slave_1 added [ 62.367073][ T5818] team0: Port device team_slave_1 added [ 62.382513][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.399849][ T5817] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.409836][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.416926][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.443601][ T5822] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.484585][ T5817] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.498470][ T5818] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.506156][ T5818] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.532248][ T5818] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.545021][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.551986][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.578012][ T5823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.590771][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.598382][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.624934][ T5823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.651787][ T5818] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.658824][ T5818] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.684824][ T5818] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.706792][ T5830] team0: Port device team_slave_0 added [ 62.730690][ T5830] team0: Port device team_slave_1 added [ 62.745387][ T5817] team0: Port device team_slave_0 added [ 62.764366][ T5822] hsr_slave_0: entered promiscuous mode [ 62.770615][ T5822] hsr_slave_1: entered promiscuous mode [ 62.804423][ T5818] hsr_slave_0: entered promiscuous mode [ 62.810852][ T5818] hsr_slave_1: entered promiscuous mode [ 62.817493][ T5818] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.825452][ T5818] Cannot create hsr debugfs directory [ 62.832896][ T5817] team0: Port device team_slave_1 added [ 62.854332][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.861302][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.887806][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.918609][ T5823] hsr_slave_0: entered promiscuous mode [ 62.925288][ T5823] hsr_slave_1: entered promiscuous mode [ 62.931745][ T5823] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.939422][ T5823] Cannot create hsr debugfs directory [ 62.955828][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.962796][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.989176][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.010236][ T5817] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.015009][ T54] Bluetooth: hci2: command tx timeout [ 63.017299][ T5817] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.022959][ T54] Bluetooth: hci3: command tx timeout [ 63.048592][ T5817] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.054013][ T5134] Bluetooth: hci4: command tx timeout [ 63.054250][ T5840] Bluetooth: hci0: command tx timeout [ 63.064810][ T5834] Bluetooth: hci1: command tx timeout [ 63.099786][ T5817] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.107077][ T5817] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.133339][ T5817] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.216428][ T5830] hsr_slave_0: entered promiscuous mode [ 63.222567][ T5830] hsr_slave_1: entered promiscuous mode [ 63.228981][ T5830] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.236693][ T5830] Cannot create hsr debugfs directory [ 63.342406][ T5817] hsr_slave_0: entered promiscuous mode [ 63.348608][ T5817] hsr_slave_1: entered promiscuous mode [ 63.357610][ T5817] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.365255][ T5817] Cannot create hsr debugfs directory [ 63.517215][ T5818] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 63.537560][ T5818] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 63.547495][ T5818] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 63.561584][ T5818] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 63.648289][ T5822] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 63.663693][ T5822] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 63.675186][ T5822] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 63.694286][ T5822] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 63.742551][ T5823] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 63.758352][ T5823] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 63.769659][ T5823] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 63.779061][ T5823] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 63.845846][ T5830] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 63.870220][ T5830] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 63.880733][ T5830] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 63.890142][ T5830] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 63.983793][ T5817] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 63.998332][ T5817] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 64.008610][ T5817] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 64.019347][ T5817] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 64.038745][ T5818] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.070850][ T5822] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.103101][ T5818] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.134093][ T1099] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.141383][ T1099] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.157638][ T5822] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.177383][ T1099] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.184519][ T1099] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.209199][ T5823] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.219269][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.226408][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.268641][ T33] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.275803][ T33] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.293067][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.325152][ T5823] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.357937][ T1099] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.365141][ T1099] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.382818][ T33] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.389970][ T33] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.412703][ T5830] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.439112][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.446280][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.476037][ T191] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.483139][ T191] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.507019][ T5817] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.552780][ T5817] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.577661][ T1099] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.584806][ T1099] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.652171][ T1099] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.659369][ T1099] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.737732][ T5817] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 64.749109][ T5817] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 64.992238][ T5818] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.021599][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.047342][ T5822] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.102394][ T5834] Bluetooth: hci1: command tx timeout [ 65.105815][ T5829] Bluetooth: hci0: command tx timeout [ 65.108184][ T5834] Bluetooth: hci3: command tx timeout [ 65.113181][ T5829] Bluetooth: hci2: command tx timeout [ 65.128995][ T5134] Bluetooth: hci4: command tx timeout [ 65.135918][ T5830] veth0_vlan: entered promiscuous mode [ 65.153364][ T5817] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.200153][ T5830] veth1_vlan: entered promiscuous mode [ 65.224951][ T5818] veth0_vlan: entered promiscuous mode [ 65.243473][ T5823] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.276736][ T5818] veth1_vlan: entered promiscuous mode [ 65.353361][ T5830] veth0_macvtap: entered promiscuous mode [ 65.371374][ T5830] veth1_macvtap: entered promiscuous mode [ 65.390963][ T5822] veth0_vlan: entered promiscuous mode [ 65.402918][ T5818] veth0_macvtap: entered promiscuous mode [ 65.418089][ T5818] veth1_macvtap: entered promiscuous mode [ 65.434929][ T5822] veth1_vlan: entered promiscuous mode [ 65.456522][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.470502][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.484644][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.496644][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.519872][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.532279][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.543516][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.555204][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.575570][ T5818] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.588449][ T5818] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.597785][ T5818] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.607240][ T5818] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.619775][ T5830] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.629311][ T5830] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.638833][ T5830] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.647694][ T5830] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.691414][ T5823] veth0_vlan: entered promiscuous mode [ 65.712199][ T5823] veth1_vlan: entered promiscuous mode [ 65.727851][ T5817] veth0_vlan: entered promiscuous mode [ 65.738631][ T5817] veth1_vlan: entered promiscuous mode [ 65.774353][ T5822] veth0_macvtap: entered promiscuous mode [ 65.785314][ T5822] veth1_macvtap: entered promiscuous mode [ 65.828703][ T5817] veth0_macvtap: entered promiscuous mode [ 65.868142][ T5823] veth0_macvtap: entered promiscuous mode [ 65.878585][ T5823] veth1_macvtap: entered promiscuous mode [ 65.889206][ T5817] veth1_macvtap: entered promiscuous mode [ 65.907953][ T5822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.918602][ T5822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.928972][ T5822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.939676][ T5822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.950789][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.985054][ T5822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.996367][ T5822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.006126][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.006180][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.022347][ T5822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.035589][ T5822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.046321][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.060849][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.072028][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.082449][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.093032][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.102906][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.113409][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.124718][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.142860][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.153465][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.168355][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.178927][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.188784][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.199334][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.210153][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.225218][ T5822] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.234190][ T5822] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.242912][ T5822] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.253450][ T5822] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.273065][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.281218][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.286576][ T5823] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.297831][ T5823] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.307803][ T5823] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.316576][ T5823] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.328695][ T5817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.341768][ T5817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.351817][ T5817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.362341][ T5817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.372336][ T5817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.384348][ T5817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.394263][ T5817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.404769][ T5817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.417628][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.429650][ T1099] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.438830][ T1099] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.450478][ T5817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.462970][ T5817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.473805][ T5817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.484527][ T5817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.494646][ T5817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.505337][ T5817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.515298][ T5817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.530485][ T5817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.542098][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.590053][ T5817] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.599180][ T5817] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.608229][ T5817] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.617126][ T5817] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.630329][ T3517] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.643339][ T3517] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.649338][ T5830] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 66.844236][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.852096][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.876254][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.906868][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.965224][ T2983] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.973091][ T2983] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.998183][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.013941][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.053381][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.063261][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.109962][ T5913] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 67.153698][ T1099] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.175580][ T5840] Bluetooth: hci0: command tx timeout [ 67.179669][ T5834] Bluetooth: hci1: command tx timeout [ 67.181696][ T5840] Bluetooth: hci2: command tx timeout [ 67.186781][ T5834] Bluetooth: hci4: command tx timeout [ 67.193000][ T5829] Bluetooth: hci3: command tx timeout [ 67.203318][ T1099] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.286491][ T5915] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 68.063007][ T5829] Bluetooth: hci1: unexpected event for opcode 0x2024 [ 68.172531][ T5949] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x3 [ 68.328480][ T5829] Bluetooth: hci2: Invalid handle: 0xaf27 > 0x0eff [ 68.725914][ T5964] Zero length message leads to an empty skb [ 68.742771][ T5965] input: syz0 as /devices/virtual/input/input5 [ 69.014138][ T5134] Bluetooth: hci1: Opcode 0x206a failed: -110 [ 69.184114][ T5985] syz.2.28 uses obsolete (PF_INET,SOCK_PACKET) [ 69.254492][ T5134] Bluetooth: hci3: command tx timeout [ 69.257573][ T5829] Bluetooth: hci4: command tx timeout [ 69.265515][ T5134] Bluetooth: hci2: command tx timeout [ 69.354330][ T25] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 69.555191][ T25] usb 4-1: Using ep0 maxpacket: 8 [ 69.582614][ T25] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 69.631181][ T25] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 69.648106][ T25] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 69.661223][ T25] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 69.677909][ T25] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 69.687493][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.941669][ T25] usb 4-1: GET_CAPABILITIES returned 0 [ 69.947635][ T25] usbtmc 4-1:16.0: can't read capabilities [ 69.970749][ T5981] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 69.992824][ T5981] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 70.032479][ T5981] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 70.068185][ T5981] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 70.081964][ T5981] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 70.092304][ T5981] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 70.107235][ T5981] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 70.115857][ T5981] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 70.128911][ T5981] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 70.159968][ T5981] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 70.177770][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 70.194647][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 70.203792][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 70.212919][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 70.222001][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 70.231060][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 70.240141][ C1] vkms_vblank_simulate: vblank timer overrun [ 70.247599][ T5981] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 70.254552][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 70.263653][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 70.272721][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 70.281780][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 70.290837][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 70.306998][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 70.316134][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 70.332485][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 70.341568][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 70.350654][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -2 [ 70.441504][ T974] usb 4-1: USB disconnect, device number 2 [ 70.493487][ T5981] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 70.520828][ T5981] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 70.552910][ T5981] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 70.753487][ T6023] Illegal XDP return value 4294967274 on prog (id 5) dev syz_tun, expect packet loss! [ 70.794330][ T6032] netlink: 32 bytes leftover after parsing attributes in process `syz.2.40'. [ 71.025489][ T6042] binder: 6039:6042 ioctl c0306201 0 returned -14 [ 71.075578][ T6042] binder: 6039:6042 ioctl 4018620d 0 returned -22 [ 71.367779][ T5834] Bluetooth: hci0: command 0x0c1a tx timeout [ 71.594792][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.163990][ T5834] Bluetooth: hci2: command 0x0c1a tx timeout [ 72.170335][ T5834] Bluetooth: hci1: command 0x0419 tx timeout [ 72.228010][ T5134] Bluetooth: hci3: command 0x0c1a tx timeout [ 