last executing test programs: 23.997610386s ago: executing program 2 (id=595): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x0, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000480)=ANY=[@ANYRES32=r0, @ANYBLOB="0575a62346b63cdb033a09c011b36115400fea6fac26b742adc721c36ff53332cff444b3e29fbe5b5d1194aac4c016ac5cc888c48fa067082cd6311ae12f752f7b2dd0315067f489ee604ae03643755b41193fb1a140f98c8b16ee1584f0c665b100b1f378733f0b5b41c8135bee1f7a7e7a445af9daa70df08dce587386a1547aa1", @ANYBLOB="0000000000000000b7080000200000007b8af8ff00000000bfa20000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r4}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = socket$inet6(0xa, 0x80803, 0x87) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0003}]}) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c00000068000301000000ef0000000000000000000000000600030000000000080001000000000024000200020000000000000000000000000000000100000000000000fc"], 0x4c}}, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)={{'fd', 0x3d, r7}, 0x2c, {'rootmode', 0x3d, 0x8000}}) write$FUSE_INIT(r7, &(0x7f0000001200)={0x50, 0x0, 0x0, {0x7, 0x27, 0x0, 0x500000}}, 0x50) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='system.posix_acl_access\x00', 0x0, 0x0) 23.970643395s ago: executing program 0 (id=596): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) 23.681002753s ago: executing program 0 (id=598): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) close(r3) 21.08169532s ago: executing program 2 (id=601): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = memfd_create(&(0x7f0000000540)='[\v\xdbX\x91[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8\xd3\xcd\xfd\xbdnC\x17\xe1\x87\xd4\x84\xd6\xb4,w\xa1\x0eQ0x0) timer_settime(r2, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 19.332321348s ago: executing program 0 (id=613): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a54000000060a0b040000000000000000020000002800048024000180090001006d6574610000000014000280080003400000001008000240000000030900010073797a30000000000900020073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 17.920405756s ago: executing program 0 (id=625): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) syz_emit_ethernet(0xa3, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)={0x3c, r4, 0x1, 0x0, 0x0, {0x2c}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0xfffffffc}]}, 0x3c}}, 0x0) 11.894517443s ago: executing program 1 (id=640): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000002c0)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)={0x74, r2, 0x5, 0x70bd2a, 0x25dfdbfd, {}, [@WGDEVICE_A_PEERS={0x58, 0x8, 0x0, 0x1, [{0x54, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x2c, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x5, 0x21, 0x3}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}]}]}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r3}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000}, 0x40) 11.719871587s ago: executing program 4 (id=642): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) close(r0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x12, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r1, 0x5, 0x0, 0x0, @void, @value}, 0x10) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r2}, &(0x7f0000000500), &(0x7f0000000540)=r1}, 0x20) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r3}, &(0x7f0000000100), &(0x7f0000000180)=r0}, 0x20) close(r0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000380)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r4}, &(0x7f0000000140), &(0x7f0000000280)=r0}, 0x20) 11.620887434s ago: executing program 4 (id=644): socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) mkdirat(0xffffffffffffff9c, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0xffffff85}}, [], {{0x6, 0x1, 0x5, 0x8}, {0x6, 0x0, 0x5, 0x9}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000003c0)={@ifindex, 0xffffffffffffffff, 0x1e, 0x20, 0x0, @void, @void, @void, @value}, 0x20) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x4c}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) 11.408182815s ago: executing program 1 (id=645): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000001580)='ns/uts\x00') socket$inet6_sctp(0xa, 0x801, 0x84) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f0000000080)=[{}], 0x1) ioctl$NS_GET_OWNER_UID(r3, 0x8004b708, 0x0) 9.465533179s ago: executing program 4 (id=651): socket$packet(0x11, 0x2, 0x300) socket$l2tp6(0xa, 0x2, 0x73) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000003040)={@val={0x2f3a, 0x800}, @val={0x0, 0x3, 0x0, 0x1}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x89, 0x0, @rand_addr, @multicast2=0xe0000001}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}, 0x36) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) 9.169032007s ago: executing program 3 (id=653): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000580)="6700000011008188040f56ecdb4cb9cca7480ef436000000e3bd6efb440009000e000a0010000000ba80010000005a8c3774fa0af3dc59a933c1e7a6d3361d83b20000319cdf5656826edaaa11032701c61ec666d482078ccebcb9a4f187f7a4e98f09cdc2649f", 0x67}], 0x1}, 0x0) close(0xffffffffffffffff) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r1, 0x18000000000002a0, 0xe40, 0x0, &(0x7f00000002c0)="f6ea090003000060009ba538a44cc2", 0x0, 0x2000000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 8.953175103s ago: executing program 4 (id=654): bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x20004, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 8.888531019s ago: executing program 1 (id=655): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fdf71f007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180800000000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x1) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x7, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) r6 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r6, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r7}, 0x18) r8 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r8, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x47}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) close(r6) r9 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000d379)={&(0x7f0000000200)={0x18, 0x14, 0x301, 0x0, 0x0, {0x1e}, [@generic="c1"]}, 0x18}}, 0x0) 8.725043522s ago: executing program 4 (id=656): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) syz_clone3(&(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mmap(&(0x7f00005f8000/0x2000)=nil, 0x2000, 0xb, 0x4008032, 0xffffffffffffffff, 0x81519000) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x20004808) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 8.374230251s ago: executing program 3 (id=657): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xca}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000003c40)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000140)="03", 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000003e40)={0x0, 0x0, 0x8001}, 0x8) 8.126127495s ago: executing program 4 (id=658): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000940)={0x0, 0x0, 0x0, &(0x7f0000002600)=""/4096, 0x0}) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r4 = socket$unix(0x1, 0x1, 0x0) close(r4) r5 = syz_io_uring_setup(0x6908, &(0x7f0000000280)={0x0, 0x0, 0x10100}, &(0x7f0000000180), &(0x7f0000000100)=0x0) syz_io_uring_setup(0x1b3f, &(0x7f0000000380), &(0x7f0000000040)=0x0, &(0x7f0000000240)) syz_io_uring_submit(r7, r6, 0x0) io_uring_enter(r5, 0x184c, 0x0, 0x0, 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc0445624, &(0x7f00000001c0)={0x9, 0x0, @value=0x9}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000200)={0x1, 0x1, 0x0, &(0x7f0000001600)=""/4096, &(0x7f00000001c0)=""/46}) r8 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000000)=0xffffffff) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000080)={0x1, r8}) 7.31307753s ago: executing program 3 (id=659): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x20, 0x6, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x400}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x68}}, 0x0) 7.113199213s ago: executing program 3 (id=660): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000740)={{0x12, 0x1, 0x0, 0xed, 0x3e, 0xc9, 0x8, 0xccd, 0xb3, 0x2dee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xb0, 0x87, 0x1d}}]}}]}}, 0x0) ioctl$EVIOCRMFF(r0, 0x550c, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000d00)={0x44, &(0x7f0000000bc0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) 6.130675027s ago: executing program 1 (id=661): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000300)={0x0, 0x200000, 0x4, 0x1000000}, &(0x7f0000000240)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) socket$nl_route(0x10, 0x3, 0x0) io_uring_enter(r2, 0x2def, 0x4000, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) r5 = socket$inet6(0xa, 0x1, 0x84) add_key(&(0x7f0000000000)='pkcs7_test\x00', 0x0, &(0x7f00000021c0)="305c0607e182087051667557c7d7982b8f57fb20a3adc9e3baa292ce8f0a861e6417acfc8648ad1b86400393d502b0cd490635d54cdf5bd0461690982b236949ab5e000000808ce41d86b9b949004fd8fe45b91e8fe7ec7c49750a1b0ade", 0x5e, 0xfffffffffffffffe) bind$inet6(r5, &(0x7f0000ed3fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) shutdown(r5, 0x0) setsockopt$sock_linger(r5, 0x1, 0xd, &(0x7f0000000040)={0x1, 0xffffffff}, 0x8) sendto$inet6(r5, &(0x7f0000000100)="bc", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f0000000140)='b', 0x1, 0x48045, 0x0, 0x0) close(r5) r6 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x1c, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0) 5.573248865s ago: executing program 2 (id=604): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, r1, 0x1, 0x0, 0x40, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}]}, 0x1c}}, 0x0) sendmsg$FOU_CMD_DEL(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r1, 0x1}, 0x14}}, 0x0) 5.316916572s ago: executing program 2 (id=662): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000100)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x3, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x10, 0x4e26, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x200, 0x0, 0x0, {[@mss={0x2, 0x4, 0xa005}]}}}}}}}, 0x0) 4.988483826s ago: executing program 2 (id=663): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x54) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, 0x0, 0x0) openat$snapshot(0xffffff9c, 0x0, 0x185480, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f00000001c0)={&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, &(0x7f00000005c0)={0x48}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=@newlink={0x20, 0x10, 0x3, 0xffffffff, 0x0, {0x0, 0x0, 0x0, r3, 0x410}}, 0x20}, 0x1, 0x2}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000003800)=@delchain={0x1fb4, 0x65, 0x0, 0x0, 0x0, {}, [@TCA_CHAIN={0x8}, @TCA_RATE={0x6, 0x5, {0x9d}}, @filter_kind_options=@f_fw={{0x7}, {0x1f78, 0x2, [@TCA_FW_CLASSID={0x8}, @TCA_FW_INDEV={0x14, 0x3, 'veth0_to_bond\x00'}, @TCA_FW_ACT={0x4}, @TCA_FW_CLASSID={0x8}, @TCA_FW_CLASSID={0x8}, @TCA_FW_ACT={0x1f44, 0x4, [@m_csum={0xfffffffffffffe67, 0x3, 0x0, 0x0, {{0x9}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x6, 0x8, 0x7, 0x2, 0x7f}, 0x24}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x80, 0x9, 0x20000000, 0x2, 0x8000}, 0x49}}]}, {0xd1, 0x6, "4e37bf93f541328a7dbd55869c54496390ebb171e9e0be181339735d3cb7575ab49043473f16fd84d4382d16e074e67ef77932fdfcb8a0100c5704c33224eb63bfa1e1b9807b129cf19f6edf9469efdd6a679a5f1056e939ff3ca30e0a4f2e8866a98411789b86b86c903dece1cd629d2cb72cc76e4f7a16749b0e7443186ba8b8e44e6992c95bd1a0c281f18afe1fa2f4bb9396e3511ae284d1bd6b5f5e8054cc712413da9ef343daa46be9061aae21d35b9a45f92d036b811d86a52cbcec2e201190b976ea2d4e2e6eb1d179"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_pedit={0x1e08, 0x1d, 0x0, 0x0, {{0xa}, {0x1dd0, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x15c, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}]}, {0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}]}, {0x54, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x44dd4346835a870e}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}]}, {0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x4c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}]}, {0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}]}]}, @TCA_PEDIT_PARMS={0xe38, 0x2, {{{0x6, 0x7, 0x5, 0x8000, 0x8}, 0x8, 0x2, [{0x8001, 0x1, 0x1, 0x8001, 0x5, 0x800}]}, [{0xc1b0, 0x0, 0x0, 0x7fff, 0x2eab, 0x7}, {0x0, 0x0, 0x228060ed, 0x10be, 0xfffffff8, 0xf}, {0x8001, 0x1, 0x5, 0xb5, 0x7fff, 0x2}, {0x1, 0x9, 0x2, 0x8ac, 0xede2, 0xffffffe6}, {0x6, 0xd2, 0x9, 0x800, 0x1, 0x80}, {0xa, 0x1, 0x8001, 0x4, 0x5, 0xe}, {0x6, 0x7, 0xfffffff7, 0x7, 0x200, 0x5}, {0x7, 0x7, 0x2, 0x1, 0xfffffffa, 0x3ff}, {0xffff8001, 0x80000001, 0x2, 0x2, 0x800, 0x5}, {0x10, 0xfffffffd, 0x0, 0x3ff, 0x2, 0xdd}, {0x4, 0x6, 0x0, 0x7, 0x6, 0xff}, {0x6, 0x9, 0x39ca, 0x80000000, 0x80, 0x1000}, {0x2, 0x9, 0x7, 0xc, 0x5, 0x1}, {0xfffffffa, 0x7ff, 0x81, 0xc06a, 0x0, 0x7}, {0x1, 0x7fff, 0x2, 0x60, 0x1ff, 0xb}, {0x10, 0x7, 0x7f, 0x5be, 0x5, 0x4}, {0x0, 0x8ad1, 0xa9, 0xdc, 0x5, 0x40}, {0x1, 0x670d, 0x180, 0x7, 0x2, 0x2}, {0x1, 0x2, 0x1, 0x101, 0x0, 0x1000}, {0x101, 0xa45e, 0x0, 0x1, 0x800}, {0xfffffff8, 0xbf0, 0x8000, 0x1729, 0x7, 0x401}, {0x72700, 0x5, 0x41, 0x2, 0x3, 0x8000}, {0x0, 0x6, 0x1, 0x1, 0xfffffff8, 0x7}, {0x4, 0xfffffffb, 0x2, 0x401, 0x17e, 0x2}, {0x5, 0x3, 0x9, 0x7fffffff, 0x5, 0x9}, {0x3, 0x2, 0xfffffbff, 0x0, 0x7e6, 0x8}, {0x53, 0x3, 0x4, 0x71e, 0xfffffffd, 0xc}, {0x6, 0x2, 0x8, 0xfffffff7, 0x8000, 0x7fff}, {0x10, 0xfffff543, 0x1, 0x7, 0x9, 0x5}, {0x9, 0x9, 0x5, 0x2, 0x1}, {0xffffff6b, 0x7fffffff, 0x4800, 0x6, 0x9, 0x8bc}, {0x5, 0x2, 0x100, 0x4, 0xffff, 0x5}, {0x6, 0x0, 0xb, 0x26, 0xf, 0x4}, {0x3, 0x401, 0x5, 0xffff, 0x3}, {0x4, 0x80, 0x9, 0x8000, 0x6, 0x7fff}, {0x1, 0x0, 0x0, 0x555, 0x6, 0xfffffff1}, {0x9243, 0x2, 0x9, 0x8, 0x6, 0x50d}, {0x468, 0x5, 0x7fffffff, 0x0, 0x61cf6909, 0x8}, {0x9, 0x7, 0x1, 0x9, 0x7, 0x18db6a04}, {0xfff, 0x0, 0x54, 0x5, 0x343, 0x7}, {0xfb3, 0x2, 0x9e8, 0x8, 0xff, 0x7}, {0x0, 0x0, 0x80000000, 0x4, 0x9, 0x2}, {0x981d, 0x7fffffff, 0x8, 0x8, 0x9, 0xf}, {0xc, 0x4, 0x4, 0x1, 0x1, 0x3fda}, {0x7, 0x9ae, 0x0, 0x10, 0x6, 0x6}, {0x6, 0x9, 0x6, 0x1ff, 0xf, 0x7ff}, {0x7, 0x2, 0x8000, 0x6, 0x9, 0x4}, {0x1b3, 0x6906, 0x1d424e33, 0x9, 0x7, 0x1}, {0xffffffff, 0x4, 0xf, 0xffff0001, 0x4, 0xffffffff}, {0x84, 0x0, 0xc93, 0x9, 0x1, 0x20000000}, {0x8, 0x7fffffff, 0x0, 0x6, 0x2}, {0x81, 0xe0, 0x3, 0x1, 0x8, 0x5}, {0x8000, 0x2, 0x2, 0x3, 0x8, 0x5336efc4}, {0x0, 0x7, 0x4, 0x8, 0xffffffff, 0xbee}, {0x6, 0x6, 0x9, 0x6, 0x1000, 0x1}, {0x1034, 0x1ff, 0x3, 0xa9f5, 0x7, 0x3}, {0x1, 0xfffffbee, 0x4, 0x2, 0xb237, 0x4}, {0x9b46, 0x3, 0x6, 0x800, 0x401, 0x1}, {0x80000000, 0x7, 0x10000, 0x5, 0xffffffff, 0x6851}, {0x7fff, 0x64, 0x9, 0xffff4dcd, 0x0, 0x7c}, {0x1, 0x9, 0x1ff, 0x1, 0x2, 0x823}, {0x3, 0x7, 0xfffffffc, 0x7, 0x8, 0x8}, {0x8, 0x0, 0x4, 0x1, 0x7ff, 0x7}, {0x5088, 0xb, 0x1, 0x1, 0x8, 0x200}, {0x568, 0x2, 0x6, 0x8, 0x8, 0xfffffffe}, {0x7, 0x6, 0xc, 0x5, 0x7, 0x8}, {0xff, 0x9, 0x10000, 0x8, 0x8001, 0x1}, {0x1, 0x0, 0xafc, 0x3, 0x7b2}, {0x7, 0x8, 0x3, 0x4, 0xf, 0xf}, {0x80000, 0x5, 0x28dd8476, 0xeb7, 0x8, 0x3}, {0x1, 0x5, 0x5, 0x98, 0x0, 0x9}, {0x7, 0x7, 0x0, 0x1000, 0x32, 0x561bc55f}, {0x8d, 0x7, 0x6, 0x75cfe5ac, 0x3, 0xfffffffa}, {0x8001, 0x94, 0xc, 0xbe, 0x6, 0xf1e}, {0xc, 0x10001, 0x786, 0x0, 0x4f}, {0xfffffffb, 0xfa, 0x3, 0x1, 0x5, 0x6}, {0x7, 0x3b, 0x9, 0xa668, 0x450c000, 0x6}, {0x7, 0x401, 0x5, 0xfffffff9, 0x101, 0x4}, {0xe, 0x0, 0x94f, 0x7ff, 0xff, 0x8}, {0xf4, 0xfffffffe, 0xffffff07, 0x9, 0x7, 0x5}, {0x40, 0x10001, 0x3ff, 0x100, 0xfffffff0, 0x5}, {0x80000000, 0x9, 0x3, 0x7, 0x7, 0x8}, {0x22, 0x8, 0x7, 0x3, 0x1, 0x7}, {0x69, 0x4, 0xb14, 0x21, 0x7, 0xd}, {0x1, 0x9, 0x20000000, 0x401, 0x100, 0x3}, {0x0, 0x100, 0x9c45, 0x1a, 0x1, 0x8}, {0x9, 0x2, 0x2, 0x4dbe, 0x10001, 0xb5}, {0x945, 0xbf3, 0x6, 0x4, 0xd4, 0x3}, {0x3, 0x4, 0x5, 0x3, 0x54, 0x6}, {0x8001, 0xfffffff8, 0x648, 0xd37, 0x1, 0x7ff}, {0x100, 0x67a, 0x2, 0x6, 0xb, 0x2}, {0x7, 0x5, 0x80000000, 0x90000, 0x5aed, 0x841}, {0x72d, 0x8, 0xa2b, 0x7, 0x2, 0x3}, {0x80000000, 0x48f04c2b, 0x3, 0x6, 0x6, 0x4}, {0x6, 0x0, 0x9, 0x10000, 0x80, 0x7}, {0x8, 0x400000, 0x7, 0x8, 0x8, 0x94b}, {0x36, 0x9, 0x3, 0x27, 0x1c, 0x3}, {0x7fff, 0x1, 0x200, 0x7, 0x1000, 0x4}, {0x6, 0xb25, 0x2, 0x10, 0x7, 0x200}, {0x392e, 0x705, 0x2, 0x8, 0x2, 0xffff}, {0x5, 0x4, 0x8, 0xffffff80, 0x8, 0xb}, {0x4, 0x0, 0x7, 0x1836, 0x8, 0x7}, {0x4, 0xbe, 0x1, 0x4, 0x2400, 0x3}, {0x6, 0x6, 0xafbf, 0x8, 0x6, 0x5}, {0x7, 0x1, 0x6, 0xf, 0x7, 0x32c}, {0xffffffff, 0x1, 0x2, 0x5, 0xfffffd56, 0x9b6a}, {0xb8d5, 0xe9800000, 0x7, 0x4, 0x10000, 0xfffffffb}, {0x9e61, 0x1, 0x0, 0x3, 0x81, 0x9}, {0x22a, 0xa, 0xffff, 0x4, 0x0, 0xda}, {0x51, 0xe0, 0xffff, 0xfffffeee, 0x8, 0xae9}, {0x8a3, 0x7, 0x0, 0x80000000, 0x9, 0x6}, {0x3b61, 0x3, 0xd8a5, 0x5, 0xffffffff}, {0x2ba, 0x19e, 0x10, 0x8e0, 0x2, 0x275}, {0x8, 0x7fffffff, 0x6, 0xb, 0x6, 0x1}, {0xe, 0x4, 0x0, 0xd, 0x4, 0x3d5d}, {0x5, 0x6, 0x80000001, 0x8, 0x947, 0xb}, {0x2, 0x3ff, 0x2, 0x43, 0xa, 0x7}, {0x1, 0x6, 0x1ae, 0xcf7, 0x2, 0xa3}, {0xfffffffb, 0x10001, 0xffff, 0x4, 0x4, 0xea}, {0x27, 0x80000000, 0x0, 0x401, 0x9068, 0x9}, {0x2f4e, 0x2, 0x4, 0x10001, 0x80b, 0x401}, {0x4, 0x2, 0xba3, 0x3, 0x1}, {0xc, 0x10000, 0x6, 0x9d22, 0x6, 0x9}, {0x7, 0xfffffff4, 0xea8, 0x5, 0x4, 0x20}, {0x0, 0x5, 0x34, 0x2, 0x1, 0x8001}, {0x987, 0x3, 0x6, 0x5, 0x793, 0x9}, {0x5, 0x5, 0x7fffffff, 0x1, 0x4dd2797f, 0x7ff}, {0x80000001, 0x6, 0x4405, 0x6, 0x9}], [{0x1, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x5}, {0x2}, {0x2}, {0x1}, {0x0, 0x1}, {0x5}, {0x0, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x2}, {0x1}, {0x2, 0x1}, {0x2f20d1f671a02706}, {0x4}, {0x5}, {}, {0x0, 0x1}, {0x5}, {0x5, 0x1}, {0x4}, {0x2}, {0x3}, {0x4, 0x1}, {}, {}, {0x4, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {}, {0x2, 0x1}, {}, {0x1, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {}, {0x3}, {0x3, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x3}, {0x3}, {0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x3}, {0x4, 0x1}, {0x5}, {0x3, 0x1}, {0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x3}, {0x1}, {0x2}, {0x2}, {0x5, 0x1}, {0x1}, {0x0, 0xe0ea05e844f18fd8}, {0x4, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x3}, {0x5, 0x1}, {0x2}, {0x1}, {0x3}, {0x4}, {0x5, 0x1}, {0x4, 0x1}, {}, {0x0, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x1}, {0x4, 0x1}, {}, {0x2, 0x1}, {0x3}, {0x3, 0x1}, {0x776479b985cdcd26, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x2}, {0x2}, {0x0, 0x1}, {0x1, 0x1}, {0x1}, {}, {0x2, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0xb830dc2ea0e00d61}, {0x2, 0x1}, {}, {0x5}, {0x2, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x1}, {0x4}, {0x5, 0x1}], 0x1}}, @TCA_PEDIT_PARMS_EX={0xe38, 0x4, {{{0xfff, 0x9, 0x10000002, 0x5, 0x6}, 0x4, 0x3f, [{0x3, 0x0, 0x10000, 0x9, 0x9, 0x180}]}, [{0xfffffffb, 0x4, 0x10000, 0x7, 0xffffffff, 0x830}, {0x4, 0x6, 0xfffffbff, 0x7, 0x3}, {0x0, 0x1723, 0xbb, 0x6, 0x9, 0x7fff}, {0xfffffff7, 0x1, 0x1, 0x4, 0x10000, 0x2}, {0xfff, 0x1ff, 0x7, 0x6, 0x68, 0x6}, {0xf, 0x100, 0x7ddf, 0x6b, 0xf, 0x63}, {0xffffffff, 0x4, 0x9, 0x8001, 0x9, 0x57b6}, {0x7, 0x5, 0x7ff, 0x6, 0x9, 0x9b0}, {0x0, 0xff, 0xac, 0xb4, 0xa6, 0x10001}, {0x5, 0x2, 0x7, 0x9, 0x0, 0xcc}, {0x1, 0x80, 0x7f, 0x80000000, 0x4, 0x8}, {0x11e, 0xe07, 0x10000, 0xffffffff, 0x3, 0x7}, {0x8, 0x6, 0x7, 0x0, 0x0, 0x7}, {0x5, 0xffffffff, 0x8, 0x3, 0x4, 0x5}, {0x8, 0x1, 0x5, 0xfff, 0x6, 0x2}, {0x3ff, 0xfffff800, 0x8, 0x8, 0x0, 0x8}, {0x54593396, 0x9, 0xfffff18e, 0x4, 0x9, 0x8000}, {0x5, 0x6, 0x10, 0x5, 0x7, 0x43}, {0x7, 0x7, 0x8, 0x7, 0x7, 0x5000000}, {0xffffffff, 0x0, 0xd9, 0x88f4, 0x7000000}, {0x2, 0x9, 0x9, 0x4800, 0x1, 0x7fffffff}, {0x5171, 0x0, 0x208, 0xfffffffc, 0x9, 0x7}, {0x4, 0x8, 0x4808, 0x1ff, 0x2, 0x1}, {0xfffff001, 0x24, 0x3, 0x10000, 0x9a}, {0xffffff52, 0xd, 0x7, 0xffff5797, 0x31}, {0x3, 0x9, 0x0, 0x5, 0x100, 0xfaf0}, {0x1, 0x2ec80454, 0x3, 0x2, 0x7, 0xfffffffc}, {0xc, 0x2, 0x0, 0x53, 0x6, 0x6}, {0x4, 0x5, 0x8, 0x7f, 0x1, 0xc}, {0x101, 0x401, 0x6, 0x10000, 0xfffffff8, 0x1fc000}, {0xb2c8, 0x0, 0x8, 0x8, 0x2db0211d, 0x4}, {0x4, 0x3, 0x10, 0x7e800, 0x3, 0x2}, {0xffffffff, 0x40, 0x1, 0xecab, 0x5, 0xffff}, {0x2, 0x1, 0x8, 0x1375, 0x81, 0x3ff}, {0x7, 0x0, 0x464, 0x4, 0xc, 0x8}, {0x1, 0x7, 0x3, 0x4, 0x1, 0xbe8}, {0x5, 0x3, 0x9, 0xf, 0x3ff, 0x7}, {0x0, 0xfffffff8, 0x8, 0xe70a, 0x2e, 0x3fe000}, {0x64000000, 