last executing test programs: 14.821640832s ago: executing program 2 (id=113): syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000703ac020580406709169000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x7c}}, 0x0) syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, &(0x7f0000000040)={0x0, 0x6, 0x8, {0x8, 0x0, "3e83f7b06bc9"}}, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x180a}}, &(0x7f00000000c0)={0x0, 0xf, 0x23, {0x5, 0xf, 0x23, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x93, 0x0, 0x8001}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x6, 0x98, 0xb313}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x8, 0x80, 0x4}]}}, &(0x7f0000000140)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x1f, 0x60, "e8c0fa2d", "9352792e"}}, &(0x7f0000000180)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x0, 0x3, 0x1, 0x45, 0x5, 0xb133}}}, &(0x7f0000000700)={0x84, &(0x7f0000000200)={0x40, 0x8, 0x5b, "cfeb4b0751380566153c2bf34d11bad9049e32676f707a90ad3c66b3a145029fc99e1925b9e03e017ec498397b7cc98bb49f366e05e0875d6fb0417d23f4f80f7cb7a83c6e0f8d77144e00731407fbb3bd27fe65d1d0869cbb1f05"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0xff}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x3}}, &(0x7f0000000400)={0x20, 0x0, 0x8, {0x20, 0x1, [0x77f0]}}, 0x0, &(0x7f0000000480)={0x40, 0x9, 0x1}, 0x0, &(0x7f0000000500)={0x40, 0xf, 0x2, 0x8001}, &(0x7f0000000540)={0x40, 0x13, 0x6}, &(0x7f0000000580)={0x40, 0x17, 0x6, @remote}, 0x0, &(0x7f0000000600)={0x40, 0x1a, 0x2, 0x4000}, &(0x7f0000000640)={0x40, 0x1c, 0x1, 0x27}, &(0x7f0000000680)={0x40, 0x1e, 0x1, 0x2}, &(0x7f00000006c0)={0x40, 0x21, 0x1, 0x7f}}) 12.191135068s ago: executing program 2 (id=131): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r1, 0x9e235000) r2 = syz_io_uring_setup(0x416f, 0x0, &(0x7f0000001240)=0x0, &(0x7f0000001340)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/4, 0x4}], 0x27}) io_uring_enter(r2, 0x567, 0x0, 0x0, 0x0, 0x0) 12.070935327s ago: executing program 2 (id=134): r0 = getpid() prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) 11.339861874s ago: executing program 1 (id=137): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) prlimit64(r3, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080)) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000d40)={'wlan0\x00', 0x0}) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x4048aec9, &(0x7f0000000080)={[{}, {}, {0x0, 0x0, 0x0, 0x3e}]}) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), r0) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000500)={&(0x7f0000000100), 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x4c, r8, 0x100, 0x70bd27, 0x25dfdbff, {}, [@ETHTOOL_A_RINGS_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}]}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0xe37}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x40}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x2}]}, 0x4c}}, 0x10) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="020a040007000000b6f1ffff0000854105001a"], 0x38}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e000000030000000000000405000600000000000a0000000000000400000000000000000000002100000000000100000000000002000100010000000000010200fd000005000500000000000a"], 0x70}}, 0x0) sendmmsg(r9, &(0x7f0000000180), 0x3ef, 0x0) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000400)="d800000019008111e00212ba0d8105040a780000ff0f040b067c55a1bc000900b80006990300000004000500fe808178a8001500030001400200000901ac040000d67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f00000e970300"/216, 0xd8}], 0x1}, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x24, r1, 0xc31, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x8, 0x11d, 0x0, 0x1, [{0x4}]}]}, 0x24}}, 0x0) 10.390699018s ago: executing program 3 (id=139): r0 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000080)='wg1\x00', 0x4) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) connect(r0, &(0x7f0000000080)=@un=@abs, 0x80) 10.359191814s ago: executing program 0 (id=140): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB, @ANYRES32=r2, @ANYBLOB="0a00340002020202020223000a000600ff"], 0x34}}, 0x0) 10.143031937s ago: executing program 1 (id=141): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000e5cf01406e0510401c20000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000b80)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB="00000100"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f0000000700)={0x2c, &(0x7f0000000540)={0x40, 0x7, 0x7b, {0x7b, 0x24, "0a5097ccf6015a6932806b3275520179189617f3518a2486ed73f81bf29c017bfd0cab6c3d598396c6c693dd1175f69c50a90e990648322bae846e079c63d0fd350b5de8c544d16b56414b0047641f22aab27a73dfdb14c547dc3a6d86eade33020563da0fc605a5533ac0b8f30d905c3c3bb8515cea778599"}}, &(0x7f0000000600)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2809}}, &(0x7f0000000640)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000680)={0x20, 0x29, 0xf, {0xf, 0x29, 0x3f, 0x80, 0x40, 0x3, "1387a668", "a45caed7"}}, &(0x7f00000006c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xff, 0x8, 0x21, 0x6, 0x1, 0x6, 0x9}}}, &(0x7f0000000c80)={0x84, &(0x7f0000000740)={0x0, 0x5, 0x9f, "9db73eecaade449a1bdb471bf177c5b1b9bd728f20ceb96c3c04e5d4c48dbe439fe1aba0f57a75f0833f51a81d0fdc637346fd5de966134ec14ef81e28091bbfae64c4541958bdd2f93948e3316c74c704c992599785b117956372ebe845512d090d2c391b497d1f64871cd1e3f5cd7bcb9477fc373f0a2ba73ac2a2225b7eb905ccaacc83725140e677a4561459e949ee0d3a347e94f6c6ac3ac54a9176dd"}, &(0x7f0000000800)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000d40)={0x0, 0x8, 0x1, 0xa1}, &(0x7f0000000880)={0x20, 0x0, 0x4, {0x0, 0x1}}, &(0x7f00000008c0)={0x20, 0x0, 0x4, {0x1c00, 0x20}}, &(0x7f0000000900)={0x40, 0x7, 0x2, 0x8}, &(0x7f0000000940)={0x40, 0x9, 0x1}, &(0x7f0000000980)={0x40, 0xb, 0x2, "f319"}, &(0x7f0000000840)={0x40, 0xf, 0x2, 0x80}, &(0x7f0000000a00)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}}, &(0x7f0000000a40)={0x40, 0x17, 0x6, @random="b1c865b2f5df"}, &(0x7f0000000a80)={0x40, 0x19, 0x2, "e384"}, &(0x7f0000000ac0)={0x40, 0x1a, 0x2, 0xb0e9}, &(0x7f0000000b00)={0x40, 0x1c, 0x1, 0xf9}, &(0x7f0000000b40)={0x40, 0x1e, 0x1, 0x6f}, &(0x7f0000000c40)={0x40, 0x21, 0x1, 0xb3}}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f00000002c0)=ANY=[@ANYBLOB='\x00+2'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000900)={0x41}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, 0x0, 0x0) sendmsg$tipc(r3, &(0x7f0000000240)={&(0x7f0000000080)=@id={0x1e, 0x3, 0x0, {0x0, 0x1}}, 0xf8, 0x0}, 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000180)={0x14, &(0x7f0000000080)={0x20, 0x7, 0xc4, {0xc4, 0x31, "abb2821e2ecea26d44acbfb2d1be7993c75270e68f5242d53aea20452a654dc07ed80e3e5b5308215526321687642b77238eb582c38a819cb523f0673519e2d5b11340c1966cccf468c4dcf5736890d1056b6c0dc535b9db3658ae539570b1d41f6ce7fcdda7a8bbbfa02dacb7b90d5ee6d3480beaa0b1f6997977ef4a9ced893566d6b36dbbc92408429b948e8e886af38c2b00fd234cc13d06f4cc78729864e97b5c6eecec61e8b1511b12a7d9f703db3ce9d640cca9889336ca7e8b85a2c94dcb"}}, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44a}}}, &(0x7f0000000500)={0x34, &(0x7f00000001c0)={0x40, 0x13, 0xb7, "f2db70d613de9615bda844a7865b121964443143e8e6e36bd07f21b1cc3d1beaa37edc1e607b9215161a66653f7c08f8aa734766a63e380728c73672c349ef8448a0e6f38d2fa2a75baa05b64539953ae799756980822bed20c4cdf1dba07a0d3529c55ef9100e0be77937bfe7b76716413b657dba7c3f228e63e78329045d0c172a5bdcb1fe3fbb789695545e4119146b1016271ef5bc5df1fb9bd09db8713fbae54654d457cfd78e404b5944421bd29d0b9402a65a42"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x7f}, &(0x7f0000000380)={0x20, 0x0, 0x6d, {0x6b, "acde4b23d263a0f66e4f8efcf45d127d7c070e538f3e63e85e57c7063baa1ecd96fec8045fc044a6ee115542b1e76d31a6d789eb55acc4a4fbe22107fd24441b3404beb7a4743717b80fc511d96e94dffe5fb1999d826b073ccf8d9b8ecc9dc123d86cde07a185e50f35df"}}, &(0x7f0000000400)={0x20, 0x1, 0x1, 0xd8}, &(0x7f00000004c0)={0x20, 0x0, 0x1, 0x2}}) 10.111533985s ago: executing program 0 (id=142): syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000703ac020580406709169000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x7c}}, 0x0) syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, &(0x7f0000000040)={0x0, 0x6, 0x8, {0x8, 0x0, "3e83f7b06bc9"}}, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x180a}}, &(0x7f00000000c0)={0x0, 0xf, 0x23, {0x5, 0xf, 0x23, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x93, 0x0, 0x8001}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x6, 0x98, 0xb313}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x8, 0x80, 0x4}]}}, &(0x7f0000000140)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x1f, 0x60, "e8c0fa2d", "9352792e"}}, &(0x7f0000000180)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x0, 0x3, 0x1, 0x45, 0x5, 0xb133}}}, &(0x7f0000000700)={0x84, &(0x7f0000000200)={0x40, 0x8, 0x5b, "cfeb4b0751380566153c2bf34d11bad9049e32676f707a90ad3c66b3a145029fc99e1925b9e03e017ec498397b7cc98bb49f366e05e0875d6fb0417d23f4f80f7cb7a83c6e0f8d77144e00731407fbb3bd27fe65d1d0869cbb1f05"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0xff}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x3}}, &(0x7f0000000400)={0x20, 