last executing test programs: 7m15.37426724s ago: executing program 2 (id=144): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) listen(0xffffffffffffffff, 0xa1) shutdown(0xffffffffffffffff, 0x1) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) munmap(&(0x7f000045e000/0x1000)=nil, 0x1000) mremap(&(0x7f00006bd000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000721000/0x4000)=nil) munmap(&(0x7f000060f000/0x4000)=nil, 0x4000) mremap(&(0x7f00007b2000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000968000/0x3000)=nil) mremap(&(0x7f000046b000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000769000/0x1000)=nil) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) 7m13.380590068s ago: executing program 2 (id=149): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910710007e570966f436"], 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) syz_usb_connect(0x0, 0x0, 0x0, 0x0) recvmmsg$unix(r0, &(0x7f0000002380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 7m9.972871903s ago: executing program 2 (id=155): openat(0xffffffffffffff9c, 0x0, 0x80000, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) msgsnd(0x0, &(0x7f0000000200)={0x3}, 0x8, 0x800) msgrcv(0x0, 0x0, 0x0, 0x3, 0x2000) syz_clone(0x8200, 0x0, 0xfffffffffffffed9, 0x0, 0x0, 0x0) 7m8.89647469s ago: executing program 2 (id=157): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x4000010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, 0x0, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) r2 = syz_io_uring_setup(0x2775, &(0x7f0000000180)={0x0, 0x5a73, 0x80, 0x0, 0x3b1}, 0x0, &(0x7f0000000340)) io_uring_register$IORING_REGISTER_FILES2(r2, 0xd, &(0x7f0000000780)={0x3, 0x1, 0x0, &(0x7f0000000480)=[{&(0x7f0000000380)=""/197, 0xc5}, {&(0x7f00000005c0)=""/180, 0xb4}, {0x0}], &(0x7f00000004c0)}, 0x20) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x24, 0xb, 0x6, 0x3, 0x0, 0x0, {0x6, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4844}, 0x4800) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000007040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a030000000000000000000a00ecff0800010073797a300000000074000000160a010100000000000000000a00000008000740000000014000038008000140000000002c000380140001006e657464657673696d300000000000001400010076657468305f766c616e00000000000008000240000000070900010073797a3000000000090002"], 0xbc}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x0, &(0x7f000022c000/0x3000)=nil) bind$can_raw(0xffffffffffffffff, &(0x7f0000000040), 0x10) 6m58.745010125s ago: executing program 2 (id=167): openat(0xffffffffffffff9c, 0x0, 0x80000, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) read$msr(0xffffffffffffffff, &(0x7f0000032680)=""/102392, 0x18ff8) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) msgsnd(0x0, &(0x7f0000000200)={0x3}, 0x8, 0x800) msgrcv(0x0, 0x0, 0x0, 0x3, 0x2000) syz_clone(0x8200, 0x0, 0xfffffffffffffed9, 0x0, 0x0, 0x0) 6m57.763648524s ago: executing program 2 (id=170): syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0x1, 0x0, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000002940)=""/102392, 0x18ff8) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b19, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f00000004c0)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "7c80690ea8c8123e", "f92dafad9e3b473a1eaac151fe41ea97", "ee367a98", "74aff2072572aca8"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0xf3a, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r3}) recvmmsg(r1, &(0x7f0000006100), 0x49f, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) 6m42.386554992s ago: executing program 32 (id=170): syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0x1, 0x0, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000002940)=""/102392, 0x18ff8) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b19, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f00000004c0)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "7c80690ea8c8123e", "f92dafad9e3b473a1eaac151fe41ea97", "ee367a98", "74aff2072572aca8"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0xf3a, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r3}) recvmmsg(r1, &(0x7f0000006100), 0x49f, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) 4m11.45657703s ago: executing program 4 (id=492): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) shutdown(r4, 0x2) 4m10.269025449s ago: executing program 4 (id=494): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x4, 0x0, 0xffffffffffffffff, 0x400000}, 0x50) socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000340)=ANY=[], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r0}, 0x18) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000400)) getsockname$packet(0xffffffffffffffff, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000500)=0x14) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000540)={'wg1\x00'}) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000380), 0xc, &(0x7f0000000580)={0x0, 0x198}, 0x1, 0x0, 0x0, 0x890}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1c, 0x2000000000000087, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) write(r2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) 4m9.434062609s ago: executing program 4 (id=496): bpf$MAP_CREATE(0x0, 0x0, 0x0) keyctl$set_reqkey_keyring(0xe, 0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r6 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x18}}, 0x2, 0x1}}, 0x2e) 4m8.385366091s ago: executing program 4 (id=498): syz_emit_ethernet(0x4a, &(0x7f0000000380)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}, @val={@val={0x88a8, 0x6, 0x0, 0x2}, {0x8100, 0x4, 0x0, 0x2}}, {@arp={0x806, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x0, @local, @local, @local, @private1}}}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000480), 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x28002) syz_open_procfs(0x0, &(0x7f0000000440)='fd/3\x00') write$P9_ROPEN(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='westwood', 0x8) r1 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r1, &(0x7f0000000080)="4c00000012001f15b9409b8400feffffffffffff000000000017030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94acc000000000000000000000051d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) 4m8.25432026s ago: executing program 4 (id=499): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r0, 0x0, 0xe004410) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000bc0)={0x0, @rand_addr, @local}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb47, 0x9, 0x8, 0x80000001, 0x3}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000c900}, 0x400c881) r2 = socket(0x2a, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) acct(0xfffffffffffffffe) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000240)="f24306000000000000009929ea89", 0xe, 0x0, &(0x7f0000000200)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @link_local}, 0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000013000100000000000000000000000002", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4, @ANYBLOB="1400350064756d6d7930"], 0x3c}}, 0x0) ioctl$SIOCSIFMTU(r2, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) connect$unix(0xffffffffffffffff, &(0x7f0000000080)=@abs={0xa}, 0x6e) shmctl$IPC_RMID(0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'syztnl2\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) 4m3.432972759s ago: executing program 4 (id=509): socket$can_raw(0x1d, 0x3, 0x1) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000100)=ANY=[], 0x0, 0x3, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, 0x2}, 0x94) mq_open(&(0x7f00000007c0)='\r\x00elinu\xef\xe3elinux\x00\x86\xf6\x92\n#*\xac\x02\xce\xf8D\\\x9a\xe6[]L+\xf6\v\xe8\xf2\xd3\b\x15\n\xb8F!Q9o\x1f#\xbdt\r\xfb\"\x18%\xfdM\xaf_t\xd2\xdcJ\x10\a|\x9en\xbd\xeb\x14\x7f\xb9\x83\xfe\nf\xc26\xbab\x1a\xdf\xb1\xbdU\xd7Lo\xe7\xac\x81\x10k\xce-\xf5@\xbb\x9d;\xe8\xf6\xffQ\x04\xaai\x92k\x1b;\xddM\xa2\xe1-\x0e\xd8\xde\x00\xff\x18\xdd\bL\xfb\xa2.\xb6{\xb5\x85#\x88\xdc\xf0\x0f\x05\xf1\xc4 \xdeV\x80q\xf7\x04\xf5\x85T\x1f\xc2S]G\xc9lw\xd3J\xc5\xe8\x02\xcb\xbbAHxr\xac\xb77F\xdf\x1c\xcb\xd4\xce\x88L\xf1\xf9[\x98\xd4+pTx\x95\xb5\x1b]x\x1a\x95\xe1c6\xe7`83\xb7n#\xe0\xc1_\xec\xba\xde\a\x8b\xc5\x86woo\xbc\x1c\xa3r\x82\xf3enq-\x90/\xed\xff\xad+\x03\x10\t\xda\xfd\xa2\xd0\xef4\n%\xf1\xd8S\\\xec\xa31_\v\x8a\xf2\x18\xa6\xb1\xbb\x8b9\x1e\xff\xf8\xcdX\xf7h\b\xaf\x01\x84\xd4\x06Ml(Bw=\x13\xa1&\xd3\xec\xa9\x8ba\x86\x9d\xf4\x11\n\x89z\xa5\xac\xcbh\xc2\x1b\xeay\xbf\x06\x80\xff\xdf\x93\xef\x7f\xb1\xaf\xa0\xae', 0x80, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000080)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, 0x0) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(0xffffffffffffffff, 0x7b1, &(0x7f0000002680)={0x0, 0x1, 0x0, 0x5}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r1, 0x0) sendfile(r1, r1, 0x0, 0x40008) 3m48.285999439s ago: executing program 33 (id=509): socket$can_raw(0x1d, 0x3, 0x1) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000100)=ANY=[], 0x0, 0x3, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, 0x2}, 0x94) mq_open(&(0x7f00000007c0)='\r\x00elinu\xef\xe3elinux\x00\x86\xf6\x92\n#*\xac\x02\xce\xf8D\\\x9a\xe6[]L+\xf6\v\xe8\xf2\xd3\b\x15\n\xb8F!Q9o\x1f#\xbdt\r\xfb\"\x18%\xfdM\xaf_t\xd2\xdcJ\x10\a|\x9en\xbd\xeb\x14\x7f\xb9\x83\xfe\nf\xc26\xbab\x1a\xdf\xb1\xbdU\xd7Lo\xe7\xac\x81\x10k\xce-\xf5@\xbb\x9d;\xe8\xf6\xffQ\x04\xaai\x92k\x1b;\xddM\xa2\xe1-\x0e\xd8\xde\x00\xff\x18\xdd\bL\xfb\xa2.\xb6{\xb5\x85#\x88\xdc\xf0\x0f\x05\xf1\xc4 \xdeV\x80q\xf7\x04\xf5\x85T\x1f\xc2S]G\xc9lw\xd3J\xc5\xe8\x02\xcb\xbbAHxr\xac\xb77F\xdf\x1c\xcb\xd4\xce\x88L\xf1\xf9[\x98\xd4+pTx\x95\xb5\x1b]x\x1a\x95\xe1c6\xe7`83\xb7n#\xe0\xc1_\xec\xba\xde\a\x8b\xc5\x86woo\xbc\x1c\xa3r\x82\xf3enq-\x90/\xed\xff\xad+\x03\x10\t\xda\xfd\xa2\xd0\xef4\n%\xf1\xd8S\\\xec\xa31_\v\x8a\xf2\x18\xa6\xb1\xbb\x8b9\x1e\xff\xf8\xcdX\xf7h\b\xaf\x01\x84\xd4\x06Ml(Bw=\x13\xa1&\xd3\xec\xa9\x8ba\x86\x9d\xf4\x11\n\x89z\xa5\xac\xcbh\xc2\x1b\xeay\xbf\x06\x80\xff\xdf\x93\xef\x7f\xb1\xaf\xa0\xae', 0x80, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000080)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, 0x0) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(0xffffffffffffffff, 0x7b1, &(0x7f0000002680)={0x0, 0x1, 0x0, 0x5}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r1, 0x0) sendfile(r1, r1, 0x0, 0x40008) 19.758985199s ago: executing program 3 (id=875): creat(&(0x7f0000000380)='./file0\x00', 0x68) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x48c00, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{0x0}], 0x1) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r1, r1, 0x0, 0x200000) 19.437586625s ago: executing program 3 (id=877): r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x14}, 0x4010) sendmsg$inet(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000680)='@\x00\x00\x00\x00\x00', 0x6}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000810b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x4008800) 19.211278338s ago: executing program 3 (id=878): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x18) ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000740)={0x0}) 18.111294801s ago: executing program 3 (id=882): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0}, 0x28) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') unshare(0x64000600) 11.220633703s ago: executing program 3 (id=895): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) unshare(0x62040200) 3.176645502s ago: executing program 0 (id=907): sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) bind$inet(r3, &(0x7f0000000280)={0x2, 0x5e21, @local}, 0x10) r4 = socket$inet(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000280)={0x2, 0x5e21, @local}, 0x10) 2.235032586s ago: executing program 0 (id=909): socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfec8d000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r4 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r4) execve(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='cifs\x00', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) execveat(r5, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 2.061762055s ago: executing program 1 (id=911): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b19, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "7c80690ea8c8123e", "f92dafad9e3b473a1eaac151fe41ea97", "ee367a98", "74aff2072572aca8"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0xf3a, 0x0) recvmmsg(r1, &(0x7f0000006100), 0x49f, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) 1.099986764s ago: executing program 0 (id=912): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x20008000) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r3, r2, 0x26}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r3}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) recvmsg$kcm(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000840)=""/143, 0x8f}], 0x1}, 0x42) 1.046928204s ago: executing program 1 (id=913): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffd98, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000208500000004"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r0}, 0x10) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, &(0x7f0000000040)=""/73}, 0x20) 896.684433ms ago: executing program 1 (id=914): r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x14}, 0x4010) sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0x2400, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000810b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x4008800) 881.384322ms ago: executing program 1 (id=915): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000003280)={0x0, 0x0, 0x0}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000c"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) sendmsg$inet(r1, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0x1}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) 820.536549ms ago: executing program 3 (id=916): syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) statx(0xffffffffffffff9c, 0x0, 0x100, 0x800, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet(0x2, 0x4, 0x10001) socket$inet_sctp(0x2, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r1, 0x0, 0xd}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r2, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) close(0xffffffffffffffff) open(&(0x7f0000000080)='./file1\x00', 0xe4802, 0x6) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) socket$inet6_sctp(0xa, 0x1, 0x84) close(0xffffffffffffffff) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000001280), 0x0) r4 = accept$alg(r3, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000001040)=[{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000100)="9f1ac09f155c1291fc8baa01adb9b575263c1a877ef8644bccc1143c6da61222f05eacf50665f3905cc2fd3e4e81e2a13e7fcca4b10085ea82589f9511a2f87ee914c9e0894139310b5457cfe7ca3ae3dade5d7a11f014f2bbdec62e2df3daf9875c79c6763fdcb8830f378346bd7c5c71ab8fffc299f6aea8ae05a727e64cbf8c3de5c36604fa3a7f43c2d51832aa29a52a9dd46c823bc89a7cc268e91fff716052173384c4e76c9921c2accb039cbf2cfb99a47371db803c3dce71aa0555a2c0fdb6c8e812ac6974d7b3d749bbc7f90a6a79dd2d20ff1637187bf9b58377bd5ae528", 0xe3}, {&(0x7f00000012c0)}], 0x2, 0x0, 0x0, 0x80}], 0x1, 0x50) recvmmsg(r4, &(0x7f0000000a00)=[{{0x0, 0x0, 0x0}, 0xffffff0b}, {{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000028c0)=""/4096, 0x1000}], 0x1}, 0xf}], 0x2, 0x2101, 0x0) io_uring_enter(0xffffffffffffffff, 0x567, 0x0, 0x0, 0x0, 0x0) 776.677533ms ago: executing program 0 (id=917): sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) bind$inet(r2, &(0x7f0000000280)={0x2, 0x5e21, @local}, 0x10) r3 = socket$inet(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000280)={0x2, 0x5e21, @local}, 0x10) 754.827081ms ago: executing program 1 (id=918): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) inotify_init1(0x0) 342.368394ms ago: executing program 0 (id=919): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x200f000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 48.557123ms ago: executing program 1 (id=920): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200)=0x1, 0x12) 0s ago: executing program 0 (id=921): r0 = getpid() prlimit64(r0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000d00000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) socket$inet6(0x10, 0x3, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000300)='fdinfo\x00') getdents64(r6, &(0x7f0000002f40)=""/4084, 0x1007) kernel console output (not intermixed with test programs): e descriptor's value: 2 [ 123.497207][ T6035] usb 1-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 123.497233][ T6035] usb 1-1: New USB device strings: Mfr=17, Product=2, SerialNumber=3 [ 123.497250][ T6035] usb 1-1: Product: syz [ 123.497262][ T6035] usb 1-1: Manufacturer: syz [ 123.497274][ T6035] usb 1-1: SerialNumber: syz [ 124.379530][ T6035] hso 1-1:6.2: Failed to find INT IN ep [ 124.688398][ T6217] gfs2: error -5 reading superblock [ 125.064813][ T6210] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 125.064941][ T6210] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 125.065043][ T6210] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 125.065139][ T6210] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 125.065235][ T6210] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 125.176913][ T5942] usb 1-1: USB disconnect, device number 5 [ 127.109720][ T5889] Bluetooth: hci4: command 0x0405 tx timeout [ 127.109758][ T5889] Bluetooth: hci3: command 0x0c1a tx timeout [ 127.109785][ T5889] Bluetooth: hci2: command 0x0c1a tx timeout [ 127.109810][ T5889] Bluetooth: hci1: command 0x0c1a tx timeout [ 127.109838][ T5889] Bluetooth: hci0: command 0x0c1a tx timeout [ 128.421685][ T6241] fuse: Unknown parameter '0x0000000000000004' [ 128.549213][ T5942] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 128.683999][ T6245] smc: net device bond0 applied user defined pnetid SYZ0 [ 128.684228][ T6245] smc: net device bond0 erased user defined pnetid SYZ0 [ 128.748175][ T5942] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 128.748202][ T5942] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.748219][ T5942] usb 1-1: Product: syz [ 128.748231][ T5942] usb 1-1: Manufacturer: syz [ 128.748243][ T5942] usb 1-1: SerialNumber: syz [ 128.754638][ T5942] usb 1-1: config 0 descriptor?? [ 129.016977][ T5942] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 130.109389][ T5942] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 130.270264][ T6247] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 130.270385][ T6247] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 130.270490][ T6247] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 130.270597][ T6247] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 130.345845][ T6247] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 130.754180][ T6261] lo speed is unknown, defaulting to 1000 [ 130.755757][ T6261] lo speed is unknown, defaulting to 1000 [ 130.804173][ T6261] lo speed is unknown, defaulting to 1000 [ 130.924681][ T6261] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 131.121002][ T6261] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 131.397131][ T6261] lo speed is unknown, defaulting to 1000 [ 131.400316][ T6261] lo speed is unknown, defaulting to 1000 [ 131.403109][ T6261] lo speed is unknown, defaulting to 1000 [ 131.405772][ T6261] lo speed is unknown, defaulting to 1000 [ 131.408402][ T6261] lo speed is unknown, defaulting to 1000 [ 131.699120][ T5942] usb 1-1: USB disconnect, device number 6 [ 132.070531][ T6274] fuse: Unknown parameter '0x0000000000000004' [ 132.229764][ T6275] CIFS mount error: No usable UNC path provided in device string! [ 132.229764][ T6275] [ 132.229809][ T6275] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 132.376417][ T5886] Bluetooth: hci2: command 0x0c1a tx timeout [ 132.378160][ T5886] Bluetooth: hci1: command 0x0c1a tx timeout [ 132.378292][ T5886] Bluetooth: hci0: command 0x0c1a tx timeout [ 132.380934][ T5197] Bluetooth: hci3: command 0x0c1a tx timeout [ 132.391498][ T5197] Bluetooth: hci4: command 0x0405 tx timeout [ 132.922652][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.922710][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.945933][ T6291] netlink: 28 bytes leftover after parsing attributes in process `syz.4.89'. [ 136.009880][ T5950] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 136.159604][ T5942] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 136.380531][ T5950] usb 4-1: Using ep0 maxpacket: 32 [ 136.829499][ T5950] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 136.851126][ T6312] siw: device registration error -23 [ 136.854732][ T5950] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 136.854750][ T5950] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 136.854798][ T5950] usb 4-1: Product: syz [ 136.854812][ T5950] usb 4-1: Manufacturer: syz [ 136.854819][ T5950] usb 4-1: SerialNumber: syz [ 136.896527][ T5950] usb 4-1: config 0 descriptor?? [ 136.897473][ T6307] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 137.294984][ T6035] usb 4-1: USB disconnect, device number 4 [ 137.321621][ T5942] usb 3-1: config 0 has no interfaces? [ 137.323580][ T5942] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 137.323596][ T5942] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.323605][ T5942] usb 3-1: Product: syz [ 137.323612][ T5942] usb 3-1: Manufacturer: syz [ 137.323679][ T5942] usb 3-1: SerialNumber: syz [ 137.421289][ T5942] usb 3-1: config 0 descriptor?? [ 138.140872][ T6319] netlink: 12 bytes leftover after parsing attributes in process `syz.3.99'. [ 138.293838][ T6322] fuse: Unknown parameter '0x0000000000000004' [ 138.763088][ T5942] usb 3-1: USB disconnect, device number 2 [ 139.349063][ T10] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 139.541988][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 139.542748][ T10] usb 3-1: not running at top speed; connect to a high speed hub [ 139.544281][ T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 139.544303][ T10] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 139.606772][ T10] usb 3-1: string descriptor 0 read error: -22 [ 139.606956][ T10] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 139.606976][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.607347][ T6337] netlink: 4 bytes leftover after parsing attributes in process `syz.1.106'. [ 145.460885][ T10] usb 3-1: can't set config #1, error -71 [ 145.463460][ T10] usb 3-1: USB disconnect, device number 3 [ 145.830194][ T6348] siw: device registration error -23 [ 146.844945][ T6354] fuse: Unknown parameter '0x0000000000000004' [ 146.876041][ T6356] bridge_slave_0: left allmulticast mode [ 146.876069][ T6356] bridge_slave_0: left promiscuous mode [ 146.876601][ T6356] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.979047][ T44] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 147.017183][ T6358] netlink: 28 bytes leftover after parsing attributes in process `syz.4.110'. [ 147.159037][ T44] usb 3-1: Using ep0 maxpacket: 32 [ 147.161502][ T44] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 147.164658][ T44] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 147.164683][ T44] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 147.164700][ T44] usb 3-1: Product: syz [ 147.164712][ T44] usb 3-1: Manufacturer: syz [ 147.164725][ T44] usb 3-1: SerialNumber: syz [ 147.220136][ T44] usb 3-1: config 0 descriptor?? [ 147.222255][ T6350] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 147.258307][ T6356] bridge_slave_1: left allmulticast mode [ 147.258326][ T6356] bridge_slave_1: left promiscuous mode [ 147.258480][ T6356] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.437239][ T44] usb 3-1: USB disconnect, device number 4 [ 147.493794][ T6356] bond0: (slave bond_slave_0): Releasing backup interface [ 147.776131][ T6356] bond0: (slave bond_slave_1): Releasing backup interface [ 147.943993][ T6356] team0: Port device team_slave_0 removed [ 148.020027][ T6356] team0: Port device team_slave_1 removed [ 148.026819][ T6356] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 148.026838][ T6356] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 148.199112][ T6356] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 148.199141][ T6356] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 152.799189][ T6396] netlink: 4 bytes leftover after parsing attributes in process `syz.1.124'. [ 152.824064][ T6395] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 153.849212][ T5964] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 154.009060][ T5964] usb 3-1: Using ep0 maxpacket: 32 [ 154.011537][ T5964] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 154.015980][ T5964] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 154.016014][ T5964] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 154.016032][ T5964] usb 3-1: Product: syz [ 154.016045][ T5964] usb 3-1: Manufacturer: syz [ 154.016057][ T5964] usb 3-1: SerialNumber: syz [ 154.068372][ T5964] usb 3-1: config 0 descriptor?? [ 154.071014][ T6400] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 156.251395][ T6407] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 156.272043][ T6407] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 156.286380][ T6407] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 156.287642][ T6407] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 156.360123][ T6407] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 156.536268][ T5950] usb 3-1: USB disconnect, device number 5 [ 158.121069][ T5197] Bluetooth: hci0: command 0x0c1a tx timeout [ 158.310291][ T5886] Bluetooth: hci1: command 0x0c1a tx timeout [ 158.311297][ T5889] Bluetooth: hci2: command 0x0c1a tx timeout [ 158.313283][ T5197] Bluetooth: hci3: command 0x0c1a tx timeout [ 158.400796][ T5197] Bluetooth: hci4: command 0x0405 tx timeout [ 159.113178][ T6418] bridge_slave_0: left allmulticast mode [ 159.113206][ T6418] bridge_slave_0: left promiscuous mode [ 159.113944][ T6418] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.255115][ T6436] netlink: 28 bytes leftover after parsing attributes in process `syz.2.132'. [ 159.442320][ T6418] bridge_slave_1: left allmulticast mode [ 159.442348][ T6418] bridge_slave_1: left promiscuous mode [ 159.442585][ T6418] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.620723][ T6418] bond0: (slave bond_slave_0): Releasing backup interface [ 161.003475][ T6418] bond0: (slave bond_slave_1): Releasing backup interface [ 161.738766][ T6418] team0: Port device team_slave_0 removed [ 162.004838][ T6418] team0: Port device team_slave_1 removed [ 162.005907][ T6418] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 162.005931][ T6418] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 162.036054][ T6418] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 162.036072][ T6418] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 162.303734][ T6453] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 162.303902][ T6453] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 162.304004][ T6453] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 162.304104][ T6453] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 162.320449][ T6453] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 162.927428][ T6464] usb usb1: usbfs: interface 0 claimed by hub while 'syz.1.140' sets config #0 [ 162.928842][ T6464] usb usb1: usbfs: interface 0 claimed by hub while 'syz.1.140' sets config #1 [ 164.479577][ T5877] Bluetooth: hci0: command 0x0c1a tx timeout [ 164.481726][ T5877] Bluetooth: hci2: command 0x0c1a tx timeout [ 164.481855][ T5877] Bluetooth: hci4: command 0x0405 tx timeout [ 164.964049][ T5197] Bluetooth: hci1: command 0x0c1a tx timeout [ 164.964096][ T5197] Bluetooth: hci3: command 0x0c1a tx timeout [ 166.297581][ T6479] netlink: 68 bytes leftover after parsing attributes in process `syz.0.146'. [ 167.522364][ C0] wlan0: beacon TX faster than countdown (channel/color switch) completion [ 167.699907][ T6488] bridge_slave_0: left allmulticast mode [ 167.699936][ T6488] bridge_slave_0: left promiscuous mode [ 167.700195][ T6488] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.863404][ T6488] bridge_slave_1: left allmulticast mode [ 167.863431][ T6488] bridge_slave_1: left promiscuous mode [ 167.863652][ T6488] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.993739][ T6488] bond0: (slave bond_slave_0): Releasing backup interface [ 168.091057][ T6488] bond0: (slave bond_slave_1): Releasing backup interface [ 168.535356][ T6499] CIFS mount error: No usable UNC path provided in device string! [ 168.535356][ T6499] [ 168.535377][ T6499] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 169.259765][ T6488] team0: Port device team_slave_0 removed [ 169.399423][ T6488] team0: Port device team_slave_1 removed [ 169.400707][ T6488] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 169.400733][ T6488] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 169.490998][ T6488] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 169.491025][ T6488] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 170.252118][ T5197] Bluetooth: hci4: command 0x0405 tx timeout [ 170.302014][ T6493] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 170.302138][ T6493] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 170.302236][ T6493] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 170.302349][ T6493] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 170.302449][ T6493] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 171.632526][ T6515] netlink: 28 bytes leftover after parsing attributes in process `syz.3.154'. [ 172.767825][ T5877] Bluetooth: hci4: command 0x0405 tx timeout [ 172.767869][ T5877] Bluetooth: hci3: command 0x0c1a tx timeout [ 172.767895][ T5877] Bluetooth: hci2: command 0x0c1a tx timeout [ 172.767923][ T5877] Bluetooth: hci1: command 0x0c1a tx timeout [ 172.767948][ T5877] Bluetooth: hci0: command 0x0c1a tx timeout [ 178.119337][ T6534] netlink: 'syz.0.161': attribute type 1 has an invalid length. [ 178.318083][ T6540] netlink: 12 bytes leftover after parsing attributes in process `syz.4.163'. [ 178.517938][ T6534] 8021q: adding VLAN 0 to HW filter on device bond1 [ 180.112134][ T6538] bond1: (slave veth3): Enslaving as an active interface with a down link [ 180.768337][ T6541] bond1: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 180.900568][ T6540] 8021q: adding VLAN 0 to HW filter on device bond1 [ 181.105126][ T6542] 8021q: adding VLAN 0 to HW filter on device bond1 [ 181.105528][ T6542] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 181.127437][ T6542] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 181.628688][ T6543] vlan2: entered allmulticast mode [ 181.629061][ T6543] veth1: entered allmulticast mode [ 181.648090][ T6543] veth1: entered promiscuous mode [ 181.673092][ T6543] veth1: left promiscuous mode [ 181.704990][ T6543] bond1: (slave vlan2): making interface the new active one [ 181.802342][ T6543] veth1: entered promiscuous mode [ 181.805880][ T6543] vlan2: entered promiscuous mode [ 181.806647][ T6543] bond1: (slave vlan2): Enslaving as an active interface with an up link [ 181.841265][ T6563] bridge_slave_0: left allmulticast mode [ 181.841285][ T6563] bridge_slave_0: left promiscuous mode [ 181.841423][ T6563] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.934315][ T6556] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 181.934465][ T6556] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 181.934567][ T6556] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 181.934867][ T6556] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 181.935059][ T6556] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 182.797574][ T6563] bridge_slave_1: left allmulticast mode [ 182.797603][ T6563] bridge_slave_1: left promiscuous mode [ 182.797872][ T6563] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.212914][ T6563] bond0: (slave bond_slave_0): Releasing backup interface [ 184.314156][ T6579] CIFS mount error: No usable UNC path provided in device string! [ 184.314156][ T6579] [ 184.314226][ T6579] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 188.139365][ T6579] binder: 6573:6579 ioctl c0046209 9999999999999999 returned -22 [ 189.088153][ T5197] Bluetooth: hci1: command 0x0c1a tx timeout [ 189.164942][ T5197] Bluetooth: hci0: command 0x0c1a tx timeout [ 189.165430][ T5197] Bluetooth: hci4: command 0x0405 tx timeout [ 189.165578][ T5197] Bluetooth: hci3: command 0x0c1a tx timeout [ 189.165692][ T5197] Bluetooth: hci2: command 0x0c1a tx timeout [ 190.787661][ T6563] bond0: (slave bond_slave_1): Releasing backup interface [ 191.033887][ T6563] team0: Port device team_slave_0 removed [ 191.340277][ T44] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 191.407609][ T5942] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 191.685053][ T44] usb 2-1: device descriptor read/64, error -71 [ 192.105690][ T6563] team0: Port device team_slave_1 removed [ 192.106721][ T6563] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 192.106745][ T6563] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 192.184383][ T6563] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 192.184409][ T6563] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 192.199059][ T44] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 192.231580][ T5942] usb 1-1: unable to get BOS descriptor or descriptor too short [ 192.232082][ T5942] usb 1-1: not running at top speed; connect to a high speed hub [ 192.233634][ T5942] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 192.233648][ T5942] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 192.238675][ T5942] usb 1-1: string descriptor 0 read error: -22 [ 192.238761][ T5942] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 192.238772][ T5942] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.344583][ T5942] usb 1-1: 0:2 : does not exist [ 192.360271][ T44] usb 2-1: device descriptor read/64, error -71 [ 192.517222][ T44] usb usb2-port1: attempt power cycle [ 192.885605][ T6601] netlink: 28 bytes leftover after parsing attributes in process `syz.4.176'. [ 192.912470][ T44] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 192.935188][ T44] usb 2-1: device descriptor read/8, error -71 [ 193.004304][ T5942] usb 1-1: 5:0: cannot get min/max values for control 2 (id 5) [ 193.008081][ T5942] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5) [ 193.015262][ T5942] usb 1-1: 5:0: failed to get current value for ch 1 (-22) [ 193.249024][ T44] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 193.274423][ T44] usb 2-1: device descriptor read/8, error -71 [ 193.352072][ T5942] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5) [ 193.399149][ T44] usb usb2-port1: unable to enumerate USB device [ 193.545874][ T5942] usb 1-1: USB disconnect, device number 7 [ 194.127944][ T6612] netlink: 12 bytes leftover after parsing attributes in process `syz.1.178'. [ 194.258329][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.258375][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.329509][ T6612] 8021q: adding VLAN 0 to HW filter on device bond1 [ 194.479238][ T6614] 8021q: adding VLAN 0 to HW filter on device bond1 [ 194.479783][ T6614] bond1: (slave vxcan5): The slave device specified does not support setting the MAC address [ 194.481111][ T6614] bond1: (slave vxcan5): Error -95 calling set_mac_address [ 194.943879][ T6610] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 194.944373][ T6610] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 194.944487][ T6610] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 194.944586][ T6610] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 194.944686][ T6610] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 196.710671][ T5197] Bluetooth: hci0: command 0x0c1a tx timeout [ 197.437731][ T5886] Bluetooth: hci4: command 0x0405 tx timeout [ 197.437786][ T5886] Bluetooth: hci1: command 0x0c1a tx timeout [ 197.501690][ T5877] Bluetooth: hci3: command 0x0c1a tx timeout [ 197.503756][ T5197] Bluetooth: hci2: command 0x0c1a tx timeout [ 198.989096][ T5867] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 199.119389][ T5867] usb 5-1: device descriptor read/64, error -71 [ 199.371962][ T5867] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 199.499095][ T5867] usb 5-1: device descriptor read/64, error -71 [ 199.609545][ T6650] netlink: 4 bytes leftover after parsing attributes in process `syz.3.191'. [ 199.629899][ T5867] usb usb5-port1: attempt power cycle [ 199.770638][ T5877] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 199.783360][ T5877] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 199.784556][ T5877] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 199.785996][ T5877] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 199.821367][ T5877] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 199.989339][ T5867] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 200.009643][ T5867] usb 5-1: device descriptor read/8, error -71 [ 200.259156][ T5867] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 200.539491][ T5867] usb 5-1: device descriptor read/8, error -71 [ 200.659459][ T5867] usb usb5-port1: unable to enumerate USB device [ 201.333726][ T6651] lo speed is unknown, defaulting to 1000 [ 201.628209][ T6664] netlink: 12 bytes leftover after parsing attributes in process `syz.3.194'. [ 201.914114][ T5877] Bluetooth: hci5: command tx timeout [ 202.834224][ T3683] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.859789][ T6667] Zero length message leads to an empty skb [ 203.002206][ T6664] 8021q: adding VLAN 0 to HW filter on device bond1 [ 203.991103][ T5877] Bluetooth: hci5: command tx timeout [ 204.086656][ T6666] 8021q: adding VLAN 0 to HW filter on device bond1 [ 204.088852][ T6666] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 204.119809][ T6666] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 204.671375][ T1945] usb 1-1: new low-speed USB device number 8 using dummy_hcd [ 204.872540][ T1945] usb 1-1: string descriptor 0 read error: -22 [ 204.872710][ T1945] usb 1-1: New USB device found, idVendor=04b4, idProduct=8613, bcdDevice=95.8f [ 204.872731][ T1945] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.918507][ T1945] usb 1-1: config 0 descriptor?? [ 204.937325][ T1945] usbtest 1-1:0.0: FX2 device [ 204.937344][ T1945] usbtest 1-1:0.0: low-speed {control intr-in intr-out} tests (+alt) [ 205.133396][ T3683] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.156779][ T1945] usb 1-1: USB disconnect, device number 8 [ 205.213671][ T6696] netlink: 4 bytes leftover after parsing attributes in process `syz.1.203'. [ 205.519255][ T6036] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 205.789279][ T6036] usb 4-1: device descriptor read/64, error -71 [ 206.040266][ T6036] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 206.081135][ T5877] Bluetooth: hci5: command tx timeout [ 206.108243][ T3683] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.169026][ T6036] usb 4-1: device descriptor read/64, error -71 [ 206.291646][ T6036] usb usb4-port1: attempt power cycle [ 206.989285][ T6709] CIFS mount error: No usable UNC path provided in device string! [ 206.989285][ T6709] [ 206.989352][ T6709] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 207.639081][ T6036] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 207.689678][ T6036] usb 4-1: device descriptor read/8, error -71 [ 207.939035][ T6036] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 207.973953][ T3683] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.974654][ T6036] usb 4-1: device descriptor read/8, error -71 [ 208.079444][ T6036] usb usb4-port1: unable to enumerate USB device [ 208.149022][ T5877] Bluetooth: hci5: command tx timeout [ 208.484463][ T3692] vlan2: left promiscuous mode [ 211.200303][ T6726] netlink: 12 bytes leftover after parsing attributes in process `syz.0.213'. [ 211.946798][ T6726] 8021q: adding VLAN 0 to HW filter on device bond2 [ 212.145147][ T6729] 8021q: adding VLAN 0 to HW filter on device bond2 [ 212.148542][ T6729] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 212.161153][ T6729] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 212.319041][ T6035] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 212.469016][ T6035] usb 4-1: Using ep0 maxpacket: 16 [ 212.474240][ T6035] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 212.512660][ T6035] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 212.512687][ T6035] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.512705][ T6035] usb 4-1: Product: syz [ 212.512717][ T6035] usb 4-1: Manufacturer: syz [ 212.512729][ T6035] usb 4-1: SerialNumber: syz [ 212.590476][ T6035] usb 4-1: config 0 descriptor?? [ 212.685655][ T6651] chnl_net:caif_netlink_parms(): no params data found [ 213.752178][ T1945] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 213.909131][ T1945] usb 2-1: device descriptor read/64, error -71 [ 214.159120][ T1945] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 214.452263][ T1945] usb 2-1: device descriptor read/64, error -71 [ 214.622467][ T1945] usb usb2-port1: attempt power cycle [ 215.473326][ T6035] usb 4-1: USB disconnect, device number 9 [ 215.575729][ T6768] netlink: 4 bytes leftover after parsing attributes in process `syz.4.223'. [ 215.642047][ T1945] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 215.679888][ T1945] usb 2-1: device descriptor read/8, error -71 [ 215.959094][ T1945] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 215.979566][ T1945] usb 2-1: device descriptor read/8, error -71 [ 216.088633][ T5197] Bluetooth: hci5: command 0x0405 tx timeout [ 216.114778][ T1945] usb usb2-port1: unable to enumerate USB device [ 218.555249][ T3683] bond0 (unregistering): Released all slaves [ 218.778707][ T6786] CIFS mount error: No usable UNC path provided in device string! [ 218.778707][ T6786] [ 218.778758][ T6786] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 219.659849][ T6757] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 219.660069][ T6757] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 219.660282][ T6757] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 219.660674][ T6757] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 219.660911][ T6757] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 219.661204][ T6757] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 219.873838][ T6757] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 221.858270][ T5197] Bluetooth: hci5: command 0x0405 tx timeout [ 221.858300][ T5197] Bluetooth: hci4: command 0x0405 tx timeout [ 221.858318][ T5197] Bluetooth: hci3: command 0x0c1a tx timeout [ 221.858334][ T5197] Bluetooth: hci1: command 0x0c1a tx timeout [ 221.858350][ T5197] Bluetooth: hci0: command 0x0c1a tx timeout [ 223.607085][ T6035] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 223.738994][ T6035] usb 1-1: device descriptor read/64, error -71 [ 223.805698][ T6651] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.807420][ T6651] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.807656][ T6651] bridge_slave_0: entered allmulticast mode [ 223.833726][ T6651] bridge_slave_0: entered promiscuous mode [ 223.858481][ T6651] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.869610][ T6651] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.869859][ T6651] bridge_slave_1: entered allmulticast mode [ 223.953262][ T5877] Bluetooth: hci5: command 0x0405 tx timeout [ 223.970482][ T6651] bridge_slave_1: entered promiscuous mode [ 224.029094][ T6035] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 224.159203][ T6035] usb 1-1: device descriptor read/64, error -71 [ 224.272183][ T6035] usb usb1-port1: attempt power cycle [ 224.451178][ T6825] CIFS mount error: No usable UNC path provided in device string! [ 224.451178][ T6825] [ 224.451198][ T6825] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 224.639370][ T6035] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 224.663647][ T6035] usb 1-1: device descriptor read/8, error -71 [ 224.909609][ T6035] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 224.932076][ T6035] usb 1-1: device descriptor read/8, error -71 [ 225.039438][ T6035] usb usb1-port1: unable to enumerate USB device [ 225.400335][ T6651] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 225.438311][ T6651] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 225.989188][ T5877] Bluetooth: hci5: command 0x0405 tx timeout [ 226.069331][ T3683] hsr_slave_0: left promiscuous mode [ 226.183666][ T3683] hsr_slave_1: left promiscuous mode [ 227.826672][ T3683] veth1_macvtap: left promiscuous mode [ 227.826921][ T3683] veth0_macvtap: left promiscuous mode [ 227.827255][ T3683] veth1_vlan: left promiscuous mode [ 227.837131][ T3683] veth0_vlan: left promiscuous mode [ 228.379078][ T1945] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 228.589218][ T1945] usb 1-1: Using ep0 maxpacket: 8 [ 228.591998][ T1945] usb 1-1: config 0 has an invalid interface number: 239 but max is 0 [ 228.592014][ T1945] usb 1-1: config 0 has no interface number 0 [ 228.592041][ T1945] usb 1-1: config 0 interface 239 altsetting 0 has an endpoint descriptor with address 0x64, changing to 0x4 [ 228.592053][ T1945] usb 1-1: config 0 interface 239 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 8 [ 228.592064][ T1945] usb 1-1: config 0 interface 239 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 228.593952][ T1945] usb 1-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=99.1a [ 228.593967][ T1945] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.593977][ T1945] usb 1-1: Product: syz [ 228.593983][ T1945] usb 1-1: Manufacturer: syz [ 228.593996][ T1945] usb 1-1: SerialNumber: syz [ 228.622452][ T1945] usb 1-1: config 0 descriptor?? [ 228.623775][ T6855] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 229.023917][ T1945] ath6kl: Failed to submit usb control message: -71 [ 229.023968][ T1945] ath6kl: unable to send the bmi data to the device: -71 [ 229.023982][ T1945] ath6kl: Unable to send get target info: -71 [ 229.027234][ T1945] ath6kl: Failed to init ath6kl core: -71 [ 229.074332][ T1945] ath6kl_usb 1-1:0.239: probe with driver ath6kl_usb failed with error -71 [ 229.107213][ T1945] usb 1-1: USB disconnect, device number 13 [ 231.049276][ T6876] CIFS mount error: No usable UNC path provided in device string! [ 231.049276][ T6876] [ 231.049296][ T6876] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 235.341727][ T5942] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 235.469063][ T5942] usb 2-1: device descriptor read/64, error -71 [ 235.729044][ T5942] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 235.864098][ T5942] usb 2-1: device descriptor read/64, error -71 [ 235.975236][ T5942] usb usb2-port1: attempt power cycle [ 236.095329][ T6904] netlink: 4 bytes leftover after parsing attributes in process `syz.0.259'. [ 236.477323][ T5942] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 236.491968][ T5942] usb 2-1: device descriptor read/8, error -71 [ 236.729047][ T5942] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 236.749822][ T5942] usb 2-1: device descriptor read/8, error -71 [ 236.872064][ T5942] usb usb2-port1: unable to enumerate USB device [ 238.358055][ T6910] netlink: 4 bytes leftover after parsing attributes in process `syz.1.261'. [ 241.041063][ T6651] team0: Port device team_slave_0 added [ 241.048256][ T6651] team0: Port device team_slave_1 added [ 241.795128][ T6651] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 241.795144][ T6651] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 241.795166][ T6651] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 241.855739][ T6651] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 241.855754][ T6651] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 241.855774][ T6651] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 242.482137][ T10] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 243.424317][ T6651] hsr_slave_0: entered promiscuous mode [ 243.448206][ T6651] hsr_slave_1: entered promiscuous mode [ 243.460003][ T6651] debugfs: 'hsr0' already exists in 'hsr' [ 243.460034][ T6651] Cannot create hsr debugfs directory [ 243.480954][ T10] usb 5-1: device descriptor read/64, error -71 [ 244.139105][ T10] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 244.339453][ T10] usb 5-1: device descriptor read/64, error -71 [ 244.399071][ T5963] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 244.449358][ T10] usb usb5-port1: attempt power cycle [ 244.563659][ T5963] usb 2-1: config 6 has an invalid interface number: 2 but max is 0 [ 244.563675][ T5963] usb 2-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 244.563684][ T5963] usb 2-1: config 6 has no interface number 0 [ 244.563718][ T5963] usb 2-1: config 6 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 244.565741][ T5963] usb 2-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 244.565758][ T5963] usb 2-1: New USB device strings: Mfr=17, Product=2, SerialNumber=3 [ 244.565767][ T5963] usb 2-1: Product: syz [ 244.565774][ T5963] usb 2-1: Manufacturer: syz [ 244.565781][ T5963] usb 2-1: SerialNumber: syz [ 244.735311][ T5963] hso 2-1:6.2: Failed to find INT IN ep [ 244.872579][ T10] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 244.876496][ T5867] usb 2-1: USB disconnect, device number 15 [ 244.892563][ T10] usb 5-1: device descriptor read/8, error -71 [ 245.159135][ T10] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 246.437017][ T10] usb 5-1: device descriptor read/8, error -71 [ 246.550002][ T10] usb usb5-port1: unable to enumerate USB device [ 246.853088][ T6651] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 246.927631][ T6651] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 247.034752][ T6651] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 247.129570][ T6651] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 247.611938][ T7004] netlink: 148 bytes leftover after parsing attributes in process `syz.4.287'. [ 247.612516][ T7004] netlink: 116 bytes leftover after parsing attributes in process `syz.4.287'. [ 249.308991][ T10] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 249.491314][ T10] usb 5-1: config 6 has an invalid interface number: 2 but max is 0 [ 249.491340][ T10] usb 5-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 249.491357][ T10] usb 5-1: config 6 has no interface number 0 [ 249.491400][ T10] usb 5-1: config 6 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 249.497463][ T6651] 8021q: adding VLAN 0 to HW filter on device bond0 [ 249.521350][ T10] usb 5-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 249.521377][ T10] usb 5-1: New USB device strings: Mfr=17, Product=2, SerialNumber=3 [ 249.521389][ T10] usb 5-1: Product: syz [ 249.521396][ T10] usb 5-1: Manufacturer: syz [ 249.521403][ T10] usb 5-1: SerialNumber: syz [ 249.645252][ T6651] 8021q: adding VLAN 0 to HW filter on device team0 [ 249.818695][ T10] hso 5-1:6.2: Failed to find INT IN ep [ 249.874302][ T3658] bridge0: port 1(bridge_slave_0) entered blocking state [ 249.885713][ T3658] bridge0: port 1(bridge_slave_0) entered forwarding state [ 249.896312][ T10] usb 5-1: USB disconnect, device number 10 [ 250.078201][ T7025] Bluetooth: MGMT ver 1.23 [ 250.187941][ T3669] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.188299][ T3669] bridge0: port 2(bridge_slave_1) entered forwarding state [ 251.209038][ T5963] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 251.353457][ T5963] usb 5-1: device descriptor read/64, error -71 [ 251.638222][ T5963] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 252.208999][ T5963] usb 5-1: device descriptor read/64, error -71 [ 252.282917][ T6651] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 252.319412][ T5963] usb usb5-port1: attempt power cycle [ 252.502642][ T5877] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 252.669097][ T5963] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 252.706879][ T5963] usb 5-1: device descriptor read/8, error -71 [ 252.849058][ T6035] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 