0x7, 0x7fff, 0x7e4, 0x9ca, 0x1}, {0x4, 0x5, 0x5, 0x1, 0x8, 0x5}, {0x6, 0x8001, 0xfffff6f5, 0x9, 0x4, 0x4}, {0x3, 0x5, 0xa, 0x7f, 0x2, 0x3}, {0x7ff, 0x200, 0x6, 0x400000, 0x1f, 0x401}, {0x3, 0x7, 0x8, 0xfffffffe, 0x4b}, {0x9, 0x401, 0x1, 0x0, 0x7, 0x6997a06f}, {0x3, 0x101, 0x20, 0x1000, 0xb, 0x800}, {0x1, 0x4, 0xffffff2e, 0xfffffff9, 0x9, 0x1}, {0x8, 0x100, 0x6023, 0xd, 0x800, 0x8}, {0x9, 0x101, 0x2800, 0xddc, 0xfffffffa, 0xd50d}, {0x8, 0x4d6e, 0x9, 0xd, 0x7ff, 0x7}, {0x5, 0x3, 0x6, 0x4, 0x9, 0x78}, {0xd, 0x1000, 0x0, 0x1ff, 0x6, 0x3}, {0x4, 0xfffffffd, 0x9, 0xe0, 0x2, 0x2}, {0x7, 0x0, 0x8, 0xfffffff7, 0x8, 0x100}, {0xa, 0xfffffffa, 0x0, 0x5, 0xc, 0x5}, {0xb6, 0x0, 0x5, 0x2, 0xf, 0x8001}, {0xfffffffc, 0xffffffff, 0x5, 0x295d000, 0x5, 0xb3e}, {0xa7, 0x1, 0x6, 0x2, 0xd, 0xd}, {0x3ff, 0x37c, 0x1, 0x7, 0xfffffffc, 0x5}, {0x6, 0xb, 0x0, 0xe02a, 0xb82, 0x39}, {0x5, 0x8, 0x8, 0xc4ee, 0x8, 0x9}, {0xc6, 0x4, 0x9910, 0xffff9cdb, 0xfffffff9, 0x8}, {0x1, 0x2, 0x8000, 0x0, 0x7, 0xb8}, {0x6, 0xb, 0x3, 0x2, 0xd, 0x100}, {0x5, 0xff, 0x5, 0x81, 0x159, 0x10001}, {0x8, 0x9, 0x40, 0x1, 0x400, 0x80000000}, {0x38, 0x400, 0x7fff, 0x7, 0xfffffffd, 0x7}, {0x6, 0xfffffeff, 0x5927, 0x4, 0x218, 0x401}, {0x4, 0x5, 0x4, 0xfffff6d5, 0x4813, 0x7}, {0x9, 0x0, 0x0, 0x3e7, 0x401, 0x7fff}, {0x41e, 0x3, 0x7, 0x1, 0x9, 0xfffffbff}, {0x5, 0x4, 0x1, 0xb, 0x7, 0xe}, {0x1ff, 0x8, 0x8, 0x0, 0x9, 0x1}, {0x4c, 0x0, 0x80, 0x7, 0xe74, 0x89}, {0x1, 0x1, 0xffffffff, 0xfffffffb, 0x7, 0x5}, {0x80, 0x9af6, 0x7, 0xfffffffb, 0x2, 0xfffffff8}, {0x400, 0x4c12, 0x223, 0x101, 0x5, 0x6}, {0xc217, 0x9, 0x94, 0x58bd, 0xd2a, 0x8b3}, {0x2, 0xd84, 0x2, 0x1000, 0x9, 0x6}, {0x6, 0xf7, 0x35, 0xfffff000, 0x3fe4, 0x3}, {0x0, 0xe29, 0xe3, 0x9, 0x6, 0x6}, {0x5, 0x3, 0x5, 0x7, 0x1}, {0x5f, 0x800, 0x0, 0x1, 0x8001, 0x49}, {0x1, 0x10001, 0x6c0c, 0x8, 0xc, 0x3}, {0x9, 0x101, 0x2, 0x0, 0x8, 0x86b}, {0xfffffffa, 0x3, 0x800, 0x3, 0x8, 0x1ff}, {0x6, 0x2, 0x7, 0x2, 0x81, 0x1}, {0x0, 0x100, 0x7fff, 0xb, 0xbfa8, 0x264a8287}, {0xfff, 0x2, 0x7, 0x2, 0x4, 0x7}, {0x4, 0x881, 0x6, 0x4, 0x3, 0xc7a3}, {0xff, 0x3, 0x2, 0x5, 0xb, 0x100}, {0x0, 0x9, 0x8, 0x9, 0x87, 0x2}, {0x5, 0x0, 0x6, 0xfffffff3, 0xfffffff8, 0x8}, {0xa452, 0x6, 0xd, 0x8, 0x8, 0x400}, {0x4, 0x5f9, 0x3, 0xffffff17, 0x4, 0xa}, {0x4, 0x0, 0x7ff, 0xf22f, 0xe69a, 0x9}, {0x1ff, 0xd, 0x8, 0xee, 0x19, 0x74}, {0x7f, 0x7, 0xdd52, 0x27c00, 0x9, 0x80}, {0x0, 0x9, 0x3, 0x40, 0x4, 0x64c0}, {0x4, 0x4, 0x99e, 0x0, 0x1, 0xfffffffa}, {0x87f1, 0xe, 0x6, 0x9, 0x7, 0x3ffb}, {0x5, 0xc9, 0x7, 0x4, 0x10001, 0x2}, {0x3, 0x4, 0x7fff, 0x3ff, 0x300, 0x3ff}, {0x0, 0x2, 0x1, 0x5, 0x400}, {0x6, 0x7, 0x5, 0x0, 0x1ff, 0x1}, {0x3, 0x3, 0x2, 0x2, 0x1, 0xb}, {0x4, 0xffff, 0x6, 0x5, 0x7fffffff, 0x7}, {0x9, 0x6, 0x81, 0x2, 0x0, 0x8}, {0xc9e9, 0x2, 0xf92, 0xffffffff, 0xc, 0xf4}, {0x4, 0x3, 0x7, 0x1, 0x2, 0x80000001}, {0xff, 0x6, 0x3, 0x0, 0x9, 0x1}, {0xb0, 0x0, 0xa0, 0xfffffff7, 0x3, 0x5}, {0xc03, 0x4, 0x635a6b3, 0x800, 0x10000, 0xd0000000}, {0xe9, 0x0, 0x78eb7c96, 0xfffffff8, 0x10000, 0x2}, {0x6, 0x9, 0x8, 0x1b4, 0x2, 0x8}, {0x401, 0x7, 0x5, 0x81, 0x8}, {0x4, 0xc00, 0x5, 0x5, 0x1, 0xfffffe00}, {0xc942, 0x0, 0x4, 0x10, 0x4}, {0x80200000, 0x6, 0x4547, 0xffff28f0, 0x3, 0x3}, {0x10000000, 0x2, 0x88c, 0x8, 0x9}, {0x2040000, 0x3, 0x0, 0x80000000, 0x101, 0x9}, {0x2, 0x7, 0x2, 0x60000, 0x8, 0xfe}, {0x6, 0x6, 0x8, 0x3, 0x9, 0x800}, {0x400, 0xac, 0x5, 0x4, 0x4}, {0xfffffffa, 0x7, 0xfffffffc, 0x8, 0x0, 0x7}, {0x1, 0x2, 0x9, 0x3, 0x8, 0x7}, {0x5, 0x9, 0xdca, 0x3, 0x9, 0xb22}, {0x6e, 0x47e7, 0xfffff548, 0x0, 0x9, 0xfffffff2}], [{0x5}, {0x1, 0x1}, {0x2}, {0x5, 0x1}, {0x2, 0x1}, {0x3}, {0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x32420a3e8edc6176, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {}, {0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x3}, {0x0, 0x2}, {}, {0x1, 0x1}, {0x5}, {0x1}, {}, {0x3}, {0x2, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x5}, {0x4}, {}, {0x2, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x6, 0x1}, {0x0, 0x313e8e2654cf9fe5}, {0x2}, {0x5}, {0x1}, {}, {0x5, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x4}, {0x4}, {0x3}, {0x5}, {}, {0x4, 0x1}, {0x1, 0x1}, {0x2}, {0x4, 0x1}, {0x4, 0x1}, {0x4}, {0x3, 0x1}, {0x1, 0x1}, {0x5}, {0x3}, {0x3}, {0x5}, {0x5}, {0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x0, 0xcc2dfb9f0bf6aa56}, {0x3}, {0x7a43fae9c8b7b520, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {}, {0x1, 0x1}, {}, {0x4}, {0x1, 0x1}, {0x3}, {0x2, 0x1}, {}, {0x3, 0x1}, {0x3}, {0x5}, {0x4}, {0x6, 0x1}, {0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x1}, {0x5}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x5}, {0x5, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x4}, {0x5, 0x1}, {0x5}, {0x4, 0x1}, {0x1}, {0x5}, {0x3}, {0x7}, {0x4, 0x1}, {0x4}, {0x3, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x2}, {0x3}, {0x5}, {0x3, 0x1}, {0x3, 0x1}, {0x2}, {0x2, 0x8ebff8b2c18a7bbc}, {0x0, 0x1}, {0x3}]}}]}, {0xe, 0x6, "ed26eabbd190a25b98a6"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}}]}, 0x1fb4}}, 0x0) r4 = socket(0x10, 0x803, 0x0) sendto(r4, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x7e}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41, 0xb00}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848420000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) connect$can_j1939(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f00000012c0)=ANY=[@ANYBLOB], 0x110) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00'}) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000380)=[{0x0}], 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b70500000000000061109f0000000000070000000b00000095000000000000000d87529cc918dc8c2b2b2d613b2ff870e8b01896759fa0c2"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xbc, &(0x7f0000000480)=""/188, 0x41000, 0x0, '\x00', 0x0, @fallback, r0, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x8}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) dup(r5) mmap(&(0x7f00007a1000/0x1000)=nil, 0x1000, 0x3000003, 0x10010, r0, 0x0) 3.24324943s ago: executing program 3 (id=664): set_mempolicy(0x2, &(0x7f0000000080)=0x4716, 0x3) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x200000a, 0x5d031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000, 0x0, 0x1000000}) 1.438649139s ago: executing program 1 (id=665): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)={{0x14}, [@NFT_MSG_NEWRULE={0x94, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFTA_RULE_EXPRESSIONS={0x74, 0x4, 0x0, 0x1, [{0x60, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x50, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0x34, 0x3, "7dd86dc9b7ffffc7961e64e816e2fa144f7707e5f7f6cbd498a6b1affd1a3a7027bb2a1535664f6c1793c8ab258d7f10"}, @NFTA_MATCH_NAME={0xe, 0x1, 'multiport\x00'}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}]}}}, {0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x9}}}, 0xbc}}, 0x0) 196.600225ms ago: executing program 3 (id=666): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_open_procfs(0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0x5453, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0x541b, 0x0) r3 = socket(0x10, 0x803, 0x0) write(r3, &(0x7f0000000040)="2600000022004701050007108980e8ff06006d20002b1f00c0e90101c7bb0000b00000000000", 0x26) sendmsg$IPSET_CMD_PROTOCOL(r3, 0x0, 0x48810) 0s ago: executing program 1 (id=667): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_inet_SIOCDARP(r0, 0x8954, &(0x7f0000000100)={{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x0, @random="4df193f35347"}, 0x0, {0x2, 0x0, @private}, 'syz_tun\x00'}) kernel console output (not intermixed with test programs): 5][ T3250] usb 2-1: config 252 has no interface number 0 [ 205.753423][ T5293] usb 4-1: SerialNumber: syz [ 205.803811][ T5293] usb 4-1: config 0 descriptor?? [ 205.809841][ T25] hid-generic 0003:0158:0100.0007: unknown main item tag 0x0 [ 205.817477][ T3250] usb 2-1: config 252 interface 254 has no altsetting 0 [ 205.835466][ T7388] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 205.843591][ T7388] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 205.857665][ T25] hid-generic 0003:0158:0100.0007: unknown main item tag 0x0 [ 205.878573][ T25] hid-generic 0003:0158:0100.0007: unknown main item tag 0x0 [ 205.898525][ T25] hid-generic 0003:0158:0100.0007: unknown main item tag 0x0 [ 205.908796][ T25] hid-generic 0003:0158:0100.0007: unknown main item tag 0x0 [ 205.916324][ T25] hid-generic 0003:0158:0100.0007: unknown main item tag 0x0 [ 205.946690][ T25] hid-generic 0003:0158:0100.0007: unknown main item tag 0x0 [ 205.958529][ T25] hid-generic 0003:0158:0100.0007: unknown main item tag 0x0 [ 205.966067][ T25] hid-generic 0003:0158:0100.0007: unknown main item tag 0x0 [ 205.998549][ T25] hid-generic 0003:0158:0100.0007: unknown main item tag 0x0 [ 206.006194][ T25] hid-generic 0003:0158:0100.0007: unknown main item tag 0x0 [ 206.028556][ T25] hid-generic 0003:0158:0100.0007: unknown main item tag 0x0 [ 206.048583][ T25] hid-generic 0003:0158:0100.0007: unknown main item tag 0x0 [ 206.056184][ T25] hid-generic 0003:0158:0100.0007: unknown main item tag 0x0 [ 206.088560][ T25] hid-generic 0003:0158:0100.0007: unknown main item tag 0x0 [ 206.096042][ T25] hid-generic 0003:0158:0100.0007: unknown main item tag 0x0 [ 206.118604][ T25] hid-generic 0003:0158:0100.0007: unknown main item tag 0x0 [ 206.128550][ T25] hid-generic 0003:0158:0100.0007: unknown main item tag 0x0 [ 206.148772][ T25] hid-generic 0003:0158:0100.0007: unknown main item tag 0x0 [ 206.156419][ T25] hid-generic 0003:0158:0100.0007: unknown main item tag 0x0 [ 206.178569][ T25] hid-generic 0003:0158:0100.0007: unknown main item tag 0x0 [ 206.186047][ T25] hid-generic 0003:0158:0100.0007: unknown main item tag 0x0 [ 206.208560][ T25] hid-generic 0003:0158:0100.0007: unknown main item tag 0x0 [ 206.216191][ T25] hid-generic 0003:0158:0100.0007: unknown main item tag 0x0 [ 206.238694][ T25] hid-generic 0003:0158:0100.0007: unknown main item tag 0x0 [ 206.258653][ T25] hid-generic 0003:0158:0100.0007: unknown main item tag 0x0 [ 206.278592][ T25] hid-generic 0003:0158:0100.0007: unknown main item tag 0x0 [ 206.286143][ T25] hid-generic 0003:0158:0100.0007: unknown main item tag 0x0 [ 206.308621][ T25] hid-generic 0003:0158:0100.0007: unknown main item tag 0x0 [ 206.316083][ T25] hid-generic 0003:0158:0100.0007: unknown main item tag 0x0 [ 206.348536][ T25] hid-generic 0003:0158:0100.0007: unknown main item tag 0x0 [ 206.372929][ T25] hid-generic 0003:0158:0100.0007: unknown main item tag 0x0 [ 206.386615][ T25] hid-generic 0003:0158:0100.0007: unknown main item tag 0x0 [ 206.403497][ T25] hid-generic 0003:0158:0100.0007: unknown main item tag 0x0 [ 206.423782][ T25] hid-generic 0003:0158:0100.0007: unknown main item tag 0x0 [ 206.438541][ T25] hid-generic 0003:0158:0100.0007: unknown main item tag 0x0 [ 206.446077][ T25] hid-generic 0003:0158:0100.0007: unknown main item tag 0x2 [ 206.466400][ T25] hid-generic 0003:0158:0100.0007: unexpected long global item [ 206.487203][ T25] hid-generic 0003:0158:0100.0007: probe with driver hid-generic failed with error -22 [ 206.507414][ T5293] etas_es58x 4-1:0.219: Starting syz syz (Serial Number syz) [ 206.515789][ T25] usb 3-1: USB disconnect, device number 22 [ 206.527093][ T3250] usb 2-1: New USB device found, idVendor=057c, idProduct=2200, bcdDevice=46.29 [ 206.536478][ T3250] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.544637][ T3250] usb 2-1: Product: syz [ 206.549399][ T3250] usb 2-1: Manufacturer: syz [ 206.554083][ T3250] usb 2-1: SerialNumber: syz [ 206.585127][ T5293] etas_es58x 4-1:0.219: could not parse product info: '놹' [ 206.619800][ T3250] bfusb 2-1:252.254: probe with driver bfusb failed with error -5 [ 206.664810][ T7411] netlink: 8 bytes leftover after parsing attributes in process `syz.0.422'. [ 206.819947][ T25] usb 4-1: USB disconnect, device number 18 [ 206.836331][ T7416] IPVS: Unknown mcast interface: ip6erspan0 [ 206.848393][ T25] etas_es58x 4-1:0.219: Disconnecting syz syz [ 206.855180][ T7391] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 206.977809][ T7391] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 207.137028][ T7391] nlmon0: entered promiscuous mode [ 207.143607][ T7391] vlan2: entered promiscuous mode [ 207.149536][ T7391] vlan2: entered allmulticast mode [ 207.155110][ T7391] nlmon0: entered allmulticast mode [ 207.168857][ T5285] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 207.178743][ T5284] usb 5-1: new low-speed USB device number 26 using dummy_hcd [ 207.196558][ T7391] nlmon0: left allmulticast mode [ 207.202191][ T7391] nlmon0: left promiscuous mode [ 207.338624][ T5284] usb 5-1: Invalid ep0 maxpacket: 16 [ 207.344231][ T5285] usb 1-1: Using ep0 maxpacket: 8 [ 207.361274][ T5285] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 207.378581][ T5285] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 207.397231][ T5285] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 207.429915][ T5285] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 207.458548][ T5285] usb 1-1: New USB device found, idVendor=ee93, idProduct=db1a, bcdDevice=61.23 [ 207.484468][ T5285] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.498561][ T5284] usb 5-1: new low-speed USB device number 27 using dummy_hcd [ 207.681762][ T5284] usb 5-1: Invalid ep0 maxpacket: 16 [ 207.704611][ T5284] usb usb5-port1: attempt power cycle [ 207.729302][ T5285] usb 1-1: GET_CAPABILITIES returned 0 [ 207.734969][ T5285] usbtmc 1-1:16.0: can't read capabilities [ 207.934531][ T7422] usbtmc 1-1:16.0: send_request_dev_dep_msg_in returned -90 [ 208.047633][ T58] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.059290][ T5284] usb 5-1: new low-speed USB device number 28 using dummy_hcd [ 208.074571][ T25] usb 1-1: USB disconnect, device number 20 [ 208.137024][ T5284] usb 5-1: Invalid ep0 maxpacket: 16 [ 208.237134][ T58] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.269169][ T5284] usb 5-1: new low-speed USB device number 29 using dummy_hcd [ 208.301735][ T5284] usb 5-1: Invalid ep0 maxpacket: 16 [ 208.327725][ T5284] usb usb5-port1: unable to enumerate USB device [ 208.452668][ T5284] usb 2-1: USB disconnect, device number 24 [ 208.473328][ T58] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.702693][ T58] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.938688][ T5284] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 209.103637][ T5284] usb 2-1: device descriptor read/64, error -71 [ 209.128066][ T58] bridge_slave_1: left allmulticast mode [ 209.154464][ T58] bridge_slave_1: left promiscuous mode [ 209.174961][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.229353][ T58] bridge_slave_0: left allmulticast mode [ 209.235195][ T58] bridge_slave_0: left promiscuous mode [ 209.277824][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.315262][ T5231] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 209.327105][ T5231] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 209.341428][ T5231] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 209.354519][ T5231] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 209.363956][ T5231] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 209.374713][ T5231] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 209.381930][ T5284] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 209.555209][ T5284] usb 2-1: device descriptor read/64, error -71 [ 209.680884][ T5284] usb usb2-port1: attempt power cycle [ 210.046403][ T5284] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 210.082552][ T5284] usb 2-1: device descriptor read/8, error -71 [ 210.283437][ T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 210.303112][ T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 210.316555][ T58] bond0 (unregistering): Released all slaves [ 210.333916][ T7460] netlink: 100 bytes leftover after parsing attributes in process `syz.4.434'. [ 210.359295][ T5284] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 210.408635][ T5284] usb 2-1: device descriptor read/8, error -71 [ 210.489470][ T3250] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 210.537635][ T5284] usb usb2-port1: unable to enumerate USB device [ 210.673993][ T3250] usb 1-1: Using ep0 maxpacket: 8 [ 210.703055][ T3250] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 210.733265][ T3250] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 210.785541][ T3250] usb 1-1: New USB device found, idVendor=044f, idProduct=b323, bcdDevice= 0.00 [ 210.822737][ T3250] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.858979][ T3250] usb 1-1: config 0 descriptor?? [ 210.938968][ T58] hsr_slave_0: left promiscuous mode [ 210.955837][ T58] hsr_slave_1: left promiscuous mode [ 211.075963][ T58] veth1_macvtap: left promiscuous mode [ 211.089047][ T58] veth0_macvtap: left promiscuous mode [ 211.098696][ T58] veth1_vlan: left promiscuous mode [ 211.104147][ T58] veth0_vlan: left promiscuous mode [ 211.434760][ T5237] Bluetooth: hci0: command tx timeout [ 212.414410][ T5293] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 212.600807][ T5293] usb 2-1: config 252 has an invalid interface number: 254 but max is 0 [ 212.618714][ T5293] usb 2-1: config 252 has no interface number 0 [ 212.647079][ T5293] usb 2-1: config 252 interface 254 has no altsetting 0 [ 212.679436][ T5293] usb 2-1: New USB device found, idVendor=057c, idProduct=2200, bcdDevice=46.29 [ 212.700070][ T5293] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.735850][ T5293] usb 2-1: Product: syz [ 212.768766][ T5293] usb 2-1: Manufacturer: syz [ 212.775243][ T5293] usb 2-1: SerialNumber: syz [ 212.822402][ T5293] bfusb 2-1:252.254: probe with driver bfusb failed with error -5 [ 212.927223][ T58] team0 (unregistering): Port device team_slave_1 removed [ 213.060383][ T58] team0 (unregistering): Port device team_slave_0 removed [ 213.068200][ T7488] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 213.091506][ T7488] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 213.408342][ T3250] usbhid 1-1:0.0: can't add hid device: -71 [ 213.408596][ T3250] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 213.412512][ T3250] usb 1-1: USB disconnect, device number 21 [ 213.516573][ T5237] Bluetooth: hci0: command tx timeout [ 213.938722][ T3250] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 214.105780][ T3250] usb 1-1: Using ep0 maxpacket: 16 [ 214.117997][ T3250] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 214.146286][ T3250] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 214.190462][ T3250] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 214.213671][ T3250] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.227739][ T3250] usb 1-1: Product: syz [ 214.251929][ T3250] usb 1-1: Manufacturer: syz [ 214.257176][ T3250] usb 1-1: SerialNumber: syz [ 214.295353][ T3250] usb 1-1: config 0 descriptor?? [ 214.329509][ T3250] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 214.347752][ T3250] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 214.661649][ T7495] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 214.677465][ T7495] netlink: 12 bytes leftover after parsing attributes in process `syz.4.440'. [ 214.772044][ T7489] dummy0: entered promiscuous mode [ 214.778179][ T7489] vlan2: entered promiscuous mode [ 214.787771][ T7489] vlan2: entered allmulticast mode [ 214.805107][ T7489] dummy0: entered allmulticast mode [ 214.815955][ T7489] dummy0: left allmulticast mode [ 214.826878][ T7489] dummy0: left promiscuous mode [ 214.978651][ T5307] usb 5-1: new full-speed USB device number 30 using dummy_hcd [ 215.005778][ T3250] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 215.020992][ T3250] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 215.085349][ T7457] chnl_net:caif_netlink_parms(): no params data found [ 215.143411][ T5307] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 215.179760][ T5307] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 215.238799][ T5307] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 215.273656][ T5307] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.330242][ T5307] usb 5-1: config 0 descriptor?? [ 215.375871][ T5307] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 215.398714][ T5307] dvb-usb: bulk message failed: -22 (3/0) [ 215.419904][ T5307] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 215.429869][ T5307] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 215.437091][ T5307] usb 5-1: media controller created [ 215.445399][ T5307] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 215.470612][ T5307] dvb-usb: bulk message failed: -22 (6/0) [ 215.477104][ T5307] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 215.498810][ T5307] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input6 [ 215.549110][ T7495] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 215.575469][ T5293] usb 2-1: USB disconnect, device number 29 [ 215.598846][ T5237] Bluetooth: hci0: command tx timeout [ 215.634103][ T5307] dvb-usb: schedule remote query interval to 150 msecs. [ 215.645047][ T5307] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 215.661875][ T3250] em28xx 1-1:0.0: Unknown AC97 audio processor detected! [ 215.684827][ T7495] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 215.770097][ T25] usb 5-1: USB disconnect, device number 30 [ 216.375025][ T3250] em28xx 1-1:0.0: couldn't setup AC97 register 4 [ 216.399814][ T25] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 216.448701][ T3250] em28xx 1-1:0.0: couldn't setup AC97 register 6 [ 216.470888][ T3250] em28xx 1-1:0.0: couldn't setup AC97 register 54 [ 216.516155][ T3250] em28xx 1-1:0.0: couldn't setup AC97 register 56 [ 216.585587][ T3250] usb 1-1: USB disconnect, device number 22 [ 216.680116][ T7457] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.687655][ T7457] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.735451][ T7457] bridge_slave_0: entered allmulticast mode [ 216.783904][ T7457] bridge_slave_0: entered promiscuous mode [ 216.844124][ T7457] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.889165][ T7457] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.896488][ T7457] bridge_slave_1: entered allmulticast mode [ 216.979844][ T7457] bridge_slave_1: entered promiscuous mode [ 217.210919][ T7457] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 217.350027][ T7457] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 217.654654][ T7457] team0: Port device team_slave_0 added [ 217.668991][ T5237] Bluetooth: hci0: command tx timeout [ 217.737343][ T7457] team0: Port device team_slave_1 added [ 217.770975][ T7534] x_tables: ip_tables: osf match: only valid for protocol 6 [ 220.902781][ T7457] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 220.902805][ T7457] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 220.902836][ T7457] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 220.904797][ T7457] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 220.904817][ T7457] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 220.904846][ T7457] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 221.516406][ T7545] binder: 7541:7545 ioctl 40046205 0 returned -22 [ 221.694460][ T7457] hsr_slave_0: entered promiscuous mode [ 221.733590][ T7457] hsr_slave_1: entered promiscuous mode [ 221.758911][ T25] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 221.911207][ T25] usb 1-1: New USB device found, idVendor=093a, idProduct=2601, bcdDevice= 8.8f [ 221.948544][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.979469][ T25] usb 1-1: config 0 descriptor?? [ 222.048305][ T25] gspca_main: pac7311-2.14.0 probing 093a:2601 [ 222.315933][ T5231] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 222.340463][ T5231] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 222.352718][ T5231] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 222.365661][ T5231] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 222.378924][ T5231] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 222.385279][ T58] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.404796][ T5231] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 222.727259][ T58] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.952922][ T58] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.299337][ T58] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.538676][ T8] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 223.728700][ T8] usb 5-1: Using ep0 maxpacket: 16 [ 223.736299][ T8] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 223.754334][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 223.772514][ T8] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 223.787176][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.797056][ T8] usb 5-1: Product: syz [ 223.801375][ T8] usb 5-1: Manufacturer: syz [ 223.807868][ T8] usb 5-1: SerialNumber: syz [ 223.814387][ T58] bridge_slave_1: left allmulticast mode [ 223.820469][ T58] bridge_slave_1: left promiscuous mode [ 223.827080][ T7584] netlink: 'syz.0.446': attribute type 3 has an invalid length. [ 223.836866][ T7584] netlink: 8 bytes leftover after parsing attributes in process `syz.0.446'. [ 223.846492][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.863964][ T8] usb 5-1: config 0 descriptor?? [ 223.866614][ T58] bridge_slave_0: left allmulticast mode [ 223.880372][ T58] bridge_slave_0: left promiscuous mode [ 223.886726][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.903781][ T8] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 223.918619][ T8] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 223.919738][ T25] gspca_pac7311: reg_w() failed index 0x29, value 0x53, error -110 [ 223.950320][ T25] pac7311 1-1:0.0: probe with driver pac7311 failed with error -110 [ 224.469171][ T5237] Bluetooth: hci1: command tx timeout [ 224.519419][ T8] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 224.566444][ T8] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 224.883799][ T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 224.912783][ T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 224.950818][ T58] bond0 (unregistering): Released all slaves [ 225.049598][ T7586] netlink: 'syz.0.446': attribute type 4 has an invalid length. [ 225.089981][ T7587] netlink: 'syz.0.446': attribute type 4 has an invalid length. [ 225.209404][ T8] em28xx 5-1:0.0: Unknown AC97 audio processor detected! [ 225.324124][ T7566] chnl_net:caif_netlink_parms(): no params data found [ 225.606161][ T58] hsr_slave_0: left promiscuous mode [ 225.635608][ T58] hsr_slave_1: left promiscuous mode [ 225.715220][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 225.747572][ T58] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 225.773221][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 225.791796][ T58] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 225.879076][ T58] veth1_macvtap: left promiscuous mode [ 225.897109][ T8] em28xx 5-1:0.0: couldn't setup AC97 register 4 [ 225.912530][ T58] veth0_macvtap: left promiscuous mode [ 225.935937][ T58] veth1_vlan: left promiscuous mode [ 225.954080][ T8] em28xx 5-1:0.0: couldn't setup AC97 register 6 [ 225.961227][ T58] veth0_vlan: left promiscuous mode [ 225.981356][ T8] em28xx 5-1:0.0: couldn't setup AC97 register 54 [ 226.021941][ T8] em28xx 5-1:0.0: couldn't setup AC97 register 56 [ 226.062516][ T8] usb 5-1: USB disconnect, device number 31 [ 226.368667][ T9] usb 1-1: USB disconnect, device number 23 [ 226.549390][ T5237] Bluetooth: hci1: command tx timeout [ 227.088349][ T7639] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 227.099209][ T7639] vhci_hcd: invalid port number 0 [ 227.106766][ T7639] usb usb8: usbfs: interface 0 claimed by hub while 'syz.0.463' resets device [ 227.604108][ T58] team0 (unregistering): Port device team_slave_1 removed [ 227.686153][ T58] team0 (unregistering): Port device team_slave_0 removed [ 227.965270][ T7674] netlink: 16 bytes leftover after parsing attributes in process `syz.0.467'. [ 228.019354][ T7677] fuse: Unknown parameter '' [ 228.552674][ T7457] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 228.572657][ T7631] netlink: 28 bytes leftover after parsing attributes in process `syz.4.461'. [ 228.628707][ T5237] Bluetooth: hci1: command tx timeout [ 228.798353][ T7457] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 228.845895][ T7457] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 228.950210][ T7566] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.957468][ T7566] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.974380][ T7566] bridge_slave_0: entered allmulticast mode [ 229.005105][ T7566] bridge_slave_0: entered promiscuous mode [ 229.014683][ T7566] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.029971][ T7566] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.037369][ T7566] bridge_slave_1: entered allmulticast mode [ 229.081261][ T7566] bridge_slave_1: entered promiscuous mode [ 229.099238][ T7457] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 229.212163][ T7566] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 229.241385][ T7566] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 229.361513][ T7566] team0: Port device team_slave_0 added [ 229.380700][ T5237] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 229.470387][ T7566] team0: Port device team_slave_1 added [ 229.509070][ T7711] netlink: 'syz.4.472': attribute type 5 has an invalid length. [ 229.516839][ T29] kauditd_printk_skb: 144 callbacks suppressed [ 229.516858][ T29] audit: type=1326 audit(1727896150.701:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7710 comm="syz.4.472" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc728b7dff9 code=0x0 [ 229.612289][ T7566] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 229.633456][ T7566] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 229.661525][ T7711] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(10) [ 229.668283][ T7711] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 229.691832][ T7711] vhci_hcd vhci_hcd.0: Device attached [ 229.697784][ T7566] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 229.755569][ T7566] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 229.776457][ T7566] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 229.819488][ T7566] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 229.843267][ T7711] netlink: 'syz.4.472': attribute type 1 has an invalid length. [ 229.858631][ T7711] netlink: 4 bytes leftover after parsing attributes in process `syz.4.472'. [ 229.878607][ T9] vhci_hcd: vhci_device speed not set [ 229.895754][ T7711] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 229.905216][ T7711] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 229.921837][ T7711] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 229.936366][ T7711] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 229.946696][ T9] usb 17-1: new full-speed USB device number 2 using vhci_hcd [ 230.164720][ T7715] vhci_hcd: connection reset by peer [ 230.193223][ T12] vhci_hcd: stop threads [ 230.198113][ T12] vhci_hcd: release socket [ 230.240680][ T5231] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 230.240939][ T12] vhci_hcd: disconnect device [ 230.262437][ T5231] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 230.271807][ T5231] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 230.281036][ T5231] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 230.290542][ T5231] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 230.300746][ T5231] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 230.334686][ T58] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.519244][ T7566] hsr_slave_0: entered promiscuous mode [ 230.551943][ T7566] hsr_slave_1: entered promiscuous mode [ 230.585237][ T7566] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 230.620000][ T7566] Cannot create hsr debugfs directory [ 230.646733][ T7457] 8021q: adding VLAN 0 to HW filter on device bond0 [ 230.650303][ T7734] netlink: 56 bytes leftover after parsing attributes in process `syz.0.476'. [ 230.708751][ T5231] Bluetooth: hci1: command tx timeout [ 230.757781][ T58] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.920763][ T58] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.960614][ T7743] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 231.026005][ T58] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.043962][ T7742] netlink: 8 bytes leftover after parsing attributes in process `syz.4.477'. [ 231.060294][ T7742] netlink: 4 bytes leftover after parsing attributes in process `syz.4.477'. [ 231.069656][ T7742] netlink: 8 bytes leftover after parsing attributes in process `syz.4.477'. [ 231.175437][ T7745] FAULT_INJECTION: forcing a failure. [ 231.175437][ T7745] name failslab, interval 1, probability 0, space 0, times 0 [ 231.191754][ T7745] CPU: 1 UID: 0 PID: 7745 Comm: syz.0.478 Not tainted 6.12.0-rc1-syzkaller-00031-ge32cde8d2bd7 #0 [ 231.202420][ T7745] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 231.212537][ T7745] Call Trace: [ 231.215841][ T7745] [ 231.218792][ T7745] dump_stack_lvl+0x241/0x360 [ 231.223503][ T7745] ? __pfx_dump_stack_lvl+0x10/0x10 [ 231.228731][ T7745] ? __pfx__printk+0x10/0x10 [ 231.233380][ T7745] ? __kmalloc_cache_noprof+0x44/0x2c0 [ 231.238896][ T7745] ? __pfx___might_resched+0x10/0x10 [ 231.244243][ T7745] should_fail_ex+0x3b0/0x4e0 [ 231.248981][ T7745] should_failslab+0xac/0x100 [ 231.253701][ T7745] ? drm_mode_setcrtc+0x7ee/0x1e10 [ 231.259008][ T7745] __kmalloc_cache_noprof+0x6c/0x2c0 [ 231.264383][ T7745] drm_mode_setcrtc+0x7ee/0x1e10 [ 231.265023][ T7457] 8021q: adding VLAN 0 to HW filter on device team0 [ 231.269367][ T7745] ? kasan_save_track+0x51/0x80 [ 231.269466][ T7745] ? __pfx_drm_mode_setcrtc+0x10/0x10 [ 231.269522][ T7745] ? do_raw_spin_unlock+0x13c/0x8b0 [ 231.269561][ T7745] ? _raw_spin_unlock+0x28/0x50 [ 231.269598][ T7745] drm_ioctl_kernel+0x337/0x440 [ 231.269631][ T7745] ? __pfx_drm_mode_setcrtc+0x10/0x10 [ 231.299268][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.301483][ T7745] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 231.306912][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 231.313860][ T7745] ? __might_fault+0xc6/0x120 [ 231.313892][ T7745] drm_ioctl+0x60e/0xad0 [ 231.313922][ T7745] ? __pfx_drm_mode_setcrtc+0x10/0x10 [ 231.313963][ T7745] ? __pfx_drm_ioctl+0x10/0x10 [ 231.324336][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.326642][ T7745] ? __pfx_drm_ioctl+0x10/0x10 [ 231.331457][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 231.335548][ T7745] __se_sys_ioctl+0xf9/0x170 [ 231.370342][ T7745] do_syscall_64+0xf3/0x230 [ 231.375339][ T7745] ? clear_bhb_loop+0x35/0x90 [ 231.380075][ T7745] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.386083][ T7745] RIP: 0033:0x7f715737dff9 [ 231.390554][ T7745] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 231.410307][ T7745] RSP: 002b:00007f71581b4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 231.413653][ T5284] usb 5-1: new full-speed USB device number 32 using dummy_hcd [ 231.418749][ T7745] RAX: ffffffffffffffda RBX: 00007f7157535f80 RCX: 00007f715737dff9 [ 231.418774][ T7745] RDX: 0000000020000300 RSI: 00000000c06864a2 RDI: 000000000000000a [ 231.418790][ T7745] RBP: 00007f71581b4090 R08: 0000000000000000 R09: 0000000000000000 [ 231.418806][ T7745] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 231.418821][ T7745] R13: 0000000000000000 R14: 00007f7157535f80 R15: 00007f715765fa28 [ 231.418855][ T7745] [ 231.659187][ T5284] usb 5-1: config 0 has an invalid interface number: 107 but max is 0 [ 231.668075][ T5284] usb 5-1: config 0 has no interface number 0 [ 231.697386][ T5284] usb 5-1: config 0 interface 107 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 10 [ 231.731387][ T58] bridge_slave_1: left allmulticast mode [ 231.737112][ T58] bridge_slave_1: left promiscuous mode [ 231.743653][ T5284] usb 5-1: config 0 interface 107 altsetting 0 endpoint 0x88 has invalid maxpacket 29285, setting to 64 [ 231.765510][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.781163][ T5284] usb 5-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 231.798641][ T5284] usb 5-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 231.810003][ T58] bridge_slave_0: left allmulticast mode [ 231.815718][ T58] bridge_slave_0: left promiscuous mode [ 231.817141][ T5284] usb 5-1: Product: syz [ 231.830123][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.837597][ T5284] usb 5-1: Manufacturer: syz [ 231.844474][ T5284] usb 5-1: SerialNumber: syz [ 231.861764][ T5284] usb 5-1: config 0 descriptor?? [ 231.873936][ T7743] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 231.884098][ T5284] keyspan 5-1:0.107: Keyspan 4 port adapter converter detected [ 231.893956][ T5284] keyspan 5-1:0.107: found no endpoint descriptor for endpoint 81 [ 231.904281][ T5284] keyspan 5-1:0.107: found no endpoint descriptor for endpoint 1 [ 231.920060][ T5284] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 231.921018][ T5307] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 231.945977][ T5284] keyspan 5-1:0.107: found no endpoint descriptor for endpoint 2 [ 231.967219][ T5284] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 231.990510][ T5284] keyspan 5-1:0.107: found no endpoint descriptor for endpoint 4 [ 232.028095][ T5284] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 232.040951][ T5284] keyspan 5-1:0.107: found no endpoint descriptor for endpoint 6 [ 232.087686][ T5284] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 232.118776][ T5307] usb 1-1: Using ep0 maxpacket: 16 [ 232.127267][ T5284] usb 5-1: USB disconnect, device number 32 [ 232.130113][ T5307] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 232.164870][ T5284] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 232.199369][ T5307] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 232.218774][ T5307] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 232.227932][ T5307] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.242968][ T5284] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 232.247146][ T5307] usb 1-1: Product: syz [ 232.257731][ T5307] usb 1-1: Manufacturer: syz [ 232.262785][ T5307] usb 1-1: SerialNumber: syz [ 232.279421][ T5307] usb 1-1: config 0 descriptor?? [ 232.306344][ T5307] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 232.322242][ T5307] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 232.336651][ T5284] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 232.381471][ T5284] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 232.391663][ T5231] Bluetooth: hci3: command tx timeout [ 232.416037][ T5284] keyspan 5-1:0.107: device disconnected [ 232.727279][ T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 232.739749][ T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 232.751447][ T58] bond0 (unregistering): Released all slaves [ 232.901706][ T7729] chnl_net:caif_netlink_parms(): no params data found [ 232.905782][ T5307] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 232.927510][ T5307] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 233.061394][ T7457] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 233.128092][ T7772] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 233.306652][ T7457] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 233.443431][ T58] hsr_slave_0: left promiscuous mode [ 233.450719][ T58] hsr_slave_1: left promiscuous mode [ 233.456913][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 233.465897][ T58] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 233.474592][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 233.483856][ T58] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 233.505840][ T58] veth1_macvtap: left promiscuous mode [ 233.512419][ T58] veth0_macvtap: left promiscuous mode [ 233.518158][ T58] veth1_vlan: left promiscuous mode [ 233.524165][ T58] veth0_vlan: left promiscuous mode [ 233.562612][ T5307] em28xx 1-1:0.0: Unknown AC97 audio processor detected! [ 234.200241][ T5307] em28xx 1-1:0.0: couldn't setup AC97 register 4 [ 234.225694][ T5307] em28xx 1-1:0.0: couldn't setup AC97 register 6 [ 234.251805][ T5307] em28xx 1-1:0.0: couldn't setup AC97 register 54 [ 234.273963][ T5307] em28xx 1-1:0.0: couldn't setup AC97 register 56 [ 234.297671][ T5307] usb 1-1: USB disconnect, device number 24 [ 234.411562][ T58] team0 (unregistering): Port device team_slave_1 removed [ 234.471778][ T5231] Bluetooth: hci3: command tx timeout [ 234.492863][ T58] team0 (unregistering): Port device team_slave_0 removed [ 235.105134][ T9] vhci_hcd: vhci_device speed not set [ 235.170689][ T7729] bridge0: port 1(bridge_slave_0) entered blocking state [ 235.182199][ T7729] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.190717][ T7729] bridge_slave_0: entered allmulticast mode [ 235.199694][ T7729] bridge_slave_0: entered promiscuous mode [ 235.232507][ T7729] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.257690][ T7729] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.301176][ T7729] bridge_slave_1: entered allmulticast mode [ 235.319258][ T7729] bridge_slave_1: entered promiscuous mode [ 235.460236][ T7729] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 235.558038][ T7729] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 235.723410][ T7729] team0: Port device team_slave_0 added [ 235.749266][ T7729] team0: Port device team_slave_1 added [ 235.781761][ T7457] veth0_vlan: entered promiscuous mode [ 235.901559][ T7457] veth1_vlan: entered promiscuous mode [ 235.931417][ T7729] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 235.945057][ T7729] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 235.972305][ T7729] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 235.991540][ T7566] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 236.014313][ T7566] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 236.027891][ T7729] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 236.039463][ T7729] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 236.065481][ C1] vkms_vblank_simulate: vblank timer overrun [ 236.072317][ T7729] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 236.100714][ T7566] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 236.122504][ T7566] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 236.226447][ T7729] hsr_slave_0: entered promiscuous mode [ 236.244256][ T7729] hsr_slave_1: entered promiscuous mode [ 236.252654][ T7729] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 236.268016][ T7729] Cannot create hsr debugfs directory [ 236.284162][ T7457] veth0_macvtap: entered promiscuous mode [ 236.320933][ T7457] veth1_macvtap: entered promiscuous mode [ 236.381043][ T7457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 236.402673][ T7457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.415684][ T7457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 236.427032][ T7457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.439496][ T7457] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 236.495326][ T7457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 236.507702][ T7457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.519323][ T7457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 236.530609][ T7457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.542408][ T7457] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 236.550543][ T5231] Bluetooth: hci3: command tx timeout [ 236.628647][ T7457] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.638126][ T7457] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.647742][ T7457] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.656819][ T7457] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.775388][ T7566] 8021q: adding VLAN 0 to HW filter on device bond0 [ 236.856307][ T7566] 8021q: adding VLAN 0 to HW filter on device team0 [ 236.933540][ T2562] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 236.943233][ T2562] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 236.992819][ T2562] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.000066][ T2562] bridge0: port 1(bridge_slave_0) entered forwarding state [ 237.026675][ T2562] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.034070][ T2562] bridge0: port 2(bridge_slave_1) entered forwarding state [ 237.058591][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 237.066748][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 237.235950][ T7566] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 237.253919][ T7825] netlink: 36 bytes leftover after parsing attributes in process `syz.0.496'. [ 237.325972][ T7729] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 237.410176][ T7729] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 237.445591][ T7729] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 237.459128][ T7729] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 237.490364][ T7833] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 237.522169][ T5282] usb 5-1: new low-speed USB device number 33 using dummy_hcd [ 237.625652][ T7566] veth0_vlan: entered promiscuous mode [ 237.676256][ T7566] veth1_vlan: entered promiscuous mode [ 237.688628][ T5282] usb 5-1: Invalid ep0 maxpacket: 32 [ 237.712139][ T7729] 8021q: adding VLAN 0 to HW filter on device bond0 [ 237.763427][ T7729] 8021q: adding VLAN 0 to HW filter on device team0 [ 237.792893][ T1121] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.800116][ T1121] bridge0: port 1(bridge_slave_0) entered forwarding state [ 237.824779][ T5282] usb 5-1: new low-speed USB device number 34 using dummy_hcd [ 237.875470][ T7566] veth0_macvtap: entered promiscuous mode [ 237.893571][ T2523] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.900851][ T2523] bridge0: port 2(bridge_slave_1) entered forwarding state [ 237.974376][ T7566] veth1_macvtap: entered promiscuous mode [ 238.008833][ T5282] usb 5-1: Invalid ep0 maxpacket: 32 [ 238.016237][ T5282] usb usb5-port1: attempt power cycle [ 238.034647][ T7566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 238.066321][ T7566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.078573][ T7566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 238.121017][ T7566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.145193][ T7566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 238.176490][ T7566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.198147][ T7566] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 238.225826][ T7566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 238.246340][ T7566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.257857][ T7566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 238.269087][ T7566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.279221][ T7566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 238.301883][ T7566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.325561][ T7566] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 238.378945][ T5282] usb 5-1: new low-speed USB device number 35 using dummy_hcd [ 238.392505][ T7566] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.415980][ T5282] usb 5-1: Invalid ep0 maxpacket: 32 [ 238.423765][ T7566] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.444031][ T7566] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.463684][ T7566] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.578909][ T5282] usb 5-1: new low-speed USB device number 36 using dummy_hcd [ 238.594585][ T7729] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 238.628833][ T5231] Bluetooth: hci3: command tx timeout [ 238.629421][ T5282] usb 5-1: Invalid ep0 maxpacket: 32 [ 238.664168][ T5282] usb usb5-port1: unable to enumerate USB device [ 238.819688][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 238.872104][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 238.993700][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 238.996406][ T7729] veth0_vlan: entered promiscuous mode [ 239.002004][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 239.017089][ T7729] veth1_vlan: entered promiscuous mode [ 239.054540][ T7729] veth0_macvtap: entered promiscuous mode [ 239.064819][ T7729] veth1_macvtap: entered promiscuous mode [ 239.081805][ T7729] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 239.092444][ T7729] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.102390][ T7729] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 239.112960][ T7729] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.122898][ T7729] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 239.133449][ T7729] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.143426][ T7729] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 239.154007][ T7729] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.166138][ T7729] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 239.176340][ T7729] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 239.186887][ T7729] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.196913][ T7729] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 239.207441][ T7729] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.217373][ T7729] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 239.227938][ T7729] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.238164][ T7729] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 239.248912][ T7729] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.262622][ T7729] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 239.273668][ T7729] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.282571][ T7729] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.291650][ T7729] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.300700][ T7729] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.554144][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 239.595870][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 239.619760][ T7878] FAULT_INJECTION: forcing a failure. [ 239.619760][ T7878] name failslab, interval 1, probability 0, space 0, times 0 [ 239.635062][ T7877] trusted_key: encrypted_key: insufficient parameters specified [ 239.665988][ T7878] CPU: 1 UID: 0 PID: 7878 Comm: syz.3.448 Not tainted 6.12.0-rc1-syzkaller-00031-ge32cde8d2bd7 #0 [ 239.676668][ T7878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 239.686872][ T7878] Call Trace: [ 239.690231][ T7878] [ 239.693252][ T7878] dump_stack_lvl+0x241/0x360 [ 239.697997][ T7878] ? __pfx_dump_stack_lvl+0x10/0x10 [ 239.703372][ T7878] ? __pfx__printk+0x10/0x10 [ 239.708293][ T7878] ? ref_tracker_alloc+0x332/0x490 [ 239.713477][ T7878] should_fail_ex+0x3b0/0x4e0 [ 239.718261][ T7878] ? skb_clone+0x20c/0x390 [ 239.722749][ T7878] should_failslab+0xac/0x100 [ 239.727584][ T7878] ? skb_clone+0x20c/0x390 [ 239.732072][ T7878] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 239.737517][ T7878] skb_clone+0x20c/0x390 [ 239.741837][ T7878] __netlink_deliver_tap+0x3cc/0x7c0 [ 239.747194][ T7878] ? netlink_deliver_tap+0x2e/0x1b0 [ 239.752455][ T7878] netlink_deliver_tap+0x19d/0x1b0 [ 239.757636][ T7878] netlink_unicast+0x7c4/0x990 [ 239.762475][ T7878] ? __pfx_netlink_unicast+0x10/0x10 [ 239.767820][ T7878] ? __virt_addr_valid+0x183/0x530 [ 239.772989][ T7878] ? __check_object_size+0x48e/0x900 [ 239.778335][ T7878] netlink_sendmsg+0x8e4/0xcb0 [ 239.783143][ T7878] ? __pfx_netlink_sendmsg+0x10/0x10 [ 239.788492][ T7878] ? aa_sock_msg_perm+0x91/0x160 [ 239.793488][ T7878] ? __pfx_netlink_sendmsg+0x10/0x10 [ 239.798800][ T7878] __sock_sendmsg+0x221/0x270 [ 239.803599][ T7878] ____sys_sendmsg+0x52a/0x7e0 [ 239.808389][ T7878] ? __pfx_____sys_sendmsg+0x10/0x10 [ 239.813734][ T7878] __sys_sendmsg+0x292/0x380 [ 239.818345][ T7878] ? __pfx___sys_sendmsg+0x10/0x10 [ 239.823483][ T7878] ? __pfx_vfs_write+0x10/0x10 [ 239.828283][ T7878] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 239.834756][ T7878] ? do_syscall_64+0x100/0x230 [ 239.839554][ T7878] ? do_syscall_64+0xb6/0x230 [ 239.844686][ T7878] do_syscall_64+0xf3/0x230 [ 239.849208][ T7878] ? clear_bhb_loop+0x35/0x90 [ 239.853904][ T7878] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.859915][ T7878] RIP: 0033:0x7fa78ed7dff9 [ 239.864349][ T7878] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 239.884153][ T7878] RSP: 002b:00007fa78fae9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 239.892868][ T7878] RAX: ffffffffffffffda RBX: 00007fa78ef35f80 RCX: 00007fa78ed7dff9 [ 239.900949][ T7878] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 [ 239.908959][ T7878] RBP: 00007fa78fae9090 R08: 0000000000000000 R09: 0000000000000000 [ 239.917058][ T7878] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 239.925068][ T7878] R13: 0000000000000000 R14: 00007fa78ef35f80 R15: 00007fa78f05fa28 [ 239.933164][ T7878] [ 239.946614][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 239.961374][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 240.028860][ T7877] ebtables: ebtables: counters copy to user failed while replacing table [ 240.239585][ T7890] bridge0: port 3(erspan0) entered blocking state [ 240.267430][ T7890] bridge0: port 3(erspan0) entered disabled state [ 240.309817][ T7890] erspan0: entered allmulticast mode [ 240.329989][ T7890] erspan0: entered promiscuous mode [ 240.331841][ T7890] bridge0: port 3(erspan0) entered blocking state [ 240.331953][ T7890] bridge0: port 3(erspan0) entered forwarding state [ 240.808628][ T3250] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 241.015441][ T3250] usb 5-1: Using ep0 maxpacket: 16 [ 241.073318][ T3250] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 241.115836][ T3250] usb 5-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 241.184516][ T3250] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.198749][ T9] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 241.208760][ T5233] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 241.344529][ T3250] usb 5-1: config 0 descriptor?? [ 241.368797][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 241.379585][ T9] usb 3-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 241.389175][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.397256][ T9] usb 3-1: Product: syz [ 241.401616][ T9] usb 3-1: Manufacturer: syz [ 241.406300][ T9] usb 3-1: SerialNumber: syz [ 241.418307][ T9] usb 3-1: config 0 descriptor?? [ 241.423912][ T5233] usb 4-1: Using ep0 maxpacket: 8 [ 241.427250][ T9] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 241.495623][ T5233] usb 4-1: config index 0 descriptor too short (expected 6427, got 27) [ 241.614077][ T7900] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 241.677344][ T7900] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 241.748112][ T5233] usb 4-1: config 0 has an invalid interface number: 21 but max is 0 [ 241.798757][ T5233] usb 4-1: config 0 has no interface number 0 [ 241.805104][ T5233] usb 4-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 241.806471][ T7917] netlink: 56 bytes leftover after parsing attributes in process `syz.1.504'. [ 241.881678][ T5233] usb 4-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 241.944772][ T5233] usb 4-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 241.955696][ T7896] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 241.966707][ T7896] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 241.988093][ T5233] usb 4-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 241.998596][ T5233] usb 4-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 242.007545][ T5233] usb 4-1: Product: syz [ 242.018559][ T3250] hid (null): report_id 3323596431 is invalid [ 242.025005][ T3250] hid (null): unknown global tag 0xe [ 242.032059][ T5233] usb 4-1: config 0 descriptor?? [ 242.044814][ T3250] hid (null): report_id 3908395522 is invalid [ 242.051908][ T3250] hid (null): invalid report_size 58537 [ 242.057548][ T3250] hid (null): unknown global tag 0xd [ 242.086006][ T3250] hid-generic 0003:0158:0100.0008: unknown main item tag 0x0 [ 242.093748][ T3250] hid-generic 0003:0158:0100.0008: unknown main item tag 0x0 [ 242.101395][ T3250] hid-generic 0003:0158:0100.0008: unknown main item tag 0x0 [ 242.108949][ T3250] hid-generic 0003:0158:0100.0008: unknown main item tag 0x0 [ 242.116454][ T3250] hid-generic 0003:0158:0100.0008: unknown main item tag 0x0 [ 242.128551][ T3250] hid-generic 0003:0158:0100.0008: unknown main item tag 0x0 [ 242.136720][ T3250] hid-generic 0003:0158:0100.0008: unknown main item tag 0x0 [ 242.157759][ T3250] hid-generic 0003:0158:0100.0008: unknown main item tag 0x0 [ 242.165407][ T3250] hid-generic 0003:0158:0100.0008: unknown main item tag 0x0 [ 242.173659][ T3250] hid-generic 0003:0158:0100.0008: unknown main item tag 0x0 [ 242.181560][ T3250] hid-generic 0003:0158:0100.0008: unknown main item tag 0x0 [ 242.189314][ T3250] hid-generic 0003:0158:0100.0008: unknown main item tag 0x0 [ 242.196811][ T3250] hid-generic 0003:0158:0100.0008: unknown main item tag 0x0 [ 242.204383][ T3250] hid-generic 0003:0158:0100.0008: unknown main item tag 0x0 [ 242.213799][ T3250] hid-generic 0003:0158:0100.0008: unknown main item tag 0x0 [ 242.221925][ T3250] hid-generic 0003:0158:0100.0008: unknown main item tag 0x0 [ 242.231818][ T3250] hid-generic 0003:0158:0100.0008: unknown main item tag 0x0 [ 242.240052][ T3250] hid-generic 0003:0158:0100.0008: unknown main item tag 0x0 [ 242.249836][ T3250] hid-generic 0003:0158:0100.0008: unknown main item tag 0x0 [ 242.257876][ T3250] hid-generic 0003:0158:0100.0008: unknown main item tag 0x0 [ 242.268590][ T3250] hid-generic 0003:0158:0100.0008: unknown main item tag 0x0 [ 242.281045][ T3250] hid-generic 0003:0158:0100.0008: unknown main item tag 0x0 [ 242.288618][ T3250] hid-generic 0003:0158:0100.0008: unknown main item tag 0x0 [ 242.296077][ T3250] hid-generic 0003:0158:0100.0008: unknown main item tag 0x0 [ 242.303623][ T3250] hid-generic 0003:0158:0100.0008: unknown main item tag 0x0 [ 242.311637][ T3250] hid-generic 0003:0158:0100.0008: unknown main item tag 0x0 [ 242.323234][ T3250] hid-generic 0003:0158:0100.0008: unknown main item tag 0x0 [ 242.330921][ T3250] hid-generic 0003:0158:0100.0008: unknown main item tag 0x0 [ 242.338781][ T3250] hid-generic 0003:0158:0100.0008: unknown main item tag 0x0 [ 242.346815][ T3250] hid-generic 0003:0158:0100.0008: unknown main item tag 0x0 [ 242.354447][ T3250] hid-generic 0003:0158:0100.0008: unknown main item tag 0x0 [ 242.362058][ T3250] hid-generic 0003:0158:0100.0008: unknown main item tag 0x0 [ 242.374061][ T3250] hid-generic 0003:0158:0100.0008: unknown main item tag 0x0 [ 242.383986][ T3250] hid-generic 0003:0158:0100.0008: unknown main item tag 0x0 [ 242.391603][ T3250] hid-generic 0003:0158:0100.0008: unknown main item tag 0x0 [ 242.399262][ T3250] hid-generic 0003:0158:0100.0008: unknown main item tag 0x0 [ 242.407240][ T3250] hid-generic 0003:0158:0100.0008: unknown main item tag 0x0 [ 242.414928][ T3250] hid-generic 0003:0158:0100.0008: unknown main item tag 0x0 [ 242.422526][ T3250] hid-generic 0003:0158:0100.0008: unknown main item tag 0x0 [ 242.430238][ T3250] hid-generic 0003:0158:0100.0008: unknown main item tag 0x0 [ 242.438946][ T3250] hid-generic 0003:0158:0100.0008: unknown main item tag 0x0 [ 242.447062][ T3250] hid-generic 0003:0158:0100.0008: unknown main item tag 0x0 [ 242.454938][ T3250] hid-generic 0003:0158:0100.0008: unknown main item tag 0x0 [ 242.462734][ T3250] hid-generic 0003:0158:0100.0008: unknown main item tag 0x0 [ 242.470742][ T3250] hid-generic 0003:0158:0100.0008: unknown main item tag 0x0 [ 242.483842][ T3250] hid-generic 0003:0158:0100.0008: unknown main item tag 0x0 [ 242.491682][ T3250] hid-generic 0003:0158:0100.0008: unknown main item tag 0x0 [ 242.499208][ T3250] hid-generic 0003:0158:0100.0008: unknown main item tag 0x0 [ 242.506806][ T3250] hid-generic 0003:0158:0100.0008: unknown main item tag 0x0 [ 242.519924][ T3250] hid-generic 0003:0158:0100.0008: unknown main item tag 0x0 [ 242.527500][ T3250] hid-generic 0003:0158:0100.0008: unknown main item tag 0x0 [ 242.535258][ T3250] hid-generic 0003:0158:0100.0008: unknown main item tag 0x0 [ 242.544463][ T3250] hid-generic 0003:0158:0100.0008: unknown main item tag 0x0 [ 242.553768][ T3250] hid-generic 0003:0158:0100.0008: unknown main item tag 0x2 [ 242.561396][ T3250] hid-generic 0003:0158:0100.0008: unexpected long global item [ 242.569708][ T3250] hid-generic 0003:0158:0100.0008: probe with driver hid-generic failed with error -22 [ 242.599227][ T5233] usb 4-1: USB disconnect, device number 19 [ 242.836743][ T7929] tun0: tun_chr_ioctl cmd 1074025676 [ 243.116891][ T7933] dlm: non-version read from control device 36 [ 243.439855][ T5285] usb 5-1: USB disconnect, device number 37 [ 243.849513][ T7945] tun0: tun_chr_ioctl cmd 35108 [ 244.110689][ T9] gspca_ov534_9: sccb_read failed 1 [ 244.149071][ T5231] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 244.159359][ T5231] Bluetooth: hci0: Injecting HCI hardware error event [ 244.170480][ T5231] Bluetooth: hci0: hardware error 0x00 [ 244.889093][ T7963] netlink: 24 bytes leftover after parsing attributes in process `syz.0.520'. [ 244.928652][ T7963] netlink: 24 bytes leftover after parsing attributes in process `syz.0.520'. [ 244.968238][ T7963] netlink: 24 bytes leftover after parsing attributes in process `syz.0.520'. [ 244.994106][ T7967] fuse: Unknown parameter '0x0000000000000004' [ 245.017777][ T7968] IPVS: Unknown mcast interface: ip6erspan0 [ 245.172309][ T7963] netlink: 24 bytes leftover after parsing