0x0, 0x8, {0x20, 0x1, [0x77f0]}}, 0x0, &(0x7f0000000480)={0x40, 0x9, 0x1}, 0x0, &(0x7f0000000500)={0x40, 0xf, 0x2, 0x8001}, &(0x7f0000000540)={0x40, 0x13, 0x6}, &(0x7f0000000580)={0x40, 0x17, 0x6, @remote}, 0x0, &(0x7f0000000600)={0x40, 0x1a, 0x2, 0x4000}, &(0x7f0000000640)={0x40, 0x1c, 0x1, 0x27}, &(0x7f0000000680)={0x40, 0x1e, 0x1, 0x2}, &(0x7f00000006c0)={0x40, 0x21, 0x1, 0x7f}}) 10.101120844s ago: executing program 3 (id=143): r0 = socket(0x11, 0x800000003, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@bridge_delneigh={0x34, 0x1c, 0x11c9605ad31efc73, 0x0, 0x0, {0x7, 0x0, 0x300, 0x0, 0x2}, [@NDA_LLADDR={0xa, 0x2, @multicast}, @NDA_FDB_EXT_ATTRS={0xc, 0xe, 0x0, 0x1, [@NFEA_ACTIVITY_NOTIFY={0x5, 0x1, 0x3}]}]}, 0x34}}, 0x0) 9.909081356s ago: executing program 3 (id=144): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r1, 0x9e235000) r2 = syz_io_uring_setup(0x416f, 0x0, &(0x7f0000001240)=0x0, &(0x7f0000001340)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/4, 0x4}], 0x27}) io_uring_enter(r2, 0x567, 0x0, 0x0, 0x0, 0x0) 9.765591976s ago: executing program 3 (id=145): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x0, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) shutdown(r1, 0x1) ioctl$int_in(r1, 0x5452, &(0x7f0000000180)=0x401) listen(r1, 0x0) accept4(r1, 0x0, 0x0, 0x0) shutdown(r1, 0x0) 9.557994381s ago: executing program 3 (id=146): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0x1}, 0x48) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000ffffffff18110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70200001400b600b7030000000000108500000008000000bc09000000000000550901000000000095000000c7119dedbf91000000000000b7020000000000008500000000000000b70000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x9, 0x1003, &(0x7f0000001e40)=""/4099, 0x0, 0xa}, 0x90) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x4c, &(0x7f00000000c0)=ANY=[@ANYRES8, @ANYRES64=0x0]) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r2, &(0x7f0000000000)=""/74, 0x4a) 9.392385558s ago: executing program 2 (id=147): r0 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}}, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x14}}, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(0xffffffffffffffff, 0x80049370, &(0x7f00000000c0)) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r2], 0x48}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket(0x0, 0x803, 0x0) socket(0x9, 0x0, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x3, 0x0, &(0x7f00000000c0)='syzkaller\x00'}, 0x90) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b15, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5}}, 0x24}}, 0x0) 9.379761514s ago: executing program 4 (id=148): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0x0, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000001c0)={@val={0x6}, @void, @eth={@random="2ccd603c647a", @random="d26b98d19dd8", @val={@val, {0x6558}}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @empty, @loopback}, @address_request}}}}}, 0x36) 9.049713586s ago: executing program 4 (id=149): r0 = open(&(0x7f0000000180)='./bus\x00', 0x14d27e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x0) fallocate(r0, 0x0, 0x0, 0x8004) r1 = open(&(0x7f0000007f80)='./bus\x00', 0x145142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x80140, 0x0) getdents64(r2, &(0x7f0000001280)=""/4089, 0xff9) ftruncate(r1, 0x8000000000000000) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000040)) r3 = openat$incfs(0xffffffffffffff9c, &(0x7f00000000c0)='.pending_reads\x00', 0x20140, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r3, 0xc0506617, &(0x7f0000000240)={@desc={0x1, 0x0, @desc2}}) memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12010100000000105801000100000000000109022400010000002009040000010300000009210000000122dc01090589"], 0x0) mkdir(&(0x7f0000000240)='./bus\x00', 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r4, 0x800c6613, &(0x7f0000000100)=@v1={0x0, @adiantum, 0x0, @desc1}) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f00000002c0)={'fscrypt:', @desc1}, &(0x7f00000001c0)={0x0, "28d7e4968ab9f26f2da4149683f065714f8a000000008000000127cf0999459cff33a3a9ae50f1af9d51ef5bef3d63520d260804d02200", 0x3c}, 0x65, 0xfffffffffffffffd) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mount$afs(&(0x7f0000000000)=ANY=[@ANYBLOB="ee72797a303a73b4ab4766"], &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280), 0x0, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r5, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000300)=0x1, r6, 0x0, 0x2, 0x4}}, 0x20) 9.042360778s ago: executing program 2 (id=150): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x2, 0x2, 0x204}, 0x48) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000140)={@broadcast, @remote}, &(0x7f0000000180)=0xc) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x15, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000100850000000100000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE(r1, &(0x7f00000002c0)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000240)=""/11, 0xb}}, 0x120) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) write$UHID_INPUT2(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="0c000000a9"], 0xaf) 7.243773604s ago: executing program 2 (id=151): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) prlimit64(r3, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080)) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000d40)={'wlan0\x00', 0x0}) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x4048aec9, &(0x7f0000000080)={[{}, {}, {0x0, 0x0, 0x0, 0x3e}]}) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), r0) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000500)={&(0x7f0000000100), 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x4c, r8, 0x100, 0x70bd27, 0x25dfdbff, {}, [@ETHTOOL_A_RINGS_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}]}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0xe37}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x40}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x2}]}, 0x4c}}, 0x10) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="020a040007000000b6f1ffff0000854105001a"], 0x38}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e000000030000000000000405000600000000000a0000000000000400000000000000000000002100000000000100000000000002000100010000000000010200fd000005000500000000000a"], 0x70}}, 0x0) sendmmsg(r9, &(0x7f0000000180), 0x3ef, 0x0) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000400)="d800000019008111e00212ba0d8105040a780000ff0f040b067c55a1bc000900b80006990300000004000500fe808178a8001500030001400200000901ac040000d67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f00000e970300"/216, 0xd8}], 0x1}, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x24, r1, 0xc31, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x8, 0x11d, 0x0, 0x1, [{0x4}]}]}, 0x24}}, 0x0) 7.223983269s ago: executing program 0 (id=152): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB, @ANYRES32=r2, @ANYBLOB="0a00340002020202020223000a000600ff"], 0x34}}, 0x0) 6.885113448s ago: executing program 4 (id=153): r0 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000080)='wg1\x00', 0x4) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) connect(r0, &(0x7f0000000080)=@un=@abs, 0x80) 6.601571837s ago: executing program 1 (id=154): r0 = socket(0x11, 0x800000003, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@bridge_delneigh={0x34, 0x1c, 0x11c9605ad31efc73, 0x0, 0x0, {0x7, 0x0, 0x300, 0x0, 0x2}, [@NDA_LLADDR={0xa, 0x2, @multicast}, @NDA_FDB_EXT_ATTRS={0xc, 0xe, 0x0, 0x1, [@NFEA_ACTIVITY_NOTIFY={0x5, 0x1, 0x3}]}]}, 0x34}}, 0x0) 6.587992446s ago: executing program 0 (id=155): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r1, 0x9e235000) r2 = syz_io_uring_setup(0x416f, 0x0, &(0x7f0000001240)=0x0, &(0x7f0000001340)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/4, 0x4}], 0x27}) io_uring_enter(r2, 0x567, 0x0, 0x0, 0x0, 0x0) 6.51082092s ago: executing program 4 (id=156): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) shutdown(r1, 0x1) ioctl$int_in(r1, 0x5452, &(0x7f0000000180)=0x401) listen(r1, 0x0) accept4(r1, 0x0, 0x0, 0x0) shutdown(r1, 0x0) 6.510429716s ago: executing program 1 (id=157): r0 = getpid() prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) 6.420563415s ago: executing program 0 (id=158): ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000300)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000000340)={0x7f, 0x3, "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"}) r1 = memfd_create(&(0x7f0000000140)='-B\xd5NI\xc5j\x9a\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacv\x8a}knX#\xcf(\xfe\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xdd\x00\x00\xc98M\xcd\xfb\xcc\x82n=\xf7/[mx\t\xff~\xb90a\xa9\xb2\x04K\x98\x91=\xabQ\xf7\x05\x1d\xa1\xce\x8a\xc5at\x94=F\xc7\xea\x84\xea0\xf4\x0f\"C\xeb\x17\xe9V\x92o\xa7\xe3/H~\x81\xebnG5\xe3O\x9a\xd9\t_\x88e\xa9x\xd2\xa0\x1e\"\xb3\xbb\x8e\x961\xf5N\xdbj\x1f\xcf>1y\xe8\xb4\xbd{\x9a\x95\xcd\xaf\"^\x86\xd2\xed`\x84\xb6\xb1\xf8\xb5\x99\xf2\x12,\x94~\x04\xfc\xce|\x12\xad\xac\xe17\x15\x19!