72.444871][ T5134] Bluetooth: hci4: unexpected event for opcode 0x0c2d [ 72.703619][ T6086] warning: `syz.2.55' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 72.881939][ T6089] dccp_close: ABORT with 20 bytes unread [ 73.315364][ T5134] Bluetooth: hci3: unexpected event for opcode 0x200d [ 73.414764][ T5134] Bluetooth: hci0: command 0x0c1a tx timeout [ 73.605599][ T974] libceph: connect (1)[b::]:6789 error -101 [ 73.612137][ T974] libceph: mon0 (1)[b::]:6789 connect error [ 73.755173][ T25] libceph: connect (1)[b::]:6789 error -101 [ 73.761285][ T25] libceph: mon0 (1)[b::]:6789 connect error [ 73.915625][ T974] libceph: connect (1)[b::]:6789 error -101 [ 73.922340][ T974] libceph: mon0 (1)[b::]:6789 connect error [ 74.026274][ T52] libceph: connect (1)[b::]:6789 error -101 [ 74.032408][ T52] libceph: mon0 (1)[b::]:6789 connect error [ 74.214100][ T5134] Bluetooth: hci1: command 0x0419 tx timeout [ 74.220340][ T5834] Bluetooth: hci2: command 0x0c1a tx timeout [ 74.288989][ T5134] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 74.317280][ T6114] ceph: No mds server is up or the cluster is laggy [ 74.334665][ T6122] ceph: No mds server is up or the cluster is laggy [ 74.458938][ T974] libceph: connect (1)[b::]:6789 error -101 [ 74.466705][ T974] libceph: mon0 (1)[b::]:6789 connect error [ 74.804696][ T5834] Bluetooth: hci3: Malformed LE Event: 0x1b [ 75.504156][ T5834] Bluetooth: hci0: command 0x0c1a tx timeout [ 75.533981][ T52] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 75.704080][ T52] usb 4-1: Using ep0 maxpacket: 8 [ 75.726134][ T52] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 75.736036][ T52] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.762280][ T52] usb 4-1: config 0 descriptor?? [ 75.866845][ T6198] afs: Unknown parameter 'nyftX' [ 75.881598][ T5834] Bluetooth: hci0: Malformed Event: 0x13 [ 76.295183][ T5834] Bluetooth: hci1: command 0x0419 tx timeout [ 76.301257][ T5834] Bluetooth: hci2: command 0x0c1a tx timeout [ 76.476336][ T5834] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 76.485015][ T5834] Bluetooth: hci4: Injecting HCI hardware error event [ 76.625653][ T52] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 76.636479][ T52] asix 4-1:0.0: probe with driver asix failed with error -71 [ 76.659445][ T52] usb 4-1: USB disconnect, device number 3 [ 76.710058][ T977] cfg80211: failed to load regulatory.db [ 77.033994][ T974] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 77.194249][ T974] usb 5-1: Using ep0 maxpacket: 16 [ 77.221340][ T974] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 77.279162][ T974] usb 5-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 77.347312][ T974] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.404792][ T974] usb 5-1: config 0 descriptor?? [ 77.889666][ T974] hid-steam 0003:28DE:1102.0001: unknown main item tag 0x0 [ 77.899034][ T974] hid-steam 0003:28DE:1102.0001: unknown main item tag 0x0 [ 77.915676][ T974] hid-steam 0003:28DE:1102.0001: : USB HID v0.00 Device [HID 28de:1102] on usb-dummy_hcd.4-1/input0 [ 78.004442][ T974] hid-steam 0003:28DE:1102.0001: Steam Controller 'XXXXXXXXXX' connected [ 78.057319][ T974] input: Steam Controller as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:28DE:1102.0001/input/input6 [ 78.139680][ T974] hid-steam 0003:28DE:1102.0002: unknown main item tag 0x0 [ 78.176620][ T974] hid-steam 0003:28DE:1102.0002: unknown main item tag 0x0 [ 78.217640][ T974] hid-steam 0003:28DE:1102.0002: hidraw0: USB HID v0.00 Device [HID 28de:1102] on usb-dummy_hcd.4-1/input0 [ 78.269328][ T974] usb 5-1: USB disconnect, device number 2 [ 78.373997][ T5834] Bluetooth: hci1: command 0x0419 tx timeout [ 78.721743][ T974] hid-steam 0003:28DE:1102.0001: Steam Controller 'XXXXXXXXXX' disconnected [ 78.874890][ T5834] Bluetooth: hci0: Malformed LE Event: 0x1b [ 79.669620][ T6261] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 79.696162][ T6261] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 79.745128][ T6261] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 79.751082][ T6261] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 79.846842][ T6261] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 79.861081][ T6261] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 79.887804][ T6261] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 79.893802][ T6261] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 83.184280][ T6362] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.192776][ T6362] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.375727][ T6362] bridge0: entered allmulticast mode [ 83.430569][ T6362] bridge_slave_1: left allmulticast mode [ 83.514822][ T6362] bridge_slave_1: left promiscuous mode [ 83.564783][ T6362] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.684973][ T6362] bridge_slave_0: left allmulticast mode [ 83.720073][ T6362] bridge_slave_0: left promiscuous mode [ 83.770851][ T6362] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.914067][ T977] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 84.076971][ T977] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 84.123184][ T977] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 10 [ 84.185554][ T977] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 8704, setting to 64 [ 84.247594][ T977] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 65535, setting to 64 [ 84.330476][ T977] usb 5-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 84.380099][ T977] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.428079][ T977] usb 5-1: Product: syz [ 84.461708][ T977] usb 5-1: Manufacturer: syz [ 84.488675][ T977] usb 5-1: SerialNumber: syz [ 84.529892][ T977] usb 5-1: config 0 descriptor?? [ 84.981225][ T977] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 84.994859][ T977] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 85.016634][ T977] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 85.033450][ T977] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 85.059495][ T977] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 85.083225][ T977] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 85.104194][ T977] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 85.124644][ T977] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 85.132136][ T977] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 85.142375][ T977] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 85.151196][ T977] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 85.169923][ T977] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 85.187795][ T977] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 85.206825][ T977] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 85.228894][ T977] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 85.235354][ T977] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 85.261823][ T977] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 85.274056][ T977] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 85.292496][ T977] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 85.312748][ T977] input input7: Timeout waiting for response from device. [ 85.338937][ T977] usb 5-1: USB disconnect, device number 3 [ 85.705197][ T52] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 86.560179][ T52] usb 3-1: config index 0 descriptor too short (expected 12535, got 96) [ 86.585595][ T52] usb 3-1: config 55 has too many interfaces: 49, using maximum allowed: 32 [ 86.634548][ T52] usb 3-1: config 55 has an invalid descriptor of length 0, skipping remainder of the config [ 86.673959][ T52] usb 3-1: config 55 has 0 interfaces, different from the descriptor's value: 49 [ 86.695857][ T52] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 86.706735][ T52] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 86.730911][ T52] usb 3-1: Product: syz [ 86.754124][ T52] usb 3-1: Manufacturer: syz [ 86.997917][ T52] usb 3-1: USB disconnect, device number 2 [ 87.239551][ T6439] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 87.304018][ T977] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 87.465537][ T977] usb 5-1: config 0 has no interfaces? [ 87.473204][ T977] usb 5-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 87.483568][ T977] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 87.492160][ T977] usb 5-1: Product: syz [ 87.503931][ T977] usb 5-1: Manufacturer: syz [ 87.522635][ T977] usb 5-1: SerialNumber: syz [ 87.537488][ T977] usb 5-1: config 0 descriptor?? [ 88.066533][ T9] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 88.161727][ T974] usb 5-1: USB disconnect, device number 4 [ 88.304210][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 88.329404][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 88.347372][ T9] usb 2-1: config 0 has no interfaces? [ 88.371404][ T9] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 88.382107][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.400471][ T9] usb 2-1: config 0 descriptor?? [ 88.710088][ T52] usb 2-1: USB disconnect, device number 2 [ 88.797701][ T6468] syz.4.193 (6468) used greatest stack depth: 19248 bytes left [ 89.403053][ T29] audit: type=1326 audit(1733186143.159:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6483 comm="syz.4.200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b01b7ff19 code=0x7ffc0000 [ 89.426926][ T29] audit: type=1326 audit(1733186143.159:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6483 comm="syz.4.200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b01b7ff19 code=0x7ffc0000 [ 89.450161][ T29] audit: type=1326 audit(1733186143.179:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6483 comm="syz.4.200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7f8b01b7ff19 code=0x7ffc0000 [ 89.503988][ T29] audit: type=1326 audit(1733186143.179:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6483 comm="syz.4.200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b01b7ff19 code=0x7ffc0000 [ 89.549855][ T29] audit: type=1326 audit(1733186143.179:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6483 comm="syz.4.200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b01b7ff19 code=0x7ffc0000 [ 89.873311][ T6499] netlink: 'syz.2.203': attribute type 10 has an invalid length. [ 89.939976][ T6499] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 89.952241][ T974] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 90.074154][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 90.082929][ T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!! [ 90.091609][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 90.100111][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 90.108578][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 90.115856][ T974] usb 5-1: config index 0 descriptor too short (expected 5292, got 77) [ 90.117043][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 90.134616][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 90.146596][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 90.155281][ T974] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 90.169536][ T974] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 20 [ 90.197179][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 90.210443][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 90.298125][ T974] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 90.325611][ T974] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.364427][ T974] usb 5-1: Product: syz [ 90.368636][ T974] usb 5-1: Manufacturer: syz [ 90.373235][ T974] usb 5-1: SerialNumber: syz [ 90.420199][ T974] usb 5-1: config 0 descriptor?? [ 90.654012][ T977] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 90.809167][ T977] usb 1-1: config 0 interface 0 has no altsetting 0 [ 90.818744][ T977] usb 1-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 90.837065][ T977] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.860439][ T977] usb 1-1: config 0 descriptor?? [ 91.683835][ T977] video4linux radio48: keene_cmd_main failed (-71) [ 91.698887][ T977] radio-keene 1-1:0.0: V4L2 device registered as radio48 [ 91.708522][ T977] usb 1-1: USB disconnect, device number 2 [ 92.361137][ T6524] netlink: 68 bytes leftover after parsing attributes in process `syz.0.213'. [ 92.659565][ T9] usb 5-1: USB disconnect, device number 5 [ 92.827724][ T6541] loop9: detected capacity change from 0 to 7 [ 92.842048][ T6541] Dev loop9: unable to read RDB block 7 [ 92.848865][ T6541] loop9: unable to read partition table [ 92.855702][ T6541] loop9: partition table beyond EOD, truncated [ 92.861986][ T6541] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 92.993125][ T6545] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 93.034092][ T9] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 93.211680][ T6549] netlink: 2684 bytes leftover after parsing attributes in process `syz.2.225'. [ 93.223077][ T6549] netlink: del zone limit has 4 unknown bytes [ 93.231220][ T9] usb 5-1: config 0 has an invalid interface number: 52 but max is 0 [ 93.240412][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 