252.939143][ T5963] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 252.960009][ T5963] usb 5-1: device descriptor read/8, error -71 [ 253.012188][ T6035] usb 4-1: unable to get BOS descriptor or descriptor too short [ 253.012783][ T6035] usb 4-1: not running at top speed; connect to a high speed hub [ 253.014210][ T6035] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 253.014232][ T6035] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 253.073794][ T6035] usb 4-1: string descriptor 0 read error: -22 [ 253.073899][ T6035] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 253.073911][ T6035] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.075870][ T5963] usb usb5-port1: unable to enumerate USB device [ 253.122287][ T6035] usb 4-1: 0:2 : does not exist [ 253.226543][ T7068] syz.0.301 (7068) used greatest stack depth: 18600 bytes left [ 253.734234][ T6035] usb 4-1: 5:0: cannot get min/max values for control 2 (id 5) [ 253.771708][ T6035] usb 4-1: 5:0: cannot get min/max values for control 3 (id 5) [ 253.781360][ T6035] usb 4-1: 5:0: failed to get current value for ch 1 (-22) [ 253.868392][ T6035] usb 4-1: 5:0: cannot get min/max values for control 3 (id 5) [ 253.892532][ T6035] usb 4-1: USB disconnect, device number 10 [ 254.467742][ T6651] veth0_vlan: entered promiscuous mode [ 254.512225][ T6651] veth1_vlan: entered promiscuous mode [ 254.513676][ T7084] netlink: 12 bytes leftover after parsing attributes in process `syz.3.304'. [ 254.673641][ T7084] 8021q: adding VLAN 0 to HW filter on device bond2 [ 254.895644][ T7086] 8021q: adding VLAN 0 to HW filter on device bond2 [ 254.896046][ T7086] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 254.897953][ T7086] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 255.679705][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.679756][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.899292][ T6651] veth0_macvtap: entered promiscuous mode [ 256.922407][ T6651] veth1_macvtap: entered promiscuous mode [ 257.018519][ T6651] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 257.042607][ T6651] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 257.073650][ T3686] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.076056][ T3666] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.076287][ T3666] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.076487][ T3666] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.599048][ T44] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 258.763702][ T44] usb 1-1: unable to get BOS descriptor or descriptor too short [ 258.764545][ T44] usb 1-1: not running at top speed; connect to a high speed hub [ 258.765863][ T44] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 258.765883][ T44] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 258.808578][ T44] usb 1-1: string descriptor 0 read error: -22 [ 258.808732][ T44] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 258.808752][ T44] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.943526][ T44] usb 1-1: 0:2 : does not exist [ 260.035935][ T44] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5) [ 260.042210][ T44] usb 1-1: 5:0: failed to get current value for ch 1 (-22) [ 260.951417][ T44] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5) [ 260.990577][ T5197] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 260.994707][ T5197] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 260.997575][ T5197] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 260.998837][ T5197] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 261.001315][ T5197] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 261.054316][ T44] usb 1-1: USB disconnect, device number 14 [ 261.161026][ T7138] netlink: 12 bytes leftover after parsing attributes in process `syz.4.315'. [ 261.407472][ T7138] 8021q: adding VLAN 0 to HW filter on device bond2 [ 262.318299][ T7140] 8021q: adding VLAN 0 to HW filter on device bond2 [ 262.327272][ T7140] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 262.340310][ T7140] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 263.009048][ T6036] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 263.158990][ T6036] usb 1-1: Using ep0 maxpacket: 16 [ 263.167753][ T6036] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 263.167784][ T6036] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 263.177169][ T6036] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 263.177195][ T6036] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.177213][ T6036] usb 1-1: Product: syz [ 263.177226][ T6036] usb 1-1: Manufacturer: syz [ 263.177238][ T6036] usb 1-1: SerialNumber: syz [ 263.189464][ T5877] Bluetooth: hci2: command tx timeout [ 263.240448][ T6036] usb 1-1: config 0 descriptor?? [ 263.273727][ T6036] em28xx 1-1:0.0: error: skipping audio endpoint 0x83, because it uses bulk transfers ! [ 263.538502][ T3666] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.215855][ T3666] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.289400][ T7134] lo speed is unknown, defaulting to 1000 [ 264.612333][ T3666] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.999113][ T1945] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 265.128542][ T3666] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.169466][ T1945] usb 5-1: Using ep0 maxpacket: 32 [ 265.171744][ T1945] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 265.171800][ T1945] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 265.176114][ T1945] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 265.176139][ T1945] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 265.176157][ T1945] usb 5-1: Product: syz [ 265.176169][ T1945] usb 5-1: Manufacturer: syz [ 265.176181][ T1945] usb 5-1: SerialNumber: syz [ 265.239070][ T6035] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 265.256116][ T1945] usb 5-1: config 0 descriptor?? [ 265.269440][ T5877] Bluetooth: hci2: command tx timeout [ 265.389493][ T6035] usb 4-1: Using ep0 maxpacket: 16 [ 265.392806][ T6035] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 265.396544][ T6035] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 265.396570][ T6035] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.396588][ T6035] usb 4-1: Product: syz [ 265.396600][ T6035] usb 4-1: Manufacturer: syz [ 265.396612][ T6035] usb 4-1: SerialNumber: syz [ 265.477712][ T6035] usb 4-1: config 0 descriptor?? [ 265.492367][ T10] usb 5-1: USB disconnect, device number 15 [ 265.754666][ T1945] usb 1-1: USB disconnect, device number 15 [ 266.002446][ T7134] chnl_net:caif_netlink_parms(): no params data found [ 267.359348][ T5877] Bluetooth: hci2: command tx timeout [ 267.527624][ T3666] bridge_slave_1: left allmulticast mode [ 267.527653][ T3666] bridge_slave_1: left promiscuous mode [ 267.543287][ T3666] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.310142][ T3666] bridge_slave_0: left allmulticast mode [ 268.310170][ T3666] bridge_slave_0: left promiscuous mode [ 268.315635][ T3666] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.401768][ T10] usb 4-1: USB disconnect, device number 11 [ 269.500281][ T5877] Bluetooth: hci2: command tx timeout [ 270.727376][ T7223] netlink: 4 bytes leftover after parsing attributes in process `syz.0.336'. [ 273.339063][ T10] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 273.499208][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 273.501494][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 273.501546][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 273.504565][ T10] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 273.504590][ T10] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 273.504607][ T10] usb 1-1: Product: syz [ 273.504619][ T10] usb 1-1: Manufacturer: syz [ 273.504631][ T10] usb 1-1: SerialNumber: syz [ 273.606334][ T10] usb 1-1: config 0 descriptor?? [ 273.984529][ T37] audit: type=1800 audit(1759375010.464:2): pid=7237 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.1.340" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 274.493961][ T6036] usb 1-1: USB disconnect, device number 16 [ 275.057603][ T7241] CIFS mount error: No usable UNC path provided in device string! [ 275.057603][ T7241] [ 275.057624][ T7241] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 275.727893][ T7250] usb usb1: usbfs: interface 0 claimed by hub while 'syz.1.344' sets config #0 [ 275.729085][ T7250] usb usb1: usbfs: interface 0 claimed by hub while 'syz.1.344' sets config #1 [ 276.254041][ T7249] netlink: 68 bytes leftover after parsing attributes in process `syz.3.345'. [ 276.734759][ T3666] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 276.753763][ T7259] netlink: 4 bytes leftover after parsing attributes in process `syz.1.347'. [ 276.823636][ T3666] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 276.866872][ T3666] bond0 (unregistering): Released all slaves [ 277.974696][ T44] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 278.271574][ T37] audit: type=1800 audit(1759375014.454:3): pid=7271 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.351" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 278.489047][ T44] usb 4-1: device descriptor read/64, error -71 [ 278.730105][ T44] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 278.916959][ T44] usb 4-1: device descriptor read/64, error -71 [ 278.937591][ T7134] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.937668][ T7134] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.937840][ T7134] bridge_slave_0: entered allmulticast mode [ 278.943954][ T7134] bridge_slave_0: entered promiscuous mode [ 278.947241][ T6035] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 278.981958][ T7134] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.982180][ T7134] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.982419][ T7134] bridge_slave_1: entered allmulticast mode [ 279.019312][ T44] usb usb4-port1: attempt power cycle [ 279.166865][ T7275] CIFS mount error: No usable UNC path provided in device string! [ 279.166865][ T7275] [ 279.166879][ T7275] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 279.329055][ T6035] usb 1-1: Using ep0 maxpacket: 16 [ 279.332453][ T6035] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 279.332484][ T6035] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 279.337302][ T6035] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 279.337329][ T6035] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.337346][ T6035] usb 1-1: Product: syz [ 279.337359][ T6035] usb 1-1: Manufacturer: syz [ 279.337371][ T6035] usb 1-1: SerialNumber: syz [ 279.356664][ T6035] usb 1-1: config 0 descriptor?? [ 279.358996][ T44] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 279.364872][ T7134] bridge_slave_1: entered promiscuous mode [ 279.430334][ T44] usb 4-1: device descriptor read/8, error -71 [ 279.643871][ T6035] em28xx 1-1:0.0: error: skipping audio endpoint 0x83, because it uses bulk transfers ! [ 279.669047][ T44] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 279.690140][ T44] usb 4-1: device descriptor read/8, error -71 [ 279.799461][ T44] usb usb4-port1: unable to enumerate USB device [ 279.889062][ T3666] hsr_slave_0: left promiscuous mode [ 279.909083][ T3666] hsr_slave_1: left promiscuous mode [ 279.909883][ T3666] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 279.910132][ T3666] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 279.959052][ T6036] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 279.959250][ T5963] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 279.964505][ T3666] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 279.964531][ T3666] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 280.107275][ T3666] veth1_macvtap: left promiscuous mode [ 280.107343][ T3666] veth0_macvtap: left promiscuous mode [ 280.107497][ T3666] veth1_vlan: left promiscuous mode [ 280.107598][ T3666] veth0_vlan: left promiscuous mode [ 280.109102][ T5963] usb 2-1: Using ep0 maxpacket: 32 [ 280.112490][ T5963] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 280.115271][ T5963] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 280.115294][ T5963] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 280.115311][ T5963] usb 2-1: Product: syz [ 280.115323][ T5963] usb 2-1: Manufacturer: syz [ 280.115335][ T5963] usb 2-1: SerialNumber: syz [ 280.130818][ T5963] usb 2-1: config 0 descriptor?? [ 280.132549][ T6036] usb 5-1: config 6 has an invalid interface number: 2 but max is 0 [ 280.132571][ T6036] usb 5-1: config 6 has an invalid descriptor of length 255, skipping remainder of the config [ 280.132587][ T6036] usb 5-1: config 6 has no interface number 0 [ 280.132628][ T6036] usb 5-1: config 6 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 280.143374][ T6036] usb 5-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 280.143401][ T6036] usb 5-1: New USB device strings: Mfr=17, Product=2, SerialNumber=3 [ 280.143419][ T6036] usb 5-1: Product: syz [ 280.143438][ T6036] usb 5-1: Manufacturer: syz [ 280.143450][ T6036] usb 5-1: SerialNumber: syz [ 280.388055][ T5963] usb 2-1: USB disconnect, device number 16 [ 280.459037][ T6036] hso 5-1:6.2: Failed to find INT IN ep [ 280.533662][ T6036] usb 5-1: USB disconnect, device number 16 [ 281.728826][ T6053] usb 1-1: USB disconnect, device number 17 [ 281.946694][ T7294] netlink: 68 bytes leftover after parsing attributes in process `syz.0.360'. [ 283.453296][ T7302] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.357' sets config #0 [ 283.987087][ T7301] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(12) [ 283.987115][ T7301] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 284.012990][ T7303] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 284.034891][ T7301] vhci_hcd vhci_hcd.0: Device attached [ 284.036011][ T7306] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(19) [ 284.036036][ T7306] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 284.036165][ T7306] vhci_hcd vhci_hcd.0: Device attached [ 284.036397][ T7304] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(16) [ 284.036414][ T7304] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 284.036466][ T7304] vhci_hcd vhci_hcd.0: Device attached [ 284.037359][ T7303] vhci_hcd vhci_hcd.0: pdev(4) rhport(4) sockfd(24) [ 284.037379][ T7303] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 284.106054][ T7303] vhci_hcd vhci_hcd.0: Device attached [ 284.106889][ T7301] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(14) [ 284.106911][ T7301] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 284.136677][ T7301] vhci_hcd vhci_hcd.0: Device attached [ 284.138026][ T7301] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 284.171398][ T7301] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 284.172374][ T7301] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 284.226351][ T7301] vhci_hcd vhci_hcd.0: port 0 already used [ 284.347135][ T7314] vhci_hcd: connection closed [ 284.389550][ T3660] vhci_hcd: stop threads [ 284.391429][ T3660] vhci_hcd: release socket [ 284.391525][ T3660] vhci_hcd: disconnect device [ 284.441866][ T7311] vhci_hcd: connection closed [ 284.451951][ T7309] vhci_hcd: connection closed [ 284.452535][ T7307] vhci_hcd: connection closed [ 284.454699][ T3695] vhci_hcd: stop threads [ 284.454718][ T3695] vhci_hcd: release socket [ 284.481320][ T1945] usb 41-1: new low-speed USB device number 2 using vhci_hcd [ 284.495284][ T3695] vhci_hcd: disconnect device [ 284.495609][ T3695] vhci_hcd: stop threads [ 284.495623][ T3695] vhci_hcd: release socket [ 284.496905][ T3695] vhci_hcd: disconnect device [ 284.497241][ T3695] vhci_hcd: stop threads [ 284.497250][ T3695] vhci_hcd: release socket [ 284.497413][ T3695] vhci_hcd: disconnect device [ 285.139064][ T7305] vhci_hcd: connection reset by peer [ 285.139693][ T3660] vhci_hcd: stop threads [ 285.139709][ T3660] vhci_hcd: release socket [ 285.139781][ T3660] vhci_hcd: disconnect device [ 285.863158][ T7328] netlink: 4 bytes leftover after parsing attributes in process `syz.4.364'. [ 287.197237][ T3666] team0 (unregistering): Port device team_slave_1 removed [ 287.429928][ T3666] team0 (unregistering): Port device team_slave_0 removed [ 289.579134][ T1945] vhci_hcd: vhci_device speed not set [ 289.798377][ T7134] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 289.840658][ T7134] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 290.173021][ T7134] team0: Port device team_slave_0 added [ 290.184454][ T7134] team0: Port device team_slave_1 added [ 290.209144][ T6053] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 290.369024][ T6053] usb 2-1: Using ep0 maxpacket: 32 [ 290.389297][ T6036] usb 4-1: new low-speed USB device number 16 using dummy_hcd [ 290.389482][ T6035] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 290.407453][ T6053] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 290.542163][ T7347] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 291.080005][ T6053] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 291.080034][ T6053] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 291.080051][ T6053] usb 2-1: Product: syz [ 291.080064][ T6053] usb 2-1: Manufacturer: syz [ 291.080077][ T6053] usb 2-1: SerialNumber: syz [ 291.091266][ T6053] usb 2-1: config 0 descriptor?? [ 291.307536][ T6053] usb 2-1: USB disconnect, device number 17 [ 291.320945][ T7351] CIFS mount error: No usable UNC path provided in