\xae\x03J\xd5\xabnS\x81\xe0\xfa\aP\f\x00', 0x7) landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x10, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0xc, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f0000000080)={r3}, &(0x7f0000000280)=0x8) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'gre0\x00'}) syz_open_dev$sg(&(0x7f00000002c0), 0xffffffffffffffff, 0x2301) r5 = dup(r1) execveat(r5, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 6.403327122s ago: executing program 3 (id=159): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000001c0)={@val={0x6}, @void, @eth={@random="2ccd603c647a", @random="d26b98d19dd8", @val={@val, {0x6558}}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @empty, @loopback}, @address_request}}}}}, 0x36) 6.284121569s ago: executing program 4 (id=160): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000500)={0x0, 0x2c}}, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x100000) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000202070030000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2d0ca98f4cb2e0ec, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f}}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x0, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000002400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r4}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0x6, 0x0, 0x8000, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe}, 0x48) write$FUSE_WRITE(0xffffffffffffffff, &(0x7f0000000280)={0x18}, 0x18) r5 = getpid() sched_setscheduler(r5, 0x1, &(0x7f0000000100)=0x5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='sched_switch\x00', r2}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0xa, 0x7, 0x209}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000e80), &(0x7f0000000300), 0x4f, r8}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r8, &(0x7f0000000280), &(0x7f00000000c0)=""/186}, 0x20) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) r10 = dup(r9) write$UHID_INPUT(r10, &(0x7f0000001040)={0xa, {"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", 0x1025}}, 0x1006) read$FUSE(r1, &(0x7f0000000240)={0x2020}, 0x2020) 481.000353ms ago: executing program 1 (id=161): r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c80)=ANY=[@ANYBLOB="4002e3e58ebe32c3fd5d1694c7dae0a33e8dadcccdca3194e84ab52347eb080bb591ca816f7a94609dc593db845a", @ANYRES16=0x0, @ANYBLOB="000000000000000000003b00000008000300", @ANYRES32=0x0, @ANYRES64=r0], 0x240}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000340)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[], 0x398}}, 0x20000000) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(0xffffffffffffffff, 0x28, 0x6, &(0x7f0000000080)={0x0, 0xea60}, 0x10) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000200)={0x28, 0x0, 0x0, @host}, 0x10) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000), 0x10) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0xb, &(0x7f0000000000), &(0x7f0000000040)=0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000840)='comm\x00') writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000140)='15', 0x2}], 0x8) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000240)={'syztnl1\x00', &(0x7f00000001c0)={'syztnl0\x00', 0x0, 0x2f, 0x6e, 0x1, 0x2fb, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x15}}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40, 0x80, 0x800, 0xe5b}}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x3, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"/2646, @ANYRESHEX, @ANYRESHEX, @ANYRES64=r2, @ANYRES64=r5], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x3}, 0x10}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f00000000c0)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000006c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x1, 0xffffffff}}, @int={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4}]}}, &(0x7f0000000740)=""/105, 0x42, 0x69, 0x1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={r6, 0x0, 0x14, 0x0, &(0x7f00000006c0)="f6f4e9a1d78ad62ceef1884366a578bb3fb7dbfc", 0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000240)="482eadffffffffffff", 0x0}, 0x50) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x3c}}, 0x0) 344.365718ms ago: executing program 0 (id=162): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x2, 0x2, 0x204}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x15, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000100850000000100000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE(r1, &(0x7f00000002c0)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000240)=""/11, 0xb}}, 0x120) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) write$UHID_INPUT2(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="0c000000a9"], 0xaf) 42.744772ms ago: executing program 4 (id=163): mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000000)="3900000013000b4700bb65e1c3e4ffff0100000040000000560000022500000019000a001000000007fd17e5ffff080004000000000000000a", 0x39}], 0x1) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000500)='./file0/file0/../file0\x00', 0x0, 0x800020, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x1adc51, 0x0) sendmsg$AUDIT_MAKE_EQUIV(r0, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x30, 0x3f7, 0x0, 0x70bd25, 0x25dfdbfc, {0x7, 0x10, './file0', './file0/../file0'}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4014}, 0x50) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32, @ANYBLOB="1c002c8004"], 0x38}}, 0x0) memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x0) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12010100000000105801000100000000000109022400010000002009040000010300000009210000000122dc01090589"], 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000240), 0x208e24b) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r5, 0x84, 0x10, &(0x7f0000000080)=@assoc_value={0x0, 0x101}, &(0x7f00000002c0)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r5, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12011003000012002505a8a4f0"], 0x0) syz_usb_control_io(r4, &(0x7f00000000c0)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 0s ago: executing program 1 (id=164): r0 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}}, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x14}}, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(0xffffffffffffffff, 0x80049370, &(0x7f00000000c0)) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r2], 0x48}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket(0x0, 0x803, 0x0) socket(0x9, 0x0, 0xfff) socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x3, 0x0, &(0x7f00000000c0)='syzkaller\x00'}, 0x90) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b15, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.100' (ED25519) to the list of known hosts. [ 69.760957][ T5071] cgroup: Unknown subsys name 'net' [ 69.900142][ T5071] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 71.581247][ T5071] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 71.851765][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.867832][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.386362][ T5084] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 72.401541][ T5092] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 72.424130][ T5093] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 72.436352][ T5093] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 72.442119][ T5094] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 72.444446][ T5093] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 72.453706][ T5094] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 72.459224][ T5093] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 72.467910][ T5094] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 72.479026][ T5094] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 72.487279][ T5094] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 72.496938][ T5094] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 72.497762][ T5093] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 72.505776][ T5094] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 72.516215][ T5097] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 72.519791][ T5094] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 72.527434][ T5093] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 72.536639][ T5094] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 72.544658][ T5097] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 72.551373][ T5094] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 72.559251][ T5093] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 72.567082][ T5097] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 72.571936][ T5098] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 72.578967][ T5097] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 72.604674][ T5097] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 72.605753][ T5092] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 72.623985][ T5097] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 72.632356][ T5094] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 72.643614][ T4479] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 72.653278][ T5097] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 73.165084][ T5081] chnl_net:caif_netlink_parms(): no params data found [ 73.335716][ T5086] chnl_net:caif_netlink_parms(): no params data found [ 73.436008][ T5081] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.443417][ T5081] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.451644][ T5081] bridge_slave_0: entered allmulticast mode [ 73.459336][ T5081] bridge_slave_0: entered promiscuous mode [ 73.501332][ T5088] chnl_net:caif_netlink_parms(): no params data found [ 73.514374][ T5081] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.521761][ T5081] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.529867][ T5081] bridge_slave_1: entered allmulticast mode [ 73.536925][ T5081] bridge_slave_1: entered promiscuous mode [ 73.550727][ T5080] chnl_net:caif_netlink_parms(): no params data found [ 73.654748][ T5081] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.731661][ T5081] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.741597][ T5086] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.749070][ T5086] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.756342][ T5086] bridge_slave_0: entered allmulticast mode [ 73.765300][ T5086] bridge_slave_0: entered promiscuous mode [ 73.814475][ T5086] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.822438][ T5086] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.830176][ T5086] bridge_slave_1: entered allmulticast mode [ 73.837248][ T5086] bridge_slave_1: entered promiscuous mode [ 73.871522][ T5081] team0: Port device team_slave_0 added [ 73.901124][ T5090] chnl_net:caif_netlink_parms(): no params data found [ 73.936171][ T5081] team0: Port device team_slave_1 added [ 73.957026][ T5086] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.975993][ T5086] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.985756][ T5088] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.993509][ T5088] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.000951][ T5088] bridge_slave_0: entered allmulticast mode [ 74.008309][ T5088] bridge_slave_0: entered promiscuous mode [ 74.074891][ T5088] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.082557][ T5088] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.090956][ T5088] bridge_slave_1: entered allmulticast mode [ 74.099243][ T5088] bridge_slave_1: entered promiscuous mode [ 74.131610][ T5080] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.139052][ T5080] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.146829][ T5080] bridge_slave_0: entered allmulticast mode [ 74.154346][ T5080] bridge_slave_0: entered promiscuous mode [ 74.163959][ T5081] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.172973][ T5081] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.199684][ T5081] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.213657][ T5081] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.220806][ T5081] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.247044][ T5081] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.266645][ T5086] team0: Port device team_slave_0 added [ 74.303017][ T5080] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.314093][ T5080] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.321995][ T5080] bridge_slave_1: entered allmulticast mode [ 74.329748][ T5080] bridge_slave_1: entered promiscuous mode [ 74.360997][ T5086] team0: Port device team_slave_1 added [ 74.378055][ T5088] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.403996][ T5080] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.456970][ T5088] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.483385][ T5080] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.518053][ T5086] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.525634][ T5086] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.552279][ T5086] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.612178][ T5081] hsr_slave_0: entered promiscuous mode [ 74.619795][ T5081] hsr_slave_1: entered promiscuous mode [ 74.627564][ T5086] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.635565][ T5086] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.662601][ T5086] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.662615][ T5097] Bluetooth: hci0: command tx timeout [ 74.680957][ T5084] Bluetooth: hci1: command tx timeout [ 74.700494][ T5088] team0: Port device team_slave_0 added [ 74.711299][ T5080] team0: Port device team_slave_0 added [ 74.720687][ T5080] team0: Port device team_slave_1 added [ 74.728921][ T5084] Bluetooth: hci4: command tx timeout [ 74.734662][ T4479] Bluetooth: hci3: command tx timeout [ 74.734809][ T5097] Bluetooth: hci2: command tx timeout [ 74.760882][ T5090] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.768323][ T5090] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.775766][ T5090] bridge_slave_0: entered allmulticast mode [ 74.783825][ T5090] bridge_slave_0: entered promiscuous mode [ 74.793192][ T5088] team0: Port device team_slave_1 added [ 74.856371][ T5090] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.863656][ T5090] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.871496][ T5090] bridge_slave_1: entered allmulticast mode [ 74.878960][ T5090] bridge_slave_1: entered promiscuous mode [ 74.911514][ T5080] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.918651][ T5080] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.944721][ T5080] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.987701][ T5088] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.995517][ T5088] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.022293][ T5088] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.036051][ T5080] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.043436][ T5080] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.071880][ T5080] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.099535][ T5086] hsr_slave_0: entered promiscuous mode [ 75.106053][ T5086] hsr_slave_1: entered promiscuous mode [ 75.113065][ T5086] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 75.121113][ T5086] Cannot create hsr debugfs directory [ 75.140682][ T5088] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.147680][ T5088] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.174832][ T5088] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.223274][ T5090] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.309765][ T5090] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.416245][ T5088] hsr_slave_0: entered promiscuous mode [ 75.423058][ T5088] hsr_slave_1: entered promiscuous mode [ 75.429815][ T5088] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 75.438868][ T5088] Cannot create hsr debugfs directory [ 75.450305][ T5080] hsr_slave_0: entered promiscuous mode [ 75.456947][ T5080] hsr_slave_1: entered promiscuous mode [ 75.463472][ T5080] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 75.471165][ T5080] Cannot create hsr debugfs directory [ 75.491234][ T5090] team0: Port device team_slave_0 added [ 75.500257][ T5090] team0: Port device team_slave_1 added [ 75.544522][ T5090] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.553251][ T5090] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.580555][ T5090] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.598595][ T5090] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.605581][ T5090] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.632609][ T5090] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.886967][ T5090] hsr_slave_0: entered promiscuous mode [ 75.895156][ T5090] hsr_slave_1: entered promiscuous mode [ 75.901982][ T5090] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 75.911349][ T5090] Cannot create hsr debugfs directory [ 75.960365][ T5081] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 75.981162][ T5081] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 75.999261][ T5081] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 76.010288][ T5081] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 76.195302][ T5086] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 76.206088][ T5086] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 76.225860][ T5086] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 76.276223][ T5086] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 76.362018][ T5088] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 76.375063][ T5088] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 76.404205][ T5088] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 76.441176][ T5088] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 