attributes in process `syz.0.520'. [ 245.194961][ T7963] netlink: 24 bytes leftover after parsing attributes in process `syz.0.520'. [ 245.208338][ T7963] netlink: 24 bytes leftover after parsing attributes in process `syz.0.520'. [ 245.299580][ T5283] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 245.309672][ T9] gspca_ov534_9: reg_w failed -110 [ 245.366766][ T7963] netlink: 24 bytes leftover after parsing attributes in process `syz.0.520'. [ 245.387418][ T7963] netlink: 24 bytes leftover after parsing attributes in process `syz.0.520'. [ 245.409145][ T7963] netlink: 24 bytes leftover after parsing attributes in process `syz.0.520'. [ 245.458608][ T5283] usb 4-1: Using ep0 maxpacket: 16 [ 245.471645][ T5283] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 245.488648][ T9] gspca_ov534_9: Unknown sensor 0000 [ 245.488736][ T9] ov534_9 3-1:0.0: probe with driver ov534_9 failed with error -22 [ 245.527313][ T5283] usb 4-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 245.549399][ T5283] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.574181][ T5283] usb 4-1: config 0 descriptor?? [ 245.594021][ T5283] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input8 [ 245.807101][ T5307] usb 3-1: USB disconnect, device number 23 [ 245.809882][ T7971] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 245.842222][ T7971] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 245.894699][ T7971] input: syz0 as /devices/virtual/input/input9 [ 245.987717][ T4672] bcm5974 4-1:0.0: could not read from device [ 246.017571][ T5283] usb 4-1: USB disconnect, device number 20 [ 246.019106][ T4672] bcm5974 4-1:0.0: could not read from device [ 246.042553][ T5243] bcm5974 4-1:0.0: could not read from device [ 246.228579][ T5231] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 246.242122][ T1121] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.272653][ T1121] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 246.362600][ T1121] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.397309][ T1121] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 246.524948][ T1121] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.574817][ T1121] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 246.705748][ T1121] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.727680][ T1121] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 246.783617][ T8002] bridge0: port 3(erspan0) entered blocking state [ 246.796699][ T8002] bridge0: port 3(erspan0) entered disabled state [ 246.812251][ T5237] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 246.819779][ T8002] erspan0: entered allmulticast mode [ 246.826482][ T5237] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 246.830742][ T8002] erspan0: entered promiscuous mode [ 246.839498][ T5237] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 246.847131][ T8002] bridge0: port 3(erspan0) entered blocking state [ 246.847205][ T8002] bridge0: port 3(erspan0) entered forwarding state [ 246.866150][ T5237] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 246.872752][ T5237] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 246.874865][ T5237] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 246.998700][ T5282] usb 4-1: new low-speed USB device number 21 using dummy_hcd [ 247.042442][ T1121] bridge_slave_1: left allmulticast mode [ 247.072666][ T1121] bridge_slave_1: left promiscuous mode [ 247.093057][ T1121] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.110756][ T1121] bridge_slave_0: left allmulticast mode [ 247.117433][ T1121] bridge_slave_0: left promiscuous mode [ 247.128155][ T1121] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.168675][ T5282] usb 4-1: Invalid ep0 maxpacket: 64 [ 247.298591][ T5282] usb 4-1: new low-speed USB device number 22 using dummy_hcd [ 247.448709][ T5282] usb 4-1: Invalid ep0 maxpacket: 64 [ 247.457486][ T5282] usb usb4-port1: attempt power cycle [ 247.611774][ T1121] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 247.623552][ T1121] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 247.635248][ T1121] bond0 (unregistering): Released all slaves [ 247.798614][ T5282] usb 4-1: new low-speed USB device number 23 using dummy_hcd [ 247.839753][ T5282] usb 4-1: Invalid ep0 maxpacket: 64 [ 247.978925][ T5282] usb 4-1: new low-speed USB device number 24 using dummy_hcd [ 248.046260][ T5282] usb 4-1: Invalid ep0 maxpacket: 64 [ 248.068021][ T5282] usb usb4-port1: unable to enumerate USB device [ 248.208400][ T8006] chnl_net:caif_netlink_parms(): no params data found [ 248.314489][ T1121] hsr_slave_0: left promiscuous mode [ 248.341097][ T1121] hsr_slave_1: left promiscuous mode [ 248.356065][ T1121] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 248.369747][ T1121] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 248.397416][ T1121] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 248.431364][ T1121] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 248.503532][ T1121] veth1_macvtap: left promiscuous mode [ 248.521411][ T1121] veth0_macvtap: left promiscuous mode [ 248.532964][ T1121] veth1_vlan: left promiscuous mode [ 248.549737][ T1121] veth0_vlan: left promiscuous mode [ 248.950253][ T5231] Bluetooth: hci2: command tx timeout [ 249.469835][ T5282] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 249.516631][ T1121] team0 (unregistering): Port device team_slave_1 removed [ 249.571975][ T1121] team0 (unregistering): Port device team_slave_0 removed [ 249.634826][ T5282] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 249.647858][ T5282] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.664483][ T5282] usb 3-1: Product: syz [ 249.669240][ T5282] usb 3-1: Manufacturer: syz [ 249.673982][ T5282] usb 3-1: SerialNumber: syz [ 249.692158][ T5282] usb 3-1: config 0 descriptor?? [ 250.104081][ T5282] usb 3-1: Firmware: major: 78, minor: 144, hardware type: ATUSB (2) [ 250.124230][ T5233] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 250.326792][ T5233] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 250.341840][ T5233] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 250.395740][ T5233] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 250.415253][ T5233] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 250.428940][ T5282] usb 3-1: failed to fetch extended address, random address set [ 250.436066][ T5233] usb 4-1: Manufacturer: syz [ 250.449647][ T5233] usb 4-1: config 0 descriptor?? [ 250.558830][ T5233] rc_core: IR keymap rc-hauppauge not found [ 250.571431][ T5233] Registered IR keymap rc-empty [ 250.576958][ T5282] usb 3-1: USB disconnect, device number 24 [ 250.581683][ T5233] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 250.597956][ T5233] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input10 [ 250.692625][ T8046] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 250.753797][ T8046] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 250.805720][ T8006] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.822045][ T8006] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.848356][ T8006] bridge_slave_0: entered allmulticast mode [ 250.885030][ T8006] bridge_slave_0: entered promiscuous mode [ 250.912375][ T8006] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.929221][ T8006] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.968921][ T8006] bridge_slave_1: entered allmulticast mode [ 250.976592][ T8006] bridge_slave_1: entered promiscuous mode [ 251.029204][ T5231] Bluetooth: hci2: command tx timeout [ 251.132713][ T8065] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 251.295674][ T8006] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 251.345588][ T8006] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 251.523335][ C1] igorplugusb 4-1:0.0: Error: urb status = -32 [ 251.536817][ T8006] team0: Port device team_slave_0 added [ 251.557907][ T8006] team0: Port device team_slave_1 added [ 251.587906][ T8046] batman_adv: batadv0: Adding interface: wlan1 [ 251.608728][ T8046] batman_adv: batadv0: The MTU of interface wlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 251.636368][ T8046] batman_adv: batadv0: Interface activated: wlan1 [ 251.816712][ T8073] batman_adv: batadv0: Interface deactivated: wlan1 [ 251.996485][ T8046] batman_adv: batadv0: Removing interface: wlan1 [ 252.061148][ T8006] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 252.084499][ T8006] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 252.140862][ T5283] usb 4-1: USB disconnect, device number 25 [ 252.172339][ T8006] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 252.209921][ T8006] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 252.240402][ T8006] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 252.297378][ T8006] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 252.361857][ T8006] hsr_slave_0: entered promiscuous mode [ 252.376589][ T8006] hsr_slave_1: entered promiscuous mode [ 252.429467][ T8006] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 252.448161][ T8006] Cannot create hsr debugfs directory [ 253.110677][ T5231] Bluetooth: hci2: command tx timeout [ 253.462469][ T8006] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 253.482516][ T8006] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 253.512036][ T8006] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 253.541499][ T8006] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 253.721080][ T8006] 8021q: adding VLAN 0 to HW filter on device bond0 [ 253.755945][ T8006] 8021q: adding VLAN 0 to HW filter on device team0 [ 253.779217][ T2562] bridge0: port 1(bridge_slave_0) entered blocking state [ 253.786389][ T2562] bridge0: port 1(bridge_slave_0) entered forwarding state [ 253.822807][ T3043] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.830033][ T3043] bridge0: port 2(bridge_slave_1) entered forwarding state [ 254.030845][ T8006] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 254.338815][ T1121] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.419198][ T8006] veth0_vlan: entered promiscuous mode [ 254.449738][ T8006] veth1_vlan: entered promiscuous mode [ 254.527956][ T1121] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.679179][ T1121] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.777846][ T8006] veth0_macvtap: entered promiscuous mode [ 254.919427][ T1121] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.981863][ T8006] veth1_macvtap: entered promiscuous mode [ 255.012454][ T5237] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 255.026951][ T5237] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 255.068016][ T8006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 255.074697][ T5237] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 255.103762][ T8006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.158855][ T8006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 255.160006][ T5237] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 255.188896][ T5237] Bluetooth: hci2: command tx timeout [ 255.194736][ T5242] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 255.202309][ T5237] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 255.209736][ T8006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.220563][ T8006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 255.232967][ T8006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.245118][ T8006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 255.255965][ T8006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.270167][ T8006] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 255.335837][ T8006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 255.386764][ T8006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.429005][ T8006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 255.450121][ T8006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.488563][ T8006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 255.508540][ T8006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.538650][ T8006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 255.578612][ T8006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.610958][ T8006] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 255.685455][ T8006] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.720263][ T8006] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.770455][ T8006] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.797518][ T8006] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.996492][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.008585][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.012697][ T1121] erspan0: left allmulticast mode [ 256.035389][ T1121] erspan0: left promiscuous mode [ 256.055350][ T1121] bridge0: port 3(erspan0) entered disabled state [ 256.074858][ T1121] bridge_slave_1: left allmulticast mode [ 256.086501][ T1121] bridge_slave_1: left promiscuous mode [ 256.092536][ T1121] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.110240][ T1121] bridge_slave_0: left allmulticast mode [ 256.116151][ T1121] bridge_slave_0: left promiscuous mode [ 256.136640][ T1121] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.269163][ T5237] Bluetooth: hci1: command tx timeout [ 257.282683][ T1121] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 257.344184][ T1121] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 257.389869][ T1121] bond0 (unregistering): Released all slaves [ 257.944669][ T3043] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 257.993681][ T3043] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 258.188716][ T1121] hsr_slave_0: left promiscuous mode [ 258.216405][ T1121] hsr_slave_1: left promiscuous mode [ 258.257298][ T1121] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 258.289729][ T1121] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 258.307109][ T1121] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 258.332916][ T1121] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 258.392058][ T1121] veth1_macvtap: left promiscuous mode [ 258.397656][ T1121] veth0_macvtap: left promiscuous mode [ 258.428746][ T1121] veth1_vlan: left promiscuous mode [ 258.434120][ T1121] veth0_vlan: left promiscuous mode [ 259.349374][ T5237] Bluetooth: hci1: command tx timeout [ 259.822640][ T1121] team0 (unregistering): Port device team_slave_1 removed [ 259.882163][ T1121] team0 (unregistering): Port device team_slave_0 removed [ 260.230323][ T8239] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 260.651434][ T8192] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.781270][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 260.851549][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 260.904023][ T8139] chnl_net:caif_netlink_parms(): no params data found [ 261.339970][ T8139] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.347130][ T8139] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.411779][ T8139] bridge_slave_0: entered allmulticast mode [ 261.428629][ T5237] Bluetooth: hci1: command tx timeout [ 261.440886][ T8139] bridge_slave_0: entered promiscuous mode [ 261.532951][ T8139] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.565274][ T8139] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.614621][ T8139] bridge_slave_1: entered allmulticast mode [ 261.644215][ T8139] bridge_slave_1: entered promiscuous mode [ 261.964768][ T8139] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 261.977090][ T8139] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 262.143868][ T8139] team0: Port device team_slave_0 added [ 262.174676][ T8139] team0: Port device team_slave_1 added [ 262.266279][ T8139] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 262.287106][ T8139] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 262.368614][ T5293] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 262.389029][ T8139] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 262.433488][ T8139] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 262.458490][ T8139] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 262.529313][ T5293] usb 1-1: Using ep0 maxpacket: 16 [ 262.539170][ T8139] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 262.571971][ T5293] usb 1-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 262.581431][ T5293] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.607442][ T5293] usb 1-1: Product: syz [ 262.622676][ T5293] usb 1-1: Manufacturer: syz [ 262.627371][ T5293] usb 1-1: SerialNumber: syz [ 262.664409][ T5293] usb 1-1: config 0 descriptor?? [ 262.687493][ T5293] as10x_usb: device has been detected [ 262.703836][ T5293] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 262.754258][ T8139] hsr_slave_0: entered promiscuous mode [ 262.778033][ T5293] usb 1-1: DVB: registering adapter 1 frontend 0 (Sky IT Digital Key (green led))... [ 262.795517][ T8139] hsr_slave_1: entered promiscuous mode [ 262.821763][ T8139] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 262.838846][ T8139] Cannot create hsr debugfs directory [ 262.858308][ T5293] as10x_usb: error during firmware upload part1 [ 262.881852][ T5293] Registered device Sky IT Digital Key (green led) [ 262.957922][ T8283] random: crng reseeded on system resumption [ 263.508673][ T5237] Bluetooth: hci1: command tx timeout [ 264.008743][ T5293] usb 1-1: USB disconnect, device number 25 [ 264.049661][ T5293] Unregistered device Sky IT Digital Key (green led) [ 264.069213][ T5293] as10x_usb: device has been disconnected [ 264.253930][ T8139] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 264.298074][ T8139] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 264.351205][ T8139] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 264.391760][ T8139] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 264.563744][ T8139] 8021q: adding VLAN 0 to HW filter on device bond0 [ 264.636241][ T8139] 8021q: adding VLAN 0 to HW filter on device team0 [ 264.685351][ T1121] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.692568][ T1121] bridge0: port 1(bridge_slave_0) entered forwarding state [ 264.751136][ T1121] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.758337][ T1121] bridge0: port 2(bridge_slave_1) entered forwarding state [ 265.007163][ T8139] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 265.051069][ T8139] veth0_vlan: entered promiscuous mode [ 265.090531][ T8139] veth1_vlan: entered promiscuous mode [ 265.162851][ T8139] veth0_macvtap: entered promiscuous mode [ 265.180257][ T8139] veth1_macvtap: entered promiscuous mode [ 265.197632][ T8139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 265.238503][ T8139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.268551][ T8139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 265.288654][ T8139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.316990][ T8139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 265.336591][ T8139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.346638][ T8139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 265.357785][ T8139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.383817][ T8139] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 265.430638][ T8139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 265.448463][ T8139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.458351][ T8139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 265.477342][ T8139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.488372][ T8139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 265.500407][ T8139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.510443][ T8139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 265.520999][ T8139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.537257][ T8139] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 265.617379][ T8139] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.654320][ T8139] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.667475][ T8139] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.687961][ T8139] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.036207][ T2562] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 266.070801][ T2562] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 266.164197][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 266.207578][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 267.421273][ T29] audit: type=1326 audit(1727896188.611:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8349 comm="syz.2.595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc32317dff9 