device string! [ 291.320945][ T7351] [ 291.320966][ T7351] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 291.337468][ T6035] usb 1-1: Using ep0 maxpacket: 16 [ 291.341668][ T6035] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 291.341756][ T6035] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 291.357035][ T6035] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 291.357115][ T6035] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.357133][ T6035] usb 1-1: Product: syz [ 291.357146][ T6035] usb 1-1: Manufacturer: syz [ 291.357158][ T6035] usb 1-1: SerialNumber: syz [ 291.439468][ T6035] usb 1-1: config 0 descriptor?? [ 291.485344][ T6035] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 291.485435][ T6035] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 292.064695][ T6035] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 292.066650][ T6035] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 292.080729][ T6035] em28xx 1-1:0.0: AC97 chip type couldn't be determined [ 292.081005][ T6035] em28xx 1-1:0.0: No AC97 audio processor [ 292.117772][ T6035] usb 1-1: USB disconnect, device number 18 [ 292.125677][ T6035] em28xx 1-1:0.0: Disconnecting em28xx [ 292.211931][ T6035] em28xx 1-1:0.0: Freeing device [ 293.018588][ T6036] usb 4-1: New USB device found, idVendor=04b4, idProduct=8613, bcdDevice=95.8f [ 293.018618][ T6036] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.058757][ T6036] usb 4-1: config 0 descriptor?? [ 293.081876][ T6036] usb 4-1: can't set config #0, error -71 [ 293.102322][ T6036] usb 4-1: USB disconnect, device number 16 [ 293.504896][ T7364] netlink: 4 bytes leftover after parsing attributes in process `syz.3.374'. [ 293.508381][ T7134] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 293.508395][ T7134] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 293.508409][ T7134] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 294.345632][ T7134] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 294.345647][ T7134] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 294.345667][ T7134] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 294.409730][ T7367] netlink: 68 bytes leftover after parsing attributes in process `syz.0.376'. [ 296.286090][ T7134] hsr_slave_0: entered promiscuous mode [ 296.288169][ T7134] hsr_slave_1: entered promiscuous mode [ 296.302372][ T7134] debugfs: 'hsr0' already exists in 'hsr' [ 296.302399][ T7134] Cannot create hsr debugfs directory [ 296.949550][ T6035] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 297.101133][ T6035] usb 2-1: unable to get BOS descriptor or descriptor too short [ 297.101578][ T6035] usb 2-1: not running at top speed; connect to a high speed hub [ 297.102654][ T6035] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 297.102668][ T6035] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 297.104754][ T6035] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 297.104770][ T6035] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.104779][ T6035] usb 2-1: Product: syz [ 297.104786][ T6035] usb 2-1: Manufacturer: syz [ 297.104793][ T6035] usb 2-1: SerialNumber: syz [ 297.735503][ T6035] usb 2-1: 0:2 : does not exist [ 297.859784][ T6035] usb 2-1: USB disconnect, device number 18 [ 297.954369][ T6042] udevd[6042]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 298.829496][ T6035] usb 1-1: new low-speed USB device number 19 using dummy_hcd [ 301.263192][ T7440] netlink: 68 bytes leftover after parsing attributes in process `syz.3.388'. [ 301.617079][ T6035] usb 1-1: New USB device found, idVendor=04b4, idProduct=8613, bcdDevice=95.8f [ 301.617108][ T6035] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.674380][ T6035] usb 1-1: config 0 descriptor?? [ 301.699863][ T6035] usb 1-1: can't set config #0, error -71 [ 301.718250][ T6035] usb 1-1: USB disconnect, device number 19 [ 302.029390][ T6053] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 302.341449][ T6053] usb 2-1: Using ep0 maxpacket: 16 [ 302.346021][ T6053] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 302.360597][ T6053] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 302.360626][ T6053] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.360644][ T6053] usb 2-1: Product: syz [ 302.360654][ T6053] usb 2-1: Manufacturer: syz [ 302.360666][ T6053] usb 2-1: SerialNumber: syz [ 302.382604][ T6053] usb 2-1: config 0 descriptor?? [ 302.827768][ C1] vkms_vblank_simulate: vblank timer overrun [ 303.246990][ C1] vkms_vblank_simulate: vblank timer overrun [ 303.615526][ T7475] netlink: 4 bytes leftover after parsing attributes in process `syz.4.394'. [ 303.709386][ C1] vkms_vblank_simulate: vblank timer overrun [ 304.315949][ C1] vkms_vblank_simulate: vblank timer overrun [ 304.650341][ C1] vkms_vblank_simulate: vblank timer overrun [ 305.101022][ C1] vkms_vblank_simulate: vblank timer overrun [ 305.330715][ T6035] usb 2-1: USB disconnect, device number 19 [ 309.178992][ T5963] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 309.263422][ T7134] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 309.311178][ T5963] usb 1-1: device descriptor read/64, error -71 [ 309.485946][ T7134] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 309.558997][ T5963] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 309.669674][ T7134] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 309.689009][ T5963] usb 1-1: device descriptor read/64, error -71 [ 309.739862][ T7134] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 309.799365][ T5963] usb usb1-port1: attempt power cycle [ 310.251116][ T5963] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 310.271085][ T5963] usb 1-1: device descriptor read/8, error -71 [ 310.520364][ T5963] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 310.621816][ T5963] usb 1-1: device descriptor read/8, error -71 [ 310.734604][ T5963] usb usb1-port1: unable to enumerate USB device [ 311.269770][ T7134] 8021q: adding VLAN 0 to HW filter on device bond0 [ 311.770997][ T7134] 8021q: adding VLAN 0 to HW filter on device team0 [ 311.800026][ T3660] bridge0: port 1(bridge_slave_0) entered blocking state [ 311.808395][ T3660] bridge0: port 1(bridge_slave_0) entered forwarding state [ 311.965601][ T3660] bridge0: port 2(bridge_slave_1) entered blocking state [ 311.965739][ T3660] bridge0: port 2(bridge_slave_1) entered forwarding state [ 313.273127][ T7553] netlink: 4 bytes leftover after parsing attributes in process `syz.1.412'. [ 315.596464][ T7134] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 317.122504][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.122577][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.509099][ T6035] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 317.662326][ T6035] usb 2-1: device descriptor read/64, error -71 [ 318.572233][ T6035] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 318.712234][ T6035] usb 2-1: device descriptor read/64, error -71 [ 318.819511][ T6035] usb usb2-port1: attempt power cycle [ 319.668077][ T6035] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 320.657338][ C0] vkms_vblank_simulate: vblank timer overrun [ 320.912494][ C0] vkms_vblank_simulate: vblank timer overrun [ 321.330251][ C0] vkms_vblank_simulate: vblank timer overrun [ 321.757698][ T6035] usb 2-1: device descriptor read/8, error -71 [ 321.805380][ T5197] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 321.810476][ T5197] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 321.811670][ T5197] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 321.815498][ T5197] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 321.816231][ T5197] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 322.246652][ T7636] lo speed is unknown, defaulting to 1000 [ 322.739889][ C0] vkms_vblank_simulate: vblank timer overrun [ 324.331102][ C0] vkms_vblank_simulate: vblank timer overrun [ 324.338983][ T5877] Bluetooth: hci5: command tx timeout [ 324.879664][ C0] vkms_vblank_simulate: vblank timer overrun [ 325.915218][ T7691] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.440' sets config #0 [ 325.915482][ T7691] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.440' sets config #1 [ 326.420723][ T5877] Bluetooth: hci5: command tx timeout [ 328.470203][ T5877] Bluetooth: hci5: command tx timeout [ 329.549345][ T7636] chnl_net:caif_netlink_parms(): no params data found [ 330.549081][ T5877] Bluetooth: hci5: command tx timeout [ 332.388956][ T7746] CIFS mount error: No usable UNC path provided in device string! [ 332.388956][ T7746] [ 332.389033][ T7746] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 332.427337][ T7746] binder: 7743:7746 ioctl c0046209 9999999999999999 returned -22 [ 334.361734][ T7762] netlink: 148 bytes leftover after parsing attributes in process `syz.4.457'. [ 334.362229][ T7762] netlink: 116 bytes leftover after parsing attributes in process `syz.4.457'. [ 337.566440][ T7793] binder: 7788:7793 ioctl c0046209 9999999999999999 returned -22 [ 339.817620][ T7812] netlink: 148 bytes leftover after parsing attributes in process `syz.3.470'. [ 339.819203][ T7812] netlink: 116 bytes leftover after parsing attributes in process `syz.3.470'. [ 340.605963][ T7636] bridge0: port 1(bridge_slave_0) entered blocking state [ 340.606103][ T7636] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.606334][ T7636] bridge_slave_0: entered allmulticast mode [ 340.634590][ T7636] bridge_slave_0: entered promiscuous mode [ 340.658277][ T7636] bridge0: port 2(bridge_slave_1) entered blocking state [ 340.658404][ T7636] bridge0: port 2(bridge_slave_1) entered disabled state [ 340.658635][ T7636] bridge_slave_1: entered allmulticast mode [ 340.685161][ T7636] bridge_slave_1: entered promiscuous mode [ 342.484031][ T7848] binder: 7840:7848 ioctl c0046209 9999999999999999 returned -22 [ 343.428013][ T7850] input: syz1 as /devices/virtual/input/input5 [ 344.634891][ T7636] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 344.664753][ T7636] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 346.301131][ T7636] team0: Port device team_slave_0 added [ 346.336648][ T7636] team0: Port device team_slave_1 added [ 346.799904][ T7636] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 346.799915][ T7636] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 346.799929][ T7636] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 347.082833][ T7636] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 347.082844][ T7636] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 347.082858][ T7636] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 347.258947][ T5867] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 347.498208][ T5867] usb 1-1: config 0 has no interfaces? [ 347.528598][ T5867] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 347.528617][ T5867] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.528626][ T5867] usb 1-1: Product: syz [ 347.528633][ T5867] usb 1-1: Manufacturer: syz [ 347.528646][ T5867] usb 1-1: SerialNumber: syz [ 347.590483][ T5867] usb 1-1: config 0 descriptor?? [ 348.092828][ T7636] hsr_slave_0: entered promiscuous mode [ 348.093729][ T7636] hsr_slave_1: entered promiscuous mode [ 348.097248][ T7636] debugfs: 'hsr0' already exists in 'hsr' [ 348.097266][ T7636] Cannot create hsr debugfs directory [ 348.123349][ T3669] bridge_slave_1: left allmulticast mode [ 348.123377][ T3669] bridge_slave_1: left promiscuous mode [ 348.123646][ T3669] bridge0: port 2(bridge_slave_1) entered disabled state [ 348.265201][ T3669] bridge_slave_0: left allmulticast mode [ 348.265229][ T3669] bridge_slave_0: left promiscuous mode [ 348.265512][ T3669] bridge0: port 1(bridge_slave_0) entered disabled state [ 348.526959][ T7914] siw: device registration error -23 [ 351.071215][ T5942] usb 1-1: USB disconnect, device number 24 [ 352.722805][ T7952] netlink: 148 bytes leftover after parsing attributes in process `syz.0.497'. [ 352.723286][ T7952] netlink: 116 bytes leftover after parsing attributes in process `syz.0.497'. [ 353.679009][ T10] usb 2-1: new full-speed USB device number 24 using dummy_hcd [ 353.893238][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 353.893684][ T10] usb 2-1: not running at top speed; connect to a high speed hub [ 353.894615][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 353.894627][ T10] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 353.896561][ T10] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 353.896593][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.896610][ T10] usb 2-1: Product: syz [ 353.896621][ T10] usb 2-1: Manufacturer: syz [ 353.896632][ T10] usb 2-1: SerialNumber: syz [ 354.622352][ T10] usb 2-1: 0:2 : does not exist [ 354.622432][ T10] usb 2-1: unit 0 not found! [ 354.739708][ T10] usb 2-1: USB disconnect, device number 24 [ 354.892874][ T7650] udevd[7650]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 355.819978][ T3669] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 355.890665][ T3669] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 355.917051][ T3669] bond0 (unregistering): Released all slaves [ 358.384527][ T7996] netlink: 148 bytes leftover after parsing attributes in process `syz.3.511'. [ 358.388911][ T7996] netlink: 116 bytes leftover after parsing attributes in process `syz.3.511'. [ 359.633693][ T44] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 359.799503][ T44] usb 2-1: device descriptor read/64, error -71 [ 360.089512][ T44] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 360.202557][ T3669] hsr_slave_0: left promiscuous mode [ 360.250332][ T3669] hsr_slave_1: left promiscuous mode [ 360.252423][ T3669] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 360.268960][ T44] usb 2-1: device descriptor read/64, error -71 [ 360.478365][ T44] usb usb2-port1: attempt power cycle [ 360.499869][ T3669] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 361.096544][ T44] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 361.141499][ T44] usb 2-1: device descriptor read/8, error -71 [ 362.108958][ T44] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 363.409344][ T44] usb 2-1: device descriptor read/8, error -71 [ 363.519406][ T44] usb usb2-port1: unable to enumerate USB device [ 363.979133][ T44] usb 2-1: new full-speed USB device number 29 using dummy_hcd [ 364.157644][ T44] usb 2-1: unable to get BOS descriptor or descriptor too short [ 364.158185][ T44] usb 2-1: not running at top speed; connect to a high speed hub [ 364.159644][ T44] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 364.159665][ T44] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 364.162727][ T44] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 364.162750][ T44] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.162767][ T44] usb 2-1: Product: syz [ 364.162779][ T44] usb 2-1: Manufacturer: syz [ 364.162791][ T44] usb 2-1: SerialNumber: syz [ 364.392238][ T6035] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 364.551374][ T6035] usb 4-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 364.551402][ T6035] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 364.563245][ T6035] usb 4-1: config 0 descriptor?? [ 364.634481][ T44] usb 2-1: 0:2 : does not exist [ 364.634554][ T44] usb 2-1: unit 0 not found! [ 364.671250][ T44] usb 2-1: USB disconnect, device number 29 [ 364.825279][ T8023] udevd[8023]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 364.869359][ T3669] team0 (unregistering): Port device team_slave_1 removed [ 365.335467][ T3669] team0 (unregistering): Port device team_slave_0 removed [ 365.817556][ T6035] usb 4-1: Cannot set autoneg [ 365.818254][ T6035] MOSCHIP usb-ethernet driver 4-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 365.832320][ T6035] usb 4-1: USB disconnect, device number 17 [ 369.555059][ T8053] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 371.509042][ T5942] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 371.638982][ T5942] usb 1-1: device descriptor read/64, error -71 [ 371.739036][ T6036] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 371.889220][ T5942] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 371.899396][ T6036] usb 4-1: Using ep0 maxpacket: 32 [ 371.906757][ T6036] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 371.916828][ T6036] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 371.916856][ T6036] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 371.916873][ T6036] usb 4-1: Product: syz [ 371.916885][ T6036] usb 4-1: Manufacturer: syz [ 371.916897][ T6036] usb 4-1: SerialNumber: syz [ 371.940562][ T6036] usb 4-1: config 0 descriptor?? [ 371.960371][ T8066] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 372.019048][ T5942] usb 1-1: device descriptor read/64, error -71 [ 372.155086][ T5942] usb usb1-port1: attempt power cycle [ 372.509073][ T5942] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 372.533315][ T5942] usb 1-1: device descriptor read/8, error -71 [ 372.789075][ T5942] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 372.819830][ T5942] usb 1-1: device descriptor read/8, error -71 [ 372.930096][ T5942] usb usb1-port1: unable to enumerate USB device [ 374.469576][ T6035] usb 4-1: USB disconnect, device number 18 [ 374.642533][ T5877] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 374.672058][ T5877] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 374.851621][ T5877] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 374.895787][ T5877] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 374.896642][ T5877] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 376.601871][ T8076] lo speed is unknown, defaulting to 1000 [ 377.077981][ T5877] Bluetooth: hci2: command tx timeout [ 378.650945][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.652883][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.118962][ T5877] Bluetooth: hci2: command tx timeout [ 379.589048][ T9] usb 4-1: new full-speed USB device number 19 using dummy_hcd [ 379.845872][ T9] usb 4-1: config 6 has an invalid interface number: 2 but max is 0 [ 379.845945][ T9] usb 4-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 379.845987][ T9] usb 4-1: config 6 has no interface number 0 [ 379.846140][ T9] usb 4-1: config 6 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 379.929588][ T9] usb 4-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 379.929663][ T9] usb 4-1: New USB device strings: Mfr=17, Product=2, SerialNumber=3 [ 379.929706][ T9] usb 4-1: Product: syz [ 379.929743][ T9] usb 4-1: Manufacturer: syz [ 379.929780][ T9] usb 4-1: SerialNumber: syz [ 380.364377][ T9] hso 4-1:6.2: Failed to find INT IN ep [ 380.622674][ T8117] gfs2: error -5 reading superblock [ 380.901341][ T10] usb 4-1: USB disconnect, device number 19 [ 381.189343][ T5877] Bluetooth: hci2: command tx timeout [ 381.259130][ T5950] usb 2-1: new full-speed USB device number 30 using dummy_hcd [ 381.422203][ T5950] usb 2-1: unable to get BOS descriptor or descriptor too short [ 381.422970][ T5950] usb 2-1: not running at top speed; connect to a high speed hub [ 381.453628][ T5950] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 381.453654][ T5950] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 381.489124][ T5950] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 381.489151][ T5950] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.489169][ T5950] usb 2-1: Product: syz [ 381.489181][ T5950] usb 2-1: Manufacturer: syz [ 381.489193][ T5950] usb 2-1: SerialNumber: syz [ 382.240566][ T9] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 382.369631][ T9] usb 4-1: device descriptor read/64, error -71 [ 382.490473][ T5950] usb 2-1: 0:2 : does not exist [ 382.490558][ T5950] usb 2-1: unit 0 not found! [ 382.624086][ T5950] usb 2-1: USB disconnect, device number 30 [ 382.629446][ T9] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 382.706130][ T5197] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 382.728562][ T5197] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 382.751115][ T5197] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 382.768964][ T9] usb 4-1: device descriptor read/64, error -71 [ 382.777874][ T5197] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 382.778792][ T5197] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 382.825463][ T8064] udevd[8064]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 382.853955][ T3683] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.879496][ T9] usb usb4-port1: attempt power cycle [ 382.949623][ T44] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 383.109056][ T44] usb 1-1: Using ep0 maxpacket: 32 [ 383.111630][ T44] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 383.117841][ T44] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 383.117867][ T44] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 383.117884][ T44] usb 1-1: Product: syz [ 383.117897][ T44] usb 1-1: Manufacturer: syz [ 383.117915][ T44] usb 1-1: SerialNumber: syz [ 383.135633][ T44] usb 1-1: config 0 descriptor?? [ 383.138134][ T8143] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 383.228969][ T9] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 383.249708][ T9] usb 4-1: device descriptor read/8, error -71 [ 383.268993][ T5197] Bluetooth: hci2: command tx timeout [ 383.452499][ T3683] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.489095][ T9] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 383.510260][ T9] usb 4-1: device descriptor read/8, error -71 [ 383.514654][ T8076] chnl_net:caif_netlink_parms(): no params data found [ 383.627921][ T9] usb usb4-port1: unable to enumerate USB device [ 383.776373][ T3683] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.869281][ T5197] Bluetooth: hci1: command tx timeout [ 385.282048][ T3683] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.311323][ T8139] lo speed is unknown, defaulting to 1000 [ 386.949142][ T5197] Bluetooth: hci1: command tx timeout [ 387.137083][ T1945] usb 1-1: USB disconnect, device number 29 [ 387.510069][ T8171] program syz.1.545 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 387.767213][ T8076] bridge0: port 1(bridge_slave_0) entered blocking state [ 387.767434][ T8076] bridge0: port 1(bridge_slave_0) entered disabled state [ 387.767631][ T8076] bridge_slave_0: entered allmulticast mode [ 388.662954][ T8076] bridge_slave_0: entered promiscuous mode [ 388.697861][ T8076] bridge0: port 2(bridge_slave_1) entered blocking state [ 388.698060][ T8076] bridge0: port 2(bridge_slave_1) entered disabled state [ 388.698445][ T8076] bridge_slave_1: entered allmulticast mode [ 388.708208][ T8076] bridge_slave_1: entered promiscuous mode [ 389.089739][ T1945] usb 4-1: new full-speed USB device number 24 using dummy_hcd [ 389.215927][ T5197] Bluetooth: hci1: command tx timeout [ 389.460812][ T8076] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 389.482339][ T1945] usb 4-1: config 6 has an invalid interface number: 2 but max is 0 [ 389.482364][ T1945] usb 4-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 389.482381][ T1945] usb 4-1: config 6 has no interface number 0 [ 389.482410][ T1945] usb 4-1: config 6 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 389.483959][ T8076] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 389.486830][ T1945] usb 4-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 389.486856][ T1945] usb 4-1: New USB device strings: Mfr=17, Product=2, SerialNumber=3 [ 389.486873][ T1945] usb 4-1: Product: syz [ 389.486885][ T1945] usb 4-1: Manufacturer: syz [ 389.486897][ T1945] usb 4-1: SerialNumber: syz [ 389.613452][ T1945] hso 4-1:6.2: Failed to find INT IN ep [ 390.179918][ T8186] gfs2: error -5 reading superblock [ 390.274061][ T1945] usb 4-1: USB disconnect, device number 24 [ 391.349346][ T5197] Bluetooth: hci1: command tx timeout [ 391.379964][ T8076] team0: Port device team_slave_0 added [ 391.388158][ T8076] team0: Port device team_slave_1 added [ 391.779593][ T5950] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 392.127020][ T8076] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 392.127035][ T8076] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 392.127058][ T8076] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 392.149538][ T5950] usb 2-1: device descriptor read/64, error -71 [ 392.410397][ T5950] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 392.580960][ T5950] usb 2-1: device descriptor read/64, error -71 [ 392.854297][ T5950] usb usb2-port1: attempt power cycle [ 392.937051][ T8076] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 392.937066][ T8076] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 392.937089][ T8076] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 393.429007][ T5950] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 393.449651][ T5950] usb 2-1: device descriptor read/8, error -71 [ 393.499014][ T5942] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 393.649009][ T5942] usb 1-1: Using ep0 maxpacket: 32 [ 393.665527][ T5942] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 393.668386][ T5942] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 393.668410][ T5942] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 393.668428][ T5942] usb 1-1: Product: syz [ 393.668439][ T5942] usb 1-1: Manufacturer: syz [ 393.668451][ T5942] usb 1-1: SerialNumber: syz [ 393.679522][ T5942] usb 1-1: config 0 descriptor?? [ 393.681081][ T8203] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 393.690414][ T5950] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 393.710536][ T5950] usb 2-1: device descriptor read/8, error -71 [ 393.821031][ T5950] usb usb2-port1: unable to enumerate USB device [ 396.246319][ T10] usb 1-1: USB disconnect, device number 30 [ 398.023256][ T3683] bond0 (unregistering): Released all slaves [ 399.432015][ T3683] bond1 (unregistering): Released all slaves [ 401.262085][ T3683] bond2 (unregistering): Released all slaves [ 401.725133][ T8076] hsr_slave_0: entered promiscuous mode [ 401.726331][ T8076] hsr_slave_1: entered promiscuous mode [ 402.644304][ T8076] debugfs: 'hsr0' already exists in 'hsr' [ 402.644331][ T8076] Cannot create hsr debugfs directory [ 403.385265][ T8139] chnl_net:caif_netlink_parms(): no params data found [ 403.849266][ T6036] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 404.039346][ T6036] usb 4-1: device descriptor read/64, error -71 [ 404.349548][ T6036] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 404.488918][ T6036] usb 4-1: device descriptor read/64, error -71 [ 404.599417][ T6036] usb usb4-port1: attempt power cycle [ 404.658937][ T10] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 404.808951][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 404.811181][ T10] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 404.813360][ T10] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 404.813383][ T10] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 404.813394][ T10] usb 2-1: Product: syz [ 404.813400][ T10] usb 2-1: Manufacturer: syz [ 404.813407][ T10] usb 2-1: SerialNumber: syz [ 404.818095][ T10] usb 2-1: config 0 descriptor?? [ 404.827262][ T8249] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 405.044968][ T6036] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 405.059625][ T6036] usb 4-1: device descriptor read/8, error -71 [ 405.092318][ T10] usb 2-1: USB disconnect, device number 35 [ 405.308962][ T6036] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 405.351455][ T6036] usb 4-1: device descriptor read/8, error -71 [ 405.460222][ T6036] usb usb4-port1: unable to enumerate USB device [ 410.199480][ T3683] hsr_slave_0: left promiscuous mode [ 410.278976][ T3683] hsr_slave_1: left promiscuous mode [ 410.288991][ T9] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 410.359157][ T10] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 410.441201][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 410.473284][ T9] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 410.499231][ T10] usb 1-1: device descriptor read/64, error -71 [ 410.516769][ T9] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 410.516826][ T9] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 410.516845][ T9] usb 4-1: Product: syz [ 410.516857][ T9] usb 4-1: Manufacturer: syz [ 410.516870][ T9] usb 4-1: SerialNumber: syz [ 410.605204][ T9] usb 4-1: config 0 descriptor?? [ 410.622603][ T8287] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 410.786649][ T10] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 410.940890][ T10] usb 1-1: device descriptor read/64, error -71 [ 411.010741][ T9] usb 4-1: USB disconnect, device number 29 [ 411.051717][ T10] usb usb1-port1: attempt power cycle [ 411.233661][ T3683] veth1_macvtap: left promiscuous mode [ 411.233772][ T3683] veth0_macvtap: left promiscuous mode [ 411.679342][ T3683] veth1_vlan: left promiscuous mode [ 411.679521][ T3683] veth0_vlan: left promiscuous mode [ 411.738967][ T10] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 411.767361][ T10] usb 1-1: device descriptor read/8, error -71 [ 412.019042][ T10] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 412.059322][ T10] usb 1-1: device descriptor read/8, error -71 [ 412.169448][ T10] usb usb1-port1: unable to enumerate USB device [ 415.570185][ T8315] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 417.034231][ T1945] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 417.178941][ T1945] usb 4-1: Using ep0 maxpacket: 32 [ 417.180690][ T1945] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 417.182833][ T1945] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 417.182853][ T1945] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 417.182864][ T1945] usb 4-1: Product: syz [ 417.182870][ T1945] usb 4-1: Manufacturer: syz [ 417.182877][ T1945] usb 4-1: SerialNumber: syz [ 417.234688][ T1945] usb 4-1: config 0 descriptor?? [ 417.238736][ T8336] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 419.795313][ T44] usb 4-1: USB disconnect, device number 30 [ 420.595916][ T8139] bridge0: port 1(bridge_slave_0) entered blocking state [ 420.596128][ T8139] bridge0: port 1(bridge_slave_0) entered disabled state [ 420.596302][ T8139] bridge_slave_0: entered allmulticast mode [ 420.621790][ T8139] bridge_slave_0: entered promiscuous mode [ 420.689132][ T8139] bridge0: port 2(bridge_slave_1) entered blocking state [ 420.689278][ T8139] bridge0: port 2(bridge_slave_1) entered disabled state [ 420.689525][ T8139] bridge_slave_1: entered allmulticast mode [ 420.692198][ T8139] bridge_slave_1: entered promiscuous mode [ 421.109697][ T6036] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 421.240825][ T6036] usb 2-1: device descriptor read/64, error -71 [ 421.478952][ T6036] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 421.949060][ T6036] usb 2-1: device descriptor read/64, error -71 [ 422.063377][ T6036] usb usb2-port1: attempt power cycle [ 422.489655][ T6036] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 422.906690][ T6036] usb 2-1: device descriptor read/8, error -71 [ 423.139015][ T6036] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 423.159701][ T6036] usb 2-1: device descriptor read/8, error -71 [ 423.269804][ T6036] usb usb2-port1: unable to enumerate USB device [ 424.232466][ T8139] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 424.264174][ T8139] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 425.300106][ T8139] team0: Port device team_slave_0 added [ 425.380741][ T8139] team0: Port device team_slave_1 added [ 427.909001][ T8139] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 427.909053][ T8139] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 427.909077][ T8139] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 428.936784][ T8139] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 428.936800][ T8139] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 428.936827][ T8139] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 431.679040][ T8076] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 431.995051][ T8139] hsr_slave_0: entered promiscuous mode [ 431.996456][ T8139] hsr_slave_1: entered promiscuous mode [ 431.997419][ T8139] debugfs: 'hsr0' already exists in 'hsr' [ 431.997451][ T8139] Cannot create hsr debugfs directory [ 432.930542][ T8076] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 434.433016][ T5877] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 434.455686][ T5877] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 434.457033][ T5877] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 434.458606][ T5877] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 435.365463][ T5877] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 435.366415][ T3683] bridge_slave_1: left allmulticast mode [ 435.366440][ T3683] bridge_slave_1: left promiscuous mode [ 435.366674][ T3683] bridge0: port 2(bridge_slave_1) entered disabled state [ 435.560164][ T3683] bridge_slave_0: left allmulticast mode [ 435.560188][ T3683] bridge_slave_0: left promiscuous mode [ 435.561328][ T3683] bridge0: port 1(bridge_slave_0) entered disabled state [ 435.806073][ T8472] netlink: 16 bytes leftover after parsing attributes in process `syz.1.622'. [ 436.140346][ T3683] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 436.223137][ T3683] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 436.285083][ T3683] bond0 (unregistering): Released all slaves [ 437.589050][ T5197] Bluetooth: hci5: command tx timeout [ 437.619069][ T1945] usb 4-1: new full-speed USB device number 31 using dummy_hcd [ 437.619078][ T3683] hsr_slave_0: left promiscuous mode [ 437.649495][ T3683] hsr_slave_1: left promiscuous mode [ 437.650552][ T3683] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 437.721232][ T3683] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 437.771733][ T1945] usb 4-1: unable to get BOS descriptor or descriptor too short [ 437.772384][ T1945] usb 4-1: not running at top speed; connect to a high speed hub [ 437.773477][ T1945] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 437.773498][ T1945] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 437.776544][ T1945] usb 4-1: string descriptor 0 read error: -22 [ 437.776658][ T1945] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 437.776670][ T1945] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 437.846881][ T1945] usb 4-1: 0:2 : does not exist [ 439.661673][ T3683] team0 (unregistering): Port device team_slave_1 removed [ 439.670933][ T5197] Bluetooth: hci5: command tx timeout [ 439.869729][ T3683] team0 (unregistering): Port device team_slave_0 removed [ 440.268238][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.283685][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.911829][ T1945] usb 4-1: 5:0: cannot get min/max values for control 2 (id 5) [ 440.917227][ T1945] usb 4-1: 5:0: cannot get min/max values for control 3 (id 5) [ 440.925021][ T1945] usb 