76.517969][ T5080] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 76.549622][ T5080] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 76.563793][ T5080] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 76.592749][ T5080] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 76.728632][ T5097] Bluetooth: hci0: command tx timeout [ 76.729498][ T4479] Bluetooth: hci1: command tx timeout [ 76.751867][ T5090] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 76.764033][ T5090] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 76.774706][ T5090] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 76.785476][ T5090] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 76.808535][ T4479] Bluetooth: hci2: command tx timeout [ 76.808590][ T5097] Bluetooth: hci3: command tx timeout [ 76.813977][ T4479] Bluetooth: hci4: command tx timeout [ 76.857764][ T5081] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.920358][ T5086] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.939415][ T5081] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.996069][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.003616][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.025385][ T5086] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.039663][ T5083] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.046843][ T5083] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.076998][ T5083] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.084522][ T5083] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.133196][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.140729][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.223216][ T5088] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.281169][ T5080] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.357598][ T5088] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.414926][ T5080] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.426604][ T5083] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.433955][ T5083] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.493604][ T5083] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.500903][ T5083] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.550321][ T5083] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.557522][ T5083] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.580599][ T5083] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.588009][ T5083] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.634673][ T5090] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.802923][ T5081] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.824123][ T5090] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.915706][ T5134] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.923068][ T5134] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.963538][ T5137] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.970873][ T5137] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.002086][ T5086] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.144827][ T5088] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.286322][ T5090] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 78.353511][ T5086] veth0_vlan: entered promiscuous mode [ 78.441841][ T5086] veth1_vlan: entered promiscuous mode [ 78.484162][ T5080] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.537388][ T5081] veth0_vlan: entered promiscuous mode [ 78.603161][ T5088] veth0_vlan: entered promiscuous mode [ 78.637878][ T5086] veth0_macvtap: entered promiscuous mode [ 78.673247][ T5086] veth1_macvtap: entered promiscuous mode [ 78.683023][ T5081] veth1_vlan: entered promiscuous mode [ 78.695884][ T5090] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.704573][ T5088] veth1_vlan: entered promiscuous mode [ 78.808982][ T4479] Bluetooth: hci0: command tx timeout [ 78.810909][ T5097] Bluetooth: hci1: command tx timeout [ 78.826363][ T5086] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.850629][ T5080] veth0_vlan: entered promiscuous mode [ 78.872568][ T5088] veth0_macvtap: entered promiscuous mode [ 78.886558][ T5086] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.894012][ T5097] Bluetooth: hci4: command tx timeout [ 78.899010][ T5097] Bluetooth: hci3: command tx timeout [ 78.900468][ T4479] Bluetooth: hci2: command tx timeout [ 78.919123][ T5081] veth0_macvtap: entered promiscuous mode [ 78.945279][ T5086] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.954639][ T5086] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.964878][ T5086] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.975032][ T5086] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.991281][ T5080] veth1_vlan: entered promiscuous mode [ 78.999892][ T5090] veth0_vlan: entered promiscuous mode [ 79.011590][ T5081] veth1_macvtap: entered promiscuous mode [ 79.037507][ T5088] veth1_macvtap: entered promiscuous mode [ 79.084569][ T5090] veth1_vlan: entered promiscuous mode [ 79.099147][ T5081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.110969][ T5081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.122837][ T5081] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.166461][ T5088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.177722][ T5088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.189127][ T5088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.200171][ T5088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.213271][ T5088] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.238149][ T5081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.254094][ T5081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.266038][ T5081] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.300988][ T5081] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.312242][ T5081] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.321711][ T5081] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.331366][ T5081] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.343429][ T5088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.355721][ T5088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.366326][ T5088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.379810][ T5088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.392670][ T5088] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.425687][ T5088] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.434688][ T5088] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.444025][ T5088] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.453671][ T5088] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.489065][ T2845] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.501745][ T2845] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.534891][ T5090] veth0_macvtap: entered promiscuous mode [ 79.562458][ T5080] veth0_macvtap: entered promiscuous mode [ 79.586877][ T5090] veth1_macvtap: entered promiscuous mode [ 79.601797][ T5080] veth1_macvtap: entered promiscuous mode [ 79.659326][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.669639][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.699450][ T5090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.710771][ T5090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.724204][ T5090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.734879][ T5090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.745039][ T5090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.756248][ T5090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.769862][ T5090] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.789339][ T5090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.806168][ T5090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.821843][ T5090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.832779][ T5090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.843542][ T5090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.855063][ T5090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.870062][ T5090] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.909876][ T5090] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.923435][ T5090] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.933550][ T5090] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.946170][ T5090] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.012456][ T5080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.024973][ T5080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.035661][ T5080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.047694][ T5080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.059102][ T5080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.074904][ T5080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.085676][ T5080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.102949][ T5080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.124372][ T5080] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.166383][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.184516][ T29] audit: type=1326 