code=0x7ffc0000 [ 267.483355][ T29] audit: type=1326 audit(1727896188.631:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8349 comm="syz.2.595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fc32317dff9 code=0x7ffc0000 [ 267.583224][ T29] audit: type=1326 audit(1727896188.631:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8349 comm="syz.2.595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc32317dff9 code=0x7ffc0000 [ 267.670981][ T29] audit: type=1326 audit(1727896188.641:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8349 comm="syz.2.595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc32317dff9 code=0x7ffc0000 [ 267.723083][ T29] audit: type=1326 audit(1727896188.641:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8349 comm="syz.2.595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc32317dff9 code=0x7ffc0000 [ 267.745487][ C1] vkms_vblank_simulate: vblank timer overrun [ 267.839478][ T8373] misc userio: Invalid payload size [ 267.862353][ T29] audit: type=1326 audit(1727896188.641:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8349 comm="syz.2.595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fc32317dff9 code=0x7ffc0000 [ 267.919904][ T29] audit: type=1326 audit(1727896188.641:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8349 comm="syz.2.595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc32317dff9 code=0x7ffc0000 [ 267.983258][ T29] audit: type=1326 audit(1727896188.641:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8349 comm="syz.2.595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7fc32317dff9 code=0x7ffc0000 [ 268.048139][ T29] audit: type=1326 audit(1727896188.641:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8349 comm="syz.2.595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc32317dff9 code=0x7ffc0000 [ 268.115177][ T29] audit: type=1326 audit(1727896188.641:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8349 comm="syz.2.595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc32317dff9 code=0x7ffc0000 [ 269.115900][ T52] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.330601][ T52] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.482860][ T8385] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 269.519566][ T52] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.700957][ T52] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.006849][ T5231] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 270.026180][ T5231] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 270.040582][ T5231] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 270.099206][ T5231] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 270.107211][ T5231] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 270.116326][ T5231] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 270.139646][ T52] bridge_slave_1: left allmulticast mode [ 270.145412][ T52] bridge_slave_1: left promiscuous mode [ 270.153205][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.275878][ T52] bridge_slave_0: left allmulticast mode [ 270.295223][ T52] bridge_slave_0: left promiscuous mode [ 270.324952][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.466338][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 271.497543][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 271.524810][ T52] bond0 (unregistering): Released all slaves [ 271.551609][ T8402] netlink: 20 bytes leftover after parsing attributes in process `syz.1.612'. [ 272.240989][ T5231] Bluetooth: hci0: command tx timeout [ 272.600656][ T52] hsr_slave_0: left promiscuous mode [ 272.619276][ T52] hsr_slave_1: left promiscuous mode [ 272.661320][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 272.699006][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 272.722015][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 272.754930][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 272.838346][ T52] veth1_macvtap: left promiscuous mode [ 272.873920][ T52] veth0_macvtap: left promiscuous mode [ 272.896103][ T52] veth1_vlan: left promiscuous mode [ 272.917197][ T52] veth0_vlan: left promiscuous mode [ 272.966912][ T5237] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 272.984607][ T5237] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 273.003783][ T5237] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 273.022594][ T5237] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 273.039944][ T5237] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 273.050360][ T5237] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 273.148552][ T5285] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 273.321410][ T5285] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 273.338063][ T5285] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 273.387187][ T5285] usb 5-1: New USB device found, idVendor=09da, idProduct=022b, bcdDevice= 0.00 [ 273.396583][ T5285] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.419863][ T5285] usb 5-1: config 0 descriptor?? [ 273.647083][ T5285] usb 5-1: string descriptor 0 read error: -71 [ 273.680993][ T5285] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 273.708307][ T5285] usb 5-1: USB disconnect, device number 38 [ 274.102056][ T52] team0 (unregistering): Port device team_slave_1 removed [ 274.161010][ T52] team0 (unregistering): Port device team_slave_0 removed [ 274.308616][ T5231] Bluetooth: hci0: command tx timeout [ 275.111016][ T5231] Bluetooth: hci4: command tx timeout [ 275.381340][ T8403] chnl_net:caif_netlink_parms(): no params data found [ 275.988899][ T5231] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 275.999032][ T5231] Bluetooth: hci3: Injecting HCI hardware error event [ 276.007085][ T5231] Bluetooth: hci3: hardware error 0x00 [ 276.206738][ T8403] bridge0: port 1(bridge_slave_0) entered blocking state [ 276.214297][ T8403] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.222280][ T8403] bridge_slave_0: entered allmulticast mode [ 276.232452][ T8403] bridge_slave_0: entered promiscuous mode [ 276.258055][ T8403] bridge0: port 2(bridge_slave_1) entered blocking state [ 276.324938][ T8403] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.377036][ T8403] bridge_slave_1: entered allmulticast mode [ 276.388667][ T5237] Bluetooth: hci0: command tx timeout [ 276.429663][ T8403] bridge_slave_1: entered promiscuous mode [ 276.604925][ T8403] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 276.617351][ T8403] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 276.651824][ T8460] chnl_net:caif_netlink_parms(): no params data found [ 276.737919][ T8403] team0: Port device team_slave_0 added [ 276.823127][ T8403] team0: Port device team_slave_1 added [ 276.990603][ T8403] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 276.997625][ T8403] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 277.078494][ T8403] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 277.218640][ T5237] Bluetooth: hci4: command tx timeout [ 277.243852][ T8403] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 277.251491][ T8403] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 277.284070][ T8403] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 277.394576][ T8460] bridge0: port 1(bridge_slave_0) entered blocking state [ 277.394725][ T8460] bridge0: port 1(bridge_slave_0) entered disabled state [ 277.394877][ T8460] bridge_slave_0: entered allmulticast mode [ 277.398961][ T8460] bridge_slave_0: entered promiscuous mode [ 277.456254][ T8460] bridge0: port 2(bridge_slave_1) entered blocking state [ 277.456380][ T8460] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.456542][ T8460] bridge_slave_1: entered allmulticast mode [ 277.457721][ T8460] bridge_slave_1: entered promiscuous mode [ 277.545297][ T8403] hsr_slave_0: entered promiscuous mode [ 277.546473][ T8403] hsr_slave_1: entered promiscuous mode [ 277.657491][ T8460] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 277.678221][ T8460] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 277.824697][ T8460] team0: Port device team_slave_0 added [ 277.859457][ T8460] team0: Port device team_slave_1 added [ 278.068938][ T5231] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 278.384527][ T8460] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 278.422210][ T8460] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 278.474453][ T5231] Bluetooth: hci0: command tx timeout [ 278.548722][ T8460] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 278.742356][ T8460] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 278.761228][ T8460] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 278.798298][ T8460] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 279.110522][ T8460] hsr_slave_0: entered promiscuous mode [ 279.119957][ T8460] hsr_slave_1: entered promiscuous mode [ 279.149229][ T8460] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 279.156869][ T8460] Cannot create hsr debugfs directory [ 279.268887][ T5231] Bluetooth: hci4: command tx timeout [ 280.003754][ T8460] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.040307][ T8403] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 280.082402][ T8403] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 280.121781][ T8403] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 280.237118][ T8460] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.298554][ T8403] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 280.511794][ T8460] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.585983][ T8581] syzkaller1: entered promiscuous mode [ 280.608622][ T8581] syzkaller1: entered allmulticast mode [ 280.770515][ T8588] netlink: 'syz.3.653': attribute type 10 has an invalid length. [ 280.784360][ T8588] netlink: 55 bytes leftover after parsing attributes in process `syz.3.653'. [ 281.349800][ T5231] Bluetooth: hci4: command tx timeout [ 281.533370][ T8403] 8021q: adding VLAN 0 to HW filter on device bond0 [ 281.615916][ T8460] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 281.683036][ T8403] 8021q: adding VLAN 0 to HW filter on device team0 [ 281.704283][ T8460] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 281.750162][ T8460] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 281.805820][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 281.813069][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 281.855364][ T8460] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 281.893089][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 281.900425][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 281.989524][ T8616] tipc: Failed to remove unknown binding: 66,1,1/0:2489204476/2489204478 [ 282.074889][ T8616] tipc: Failed to remove unknown binding: 66,1,1/0:2489204476/2489204478 [ 282.244474][ T8460] 8021q: adding VLAN 0 to HW filter on device bond0 [ 282.264992][ T8403] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 282.343073][ T8460] 8021q: adding VLAN 0 to HW filter on device team0 [ 282.378167][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 282.385519][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 282.445062][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 282.452308][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 282.469292][ T5231] Bluetooth: hci1: command tx timeout [ 282.658281][ T8403] veth0_vlan: entered promiscuous mode [ 282.733827][ T8403] veth1_vlan: entered promiscuous mode [ 282.866727][ T8460] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 282.888287][ T8403] veth0_macvtap: entered promiscuous mode [ 282.916925][ T8403] veth1_macvtap: entered promiscuous mode [ 283.043562][ T8403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 283.076913][ T8403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.097288][ T8403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 283.109521][ T8403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.130166][ T8403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 283.159555][ T8403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.178717][ T8403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 283.201471][ T8403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.229800][ T8403] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 283.277235][ T8403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 283.299652][ T8403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.308717][ T9] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 283.327533][ T8403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 283.349233][ T8403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.373170][ T8403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 283.409193][ T8403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.440082][ T8403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 283.467316][ T8403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.503350][ T8403] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 283.508859][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 283.522946][ T9] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ee [ 283.556204][ T8403] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.558682][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.591083][ T8403] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.599270][ T9] usb 4-1: Product: syz [ 283.604646][ T9] usb 4-1: Manufacturer: syz [ 283.618573][ T8403] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.630756][ T9] usb 4-1: SerialNumber: syz [ 283.645691][ T8403] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.647997][ T9] usb 4-1: config 0 descriptor?? [ 283.682883][ T8460] veth0_vlan: entered promiscuous mode [ 283.756317][ T8460] veth1_vlan: entered promiscuous mode [ 283.936299][ T9] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 283.984694][ T8460] veth0_macvtap: entered promiscuous mode [ 283.996716][ T8655] PKCS7: Unknown OID: [4] 5.25.264.112.81.102.117 [ 284.027367][ T8460] veth1_macvtap: entered promiscuous mode [ 284.034325][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 284.047315][ T8655] PKCS7: Only support pkcs7_signedData type [ 284.078597][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 284.156819][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 284.174325][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 284.245950][ T8460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 284.279945][ T8460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 284.296315][ T8460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 284.308106][ T8460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 284.338486][ T8460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 284.412867][ T9] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 284.426281][ T8460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 284.461035][ T9] usb 4-1: USB disconnect, device number 26 [ 284.509082][ T8460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 284.592214][ T8460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 284.645711][ T8460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 284.669977][ T8460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 284.681893][ T8460] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 284.709481][ T8460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 284.722583][ T8460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 284.759411][ T8460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 284.810668][ T8460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 284.855192][ T8460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 284.928044][ T8460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.007777][ T8460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 285.073156][ T8460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.296271][ T8460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 287.050799][ T8460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.486358][ T8460] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 288.096478][ T8460] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.139789][ T8460] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.393399][ T8460] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.101456][ T8460] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.808893][ T8678] netlink: 'syz.2.663': attribute type 10 has an invalid length. [ 289.948748][ T8678] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.017175][ T8678] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.090885][ T8678] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.136459][ T8678] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.255800][ T24] sched: DL replenish lagged too much [ 309.211807][ T8678] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.912352][ T8678] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.017886][ T8678] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.773859][ T8678] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.448990][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 318.455351][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 330.294636][ T8678] team0: Port device geneve1 added [ 334.014604][ T5237] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 334.024742][ T5237] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 334.040244][ T5237] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 334.053842][ T5237] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 334.062167][ T5237] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 334.070002][ T5237] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 334.274477][ T5231] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 334.295892][ T5231] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 334.305334][ T5231] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 334.314685][ T5231] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 334.334782][ T5231] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 334.342540][ T5231] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 334.569394][ T5242] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 334.598075][ T5242] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 334.638597][ T5242] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 334.651444][ T5242] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 334.659376][ T5242] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 334.666792][ T5242] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 334.929517][ T5231] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 334.939730][ T5231] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 334.958456][ T5231] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 334.991975][ T5231] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 335.000056][ T5231] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 335.013753][ T5231] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 335.637487][ T5242] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 335.649417][ T5242] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 335.657955][ T5242] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 335.672765][ T5242] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 335.683417][ T5242] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 335.691822][ T5242] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 335.907386][ T3043] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.152609][ T5231] Bluetooth: hci0: command tx timeout [ 336.629974][ T5231] Bluetooth: hci3: command tx timeout [ 336.869046][ T5231] Bluetooth: hci1: command tx timeout [ 337.111388][ T5231] Bluetooth: hci2: command tx timeout [ 337.748691][ T5231] Bluetooth: hci5: command tx timeout [ 338.228918][ T5231] Bluetooth: hci0: command tx timeout [ 338.708850][ T5231] Bluetooth: hci3: command tx timeout [ 338.948793][ T5231] Bluetooth: hci1: command tx timeout [ 339.199816][ T5242] Bluetooth: hci2: command tx timeout [ 339.486277][ T8715] chnl_net:caif_netlink_parms(): no params data found [ 339.757493][ T8721] chnl_net:caif_netlink_parms(): no params data found [ 339.787323][ T8712] chnl_net:caif_netlink_parms(): no params data found [ 339.806866][ T8726] chnl_net:caif_netlink_parms(): no params data found [ 339.826014][ T8714] chnl_net:caif_netlink_parms(): no params data found [ 339.833681][ T5242] Bluetooth: hci5: command tx timeout [ 340.311454][ T8715] bridge0: port 1(bridge_slave_0) entered blocking state [ 340.319069][ T5242] Bluetooth: hci0: command tx timeout [ 340.336542][ T8715] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.353188][ T8715] bridge_slave_0: entered allmulticast mode [ 340.369910][ T8715] bridge_slave_0: entered promiscuous mode [ 340.512467][ T8712] bridge0: port 1(bridge_slave_0) entered blocking state [ 340.528564][ T8712] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.535873][ T8712] bridge_slave_0: entered allmulticast mode [ 340.562095][ T8712] bridge_slave_0: entered promiscuous mode [ 340.586118][ T8715] bridge0: port 2(bridge_slave_1) entered blocking state [ 340.608584][ T8715] bridge0: port 2(bridge_slave_1) entered disabled state [ 340.615906][ T8715] bridge_slave_1: entered allmulticast mode [ 340.637139][ T8715] bridge_slave_1: entered promiscuous mode [ 340.791123][ T8712] bridge0: port 2(bridge_slave_1) entered blocking state [ 340.798308][ T8712] bridge0: port 2(bridge_slave_1) entered disabled state [ 340.806040][ T5242] Bluetooth: hci3: command tx timeout [ 340.827614][ T8712] bridge_slave_1: entered allmulticast mode [ 340.840043][ T8712] bridge_slave_1: entered promiscuous mode [ 340.930500][ T8715] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 341.028806][ T5242] Bluetooth: hci1: command tx timeout [ 341.268865][ T5242] Bluetooth: hci2: command tx timeout [ 341.373986][ T8715] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 341.465346][ T8726] bridge0: port 1(bridge_slave_0) entered blocking state [ 341.478970][ T8726] bridge0: port 1(bridge_slave_0) entered disabled state [ 341.486288][ T8726] bridge_slave_0: entered allmulticast mode [ 341.519072][ T8726] bridge_slave_0: entered promiscuous mode [ 341.526870][ T8721] bridge0: port 1(bridge_slave_0) entered blocking state [ 341.552697][ T8721] bridge0: port 1(bridge_slave_0) entered disabled state [ 341.571443][ T8721] bridge_slave_0: entered allmulticast mode [ 341.589131][ T8721] bridge_slave_0: entered promiscuous mode [ 341.608288][ T8721] bridge0: port 2(bridge_slave_1) entered blocking state [ 341.624750][ T8721] bridge0: port 2(bridge_slave_1) entered disabled state [ 341.641882][ T8721] bridge_slave_1: entered allmulticast mode [ 341.658795][ T8721] bridge_slave_1: entered promiscuous mode [ 341.679960][ T8712] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 341.863828][ T8726] bridge0: port 2(bridge_slave_1) entered blocking state [ 341.878812][ T8726] bridge0: port 2(bridge_slave_1) entered disabled state [ 341.886143][ T8726] bridge_slave_1: entered allmulticast mode [ 341.907723][ T8726] bridge_slave_1: entered promiscuous mode [ 341.914148][ T5242] Bluetooth: hci5: command tx timeout [ 342.389285][ T5242] Bluetooth: hci0: command tx timeout [ 342.868853][ T5242] Bluetooth: hci3: command tx timeout [ 343.118972][ T5242] Bluetooth: hci1: command tx timeout [ 343.348824][ T5242] Bluetooth: hci2: command tx timeout [ 343.988859][ T5242] Bluetooth: hci5: command tx timeout [ 378.872697][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.879338][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 394.219524][ T5231] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 394.256529][ T5231] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 394.265771][ T5231] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 394.274341][ T5231] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 394.284321][ T5231] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 394.292256][ T5231] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 395.113183][ T5242] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 395.127891][ T5242] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 395.137491][ T5242] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 395.147692][ T5242] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 395.156020][ T5242] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 395.163995][ T5242] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 395.298462][ T5231] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 395.318636][ T5231] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 395.339644][ T5231] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 395.347726][ T5231] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 395.356729][ T5231] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 395.365598][ T5231] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 395.652543][ T5242] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 395.663192][ T5242] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 395.672499][ T5242] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 395.682552][ T5242] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 395.698813][ T5242] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 395.709732][ T5242] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 396.061379][ T5242] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 396.071985][ T5242] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 396.081507][ T5242] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 396.100940][ T5242] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 396.109405][ T5242] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 396.117145][ T5242] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 396.388910][ T5242] Bluetooth: hci4: command tx timeout [ 397.270001][ T5242] Bluetooth: hci6: command tx timeout [ 397.437720][ T5242] Bluetooth: hci7: command tx timeout [ 397.748757][ T5242] Bluetooth: hci8: command tx timeout [ 398.148859][ T5242] Bluetooth: hci9: command tx timeout [ 398.477265][ T5242] Bluetooth: hci4: command tx timeout [ 399.351768][ T5242] Bluetooth: hci6: command tx timeout [ 399.517129][ T5242] Bluetooth: hci7: command tx timeout [ 399.829984][ T5242] Bluetooth: hci8: command tx timeout [ 400.228840][ T5242] Bluetooth: hci9: command tx timeout [ 400.557306][ T5242] Bluetooth: hci4: command tx timeout [ 401.428810][ T5242] Bluetooth: hci6: command tx timeout [ 401.597017][ T5242] Bluetooth: hci7: command tx timeout [ 401.908789][ T5242] Bluetooth: hci8: command tx timeout [ 402.308521][ T5242] Bluetooth: hci9: command tx timeout [ 402.637349][ T5242] Bluetooth: hci4: command tx timeout [ 403.509149][ T5242] Bluetooth: hci6: command tx timeout [ 403.677198][ T5242] Bluetooth: hci7: command tx timeout [ 403.988643][ T5242] Bluetooth: hci8: command tx timeout [ 404.388679][ T5242] Bluetooth: hci9: command tx timeout [ 414.288595][ T3043] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.050957][ T8712] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 415.098785][ T8714] bridge0: port 1(bridge_slave_0) entered blocking state [ 415.105959][ T8714] bridge0: port 1(bridge_slave_0) entered disabled state [ 415.168966][ T8714] bridge_slave_0: entered allmulticast mode [ 415.239015][ T8714] bridge_slave_0: entered promiscuous mode [ 415.339257][ T8715] team0: Port device team_slave_0 added [ 416.453360][ T3043] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.327950][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.334773][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 454.544480][ T5231] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 454.562483][ T5231] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 454.578820][ T5231] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 454.586962][ T5231] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 454.608477][ T5231] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 454.628865][ T5231] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 455.466705][ T5242] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 455.488683][ T5242] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 455.497488][ T5242] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 455.506139][ T5242] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 455.516315][ T5242] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 455.524244][ T5242] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 455.646427][ T5242] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 455.662492][ T5242] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 455.673343][ T5242] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 455.684983][ T5242] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 455.693141][ T5242] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 455.701194][ T5242] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 455.814979][ T5231] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 455.827424][ T5231] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 455.848706][ T5231] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 455.856867][ T5231] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 455.878748][ T5231] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 455.889916][ T5231] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 456.709632][ T5231] Bluetooth: hci0: command tx timeout [ 457.009367][ T5242] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 457.021553][ T5242] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 457.034398][ T5242] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 457.044218][ T5242] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 457.052391][ T5242] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 457.060245][ T5242] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 457.588907][ T5242] Bluetooth: hci1: command tx timeout [ 457.748654][ T5242] Bluetooth: hci2: command tx timeout [ 457.998693][ T5242] Bluetooth: hci3: command tx timeout [ 458.788696][ T5242] Bluetooth: hci0: command tx timeout [ 459.108749][ T5242] Bluetooth: hci5: command tx timeout [ 459.668782][ T5242] Bluetooth: hci1: command tx timeout [ 459.829390][ T5242] Bluetooth: hci2: command tx timeout [ 460.068778][ T5242] Bluetooth: hci3: command tx timeout [ 460.868785][ T5242] Bluetooth: hci0: command tx timeout [ 461.189087][ T5242] Bluetooth: hci5: command tx timeout [ 461.748820][ T5242] Bluetooth: hci1: command tx timeout [ 461.908632][ T5242] Bluetooth: hci2: command tx timeout [ 462.157435][ T5242] Bluetooth: hci3: command tx timeout [ 462.968397][ T5242] Bluetooth: hci0: command tx timeout [ 463.268634][ T5242] Bluetooth: hci5: command tx timeout [ 463.829936][ T5242] Bluetooth: hci1: command tx timeout [ 463.988789][ T5231] Bluetooth: hci2: command tx timeout [ 464.237257][ T5242] Bluetooth: hci3: command tx timeout [ 465.348634][ T5242] Bluetooth: hci5: command tx timeout [ 501.753226][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.772977][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 504.868926][ T46] kworker/1:1 (46) used greatest stack depth: 18640 bytes left [ 515.290404][ T5231] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 515.344423][ T5231] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 515.380449][ T5231] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 515.487131][ T5231] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 515.551503][ T5231] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 515.565617][ T5231] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 516.519734][ T5242] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 516.536223][ T5242] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 516.559802][ T5242] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 516.571935][ T5242] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 516.580230][ T5242] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 516.590237][ T5242] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 516.659183][ T5231] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 516.673643][ T5231] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 516.683735][ T5231] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 516.693865][ T5231] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 516.706181][ T5231] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 516.713830][ T5231] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 516.859836][ T5242] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 516.870772][ T5242] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 516.883910][ T5242] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 516.894031][ T5242] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 516.911022][ T5242] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 516.919794][ T5242] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 517.669058][ T8820] Bluetooth: hci10: command tx timeout [ 517.787514][ T8822] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 517.800785][ T8822] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 517.813224][ T8822] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 517.821656][ T8822] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 517.832641][ T8822] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 517.849831][ T8822] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 518.628709][ T8822] Bluetooth: hci11: command tx timeout [ 518.788671][ T8822] Bluetooth: hci12: command tx timeout [ 519.028937][ T8822] Bluetooth: hci13: command tx timeout [ 519.200482][ T8822] Bluetooth: hci4: command 0x0406 tx timeout [ 519.206856][ T8822] Bluetooth: hci6: command 0x0406 tx timeout [ 519.213086][ T8820] Bluetooth: hci7: command 0x0406 tx timeout [ 519.223683][ T8820] Bluetooth: hci8: command 0x0406 tx timeout [ 519.231298][ T8820] Bluetooth: hci9: command 0x0406 tx timeout [ 519.758742][ T8818] Bluetooth: hci10: command tx timeout [ 519.920789][ T8818] Bluetooth: hci14: command tx timeout [ 520.708782][ T8818] Bluetooth: hci11: command tx timeout [ 520.868674][ T8818] Bluetooth: hci12: command tx timeout [ 521.108869][ T8818] Bluetooth: hci13: command tx timeout [ 521.828557][ T8818] Bluetooth: hci10: command tx timeout [ 521.988565][ T8818] Bluetooth: hci14: command tx timeout [ 522.788791][ T8818] Bluetooth: hci11: command tx timeout [ 522.948673][ T8818] Bluetooth: hci12: command tx timeout [ 523.189087][ T8818] Bluetooth: hci13: command tx timeout [ 523.908717][ T8818] Bluetooth: hci10: command tx timeout [ 524.068608][ T8818] Bluetooth: hci14: command tx timeout [ 524.868774][ T8818] Bluetooth: hci11: command tx timeout [ 525.028747][ T8818] Bluetooth: hci12: command tx timeout [ 525.270184][ T8818] Bluetooth: hci13: command tx timeout [ 526.148841][ T8818] Bluetooth: hci14: command tx timeout [ 563.208607][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.214998][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 576.123660][ T8817] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 576.183823][ T8817] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 576.204891][ T8817] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 576.287695][ T8817] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 576.380454][ T8817] Bluetooth: hci15: unexpected cc 0x0c25 length: 249 > 3 [ 576.401685][ T8817] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 577.259757][ T8817] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 577.271510][ T8817] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 577.280377][ T8817] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 577.291234][ T8817] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 577.310737][ T8817] Bluetooth: hci16: unexpected cc 0x0c25 length: 249 > 3 [ 577.324403][ T8817] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 577.850725][ T8818] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 577.862060][ T8818] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 577.874703][ T8818] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 577.883585][ T8818] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 577.892480][ T8818] Bluetooth: hci17: unexpected cc 0x0c25 length: 249 > 3 [ 577.901742][ T8818] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 578.348069][ T8817] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 578.366732][ T8817] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 578.377234][ T8817] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 578.387161][ T8817] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 578.398858][ T8817] Bluetooth: hci18: unexpected cc 0x0c25 length: 249 > 3 [ 578.406409][ T8817] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 578.569637][ T8818] Bluetooth: hci15: command tx timeout [ 579.199347][ T30] INFO: task syz.2.663:8678 blocked for more than 143 seconds. [ 579.206979][ T30] Not tainted 6.12.0-rc1-syzkaller-00031-ge32cde8d2bd7 #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 579.239501][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 579.288458][ T30] task:syz.2.663 state:D stack:19704 pid:8678 tgid:8671 ppid:8403 flags:0x00004006 [ 579.378353][ T30] Call Trace: [ 579.381714][ T30] [ 579.384689][ T30] __schedule+0x1895/0x4b30 [ 579.441167][ T5242] Bluetooth: hci16: command tx timeout [ 579.457051][ T30] ? __pfx___schedule+0x10/0x10 [ 579.468364][ T30] ? __pfx_lock_release+0x10/0x10 [ 579.473540][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 579.494159][ T30] ? schedule+0x90/0x320 [ 579.508712][ T30] schedule+0x14b/0x320 [ 579.512973][ T30] schedule_preempt_disabled+0x13/0x30 [ 579.528362][ T30] __mutex_lock+0x6a7/0xd70 [ 579.532970][ T30] ? __mutex_lock+0x52a/0xd70 [ 579.537716][ T30] ? netdev_run_todo+0x7b2/0x1000 [ 579.558442][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 579.563589][ T30] ? __init_swait_queue_head+0xae/0x150 [ 579.583960][ T30] ? msleep+0xc6/0xe0 [ 579.588152][ T30] netdev_run_todo+0x7b2/0x1000 [ 579.608440][ T30] ? __pfx_netdev_run_todo+0x10/0x10 [ 579.613839][ T30] ? netdev_state_change+0xa8/0x1a0 [ 579.628829][ T30] ? __pfx_netdev_state_change+0x10/0x10 [ 579.634562][ T30] ? tun_chr_close+0x105/0x1b0 [ 579.655601][ T30] ? tun_chr_close+0x105/0x1b0 [ 579.661015][ T30] tun_chr_close+0x137/0x1b0 [ 579.666195][ T30] ? __pfx_tun_chr_close+0x10/0x10 [ 579.691774][ T30] __fput+0x23f/0x880 [ 579.695878][ T30] task_work_run+0x24f/0x310 [ 579.722309][ T30] ? kasan_quarantine_put+0xdc/0x230 [ 579.727697][ T30] ? __pfx_task_work_run+0x10/0x10 [ 579.738338][ T30] ? do_exit+0xa2a/0x28e0 [ 579.742751][ T30] ? kmem_cache_free+0x1a2/0x420 [ 579.758874][ T30] ? do_exit+0xa2a/0x28e0 [ 579.763302][ T30] do_exit+0xa2f/0x28e0 [ 579.767539][ T30] ? __pfx_do_exit+0x10/0x10 [ 579.786726][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 579.799214][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 579.805669][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 579.826934][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 579.841087][ T30] do_group_exit+0x207/0x2c0 [ 579.845790][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 579.858912][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 579.864300][ T30] get_signal+0x16a3/0x1740 [ 579.878777][ T30] ? __pfx_get_signal+0x10/0x10 [ 579.884000][ T30] arch_do_signal_or_restart+0x96/0x860 [ 579.901234][ T30] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 579.907496][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 579.927025][ T30] ? syscall_exit_to_user_mode+0xa3/0x370 [ 579.937181][ T30] syscall_exit_to_user_mode+0xc9/0x370 [ 579.948337][ T30] do_syscall_64+0x100/0x230 [ 579.968494][ T30] ? clear_bhb_loop+0x35/0x90 [ 579.973449][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 579.988600][ T5242] Bluetooth: hci17: command tx timeout [ 579.995962][ T30] RIP: 0033:0x7f2d8117dff9 [ 580.001115][ T30] RSP: 002b:00007f2d81f08038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 580.022304][ T30] RAX: 000000000000002e RBX: 00007f2d81336130 RCX: 00007f2d8117dff9 [ 580.038738][ T30] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000004 [ 580.046789][ T30] RBP: 00007f2d811f0296 R08: 0000000000000000 R09: 0000000000000000 [ 580.071316][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 580.088760][ T30] R13: 0000000000000000 R14: 00007f2d81336130 R15: 00007f2d8145fa28 [ 580.096955][ T30] [ 580.112878][ T30] INFO: task syz-executor:8773 blocked for more than 144 seconds. [ 580.129176][ T30] Not tainted 6.12.0-rc1-syzkaller-00031-ge32cde8d2bd7 #0 [ 580.137925][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 580.165209][ T30] task:syz-executor state:D stack:25680 pid:8773 tgid:8773 ppid:1 flags:0x00004006 [ 580.183330][ T30] Call Trace: [ 580.186685][ T30] [ 580.198699][ T30] __schedule+0x1895/0x4b30 [ 580.203328][ T30] ? __pfx___schedule+0x10/0x10 [ 580.208239][ T30] ? __pfx_lock_release+0x10/0x10 [ 580.226351][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 580.246269][ T30] ? schedule+0x90/0x320 [ 580.250862][ T30] schedule+0x14b/0x320 [ 580.255093][ T30] schedule_preempt_disabled+0x13/0x30 [ 580.277589][ T30] __mutex_lock+0x6a7/0xd70 [ 580.286239][ T30] ? __mutex_lock+0x52a/0xd70 [ 580.298398][ T30] ? ip_tunnel_init_net+0x20e/0x720 [ 580.303802][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 580.319890][ T30] ? read_word_at_a_time+0xe/0x20 [ 580.328342][ T30] ? sized_strscpy+0x8d/0x220 [ 580.333265][ T30] ip_tunnel_init_net+0x20e/0x720 [ 580.349081][ T30] ? __pfx_ip_tunnel_init_net+0x10/0x10 [ 580.354832][ T30] ? ops_init+0x75/0x590 [ 580.375195][ T30] ops_init+0x31e/0x590 [ 580.387009][ T30] ? lockdep_init_map_type+0xa1/0x910 [ 580.398339][ T30] setup_net+0x287/0x9e0 [ 580.402981][ T30] ? __pfx_down_read_killable+0x10/0x10 [ 580.424074][ T30] ? __pfx_setup_net+0x10/0x10 [ 580.435138][ T30] copy_net_ns+0x33f/0x570 [ 580.448980][ T30] create_new_namespaces+0x425/0x7b0 [ 580.454433][ T30] unshare_nsproxy_namespaces+0x124/0x180 [ 580.469080][ T5242] Bluetooth: hci18: command tx timeout [ 580.479915][ T30] ksys_unshare+0x619/0xc10 [ 580.484623][ T30] ? __pfx_ksys_unshare+0x10/0x10 [ 580.502937][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 580.517748][ T30] ? do_syscall_64+0x100/0x230 [ 580.523085][ T30] __x64_sys_unshare+0x38/0x40 [ 580.527915][ T30] do_syscall_64+0xf3/0x230 [ 580.547281][ T30] ? clear_bhb_loop+0x35/0x90 [ 580.558954][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 580.578390][ T30] RIP: 0033:0x7ff82e97f7f7 [ 580.582985][ T30] RSP: 002b:00007ff82ec5ffa8 EFLAGS: 00000206 ORIG_RAX: 0000000000000110 [ 580.600749][ T30] RAX: ffffffffffffffda RBX: 00007ff82e9f1a85 RCX: 00007ff82e97f7f7 [ 580.618665][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 580.626764][ T30] RBP: 0000000000000000 R08: 00007ff82f667d60 R09: 0000000000000000 [ 580.644623][ T5242] Bluetooth: hci15: command tx timeout [ 580.650435][ T8822] Bluetooth: hci2: command 0x0406 tx timeout [ 580.656504][ T8822] Bluetooth: hci0: command 0x0406 tx timeout [ 580.662780][ T8819] Bluetooth: hci1: command 0x0406 tx timeout [ 580.671672][ T5242] Bluetooth: hci3: command 0x0406 tx timeout [ 580.677753][ T5242] Bluetooth: hci5: command 0x0406 tx timeout [ 580.705339][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 000000000000000c [ 580.734692][ T30] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 580.748489][ T30] [ 580.758810][ T30] [ 580.758810][ T30] Showing all locks held in the system: [ 580.766600][ T30] 3 locks held by kworker/0:1/9: [ 580.788568][ T30] #0: ffff88801ac80948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 580.816315][ T30] #1: ffffc900000e7d00 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 580.838495][ T30] #2: ffffffff8fcd1748 (rtnl_mutex){+.