4-1: 5:0: failed to get current value for ch 1 (-22) [ 441.004834][ T1945] usb 4-1: 5:0: cannot get min/max values for control 3 (id 5) [ 441.013208][ T1945] usb 4-1: 5:0: cannot get min/max values for control 2 (id 5) [ 441.068297][ T1945] usb 4-1: USB disconnect, device number 31 [ 441.749027][ T5197] Bluetooth: hci5: command tx timeout [ 443.829349][ T5197] Bluetooth: hci5: command tx timeout [ 444.074178][ T5877] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 444.096372][ T5877] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 444.098300][ T5877] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 444.115510][ T5877] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 444.116451][ T5877] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 444.693801][ T8453] lo speed is unknown, defaulting to 1000 [ 444.879034][ T8505] lo speed is unknown, defaulting to 1000 [ 446.372481][ T5877] Bluetooth: hci2: command tx timeout [ 446.719105][ T8528] netlink: 16 bytes leftover after parsing attributes in process `syz.3.635'. [ 448.408509][ T5197] Bluetooth: hci2: command tx timeout [ 451.664797][ T5197] Bluetooth: hci2: command tx timeout [ 452.902264][ T8596] netlink: 16 bytes leftover after parsing attributes in process `syz.0.648'. [ 452.939665][ T8453] chnl_net:caif_netlink_parms(): no params data found [ 453.669166][ T5197] Bluetooth: hci2: command tx timeout [ 454.176683][ T8505] chnl_net:caif_netlink_parms(): no params data found [ 454.687959][ T8628] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 459.983943][ T8656] lo speed is unknown, defaulting to 1000 [ 462.734548][ T8672] lo speed is unknown, defaulting to 1000 [ 463.162690][ T8676] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 466.249638][ T8453] bridge0: port 1(bridge_slave_0) entered blocking state [ 466.252112][ T8453] bridge0: port 1(bridge_slave_0) entered disabled state [ 466.281704][ T8453] bridge_slave_0: entered allmulticast mode [ 466.468137][ T8453] bridge_slave_0: entered promiscuous mode [ 467.106858][ T8453] bridge0: port 2(bridge_slave_1) entered blocking state [ 467.106988][ T8453] bridge0: port 2(bridge_slave_1) entered disabled state [ 467.107227][ T8453] bridge_slave_1: entered allmulticast mode [ 467.136521][ T8453] bridge_slave_1: entered promiscuous mode [ 472.799522][ T8453] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 472.801388][ T8505] bridge0: port 1(bridge_slave_0) entered blocking state [ 472.801514][ T8505] bridge0: port 1(bridge_slave_0) entered disabled state [ 472.801731][ T8505] bridge_slave_0: entered allmulticast mode [ 472.809350][ T8505] bridge_slave_0: entered promiscuous mode [ 472.860462][ T8453] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 473.053678][ T8505] bridge0: port 2(bridge_slave_1) entered blocking state [ 473.053812][ T8505] bridge0: port 2(bridge_slave_1) entered disabled state [ 473.054023][ T8505] bridge_slave_1: entered allmulticast mode [ 473.081302][ T8505] bridge_slave_1: entered promiscuous mode [ 474.866093][ T8764] lo speed is unknown, defaulting to 1000 [ 475.298232][ T8453] team0: Port device team_slave_0 added [ 475.352880][ T8505] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 475.383599][ T8453] team0: Port device team_slave_1 added [ 475.422195][ T8505] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 476.075101][ T8789] FAT-fs (loop1): unable to read boot sector [ 477.719662][ T8453] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 477.719678][ T8453] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 477.719701][ T8453] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 478.252869][ T3683] bridge_slave_1: left allmulticast mode [ 478.252897][ T3683] bridge_slave_1: left promiscuous mode [ 478.253122][ T3683] bridge0: port 2(bridge_slave_1) entered disabled state [ 478.369485][ T3683] bridge_slave_0: left allmulticast mode [ 478.369504][ T3683] bridge_slave_0: left promiscuous mode [ 478.369674][ T3683] bridge0: port 1(bridge_slave_0) entered disabled state [ 478.441564][ T3683] bridge_slave_1: left allmulticast mode [ 478.441584][ T3683] bridge_slave_1: left promiscuous mode [ 478.441729][ T3683] bridge0: port 2(bridge_slave_1) entered disabled state [ 478.514120][ T3683] bridge_slave_0: left allmulticast mode [ 478.514139][ T3683] bridge_slave_0: left promiscuous mode [ 478.514287][ T3683] bridge0: port 1(bridge_slave_0) entered disabled state [ 478.899861][ T3683] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 479.447936][ T3683] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 480.422390][ T3683] bond0 (unregistering): Released all slaves [ 480.675235][ T3683] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 480.729010][ T9] usb 4-1: new full-speed USB device number 32 using dummy_hcd [ 480.769479][ T3683] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 480.831775][ T3683] bond0 (unregistering): Released all slaves [ 480.872184][ T8505] team0: Port device team_slave_0 added [ 480.875179][ T8453] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 480.875193][ T8453] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 480.875222][ T8453] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 480.889760][ T8505] team0: Port device team_slave_1 added [ 480.955642][ T9] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 480.955670][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 480.955687][ T9] usb 4-1: Product: syz [ 480.955699][ T9] usb 4-1: Manufacturer: syz [ 480.955711][ T9] usb 4-1: SerialNumber: syz [ 480.997912][ T9] usb 4-1: config 0 descriptor?? [ 481.350677][ T9] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 482.638556][ T9] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 482.994588][ T8505] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 482.994604][ T8505] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 482.994629][ T8505] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 483.545206][ T8505] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 483.545222][ T8505] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 483.545247][ T8505] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 483.636666][ T5197] Bluetooth: hci0: unexpected event for opcode 0x2024 [ 483.713378][ T44] usb 4-1: USB disconnect, device number 32 [ 484.046971][ T8453] hsr_slave_0: entered promiscuous mode [ 484.048203][ T8453] hsr_slave_1: entered promiscuous mode [ 484.060542][ T8453] debugfs: 'hsr0' already exists in 'hsr' [ 484.060569][ T8453] Cannot create hsr debugfs directory [ 485.104639][ T3683] hsr_slave_0: left promiscuous mode [ 485.548853][ T3683] hsr_slave_1: left promiscuous mode [ 485.579667][ T3683] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 485.610793][ T3683] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 487.139007][ T3683] hsr_slave_0: left promiscuous mode [ 487.202401][ T3683] hsr_slave_1: left promiscuous mode [ 487.203359][ T3683] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 487.249735][ T3683] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 487.488978][ T1945] usb 4-1: new full-speed USB device number 33 using dummy_hcd [ 487.675593][ T1945] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 487.675621][ T1945] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 487.675631][ T1945] usb 4-1: Product: syz [ 487.675637][ T1945] usb 4-1: Manufacturer: syz [ 487.675644][ T1945] usb 4-1: SerialNumber: syz [ 487.678652][ T1945] usb 4-1: config 0 descriptor?? [ 487.799784][ T3683] team0 (unregistering): Port device team_slave_1 removed [ 487.921008][ T3683] team0 (unregistering): Port device team_slave_0 removed [ 487.967642][ T1945] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 488.593396][ T1945] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 488.889808][ T3683] team0 (unregistering): Port device team_slave_1 removed [ 489.030771][ T3683] team0 (unregistering): Port device team_slave_0 removed [ 490.445401][ T1945] usb 4-1: USB disconnect, device number 33 [ 493.794254][ T8505] hsr_slave_0: entered promiscuous mode [ 493.805987][ T8505] hsr_slave_1: entered promiscuous mode [ 493.818174][ T8505] debugfs: 'hsr0' already exists in 'hsr' [ 493.818200][ T8505] Cannot create hsr debugfs directory [ 494.318425][ T8910] CIFS mount error: No usable UNC path provided in device string! [ 494.318425][ T8910] [ 494.318447][ T8910] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 494.609005][ T1945] usb 4-1: new full-speed USB device number 34 using dummy_hcd [ 494.781963][ T1945] usb 4-1: config 6 has an invalid interface number: 2 but max is 0 [ 494.781988][ T1945] usb 4-1: config 6 has an invalid descriptor of length 255, skipping remainder of the config [ 494.782006][ T1945] usb 4-1: config 6 has no interface number 0 [ 494.782052][ T1945] usb 4-1: config 6 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 494.891612][ T6036] usb 1-1: new full-speed USB device number 35 using dummy_hcd [ 495.057437][ T6036] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 495.057472][ T6036] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 495.057490][ T6036] usb 1-1: Product: syz [ 495.057503][ T6036] usb 1-1: Manufacturer: syz [ 495.057515][ T6036] usb 1-1: SerialNumber: syz [ 495.078745][ T1945] usb 4-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 495.078871][ T1945] usb 4-1: New USB device strings: Mfr=17, Product=2, SerialNumber=3 [ 495.078890][ T1945] usb 4-1: Product: syz [ 495.078903][ T1945] usb 4-1: Manufacturer: syz [ 495.078915][ T1945] usb 4-1: SerialNumber: syz [ 495.197573][ T1945] hso 4-1:6.2: Failed to find INT IN ep [ 495.230710][ T5877] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 495.232927][ T5877] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 495.235516][ T5877] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 495.239564][ T5877] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 495.247609][ T5877] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 495.290783][ T6036] usb 1-1: config 0 descriptor?? [ 495.498655][ T6036] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 495.744579][ T8914] gfs2: error -5 reading superblock [ 495.793201][ T9] usb 4-1: USB disconnect, device number 34 [ 496.162463][ T6036] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 496.378503][ T8926] lo speed is unknown, defaulting to 1000 [ 497.409122][ T5197] Bluetooth: hci1: command tx timeout [ 497.982514][ T1945] usb 1-1: USB disconnect, device number 35 [ 498.648471][ T8967] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 498.817027][ T8505] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 499.431314][ T5877] Bluetooth: hci1: command tx timeout [ 500.098666][ T8505] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 500.346389][ T8926] chnl_net:caif_netlink_parms(): no params data found [ 502.062974][ T8999] lo speed is unknown, defaulting to 1000 [ 502.074244][ T5877] Bluetooth: hci1: command tx timeout [ 502.076669][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.076734][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.496758][ T5877] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 502.503325][ T5877] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 502.508527][ T5877] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 502.513159][ T5877] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 502.513904][ T5877] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 503.950076][ T3683] bridge_slave_1: left allmulticast mode [ 503.950105][ T3683] bridge_slave_1: left promiscuous mode [ 503.950357][ T3683] bridge0: port 2(bridge_slave_1) entered disabled state [ 504.010299][ T3683] bridge_slave_0: left allmulticast mode [ 504.010320][ T3683] bridge_slave_0: left promiscuous mode [ 504.010478][ T3683] bridge0: port 1(bridge_slave_0) entered disabled state [ 504.180304][ T5197] Bluetooth: hci1: command tx timeout [ 504.367799][ T3683] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 504.378980][ T9021] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.750' sets config #0 [ 504.379456][ T9021] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.750' sets config #1 [ 504.479688][ T3683] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 504.549795][ T5197] Bluetooth: hci5: command tx timeout [ 504.558143][ T3683] bond0 (unregistering): Released all slaves [ 506.080324][ T9033] bridge0: port 1(gretap0) entered blocking state [ 506.084017][ T9033] bridge0: port 1(gretap0) entered disabled state [ 506.084500][ T9033] gretap0: entered allmulticast mode [ 506.102416][ T9033] gretap0: entered promiscuous mode [ 506.366818][ T9033] bridge0: port 1(gretap0) entered blocking state [ 506.366983][ T9033] bridge0: port 1(gretap0) entered forwarding state [ 506.388225][ T8926] bridge0: port 1(bridge_slave_0) entered blocking state [ 506.388360][ T8926] bridge0: port 1(bridge_slave_0) entered disabled state [ 506.388590][ T8926] bridge_slave_0: entered allmulticast mode [ 506.409106][ T8926] bridge_slave_0: entered promiscuous mode [ 506.632927][ T5197] Bluetooth: hci5: command tx timeout [ 507.311104][ T8926] bridge0: port 2(bridge_slave_1) entered blocking state [ 507.311241][ T8926] bridge0: port 2(bridge_slave_1) entered disabled state [ 507.311474][ T8926] bridge_slave_1: entered allmulticast mode [ 507.314146][ T8926] bridge_slave_1: entered promiscuous mode [ 507.417187][ T9005] lo speed is unknown, defaulting to 1000 [ 508.746134][ T5197] Bluetooth: hci5: command tx timeout [ 509.068967][ T3683] hsr_slave_0: left promiscuous mode [ 509.119398][ T3683] hsr_slave_1: left promiscuous mode [ 509.125801][ T3683] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 509.939102][ T3683] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 510.926090][ T5197] Bluetooth: hci5: command tx timeout [ 511.980278][ T3683] team0 (unregistering): Port device team_slave_1 removed [ 512.129725][ T3683] team0 (unregistering): Port device team_slave_0 removed [ 512.564604][ T9076] netlink: 4 bytes leftover after parsing attributes in process `syz.0.765'. [ 512.857262][ T8926] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 513.041936][ T8926] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 513.324061][ T9083] usb usb1: usbfs: interface 0 claimed by hub while 'syz.1.767' sets config #0 [ 513.325193][ T9083] usb usb1: usbfs: interface 0 claimed by hub while 'syz.1.767' sets config #1 [ 516.051091][ T8926] team0: Port device team_slave_0 added [ 516.090903][ T8926] team0: Port device team_slave_1 added [ 520.428990][ T8926] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 520.429008][ T8926] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 520.429033][ T8926] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 520.615620][ T8926] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 520.615637][ T8926] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 520.615661][ T8926] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 526.476904][ T8926] hsr_slave_0: entered promiscuous mode [ 526.494079][ T8926] hsr_slave_1: entered promiscuous mode [ 526.494929][ T8926] debugfs: 'hsr0' already exists in 'hsr' [ 526.494949][ T8926] Cannot create hsr debugfs directory [ 530.283659][ T9005] chnl_net:caif_netlink_parms(): no params data found [ 530.306469][ T37] audit: type=1800 audit(1759375266.884:4): pid=9193 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.787" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 530.307008][ T9193] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 530.307048][ T9193] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 530.307062][ T9193] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 531.057540][ T9202] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 540.081334][ T9005] bridge0: port 1(bridge_slave_0) entered blocking state [ 540.081462][ T9005] bridge0: port 1(bridge_slave_0) entered disabled state [ 540.081632][ T9005] bridge_slave_0: entered allmulticast mode [ 540.083357][ T9005] bridge_slave_0: entered promiscuous mode [ 540.287618][ T9005] bridge0: port 2(bridge_slave_1) entered blocking state [ 540.287772][ T9005] bridge0: port 2(bridge_slave_1) entered disabled state [ 540.288001][ T9005] bridge_slave_1: entered allmulticast mode [ 540.304579][ T9005] bridge_slave_1: entered promiscuous mode [ 540.835411][ T9005] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 542.032988][ T9005] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 542.142213][ T9276] lo speed is unknown, defaulting to 1000 [ 544.761701][ T9005] team0: Port device team_slave_0 added [ 544.842556][ T9005] team0: Port device team_slave_1 added [ 547.952114][ T9005] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 547.952131][ T9005] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 547.952156][ T9005] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 548.279390][ T9005] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 548.279407][ T9005] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 548.279432][ T9005] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 549.311788][ T3663] bridge_slave_1: left allmulticast mode [ 549.311921][ T3663] bridge_slave_1: left promiscuous mode [ 549.316868][ T3663] bridge0: port 2(bridge_slave_1) entered disabled state [ 549.458313][ T3663] bridge_slave_0: left allmulticast mode [ 549.458342][ T3663] bridge_slave_0: left promiscuous mode [ 549.458615][ T3663] bridge0: port 1(bridge_slave_0) entered disabled state [ 553.954809][ T3663] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 