audit(1719560881.024:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5165 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaad975b29 code=0x7ffc0000 [ 80.218146][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.252712][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.279929][ T29] audit: type=1326 audit(1719560881.024:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5165 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaad975b29 code=0x7ffc0000 [ 80.309910][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.323815][ T29] audit: type=1326 audit(1719560881.034:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5165 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffaad975b29 code=0x7ffc0000 [ 80.324173][ T5080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.372234][ T5080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.383739][ T5080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.395455][ T5080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.408069][ T29] audit: type=1326 audit(1719560881.034:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5165 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaad975b29 code=0x7ffc0000 [ 80.418674][ T5080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.440632][ T29] audit: type=1326 audit(1719560881.044:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5165 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffaad975b29 code=0x7ffc0000 [ 80.447716][ T5080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.468055][ T29] audit: type=1326 audit(1719560881.054:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5165 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaad975b29 code=0x7ffc0000 [ 80.473033][ T5080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.494388][ T29] audit: type=1326 audit(1719560881.094:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5165 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ffaad96cba7 code=0x7ffc0000 [ 80.494436][ T29] audit: type=1326 audit(1719560881.094:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5165 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ffaad911559 code=0x7ffc0000 [ 80.494475][ T29] audit: type=1326 audit(1719560881.094:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5165 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ffaad96cba7 code=0x7ffc0000 [ 80.494512][ T29] audit: type=1326 audit(1719560881.094:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5165 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ffaad911559 code=0x7ffc0000 [ 80.601057][ T5080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.613268][ T5080] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.640158][ T5080] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.653433][ T5080] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.662582][ T5080] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.672391][ T5080] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.704045][ T2845] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.723894][ T2845] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.747485][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.756452][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.852763][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.884952][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.889155][ T4479] Bluetooth: hci0: command tx timeout [ 80.897841][ T4479] Bluetooth: hci1: command tx timeout [ 80.966755][ T5169] netlink: 'syz.2.3': attribute type 21 has an invalid length. [ 80.975857][ T4479] Bluetooth: hci2: command tx timeout [ 80.976090][ T5169] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3'. [ 80.982059][ T4479] Bluetooth: hci3: command tx timeout [ 80.982142][ T4479] Bluetooth: hci4: command tx timeout [ 81.003468][ T5169] netlink: 'syz.2.3': attribute type 4 has an invalid length. [ 81.012723][ T5169] netlink: 'syz.2.3': attribute type 5 has an invalid length. [ 81.022388][ T5169] netlink: 3 bytes leftover after parsing attributes in process `syz.2.3'. [ 81.066244][ T2845] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.084423][ T2845] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.192555][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.207877][ T5176] netlink: 'syz.2.6': attribute type 10 has an invalid length. [ 81.218943][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.238266][ T5176] veth1_macvtap: left promiscuous mode [ 81.310930][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.342643][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.708591][ T5134] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 81.771873][ T5083] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 81.953984][ T5134] usb 5-1: not running at top speed; connect to a high speed hub [ 81.969204][ T5083] usb 3-1: Using ep0 maxpacket: 16 [ 81.982313][ T5083] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 82.016130][ T5134] usb 5-1: config 9 has an invalid interface number: 29 but max is 2 [ 82.027681][ T5083] usb 3-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 82.060850][ T5134] usb 5-1: config 9 has an invalid interface number: 4 but max is 2 [ 82.062045][ T5083] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.107147][ T5134] usb 5-1: config 9 contains an unexpected descriptor of type 0x1, skipping [ 82.124706][ T5083] usb 3-1: config 0 descriptor?? [ 82.168047][ T5134] usb 5-1: config 9 has an invalid interface number: 48 but max is 2 [ 82.214319][ T5134] usb 5-1: config 9 has no interface number 0 [ 82.263282][ T5134] usb 5-1: config 9 has no interface number 1 [ 82.318783][ T5134] usb 5-1: config 9 has no interface number 2 [ 82.325311][ T5134] usb 5-1: config 9 interface 29 altsetting 4 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 82.399129][ T5134] usb 5-1: config 9 interface 29 altsetting 4 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 82.463069][ T5134] usb 5-1: config 9 interface 4 altsetting 251 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 82.527413][ T5134] usb 5-1: config 9 interface 4 altsetting 251 has a duplicate endpoint with address 0x3, skipping [ 82.565275][ T5134] usb 5-1: config 9 interface 4 altsetting 251 has an invalid descriptor for endpoint zero, skipping [ 82.618160][ T5134] usb 5-1: config 9 interface 4 altsetting 251 has a duplicate endpoint with address 0xA, skipping [ 82.630993][ T5200] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12'. [ 82.646836][ T5176] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.649050][ T5134] usb 5-1: config 9 interface 4 altsetting 251 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 82.678023][ T5176] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.707903][ T5134] usb 5-1: config 9 interface 48 altsetting 1 endpoint 0xF has invalid maxpacket 1023, setting to 64 [ 82.750418][ T5083] hid-generic 0003:0158:0100.0001: unknown main item tag 0x1 [ 82.758050][ T5083] hid-generic 0003:0158:0100.0001: unexpected long global item [ 82.777602][ T5134] usb 5-1: config 9 interface 48 altsetting 1 endpoint 0x5 has invalid wMaxPacketSize 0 [ 82.800231][ T5203] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12'. [ 82.815886][ T5134] usb 5-1: config 9 interface 48 altsetting 1 has a duplicate endpoint with address 0x3, skipping [ 82.828545][ T5119] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 82.833443][ T5083] hid-generic 0003:0158:0100.0001: probe with driver hid-generic failed with error -22 [ 82.859804][ T5134] usb 5-1: config 9 interface 48 altsetting 1 has a duplicate endpoint with address 0xA, skipping [ 82.880783][ T5134] usb 5-1: config 9 interface 48 altsetting 1 has a duplicate endpoint with address 0x7, skipping [ 82.909737][ T5134] usb 5-1: config 9 interface 48 altsetting 1 has a duplicate endpoint with address 0xB, skipping [ 82.927716][ T5134] usb 5-1: config 9 interface 48 altsetting 1 has a duplicate endpoint with address 0x6, skipping [ 82.978397][ T5134] usb 5-1: config 9 interface 29 has no altsetting 0 [ 82.985434][ T5134] usb 5-1: config 9 interface 4 has no altsetting 0 [ 82.988076][ T5083] usb 3-1: USB disconnect, device number 2 [ 83.015540][ T5134] usb 5-1: config 9 interface 48 has no altsetting 0 [ 83.040766][ T5119] usb 4-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 83.055808][ T5134] usb 5-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 83.069019][ T5119] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.077312][ T5134] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.107973][ T5134] usb 5-1: Product: Е [ 83.112585][ T5119] usb 4-1: config 0 descriptor?? [ 83.144713][ T5134] usb 5-1: Manufacturer: о [ 83.259106][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 83.420109][ T5134] usb 5-1: unknown interface protocol 0x4f, assuming v1 [ 83.427543][ T5134] usb 5-1: cannot find UAC_HEADER [ 83.524479][ T5134] snd-usb-audio 5-1:9.4: probe with driver snd-usb-audio failed with error -22 [ 83.610294][ T5134] usb 5-1: USB disconnect, device number 2 [ 85.082381][ T5119] pegasus 4-1:0.0: can't reset MAC [ 85.089025][ T5119] pegasus 