93.252067][ T9] usb 5-1: config 0 has no interface number 0 [ 93.258658][ T9] usb 5-1: config 0 interface 52 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 93.271926][ T9] usb 5-1: config 0 interface 52 has no altsetting 0 [ 93.296845][ T9] usb 5-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 0.00 [ 93.306183][ T9] usb 5-1: New USB device strings: Mfr=0, Product=149, SerialNumber=35 [ 93.314924][ T9] usb 5-1: Product: syz [ 93.319122][ T9] usb 5-1: SerialNumber: syz [ 93.336073][ T9] usb 5-1: config 0 descriptor?? [ 93.589897][ T9] usb 5-1: Can not set alternate setting to 1, error: -71 [ 93.623949][ T9] synaptics_usb 5-1:0.52: probe with driver synaptics_usb failed with error -71 [ 93.659282][ T9] usb 5-1: USB disconnect, device number 6 [ 94.907493][ T6580] sctp: [Deprecated]: syz.0.238 (pid 6580) Use of struct sctp_assoc_value in delayed_ack socket option. [ 94.907493][ T6580] Use struct sctp_sack_info instead [ 95.138611][ T6576] kvm: emulating exchange as write [ 95.874870][ T5872] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 96.054031][ T5872] usb 5-1: Using ep0 maxpacket: 8 [ 96.071742][ T5872] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 96.082209][ T5872] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 96.107953][ T5872] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 96.129835][ T5872] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 96.149949][ T5872] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 96.330762][ T5872] usb 5-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 96.340020][ T5872] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 96.370407][ T5872] usb 5-1: Product: syz [ 96.374730][ T5872] usb 5-1: Manufacturer: syz [ 96.379356][ T5872] usb 5-1: SerialNumber: syz [ 96.386663][ T5872] usb 5-1: config 0 descriptor?? [ 96.609258][ T5872] radio-si470x 5-1:0.0: si470x_get_report: usb_control_msg returned -32 [ 96.628759][ T5872] radio-si470x 5-1:0.0: probe with driver radio-si470x failed with error -5 [ 96.862652][ T9] usb 5-1: USB disconnect, device number 7 [ 97.024074][ T5872] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 97.183969][ T5872] usb 3-1: Using ep0 maxpacket: 16 [ 97.196638][ T5872] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 97.206186][ T5872] usb 3-1: config 0 has no interface number 0 [ 97.215309][ T5872] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 97.225468][ T5872] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 97.235696][ T5872] usb 3-1: config 0 interface 41 has no altsetting 0 [ 97.256822][ T5872] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 97.269633][ T5872] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.282052][ T5872] usb 3-1: Product: syz [ 97.294509][ T5872] usb 3-1: Manufacturer: syz [ 97.299136][ T5872] usb 3-1: SerialNumber: syz [ 97.324528][ T5872] usb 3-1: config 0 descriptor?? [ 97.367115][ T6632] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 97.395067][ T6632] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 97.491818][ T6635] netlink: 2684 bytes leftover after parsing attributes in process `syz.0.261'. [ 97.509977][ T6635] netlink: del zone limit has 4 unknown bytes [ 97.683837][ T6632] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 97.692703][ T6632] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 98.094040][ T9] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 98.243985][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 98.250843][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 98.262659][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 98.277656][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 98.290642][ T9] usb 1-1: New USB device found, idVendor=0458, idProduct=5015, bcdDevice= 0.00 [ 98.299941][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.310673][ T9] usb 1-1: config 0 descriptor?? [ 98.319770][ T5872] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 98.781905][ T9] input: HID 0458:5015 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5015.0003/input/input8 [ 98.859152][ T9] input: HID 0458:5015 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5015.0003/input/input9 [ 98.875908][ T9] input: HID 0458:5015 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5015.0003/input/input10 [ 98.991237][ T9] kye 0003:0458:5015.0003: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5015] on usb-dummy_hcd.0-1/input0 [ 99.012290][ T9] usb 1-1: USB disconnect, device number 3 [ 99.589340][ T5872] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Error reading RX_CTL register:ffffffb9 [ 99.614495][ T5872] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0000:ffffffb9 [ 99.639995][ T5872] CoreChips 3-1:0.41: probe with driver CoreChips failed with error -71 [ 99.664140][ T5872] usb 3-1: USB disconnect, device number 3 [ 101.874429][ T977] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 102.044043][ T977] usb 5-1: Using ep0 maxpacket: 16 [ 102.058117][ T977] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 102.076396][ T977] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 102.086238][ T977] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 102.099214][ T977] usb 5-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 102.110246][ T977] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.120672][ T977] usb 5-1: config 0 descriptor?? [ 102.962343][ T977] hid-led 0003:27B8:01ED.0004: probe with driver hid-led failed with error -71 [ 102.990411][ T977] usb 5-1: USB disconnect, device number 8 [ 103.814105][ T9] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 103.963967][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 103.975180][ T9] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 103.992419][ T9] usb 3-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 104.003294][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.014868][ T9] usb 3-1: Product: syz [ 104.019207][ T9] usb 3-1: Manufacturer: syz [ 104.027051][ T9] usb 3-1: SerialNumber: syz [ 104.041442][ T9] usb 3-1: config 0 descriptor?? [ 104.056418][ T6724] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 104.067250][ T9] hub 3-1:0.0: bad descriptor, ignoring hub [ 104.073763][ T9] hub 3-1:0.0: probe with driver hub failed with error -5 [ 104.090812][ T9] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input11 [ 104.313293][ T9] usb 3-1: USB disconnect, device number 4 [ 104.319320][ C0] usbtouchscreen 3-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 104.782015][ T6740] process 'syz.4.303' launched './file0' with NULL argv: empty string added [ 104.909665][ T6744] program syz.2.304 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 105.189526][ T6754] sctp: [Deprecated]: syz.4.309 (pid 6754) Use of struct sctp_assoc_value in delayed_ack socket option. [ 105.189526][ T6754] Use struct sctp_sack_info instead [ 105.556780][ T5902] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 105.736486][ T5902] usb 1-1: Using ep0 maxpacket: 8 [ 105.775529][ T5902] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 105.804222][ T5902] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 105.815345][ T5902] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 105.834074][ T5902] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 105.857869][ T5902] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 105.873972][ T5902] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.102204][ T5902] usb 1-1: GET_CAPABILITIES returned 0 [ 106.113963][ T5902] usbtmc 1-1:16.0: can't read capabilities [ 106.334046][ T6759] usbtmc 1-1:16.0: send_request_dev_dep_msg_in returned -71 [ 106.351705][ T977] usb 1-1: USB disconnect, device number 4 [ 106.821841][ T6779] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 107.464519][ T6785] sctp: [Deprecated]: syz.0.319 (pid 6785) Use of struct sctp_assoc_value in delayed_ack socket option. [ 107.464519][ T6785] Use struct sctp_sack_info instead [ 109.039475][ T6801] netlink: 243 bytes leftover after parsing attributes in process `syz.4.324'. [ 109.054045][ T6801] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 109.404247][ T5872] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 109.579533][ T5872] usb 5-1: Using ep0 maxpacket: 16 [ 109.596105][ T5872] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 109.614019][ T5872] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 109.632480][ T5872] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 109.642810][ T5872] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.652309][ T5872] usb 5-1: Product: syz [ 109.657567][ T5872] usb 5-1: Manufacturer: syz [ 109.662326][ T5872] usb 5-1: SerialNumber: syz [ 109.676440][ T5872] usb 5-1: config 0 descriptor?? [ 109.685901][ T5872] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 109.695531][ T5872] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 110.174376][ T25] usb 3-1: new low-speed USB device number 5 using dummy_hcd [ 110.288236][ T5872] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 110.295283][ T5872] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 110.345846][ T25] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 110.360603][ T25] usb 3-1: config 0 has no interfaces? [ 110.366373][ T25] usb 3-1: New USB device found, idVendor=046d, idProduct=c534, bcdDevice= 0.00 [ 110.375808][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.387191][ T25] usb 3-1: config 0 descriptor?? [ 110.774087][ T52] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 110.814624][ T5902] usb 3-1: USB disconnect, device number 5 [ 110.905125][ T5872] em28xx 5-1:0.0: Unknown AC97 audio processor detected! [ 110.913426][ T5872] em28xx 5-1:0.0: couldn't setup AC97 register 2 [ 110.920567][ T5872] em28xx 5-1:0.0: couldn't setup AC97 register 4 [ 110.927921][ T5872] em28xx 5-1:0.0: couldn't setup AC97 register 6 [ 110.935629][ T5872] em28xx 5-1:0.0: couldn't setup AC97 register 54 [ 110.942231][ T52] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 110.950991][ T52] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 110.961345][ T52] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 110.971036][ T5872] em28xx 5-1:0.0: couldn't setup AC97 register 56 [ 110.977636][ T52] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 110.988712][ T52] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 111.001883][ T52] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 111.011082][ T52] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 111.019962][ T52] usb 1-1: Product: syz [ 111.024208][ T52] usb 1-1: Manufacturer: syz [ 111.032333][ T52] cdc_wdm 1-1:1.0: skipping garbage [ 111.037648][ T52] cdc_wdm 1-1:1.0: skipping garbage [ 111.044266][ T52] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 111.050250][ T52] cdc_wdm 1-1:1.0: Unknown control protocol [ 111.205216][ T5872] em28xx 5-1:0.0: couldn't setup AC97 register 2 [ 111.222803][ T5872] em28xx 5-1:0.0: couldn't setup AC97 register 4 [ 111.229517][ T5872] em28xx 5-1:0.0: couldn't setup AC97 register 6 [ 111.239775][ T5872] em28xx 5-1:0.0: couldn't setup AC97 register 54 [ 111.247715][ T5872] em28xx 5-1:0.0: couldn't setup AC97 register 56 [ 111.257597][ T5872] usb 5-1: USB disconnect, device number 9 [ 112.044067][ T5872] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 112.198049][ T5872] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 112.208438][ T5872] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 112.218636][ T5872] usb 5-1: config 4 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 112.230529][ T5872] usb 5-1: config 4 interface 0 altsetting 0 has an endpoint descriptor with address 0x56, changing to 0x6 [ 112.242330][ T5872] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 112.253132][ T5872] usb 5-1: config 4 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 0 [ 112.270381][ T5872] usb 5-1: New USB device found, idVendor=2294, idProduct=425a, bcdDevice=d1.41 [ 112.282088][ T5872] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.297023][ T5872] usb 5-1: Product: syz [ 112.301234][ T5872] usb 5-1: Manufacturer: syz [ 112.310167][ T5872] usb 5-1: SerialNumber: syz [ 112.321404][ T5872] usb 5-1: ucan: probing device on interface #0 [ 112.331520][ T5872] usb 5-1: ucan: invalid endpoint configuration [ 112.343373][ T5872] usb 5-1: ucan: probe failed; try to update the device firmware [ 112.538966][ T52] usb 5-1: USB disconnect, device number 10 [ 113.383377][ T6843] [U] OO/WEQŐ^4-L·6TR S:XTXZƽʫ$ [ 113.514439][ T5902] usb 1-1: USB disconnect, device number 5 [ 113.720983][ T6859] netlink: 1320 bytes leftover after parsing attributes in process `syz.0.347'. [ 115.054113][ T52] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 115.096995][ T5134] Bluetooth: hci4: hardware error 0x00 [ 115.102774][ T6261] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 115.102815][ T6261] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 115.106349][ T25] ------------[ cut here ]------------ [ 115.122843][ T25] WARNING: CPU: 1 PID: 25 at kernel/workqueue.c:2257 __queue_work+0xcd3/0xf50 [ 115.131818][ T25] Modules linked in: [ 115.135737][ T25] CPU: 1 UID: 0 PID: 25 Comm: kworker/1:0 Not tainted 6.13.0-rc1-syzkaller-00002-gcdd30ebb1b9f #0 [ 115.146322][ T25] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 115.156380][ T25] Workqueue: events l2cap_chan_timeout [ 115.161853][ T25] RIP: 0010:__queue_work+0xcd3/0xf50 [ 115.167143][ T25] Code: ff e8 91 ea 37 00 90 0f 0b 90 e9 b2 fe ff ff e8 83 ea 37 00 eb 13 e8 7c ea 37 00 eb 0c e8 75 ea 37 00 eb 05 e8 6e ea 37 00 90 <0f> 0b 90 48 83 c4 60 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc [ 115.186749][ T25] RSP: 0018:ffffc900001f78e8 EFLAGS: 00010093 [ 115.192814][ T25] RAX: ffffffff81678762 RBX: ffff88801ac94408 RCX: ffff88801d2f9e00 [ 115.200783][ T25] RDX: 0000000000000000 RSI: 0000000000200000 RDI: 0000000000000000 [ 115.208754][ T25] RBP: 0000000000000020 R08: ffffffff816a7489 R09: 0000000000000000 [ 115.216722][ T25] R10: ffffc900001f79c0 R11: fffff5200003ef39 R12: ffff88802795d000 [ 115.224687][ T25] R13: ffff88802795d1c0 R14: dffffc0000000000 R15: 0000000000000008 [ 115.232654][ T25] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 115.241579][ T25] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 115.248157][ T25] CR2: 00007f39eb4756c0 CR3: 000000006049a000 CR4: 00000000003526f0 [ 115.256124][ T25] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 115.264086][ T25] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 115.272049][ T25] Call Trace: [ 115.275325][ T25] [ 115.278254][ T25] ? __warn+0x165/0x4d0 [ 115.282407][ T25] ? __queue_work+0xcd3/0xf50 [ 115.287084][ T25] ? report_bug+0x2b3/0x500 [ 115.291584][ T25] ? __queue_work+0xcd3/0xf50 [ 115.296261][ T25] ? handle_bug+0x60/0x90 [ 115.300589][ T25] ? exc_invalid_op+0x1a/0x50 [ 115.305262][ T25] ? asm_exc_invalid_op+0x1a/0x20 [ 115.310289][ T25] ? kthread_data+0x49/0xd0 [ 115.314782][ T25] ? __queue_work+0xcd2/0xf50 [ 115.319450][ T25] ? __queue_work+0xcd3/0xf50 [ 115.324126][ T25] ? __queue_work+0xcd2/0xf50 [ 115.328798][ T25] ? __queue_delayed_work+0x17e/0x250 [ 115.334254][ T25] queue_delayed_work_on+0x1ca/0x390 [ 115.339533][ T25] ? __pfx_queue_delayed_work_on+0x10/0x10 [ 115.345328][ T25] ? do_raw_spin_unlock+0x13c/0x8b0 [ 115.350535][ T25] ? hci_conn_drop+0x152/0x280 [ 115.355302][ T25] l2cap_chan_del+0x291/0x5d0 [ 115.359978][ T25] l2cap_chan_close+0x38b/0x9f0 [ 115.364829][ T25] ? __pfx_l2cap_chan_close+0x10/0x10 [ 115.370199][ T25] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 115.376530][ T25] l2cap_chan_timeout+0x142/0x360 [ 115.381552][ T25] ? process_scheduled_works+0x976/0x1840 [ 115.387273][ T25] process_scheduled_works+0xa66/0x1840 [ 115.392835][ T25] ? __pfx_process_scheduled_works+0x10/0x10 [ 115.398818][ T25] ? assign_work+0x364/0x3d0 [ 115.403412][ T25] worker_thread+0x870/0xd30 [ 115.408022][ T25] ? __kthread_parkme+0x169/0x1d0 [ 115.413040][ T25] ? __pfx_worker_thread+0x10/0x10 [ 115.418144][ T25] kthread+0x2f0/0x390 [ 115.422240][ T25] ? __pfx_worker_thread+0x10/0x10 [ 115.427343][ T25] ? __pfx_kthread+0x10/0x10 [ 115.432023][ T25] ret_from_fork+0x4b/0x80 [ 115.436434][ T25] ? __pfx_kthread+0x10/0x10 [ 115.441019][ T25] ret_from_fork_asm+0x1a/0x30 [ 115.445794][ T25] [ 115.448821][ T25] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 115.456099][ T25] CPU: 1 UID: 0 PID: 25 Comm: kworker/1:0 Not tainted 6.13.0-rc1-syzkaller-00002-gcdd30ebb1b9f #0 [ 115.466678][ T25] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 115.476733][ T25] Workqueue: events l2cap_chan_timeout [ 115.482204][ T25] Call Trace: [ 115.485503][ T25] [ 115.488431][ T25] dump_stack_lvl+0x241/0x360 [ 115.493127][ T25] ? __pfx_dump_stack_lvl+0x10/0x10 [ 115.498324][ T25] ? __pfx__printk+0x10/0x10 [ 115.502910][ T25] ? _printk+0xd5/0x120 [ 115.507060][ T25] ? __init_begin+0x41000/0x41000 [ 115.512080][ T25] ? vscnprintf+0x5d/0x90 [ 115.516415][ T25] panic+0x349/0x880 [ 115.520306][ T25] ? __warn+0x174/0x4d0 [ 115.524459][ T25] ? __pfx_panic+0x10/0x10 [ 115.528874][ T25] ? ret_from_fork_asm+0x1a/0x30 [ 115.533807][ T25] __warn+0x344/0x4d0 [ 115.537780][ T25] ? __queue_work+0xcd3/0xf50 [ 115.542452][ T25] report_bug+0x2b3/0x500 [ 115.546785][ T25] ? __queue_work+0xcd3/0xf50 [ 115.551497][ T25] handle_bug+0x60/0x90 [ 115.555675][ T25] exc_invalid_op+0x1a/0x50 [ 115.560199][ T25] asm_exc_invalid_op+0x1a/0x20 [ 115.565056][ T25] RIP: 0010:__queue_work+0xcd3/0xf50 [ 115.570350][ T25] Code: ff e8 91 ea 37 00 90 0f 0b 90 e9 b2 fe ff ff e8 83 ea 37 00 eb 13 e8 7c ea 37 00 eb 0c e8 75 ea 37 00 eb 05 e8 6e ea 37 00 90 <0f> 0b 90 48 83 c4 60 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc [ 115.589960][ T25] RSP: 0018:ffffc900001f78e8 EFLAGS: 00010093 [ 115.596041][ T25] RAX: ffffffff81678762 RBX: ffff88801ac94408 RCX: ffff88801d2f9e00 [ 115.604032][ T25] RDX: 0000000000000000 RSI: 0000000000200000 RDI: 0000000000000000 [ 115.612110][ T25] RBP: 0000000000000020 R08: ffffffff816a7489 R09: 0000000000000000 [ 115.620096][ T25] R10: ffffc900001f79c0 R11: fffff5200003ef39 R12: ffff88802795d000 [ 115.628082][ T25] R13: ffff88802795d1c0 R14: dffffc0000000000 R15: 0000000000000008 [ 115.636077][ T25] ? kthread_data+0x49/0xd0 [ 115.640597][ T25] ? __queue_work+0xcd2/0xf50 [ 115.645292][ T25] ? __queue_work+0xcd2/0xf50 [ 115.649992][ T25] ? __queue_delayed_work+0x17e/0x250 [ 115.655373][ T25] queue_delayed_work_on+0x1ca/0x390 [ 115.660662][ T25] ? __pfx_queue_delayed_work_on+0x10/0x10 [ 115.666469][ T25] ? do_raw_spin_unlock+0x13c/0x8b0 [ 115.671693][ T25] ? hci_conn_drop+0x152/0x280 [ 115.676473][ T25] l2cap_chan_del+0x291/0x5d0 [ 115.681164][ T25] l2cap_chan_close+0x38b/0x9f0 [ 115.686023][ T25] ? __pfx_l2cap_chan_close+0x10/0x10 [ 115.691400][ T25] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 115.697731][ T25] l2cap_chan_timeout+0x142/0x360 [ 115.702756][ T25] ? process_scheduled_works+0x976/0x1840 [ 115.708478][ T25] process_scheduled_works+0xa66/0x1840 [ 115.714052][ T25] ? __pfx_process_scheduled_works+0x10/0x10 [ 115.720043][ T25] ? assign_work+0x364/0x3d0 [ 115.724636][ T25] worker_thread+0x870/0xd30 [ 115.729244][ T25] ? __kthread_parkme+0x169/0x1d0 [ 115.734298][ T25] ? __pfx_worker_thread+0x10/0x10 [ 115.739431][ T25] kthread+0x2f0/0x390 [ 115.743529][ T25] ? __pfx_worker_thread+0x10/0x10 [ 115.748648][ T25] ? __pfx_kthread+0x10/0x10 [ 115.753238][ T25] ret_from_fork+0x4b/0x80 [ 115.757656][ T25] ? __pfx_kthread+0x10/0x10 [ 115.762247][ T25] ret_from_fork_asm+0x1a/0x30 [ 115.767029][ T25] [ 115.770193][ T25] Kernel Offset: disabled [ 115.774569][ T25] Rebooting in 86400 seconds..