554.089541][ T3663] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 554.151654][ T3663] bond0 (unregistering): Released all slaves [ 554.222893][ T9370] lo speed is unknown, defaulting to 1000 [ 554.410729][ T9005] hsr_slave_0: entered promiscuous mode [ 554.411987][ T9005] hsr_slave_1: entered promiscuous mode [ 554.412818][ T9005] debugfs: 'hsr0' already exists in 'hsr' [ 554.412840][ T9005] Cannot create hsr debugfs directory [ 554.600891][ T5877] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 554.619355][ T5877] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 554.638625][ T5877] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 554.647670][ T5877] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 554.654080][ T5877] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 555.378127][ T3663] hsr_slave_0: left promiscuous mode [ 555.398988][ T3663] hsr_slave_1: left promiscuous mode [ 555.399943][ T3663] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 555.429622][ T3663] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 556.251177][ T3663] team0 (unregistering): Port device team_slave_1 removed [ 556.429613][ T3663] team0 (unregistering): Port device team_slave_0 removed [ 556.709029][ T5197] Bluetooth: hci2: command tx timeout [ 556.739795][ T9405] netlink: 40 bytes leftover after parsing attributes in process `syz.1.835'. [ 557.339412][ T37] audit: type=1326 audit(1759375293.894:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9409 comm="syz.0.836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4453d2eec9 code=0x7ffc0000 [ 557.340292][ T37] audit: type=1326 audit(1759375293.924:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9409 comm="syz.0.836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7f4453d2eec9 code=0x7ffc0000 [ 557.340472][ T37] audit: type=1326 audit(1759375293.924:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9409 comm="syz.0.836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4453d2eec9 code=0x7ffc0000 [ 557.341397][ T37] audit: type=1326 audit(1759375293.924:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9409 comm="syz.0.836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4453d2eec9 code=0x7ffc0000 [ 558.910153][ T5197] Bluetooth: hci2: command tx timeout [ 559.034585][ T9380] lo speed is unknown, defaulting to 1000 [ 560.518500][ T3663] bridge_slave_1: left allmulticast mode [ 560.518528][ T3663] bridge_slave_1: left promiscuous mode [ 560.518964][ T3663] bridge0: port 2(bridge_slave_1) entered disabled state [ 560.813850][ T3663] bridge_slave_0: left allmulticast mode [ 560.813881][ T3663] bridge_slave_0: left promiscuous mode [ 560.814196][ T3663] bridge0: port 1(bridge_slave_0) entered disabled state [ 561.081210][ T5197] Bluetooth: hci2: command tx timeout [ 563.054878][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.054945][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.109500][ T5197] Bluetooth: hci2: command tx timeout [ 563.571181][ T3663] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 563.725132][ T9007] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 563.735357][ T9007] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 563.736647][ T9007] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 563.740227][ T9007] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 563.742364][ T9007] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 563.929786][ T3663] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 565.460362][ T3663] bond0 (unregistering): Released all slaves [ 565.748912][ T9007] Bluetooth: hci1: command tx timeout [ 568.129070][ T9007] Bluetooth: hci1: command tx timeout [ 568.464063][ T3663] hsr_slave_0: left promiscuous mode [ 568.517793][ T3663] hsr_slave_1: left promiscuous mode [ 568.518685][ T3663] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 568.567003][ T3663] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 570.155101][ T9007] Bluetooth: hci1: command tx timeout [ 570.509667][ T3663] team0 (unregistering): Port device team_slave_1 removed [ 571.914428][ T3663] team0 (unregistering): Port device team_slave_0 removed [ 572.229205][ T9007] Bluetooth: hci1: command tx timeout [ 574.089082][ T9380] chnl_net:caif_netlink_parms(): no params data found [ 575.396797][ T9473] lo speed is unknown, defaulting to 1000 [ 583.623553][ T9626] lo speed is unknown, defaulting to 1000 [ 586.013283][ T37] audit: type=1326 audit(1759375322.594:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9635 comm="syz.1.885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6df37eec9 code=0x7ffc0000 [ 586.013573][ T37] audit: type=1326 audit(1759375322.594:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9635 comm="syz.1.885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe6df37eec9 code=0x7ffc0000 [ 586.013967][ T37] audit: type=1326 audit(1759375322.594:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9635 comm="syz.1.885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6df37eec9 code=0x7ffc0000 [ 586.014409][ T37] audit: type=1326 audit(1759375322.594:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9635 comm="syz.1.885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe6df37eec9 code=0x7ffc0000 [ 586.021099][ T37] audit: type=1326 audit(1759375322.604:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9635 comm="syz.1.885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6df37eec9 code=0x7ffc0000 [ 586.021149][ T37] audit: type=1326 audit(1759375322.604:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9635 comm="syz.1.885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe6df37eec9 code=0x7ffc0000 [ 586.021188][ T37] audit: type=1326 audit(1759375322.604:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9635 comm="syz.1.885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6df37eec9 code=0x7ffc0000 [ 586.023295][ T37] audit: type=1326 audit(1759375322.604:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9635 comm="syz.1.885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe6df37eec9 code=0x7ffc0000 [ 586.023341][ T37] audit: type=1326 audit(1759375322.604:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9635 comm="syz.1.885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6df37eec9 code=0x7ffc0000 [ 586.023809][ T37] audit: type=1326 audit(1759375322.604:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9635 comm="syz.1.885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe6df37eec9 code=0x7ffc0000 [ 586.069361][ T9380] bridge0: port 1(bridge_slave_0) entered blocking state [ 586.069484][ T9380] bridge0: port 1(bridge_slave_0) entered disabled state [ 586.069726][ T9380] bridge_slave_0: entered allmulticast mode [ 586.176537][ T9380] bridge_slave_0: entered promiscuous mode [ 587.524068][ T9380] bridge0: port 2(bridge_slave_1) entered blocking state [ 587.524227][ T9380] bridge0: port 2(bridge_slave_1) entered disabled state [ 587.524455][ T9380] bridge_slave_1: entered allmulticast mode [ 587.527139][ T9380] bridge_slave_1: entered promiscuous mode [ 589.506166][ T9380] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 589.527564][ T9380] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 590.763171][ T9670] lo speed is unknown, defaulting to 1000 [ 592.550197][ T9380] team0: Port device team_slave_0 added [ 592.570437][ T9380] team0: Port device team_slave_1 added [ 598.730908][ T9741] CIFS mount error: No usable UNC path provided in device string! [ 598.730908][ T9741] [ 598.730975][ T9741] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 599.442985][ T9380] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 599.443001][ T9380] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 599.443025][ T9380] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 599.477135][ T3663] bridge_slave_1: left allmulticast mode [ 599.477165][ T3663] bridge_slave_1: left promiscuous mode [ 599.477429][ T3663] bridge0: port 2(bridge_slave_1) entered disabled state [ 599.727921][ T3663] bridge_slave_0: left allmulticast mode [ 599.727949][ T3663] bridge_slave_0: left promiscuous mode [ 599.738993][ T3663] bridge0: port 1(bridge_slave_0) entered disabled state [ 599.805996][ T37] kauditd_printk_skb: 12 callbacks suppressed [ 599.806015][ T37] audit: type=1326 audit(1759375336.384:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9755 comm="syz.1.918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6df37eec9 code=0x7ffc0000 [ 599.806435][ T37] audit: type=1326 audit(1759375336.384:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9755 comm="syz.1.918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7fe6df37eec9 code=0x7ffc0000 [ 599.806822][ T37] audit: type=1326 audit(1759375336.384:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9755 comm="syz.1.918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6df37eec9 code=0x7ffc0000 [ 600.651809][ T9763] ------------[ cut here ]------------ [ 600.651834][ T9763] WARNING: CPU: 1 PID: 9763 at ./include/linux/seqlock.h:221 cgroup_freeze+0x80a/0xf90 [ 600.651882][ T9763] Modules linked in: [ 600.651916][ T9763] CPU: 1 UID: 0 PID: 9763 Comm: syz.1.920 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 600.651938][ T9763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 600.651953][ T9763] RIP: 0010:cgroup_freeze+0x80a/0xf90 [ 600.651977][ T9763] Code: 90 e9 9e fb ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c e7 f9 ff ff 4c 89 f7 e8 e1 43 67 00 e9 da f9 ff ff e8 17 68 06 00 90 <0f> 0b 90 e9 10 fc ff ff 44 89 f9 80 e1 07 38 c1 48 8b 0c 24 0f 8c [ 600.651994][ T9763] RSP: 0018:ffffc900048778e0 EFLAGS: 00010283 [ 600.652011][ T9763] RAX: ffffffff81b6c6b9 RBX: 0000000000000000 RCX: 0000000000080000 [ 600.652024][ T9763] RDX: ffffc9000e739000 RSI: 00000000000000b4 RDI: 00000000000000b5 [ 600.652037][ T9763] RBP: ffffc90004877a70 R08: 0000000000000000 R09: 0000000000000000 [ 600.652049][ T9763] R10: dffffc0000000000 R11: fffffbfff1d6d2c7 R12: dffffc0000000000 [ 600.652064][ T9763] R13: 0000000000000000 R14: 0000000000000001 R15: ffff888031462791 [ 600.652077][ T9763] FS: 00007fe6dd5e66c0(0000) GS:ffff888127117000(0000) knlGS:0000000000000000 [ 600.652093][ T9763] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 600.652106][ T9763] CR2: 0000000025016c64 CR3: 000000003046e000 CR4: 00000000003526f0 [ 600.652122][ T9763] Call Trace: [ 600.652134][ T9763] [ 600.652149][ T9763] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 600.652176][ T9763] ? __pfx_cgroup_freeze+0x10/0x10 [ 600.652198][ T9763] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 600.652216][ T9763] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 600.652234][ T9763] ? try_to_take_rt_mutex+0x7fd/0xac0 [ 600.652276][ T9763] ? mutex_lock_nested+0x154/0x1d0 [ 600.652298][ T9763] ? cgroup_kn_lock_live+0x13c/0x230 [ 600.652334][ T9763] cgroup_freeze_write+0x156/0x1c0 [ 600.652358][ T9763] ? __pfx_cgroup_freeze_write+0x10/0x10 [ 600.652377][ T9763] ? kernfs_root+0x1c/0x230 [ 600.652393][ T9763] ? kernfs_root+0x1c/0x230 [ 600.652412][ T9763] ? kernfs_root+0x1ea/0x230 [ 600.652428][ T9763] ? __pfx_cgroup_freeze_write+0x10/0x10 [ 600.652449][ T9763] cgroup_file_write+0x39e/0x740 [ 600.652482][ T9763] ? __pfx_cgroup_file_write+0x10/0x10 [ 600.652522][ T9763] ? __pfx_cgroup_file_write+0x10/0x10 [ 600.652544][ T9763] kernfs_fop_write_iter+0x3ad/0x540 [ 600.652576][ T9763] vfs_write+0x5d2/0xb40 [ 600.652604][ T9763] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 600.652628][ T9763] ? __pfx_vfs_write+0x10/0x10 [ 600.652645][ T9763] ? try_to_take_rt_mutex+0x7fd/0xac0 [ 600.652680][ T9763] ? mutex_lock_nested+0x154/0x1d0 [ 600.652701][ T9763] ? fdget_pos+0x253/0x320 [ 600.652735][ T9763] ksys_write+0x14b/0x260 [ 600.652760][ T9763] ? __pfx_ksys_write+0x10/0x10 [ 600.652779][ T9763] ? rcu_is_watching+0x15/0xb0 [ 600.652805][ T9763] ? do_syscall_64+0xbe/0x3b0 [ 600.652829][ T9763] do_syscall_64+0xfa/0x3b0 [ 600.652846][ T9763] ? lockdep_hardirqs_on+0x9c/0x150 [ 600.652864][ T9763] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 600.652883][ T9763] ? clear_bhb_loop+0x60/0xb0 [ 600.652905][ T9763] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 600.652923][ T9763] RIP: 0033:0x7fe6df37eec9 [ 600.652946][ T9763] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 600.652961][ T9763] RSP: 002b:00007fe6dd5e6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 600.652980][ T9763] RAX: ffffffffffffffda RBX: 00007fe6df5d5fa0 RCX: 00007fe6df37eec9 [ 600.652994][ T9763] RDX: 0000000000000012 RSI: 0000200000000200 RDI: 0000000000000006 [ 600.653006][ T9763] RBP: 00007fe6df401f91 R08: 0000000000000000 R09: 0000000000000000 [ 600.653019][ T9763] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 600.653031][ T9763] R13: 00007fe6df5d6038 R14: 00007fe6df5d5fa0 R15: 00007ffcb2983778 [ 600.653066][ T9763] [ 600.653079][ T9763] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 600.653092][ T9763] CPU: 1 UID: 0 PID: 9763 Comm: syz.1.920 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 600.653112][ T9763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 600.653123][ T9763] Call Trace: [ 600.653130][ T9763] [ 600.653138][ T9763] dump_stack_lvl+0x99/0x250 [ 600.653164][ T9763] ? __asan_memcpy+0x40/0x70 [ 600.653184][ T9763] ? __pfx_dump_stack_lvl+0x10/0x10 [ 600.653202][ T9763] ? __pfx__printk+0x10/0x10 [ 600.653242][ T9763] vpanic+0x281/0x750 [ 600.653268][ T9763] ? __pfx__printk+0x10/0x10 [ 600.653290][ T9763] ? __pfx_vpanic+0x10/0x10 [ 600.653310][ T9763] ? is_bpf_text_address+0x26/0x2b0 [ 600.653342][ T9763] panic+0xb9/0xc0 [ 600.653360][ T9763] ? __pfx_panic+0x10/0x10 [ 600.653398][ T9763] __warn+0x31b/0x4b0 [ 600.653415][ T9763] ? cgroup_freeze+0x80a/0xf90 [ 600.653441][ T9763] ? cgroup_freeze+0x80a/0xf90 [ 600.653464][ T9763] report_bug+0x2be/0x4f0 [ 600.653481][ T9763] ? cgroup_freeze+0x80a/0xf90 [ 600.653504][ T9763] ? cgroup_freeze+0x80a/0xf90 [ 600.653526][ T9763] ? cgroup_freeze+0x80c/0xf90 [ 600.653548][ T9763] handle_bug+0x84/0x160 [ 600.653570][ T9763] exc_invalid_op+0x1a/0x50 [ 600.653590][ T9763] asm_exc_invalid_op+0x1a/0x20 [ 600.653607][ T9763] RIP: 0010:cgroup_freeze+0x80a/0xf90 [ 600.653629][ T9763] Code: 90 e9 9e fb ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c e7 f9 ff ff 4c 89 f7 e8 e1 43 67 00 e9 da f9 ff ff e8 17 68 06 00 90 <0f> 0b 90 e9 10 fc ff ff 44 89 f9 80 e1 07 38 c1 48 8b 0c 24 0f 8c [ 600.653643][ T9763] RSP: 0018:ffffc900048778e0 EFLAGS: 00010283 [ 600.653659][ T9763] RAX: ffffffff81b6c6b9 RBX: 0000000000000000 RCX: 0000000000080000 [ 600.653672][ T9763] RDX: ffffc9000e739000 RSI: 00000000000000b4 RDI: 00000000000000b5 [ 600.653684][ T9763] RBP: ffffc90004877a70 R08: 0000000000000000 R09: 0000000000000000 [ 600.653697][ T9763] R10: dffffc0000000000 R11: fffffbfff1d6d2c7 R12: dffffc0000000000 [ 600.653710][ T9763] R13: 0000000000000000 R14: 0000000000000001 R15: ffff888031462791 [ 600.653732][ T9763] ? cgroup_freeze+0x809/0xf90 [ 600.653770][ T9763] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 600.653792][ T9763] ? __pfx_cgroup_freeze+0x10/0x10 [ 600.653813][ T9763] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 600.653831][ T9763] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 600.653848][ T9763] ? try_to_take_rt_mutex+0x7fd/0xac0 [ 600.653882][ T9763] ? mutex_lock_nested+0x154/0x1d0 [ 600.653903][ T9763] ? cgroup_kn_lock_live+0x13c/0x230 [ 600.653938][ T9763] cgroup_freeze_write+0x156/0x1c0 [ 600.653961][ T9763] ? __pfx_cgroup_freeze_write+0x10/0x10 [ 600.653979][ T9763] ? kernfs_root+0x1c/0x230 [ 600.653994][ T9763] ? kernfs_root+0x1c/0x230 [ 600.654014][ T9763] ? kernfs_root+0x1ea/0x230 [ 600.654030][ T9763] ? __pfx_cgroup_freeze_write+0x10/0x10 [ 600.654051][ T9763] cgroup_file_write+0x39e/0x740 [ 600.654083][ T9763] ? __pfx_cgroup_file_write+0x10/0x10 [ 600.654124][ T9763] ? __pfx_cgroup_file_write+0x10/0x10 [ 600.654146][ T9763] kernfs_fop_write_iter+0x3ad/0x540 [ 600.654177][ T9763] vfs_write+0x5d2/0xb40 [ 600.654205][ T9763] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 600.654229][ T9763] ? __pfx_vfs_write+0x10/0x10 [ 600.654247][ T9763] ? try_to_take_rt_mutex+0x7fd/0xac0 [ 600.654287][ T9763] ? mutex_lock_nested+0x154/0x1d0 [ 600.654307][ T9763] ? fdget_pos+0x253/0x320 [ 600.654341][ T9763] ksys_write+0x14b/0x260 [ 600.654365][ T9763] ? __pfx_ksys_write+0x10/0x10 [ 600.654383][ T9763] ? rcu_is_watching+0x15/0xb0 [ 600.654410][ T9763] ? do_syscall_64+0xbe/0x3b0 [ 600.654434][ T9763] do_syscall_64+0xfa/0x3b0 [ 600.654452][ T9763] ? lockdep_hardirqs_on+0x9c/0x150 [ 600.654470][ T9763] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 600.654488][ T9763] ? clear_bhb_loop+0x60/0xb0 [ 600.654511][ T9763] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 600.654528][ T9763] RIP: 0033:0x7fe6df37eec9 [ 600.654545][ T9763] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 600.654559][ T9763] RSP: 002b:00007fe6dd5e6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 600.654577][ T9763] RAX: ffffffffffffffda RBX: 00007fe6df5d5fa0 RCX: 00007fe6df37eec9 [ 600.654590][ T9763] RDX: 0000000000000012 RSI: 0000200000000200 RDI: 0000000000000006 [ 600.654602][ T9763] RBP: 00007fe6df401f91 R08: 0000000000000000 R09: 0000000000000000 [ 600.654614][ T9763] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 600.654625][ T9763] R13: 00007fe6df5d6038 R14: 00007fe6df5d5fa0 R15: 00007ffcb2983778 [ 600.654659][ T9763] [ 600.654926][ T9763] Kernel Offset: disabled