4-1:0.0: probe with driver pegasus failed with error -5 [ 85.110682][ T5119] usb 4-1: USB disconnect, device number 2 [ 85.296866][ T4479] Bluetooth: hci4: command tx timeout [ 85.888520][ T5137] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 85.936914][ T5233] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 86.559269][ T5137] usb 2-1: Using ep0 maxpacket: 16 [ 86.567684][ T5137] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 86.582073][ T5137] usb 2-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 86.591234][ T5137] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.606157][ T5137] usb 2-1: config 0 descriptor?? [ 86.785602][ T29] kauditd_printk_skb: 71 callbacks suppressed [ 86.785632][ T29] audit: type=1326 audit(1719560887.634:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5242 comm="syz.3.24" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd718975b29 code=0x0 [ 86.821692][ T5223] syz.1.19 (pid 5223) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 86.937018][ T5223] overlayfs: conflicting lowerdir path [ 86.988768][ T5248] Invalid ELF section header overflow [ 87.118566][ T25] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 87.315024][ T5247] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.332133][ T25] usb 5-1: Using ep0 maxpacket: 32 [ 87.350113][ T25] usb 5-1: New USB device found, idVendor=0458, idProduct=7006, bcdDevice=69.91 [ 87.358066][ T5247] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.377469][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.407680][ T5137] hid (null): unknown global tag 0x83 [ 87.416913][ T25] usb 5-1: config 0 descriptor?? [ 87.425425][ T5137] hid (null): unknown global tag 0xd [ 87.441735][ T5137] hid-generic 0003:0158:0100.0002: unknown main item tag 0x1 [ 87.453538][ T25] gspca_main: sunplus-2.14.0 probing 0458:7006 [ 87.479074][ T5137] hid-generic 0003:0158:0100.0002: unexpected long global item [ 87.498785][ T5137] hid-generic 0003:0158:0100.0002: probe with driver hid-generic failed with error -22 [ 87.650344][ T5204] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 87.750074][ T5254] netlink: 24 bytes leftover after parsing attributes in process `syz.3.27'. [ 87.860368][ T5204] usb 1-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 87.889864][ T5257] Zero length message leads to an empty skb [ 88.678338][ T5204] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.700730][ T5204] usb 1-1: config 0 descriptor?? [ 88.708919][ T5204] ums-realtek 1-1:0.0: USB Mass Storage device detected [ 88.804991][ T5266] netlink: 'syz.2.30': attribute type 10 has an invalid length. [ 88.813263][ T5132] usb 2-1: USB disconnect, device number 2 [ 88.862266][ T5266] netlink: 32 bytes leftover after parsing attributes in process `syz.2.30'. [ 88.919433][ T5250] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.939143][ T5250] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.974605][ T5119] usb 1-1: USB disconnect, device number 2 [ 89.026291][ T5271] netlink: 'syz.2.33': attribute type 10 has an invalid length. [ 89.041476][ T5271] netlink: 32 bytes leftover after parsing attributes in process `syz.2.33'. [ 89.162642][ T25] gspca_sunplus: reg_r err -71 [ 89.167598][ T25] sunplus 5-1:0.0: probe with driver sunplus failed with error -71 [ 89.411848][ T25] usb 5-1: USB disconnect, device number 3 [ 90.017593][ T5280] syz.3.35 uses obsolete (PF_INET,SOCK_PACKET) [ 90.186589][ T5285] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 90.277600][ T5285] netlink: 12 bytes leftover after parsing attributes in process `syz.1.36'. [ 90.302792][ T5285] veth1_vlan: entered allmulticast mode [ 90.439526][ T29] audit: type=1800 audit(1719560891.295:84): pid=5294 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.1.40" name="bus" dev="sda1" ino=1963 res=0 errno=0 [ 90.465860][ T29] audit: type=1800 audit(1719560891.315:85): pid=5294 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.1.40" name="bus" dev="sda1" ino=1963 res=0 errno=0 [ 90.512780][ T29] audit: type=1800 audit(1719560891.355:86): pid=5294 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.1.40" name="bus" dev="sda1" ino=1963 res=0 errno=0 [ 90.556810][ T5297] process 'syz.3.41' launched '/dev/fd/7' with NULL argv: empty string added [ 90.560033][ T29] audit: type=1804 audit(1719560891.355:87): pid=5294 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.1.40" name="/root/syzkaller.A3UxUE/10/bus" dev="sda1" ino=1963 res=1 errno=0 [ 90.566377][ T5299] syz.2.39 (5299): attempted to duplicate a private mapping with mremap. This is not supported. [ 90.615780][ T5204] hid (null): global environment stack underflow [ 90.622116][ T5299] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 90.626410][ T5097] Bluetooth: hci2: unexpected event 0x2f length: 509 > 260 [ 90.643146][ T5204] hid-generic 0000:0000:0000.0003: global environment stack underflow [ 90.684296][ T5204] hid-generic 0000:0000:0000.0003: item 0 4 1 11 parsing failed [ 90.693986][ T5204] hid-generic 0000:0000:0000.0003: probe with driver hid-generic failed with error -22 [ 90.709240][ T5137] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 90.821665][ T5132] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 90.889708][ T5309] netlink: 'syz.3.45': attribute type 21 has an invalid length. [ 90.897805][ T5309] netlink: 128 bytes leftover after parsing attributes in process `syz.3.45'. [ 90.906983][ T5309] netlink: 'syz.3.45': attribute type 4 has an invalid length. [ 90.914792][ T5137] usb 5-1: Using ep0 maxpacket: 8 [ 90.915191][ T5309] netlink: 'syz.3.45': attribute type 5 has an invalid length. [ 90.922839][ T5137] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 90.932834][ T5133] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 90.950236][ T5137] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 90.956434][ T5309] netlink: 3 bytes leftover after parsing attributes in process `syz.3.45'. [ 90.965715][ T5137] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.982421][ T5137] usb 5-1: config 0 descriptor?? [ 91.022444][ T5313] netlink: 4 bytes leftover after parsing attributes in process `syz.3.46'. [ 91.044651][ T5132] usb 2-1: Using ep0 maxpacket: 16 [ 91.069065][ T5132] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 91.087618][ T5132] usb 2-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 91.096956][ T5132] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.109736][ T5132] usb 2-1: config 0 descriptor?? [ 91.117508][ T5313] netlink: 4 bytes leftover after parsing attributes in process `syz.3.46'. [ 91.130242][ T5313] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 91.171955][ T5133] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 91.192175][ T5133] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.205423][ T5133] usb 1-1: Product: syz [ 91.219808][ T5313] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 91.227258][ T5133] usb 1-1: Manufacturer: syz [ 91.238361][ T5133] usb 1-1: SerialNumber: syz [ 91.273068][ T5133] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 91.321385][ T29] audit: type=1804 audit(1719560892.175:88): pid=5294 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.1.40" name="/root/syzkaller.A3UxUE/10/bus" dev="sda1" ino=1963 res=1 errno=0 [ 91.359128][ T5294] overlay: ./bus is not a directory [ 91.372901][ T5294] kAFS: unparsable volume name [ 91.373112][ T5119] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 91.393978][ T5132] usbhid 2-1:0.0: can't add hid device: -71 [ 91.401783][ T5132] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 91.440574][ T5132] usb 2-1: USB disconnect, device number 3 [ 91.659364][ T5204] usb 1-1: USB disconnect, device number 3 [ 92.342953][ T58] cfg80211: failed to load regulatory.db [ 92.344828][ T5083] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 92.498319][ T5119] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 92.507798][ T5119] ath9k_htc: Failed to initialize the device [ 92.561831][ T5204] usb 1-1: ath9k_htc: USB layer deinitialized [ 92.565130][ T5332] netlink: 24 bytes leftover after parsing attributes in process `syz.0.52'. [ 92.590104][ T5083] usb 2-1: Using ep0 maxpacket: 32 [ 92.602684][ T5083] usb 2-1: New USB device found, idVendor=0458, idProduct=7006, bcdDevice=69.91 [ 92.631827][ T5083] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.673829][ T5083] usb 2-1: config 0 descriptor?? [ 92.702736][ T5083] gspca_main: sunplus-2.14.0 probing 0458:7006 [ 93.420931][ T5137] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 93.451018][ T5344] netlink: 'syz.0.57': attribute type 21 has an invalid length. [ 93.457347][ T5137] usb 5-1: USB disconnect, device number 4 [ 93.482344][ T5344] netlink: 128 bytes leftover after parsing attributes in process `syz.0.57'. [ 93.489290][ T5137] iowarrior 5-1:0.0: I/O-Warror #0 now disconnected [ 93.503151][ T5344] netlink: 'syz.0.57': attribute type 4 has an invalid length. [ 93.517295][ T5344] netlink: 'syz.0.57': attribute type 5 has an invalid length. [ 93.525445][ T5344] netlink: 3 bytes leftover after parsing