+.}-{3:3}, at: switchdev_deferred_process_work+0xe/0x20 [ 580.866282][ T30] 3 locks held by kworker/1:0/25: [ 580.878330][ T30] 1 lock held by khungtaskd/30: [ 580.883620][ T30] #0: ffffffff8e937de0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 580.912711][ T30] 3 locks held by kworker/u8:6/1121: [ 580.918090][ T30] #0: ffff88814c0cd148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 580.941843][ T30] #1: ffffc900045a7d00 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 580.973328][ T30] #2: ffffffff8fcd1748 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_verify_work+0x19/0x30 [ 580.993808][ T30] 3 locks held by kworker/u8:9/2575: [ 581.007371][ T30] #0: ffff88801ac89148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 581.035417][ T30] #1: ffffc900099d7d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 581.055387][ T30] #2: ffffffff8fcd1748 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 581.068328][ T30] 7 locks held by kworker/u8:10/3043: [ 581.073864][ T30] #0: ffff88801baed948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 581.102807][ T30] #1: ffffc9000a577d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 581.126168][ T30] #2: ffffffff8fcc4c50 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 581.142810][ T30] #3: ffff888025eb30e8 (&dev->mutex){....}-{3:3}, at: devlink_pernet_pre_exit+0x13b/0x440 [ 581.158643][ T30] #4: ffff88805db08250 (&devlink->lock_key#21){+.+.}-{3:3}, at: devlink_pernet_pre_exit+0x14d/0x440 [ 581.184623][ T30] #5: ffffffff8fcd1748 (rtnl_mutex){+.+.}-{3:3}, at: nsim_destroy+0x71/0x5c0 [ 581.204246][ T30] #6: ffffffff8e7d1dd0 (cpu_hotplug_lock){++++}-{0:0}, at: unregister_netdevice_many_notify+0x5ea/0x1da0 [ 581.228440][ T30] 2 locks held by getty/4987: [ 581.233189][ T30] #0: ffff8880325aa0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 581.255562][ T30] #1: ffffc90002f062f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a6/0x1e00 [ 581.275127][ T30] 5 locks held by kworker/u9:2/5231: [ 581.288350][ T30] #0: ffff8880813bd148 ((wq_completion)hci0){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 581.308662][ T30] #1: ffffc90003837d00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 581.335833][ T30] #2: ffff888099964d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x1ec/0x400 [ 581.353422][ T30] #3: ffff888099964078 (&hdev->lock){+.+.}-{3:3}, at: hci_abort_conn_sync+0x1ea/0xde0 [ 581.372601][ T30] #4: ffffffff8fe3dfa8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_failed+0x15d/0x300 [ 581.396760][ T30] 6 locks held by kworker/u9:4/5237: [ 581.407445][ T30] #0: ffff888045ebf148 ((wq_completion)hci1){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 581.428691][ T30] #1: ffffc900038a7d00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 581.457273][ T30] #2: ffff88802fea0d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x1ec/0x400 [ 581.473659][ T30] #3: ffff88802fea0078 (&hdev->lock){+.+.}-{3:3}, at: hci_abort_conn_sync+0x1ea/0xde0 [ 581.491699][ T30] #4: ffffffff8fe3dfa8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_failed+0x15d/0x300 [ 581.508801][ T5242] Bluetooth: hci16: command tx timeout [ 581.551927][ T30] #5: ffffffff8e93d378 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830 [ 581.576858][ T30] 8 locks held by kworker/1:7/5307: [ 581.582453][ T30] 1 lock held by syz.2.663/8678: [ 581.587467][ T30] #0: ffffffff8fcd1748 (rtnl_mutex){+.+.}-{3:3}, at: netdev_run_todo+0x7b2/0x1000 [ 581.616842][ T30] 2 locks held by syz-executor/8765: [ 581.628521][ T30] #0: ffffffff8fcc4c50 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 581.638064][ T30] #1: ffffffff8fcd1748 (rtnl_mutex){+.+.}-{3:3}, at: ip_tunnel_init_net+0x20e/0x720 [ 581.660858][ T30] 2 locks held by syz-executor/8767: [ 581.666396][ T30] #0: ffffffff8fcc4c50 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 581.690269][ T30] #1: ffffffff8fcd1748 (rtnl_mutex){+.+.}-{3:3}, at: wg_netns_pre_exit+0x1f/0x1e0 [ 581.715279][ T30] 2 locks held by syz-executor/8770: [ 581.728548][ T30] #0: ffffffff8fcc4c50 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 581.738125][ T30] #1: ffffffff8fcd1748 (rtnl_mutex){+.+.}-{3:3}, at: ip_tunnel_init_net+0x20e/0x720 [ 581.759963][ T30] 2 locks held by syz-executor/8773: [ 581.765341][ T30] #0: ffffffff8fcc4c50 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 581.789371][ T30] #1: ffffffff8fcd1748 (rtnl_mutex){+.+.}-{3:3}, at: ip_tunnel_init_net+0x20e/0x720 [ 581.818362][ T30] 2 locks held by syz-executor/8775: [ 581.823727][ T30] #0: ffffffff8fcc4c50 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 581.847985][ T30] #1: ffffffff8fcd1748 (rtnl_mutex){+.+.}-{3:3}, at: ip_tunnel_init_net+0x20e/0x720 [ 581.868426][ T30] 2 locks held by syz-executor/8792: [ 581.874495][ T30] #0: ffffffff8fcc4c50 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 581.899388][ T30] #1: ffffffff8fcd1748 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 581.924520][ T30] 2 locks held by syz-executor/8794: [ 581.938423][ T30] #0: ffffffff8fcc4c50 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 581.958337][ T30] #1: ffffffff8fcd1748 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 581.978392][ T30] 2 locks held by syz-executor/8797: [ 581.983754][ T30] #0: ffffffff8fcc4c50 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 582.013795][ T30] #1: ffffffff8fcd1748 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 582.028326][ T30] 2 locks held by syz-executor/8799: [ 582.033727][ T30] #0: ffffffff8fcc4c50 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 582.057519][ T30] #1: ffffffff8fcd1748 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 582.074199][ T30] 2 locks held by syz-executor/8802: [ 582.080098][ T5242] Bluetooth: hci17: command tx timeout [ 582.098877][ T30] #0: ffffffff8fcc4c50 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 582.118938][ T30] #1: ffffffff8fcd1748 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 582.138422][ T30] 2 locks held by syz-executor/8809: [ 582.143790][ T30] #0: ffffffff8fcc4c50 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 582.170256][ T30] #1: ffffffff8fcd1748 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 582.188354][ T30] 2 locks held by syz-executor/8813: [ 582.193713][ T30] #0: ffffffff8fcc4c50 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 582.223807][ T30] #1: ffffffff8fcd1748 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 582.248362][ T30] 2 locks held by syz-executor/8814: [ 582.253726][ T30] #0: ffffffff8fcc4c50 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 582.278466][ T30] #1: ffffffff8fcd1748 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 582.298607][ T30] 2 locks held by syz-executor/8816: [ 582.303976][ T30] #0: ffffffff8fcc4c50 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 582.333305][ T30] #1: ffffffff8fcd1748 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 582.348521][ T30] 5 locks held by kworker/u9:0/8817: [ 582.353885][ T30] #0: ffff888042f5b948 ((wq_completion)hci3){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 582.377394][ T30] #1: ffffc9000373fd00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 582.399128][ T30] #2: ffff88803e554d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x1ec/0x400 [ 582.425808][ T30] #3: ffff88803e554078 (&hdev->lock){+.+.}-{3:3}, at: hci_abort_conn_sync+0x1ea/0xde0 [ 582.438423][ T30] #4: ffffffff8e93d378 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x381/0x830 [ 582.463546][ T30] 5 locks held by kworker/u9:1/8818: [ 582.478779][ T30] #0: ffff88808c445148 ((wq_completion)hci5){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 582.500096][ T30] #1: ffffc900032cfd00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 582.531608][ T30] #2: ffff88808e7c0d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x1ec/0x400 [ 582.548716][ T5242] Bluetooth: hci18: command tx timeout [ 582.554412][ T30] #3: ffff88808e7c0078 (&hdev->lock){+.+.}-{3:3}, at: hci_abort_conn_sync+0x1ea/0xde0 [ 582.580488][ T30] #4: ffffffff8fe3dfa8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_failed+0x15d/0x300 [ 582.598804][ T30] 2 locks held by syz-executor/8824: [ 582.604166][ T30] #0: ffffffff8fcc4c50 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 582.637636][ T30] #1: ffffffff8fcd1748 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 582.658399][ T30] 5 locks held by kworker/u9:8/8825: [ 582.663793][ T30] #0: ffff888081271148 ((wq_completion)hci2){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 582.688497][ T30] #1: ffffc900033ffd00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 582.711803][ T5242] Bluetooth: hci15: command tx timeout [ 582.728410][ T30] #2: ffff88804b9c0d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x1ec/0x400 [ 582.750801][ T30] #3: ffff88804b9c0078 (&hdev->lock){+.+.}-{3:3}, at: hci_abort_conn_sync+0x1ea/0xde0 [ 582.775247][ T30] #4: ffffffff8fe3dfa8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_failed+0x15d/0x300 [ 582.808462][ T30] 2 locks held by syz-executor/8835: [ 582.813833][ T30] #0: ffffffff8fcc4c50 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 582.838382][ T30] #1: ffffffff8fcd1748 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 582.861255][ T30] 2 locks held by syz-executor/8841: [ 582.867053][ T30] #0: ffffffff8fcc4c50 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 582.897785][ T30] #1: ffffffff8fcd1748 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 582.918345][ T30] 2 locks held by syz-executor/8844: [ 582.926135][ T30] #0: ffffffff8fcc4c50 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 582.949089][ T30] #1: ffffffff8fcd1748 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 582.974003][ T30] 2 locks held by syz-executor/8846: [ 582.988537][ T30] #0: ffffffff8fcc4c50 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 582.998095][ T30] #1: ffffffff8fcd1748 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 583.053522][ T30] [ 583.064256][ T30] ============================================= [ 583.064256][ T30] [ 583.098418][ T30] NMI backtrace for cpu 0 [ 583.102836][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc1-syzkaller-00031-ge32cde8d2bd7 #0 [ 583.113657][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 583.124633][ T30] Call Trace: [ 583.127984][ T30] [ 583.130965][ T30] dump_stack_lvl+0x241/0x360 [ 583.135689][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 583.140961][ T30] ? __pfx__printk+0x10/0x10 [ 583.145625][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 583.150621][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 583.156266][ T30] ? _printk+0xd5/0x120 [ 583.160477][ T30] ? __pfx__printk+0x10/0x10 [ 583.165311][ T30] ? __wake_up_klogd+0xcc/0x110 [ 583.170215][ T30] ? __pfx__printk+0x10/0x10 [ 583.174859][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 583.179952][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 583.185994][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 583.192031][ T30] watchdog+0xff4/0x1040 [ 583.196332][ T30] ? watchdog+0x1ea/0x1040 [ 583.200817][ T30] ? __pfx_watchdog+0x10/0x10 [ 583.205657][ T30] kthread+0x2f0/0x390 [ 583.209770][ T30] ? __pfx_watchdog+0x10/0x10 [ 583.214508][ T30] ? __pfx_kthread+0x10/0x10 [ 583.219147][ T30] ret_from_fork+0x4b/0x80 [ 583.223623][ T30] ? __pfx_kthread+0x10/0x10 [ 583.228257][ T30] ret_from_fork_asm+0x1a/0x30 [ 583.233084][ T30] [ 583.237528][ T30] Sending NMI from CPU 0 to CPUs 1: [ 583.243839][ C1] NMI backtrace for cpu 1 [ 583.243855][ C1] CPU: 1 UID: 0 PID: 5307 Comm: kworker/1:7 Not tainted 6.12.0-rc1-syzkaller-00031-ge32cde8d2bd7 #0 [ 583.243877][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 583.243890][ C1] Workqueue: events_power_efficient neigh_periodic_work [ 583.243920][ C1] RIP: 0010:debug_check_no_obj_freed+0xef/0x580 [ 583.243951][ C1] Code: 81 c2 ff 0f 00 00 48 81 fa 00 10 00 00 0f 83 d2 00 00 00 44 3b 35 c5 ba 5a 0b 7e 07 44 89 35 bc ba 5a 0b 80 3d 81 f3 ac 15 00 <48> 8b 4c 24 28 75 59 83 3d 93 f2 ac 15 00 74 50 c6 05 6a f3 ac 15 [ 583.243968][ C1] RSP: 0018:ffffc90000a18a80 EFLAGS: 00000202 [ 583.243984][ C1] RAX: 876b73dbb46b0400 RBX: ffff888027b23130 RCX: ffff8880936d4000 [ 583.243998][ C1] RDX: 0000000000000000 RSI: ffffffff8c0acac0 RDI: 0000000000000001 [ 583.244011][ C1] RBP: ffffc90000a18be0 R08: ffffffff942c58c7 R09: 1ffffffff2858b18 [ 583.244025][ C1] R10: dffffc0000000000 R11: fffffbfff2858b19 R12: ffff888027b23118 [ 583.244039][ C1] R13: 1ffff11004f64623 R14: 000000000000000e R15: 000000000000000e [ 583.244051][ C1] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 583.244067][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 583.244080][ C1] CR2: 000055afd46fa158 CR3: 000000000e734000 CR4: 00000000003526f0 [ 583.244097][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 583.244109][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 583.244121][ C1] Call Trace: [ 583.244128][ C1] [ 583.244136][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 583.244159][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 583.244189][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 583.244211][ C1] ? nmi_handle+0x2a/0x5a0 [ 583.244237][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 583.244263][ C1] ? nmi_handle+0x14f/0x5a0 [ 583.244281][ C1] ? nmi_handle+0x2a/0x5a0 [ 583.244300][ C1] ? debug_check_no_obj_freed+0xef/0x580 [ 583.244326][ C1] ? default_do_nmi+0x63/0x160 [ 583.244349][ C1] ? exc_nmi+0x123/0x1f0 [ 583.244376][ C1] ? end_repeat_nmi+0xf/0x53 [ 583.244399][ C1] ? debug_check_no_obj_freed+0xef/0x580 [ 583.244427][ C1] ? debug_check_no_obj_freed+0xef/0x580 [ 583.244454][ C1] ? debug_check_no_obj_freed+0xef/0x580 [ 583.244481][ C1] [ 583.244487][ C1] [ 583.244495][ C1] ? ref_tracker_free+0x4ef/0x7e0 [ 583.244516][ C1] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 583.244544][ C1] ? rcu_core+0xaaa/0x17a0 [ 583.244562][ C1] ? handle_softirqs+0x2c5/0x980 [ 583.244585][ C1] ? do_softirq+0x11b/0x1e0 [ 583.244613][ C1] ? neigh_periodic_work+0xb35/0xd50 [ 583.244635][ C1] ? process_scheduled_works+0xa63/0x1850 [ 583.244660][ C1] ? worker_thread+0x870/0xd30 [ 583.244684][ C1] ? ret_from_fork+0x4b/0x80 [ 583.244710][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 583.244738][ C1] ? dst_destroy+0x2ac/0x460 [ 583.244755][ C1] kmem_cache_free+0x11f/0x420 [ 583.244783][ C1] dst_destroy+0x2ac/0x460 [ 583.244801][ C1] ? rcu_core+0xa37/0x17a0 [ 583.244819][ C1] ? __pfx_dst_destroy_rcu+0x10/0x10 [ 583.244837][ C1] rcu_core+0xaaa/0x17a0 [ 583.244862][ C1] ? __pfx_rcu_core+0x10/0x10 [ 583.244882][ C1] ? sched_balance_domains+0x91b/0xa90 [ 583.244909][ C1] ? sched_balance_domains+0x1b2/0xa90 [ 583.244931][ C1] ? __pfx_sched_balance_domains+0x10/0x10 [ 583.244951][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 583.244998][ C1] handle_softirqs+0x2c5/0x980 [ 583.245030][ C1] ? do_softirq+0x11b/0x1e0 [ 583.245055][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 583.245080][ C1] ? rcu_is_watching+0x15/0xb0 [ 583.245102][ C1] do_softirq+0x11b/0x1e0 [ 583.245125][ C1] [ 583.245132][ C1] [ 583.245138][ C1] ? __pfx_do_softirq+0x10/0x10 [ 583.245161][ C1] ? __pfx_lockdep_softirqs_on+0x10/0x10 [ 583.245191][ C1] ? rcu_is_watching+0x15/0xb0 [ 583.245212][ C1] __local_bh_enable_ip+0x1bb/0x200 [ 583.245252][ C1] ? neigh_periodic_work+0xb35/0xd50 [ 583.245274][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 583.245299][ C1] ? neigh_destroy+0x423/0x580 [ 583.245324][ C1] neigh_periodic_work+0xb35/0xd50 [ 583.245351][ C1] ? process_scheduled_works+0x976/0x1850 [ 583.245381][ C1] process_scheduled_works+0xa63/0x1850 [ 583.245420][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 583.245449][ C1] ? assign_work+0x364/0x3d0 [ 583.245489][ C1] worker_thread+0x870/0xd30 [ 583.245518][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 583.245548][ C1] ? __kthread_parkme+0x169/0x1d0 [ 583.245585][ C1] ? __pfx_worker_thread+0x10/0x10 [ 583.245610][ C1] kthread+0x2f0/0x390 [ 583.245628][ C1] ? __pfx_worker_thread+0x10/0x10 [ 583.245653][ C1] ? __pfx_kthread+0x10/0x10 [ 583.245670][ C1] ret_from_fork+0x4b/0x80 [ 583.245696][ C1] ? __pfx_kthread+0x10/0x10 [ 583.245724][ C1] ret_from_fork_asm+0x1a/0x30 [ 583.245758][ C1] [ 583.823218][ T5231] Bluetooth: hci16: command tx timeout [ 583.857340][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 583.864370][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc1-syzkaller-00031-ge32cde8d2bd7 #0 [ 583.874920][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 583.885022][ T30] Call Trace: [ 583.888335][ T30] [ 583.891302][ T30] dump_stack_lvl+0x241/0x360 [ 583.896068][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 583.901322][ T30] ? __pfx__printk+0x10/0x10 [ 583.905976][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 583.912107][ T30] ? vscnprintf+0x5d/0x90 [ 583.916482][ T30] panic+0x349/0x880 [ 583.920427][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 583.926632][ T30] ? __pfx_panic+0x10/0x10 [ 583.931098][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 583.936517][ T30] ? __irq_work_queue_local+0x137/0x410 [ 583.942148][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 583.947566][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 583.953875][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 583.960088][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 583.966480][ T30] watchdog+0x1033/0x1040 [ 583.970878][ T30] ? watchdog+0x1ea/0x1040 [ 583.975446][ T30] ? __pfx_watchdog+0x10/0x10 [ 583.980186][ T30] kthread+0x2f0/0x390 [ 583.985204][ T30] ? __pfx_watchdog+0x10/0x10 [ 583.989951][ T30] ? __pfx_kthread+0x10/0x10 [ 583.994770][ T30] ret_from_fork+0x4b/0x80 [ 583.999247][ T30] ? __pfx_kthread+0x10/0x10 [ 584.003925][ T30] ret_from_fork_asm+0x1a/0x30 [ 584.008796][ T30] [ 584.012234][ T30] Kernel Offset: disabled [ 584.016581][ T30] Rebooting in 86400 seconds..