attributes in process `syz.0.57'. [ 93.562584][ T5348] netlink: 4 bytes leftover after parsing attributes in process `syz.2.59'. [ 93.616812][ T5097] Bluetooth: hci0: unexpected event 0x2f length: 509 > 260 [ 93.667010][ T5348] netlink: 4 bytes leftover after parsing attributes in process `syz.2.59'. [ 93.802766][ T5348] team0: Port device team_slave_0 removed [ 94.127724][ T5083] gspca_sunplus: reg_r err -71 [ 94.139583][ T5083] sunplus 2-1:0.0: probe with driver sunplus failed with error -71 [ 94.164723][ T5083] usb 2-1: USB disconnect, device number 4 [ 94.410434][ T5097] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 94.420530][ T5097] Bluetooth: hci2: Injecting HCI hardware error event [ 94.429641][ T4479] Bluetooth: hci2: hardware error 0x00 [ 94.739369][ T5134] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 94.825607][ T5392] netlink: 'syz.1.72': attribute type 21 has an invalid length. [ 94.849886][ T5392] netlink: 128 bytes leftover after parsing attributes in process `syz.1.72'. [ 94.876543][ T5392] netlink: 'syz.1.72': attribute type 4 has an invalid length. [ 94.898483][ T5119] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 94.934120][ T5392] netlink: 'syz.1.72': attribute type 5 has an invalid length. [ 94.969146][ T5134] usb 5-1: not running at top speed; connect to a high speed hub [ 94.977094][ T5392] netlink: 3 bytes leftover after parsing attributes in process `syz.1.72'. [ 95.006932][ T5134] usb 5-1: config 9 has an invalid interface number: 29 but max is 2 [ 95.028318][ T5134] usb 5-1: config 9 has an invalid interface number: 4 but max is 2 [ 95.050257][ T5134] usb 5-1: config 9 contains an unexpected descriptor of type 0x1, skipping [ 95.070848][ T5134] usb 5-1: config 9 has an invalid interface number: 48 but max is 2 [ 95.098307][ T5134] usb 5-1: config 9 has no interface number 0 [ 95.104460][ T5134] usb 5-1: config 9 has no interface number 1 [ 95.121678][ T5119] usb 4-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 95.139859][ T5134] usb 5-1: config 9 has no interface number 2 [ 95.146112][ T5134] usb 5-1: config 9 interface 29 altsetting 4 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 95.168338][ T5119] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.184006][ T5119] usb 4-1: config 0 descriptor?? [ 95.198486][ T5134] usb 5-1: config 9 interface 29 altsetting 4 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 95.218605][ T5134] usb 5-1: config 9 interface 4 altsetting 251 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 95.250624][ T5134] usb 5-1: config 9 interface 4 altsetting 251 has a duplicate endpoint with address 0x3, skipping [ 95.278381][ T5134] usb 5-1: config 9 interface 4 altsetting 251 has an invalid descriptor for endpoint zero, skipping [ 95.318328][ T5134] usb 5-1: config 9 interface 4 altsetting 251 has a duplicate endpoint with address 0xA, skipping [ 95.357236][ T5134] usb 5-1: config 9 interface 4 altsetting 251 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 95.387112][ T5134] usb 5-1: config 9 interface 48 altsetting 1 endpoint 0xF has invalid maxpacket 1023, setting to 64 [ 95.418309][ T5134] usb 5-1: config 9 interface 48 altsetting 1 endpoint 0x5 has invalid wMaxPacketSize 0 [ 95.438322][ T5134] usb 5-1: config 9 interface 48 altsetting 1 has a duplicate endpoint with address 0x3, skipping [ 95.468321][ T5134] usb 5-1: config 9 interface 48 altsetting 1 has a duplicate endpoint with address 0xA, skipping [ 95.498762][ T5134] usb 5-1: config 9 interface 48 altsetting 1 has a duplicate endpoint with address 0x7, skipping [ 95.519990][ T5134] usb 5-1: config 9 interface 48 altsetting 1 has a duplicate endpoint with address 0xB, skipping [ 95.520146][ T5406] netlink: 4 bytes leftover after parsing attributes in process `syz.1.75'. [ 95.563191][ T5134] usb 5-1: config 9 interface 48 altsetting 1 has a duplicate endpoint with address 0x6, skipping [ 95.597088][ T5134] usb 5-1: config 9 interface 29 has no altsetting 0 [ 95.604262][ T5134] usb 5-1: config 9 interface 4 has no altsetting 0 [ 95.629801][ T5134] usb 5-1: config 9 interface 48 has no altsetting 0 [ 95.661287][ T5134] usb 5-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 95.689213][ T5134] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.695177][ T5407] netlink: 4 bytes leftover after parsing attributes in process `syz.1.75'. [ 95.719143][ T5134] usb 5-1: Product: Е [ 95.723357][ T5134] usb 5-1: Manufacturer: о [ 96.019835][ T5134] usb 5-1: unknown interface protocol 0x4f, assuming v1 [ 96.033371][ T5134] usb 5-1: cannot find UAC_HEADER [ 96.102502][ T5134] snd-usb-audio 5-1:9.4: probe with driver snd-usb-audio failed with error -22 [ 96.152535][ T5134] usb 5-1: USB disconnect, device number 5 [ 96.302960][ T5097] Bluetooth: hci4: unexpected event 0x2f length: 509 > 260 [ 96.488543][ T4479] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 96.562503][ T5431] netlink: 'syz.2.83': attribute type 10 has an invalid length. [ 96.577523][ T5431] netlink: 32 bytes leftover after parsing attributes in process `syz.2.83'. [ 96.686827][ T5435] netlink: 'syz.4.84': attribute type 21 has an invalid length. [ 96.698101][ T5435] netlink: 128 bytes leftover after parsing attributes in process `syz.4.84'. [ 96.716938][ T5435] netlink: 'syz.4.84': attribute type 4 has an invalid length. [ 96.733676][ T5435] netlink: 'syz.4.84': attribute type 5 has an invalid length. [ 96.778483][ T5134] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 96.851401][ T5119] pegasus 4-1:0.0: can't reset MAC [ 96.856806][ T5119] pegasus 4-1:0.0: probe with driver pegasus failed with error -5 [ 96.890912][ T5119] usb 4-1: USB disconnect, device number 3 [ 96.969533][ T5134] usb 1-1: Using ep0 maxpacket: 32 [ 96.977012][ T5134] usb 1-1: New USB device found, idVendor=0458, idProduct=7006, bcdDevice=69.91 [ 96.997667][ T5134] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.030971][ T5134] usb 1-1: config 0 descriptor?? [ 97.066865][ T5134] gspca_main: sunplus-2.14.0 probing 0458:7006 [ 97.537363][ T4479] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 97.547198][ T4479] Bluetooth: hci0: Injecting HCI hardware error event [ 97.558564][ T4479] Bluetooth: hci0: hardware error 0x00 [ 98.048419][ T5083] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 98.232766][ T5477] netlink: 'syz.2.98': attribute type 10 has an invalid length. [ 98.272515][ T5083] usb 4-1: not running at top speed; connect to a high speed hub [ 98.292748][ T5083] usb 4-1: config 9 has an invalid interface number: 29 but max is 2 [ 98.312626][ T5083] usb 4-1: config 9 has an invalid interface number: 4 but max is 2 [ 98.342705][ T5083] usb 4-1: config 9 contains an unexpected descriptor of type 0x1, skipping [ 98.372788][ T5083] usb 4-1: config 9 has an invalid interface number: 48 but max is 2 [ 98.394303][ T5083] usb 4-1: config 9 has no interface number 0 [ 98.409353][ T5083] usb 4-1: config 9 has no interface number 1 [ 98.429712][ T5083] usb 4-1: config 9 has no interface number 2 [ 98.442044][ T5083] usb 4-1: config 9 interface 29 altsetting 4 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 98.468404][ T5083] usb 4-1: config 9 interface 29 altsetting 4 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 98.480538][ T5134] gspca_sunplus: reg_r err -71 [ 98.485478][ T5134] sunplus 1-1:0.0: probe with driver sunplus failed with error -71 [ 98.491396][ T5479] netlink: 'syz.2.99': attribute type 21 has an invalid length. [ 98.508460][ T5083] usb 4-1: config 9 interface 4 altsetting 251 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 98.530621][ T5134] usb 1-1: USB disconnect, device number 4 [ 98.541273][ T5479] __nla_validate_parse: 4 callbacks suppressed [ 98.541295][ T5479] netlink: 128 bytes leftover after parsing attributes in process `syz.2.99'. [ 98.561374][ T5083] usb 4-1: config 9 interface 4 altsetting 251 has a duplicate endpoint with address 0x3, skipping [ 98.598515][ T5083] usb 4-1: config 9 interface 4 altsetting 251 has an invalid descriptor for endpoint zero, skipping [ 98.626397][ T5083] usb 4-1: config 9 interface 4 altsetting 251 has a duplicate endpoint with address 0xA, skipping [ 98.628483][ T5479] netlink: 'syz.2.99': attribute type 4 has an invalid length. [ 98.648773][ T5083] usb 4-1: config 9 interface 4 altsetting 251 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 98.682074][ T5083] usb 4-1: config 9 interface 48 altsetting 1 endpoint 0xF has invalid maxpacket 1023, setting to 64 [ 98.708191][ T5479] netlink: 3 bytes leftover after parsing attributes in process `syz.2.99'. [ 98.713496][ T5083] usb 4-1: config 9 interface 48 altsetting 1 endpoint 0x5 has invalid wMaxPacketSize 0 [ 98.766970][ T5083] usb 4-1: config 9 interface 48 altsetting 1 has a duplicate endpoint with address 0x3, skipping [ 98.814032][ T5083] usb 4-1: config 9 interface 48 altsetting 1 has a duplicate endpoint with address 0xA, skipping [ 98.857184][ T5083] usb 4-1: config 9 interface 48 altsetting 1 has a duplicate endpoint with address 0x7, skipping [ 98.900473][ T5083] usb 4-1: config 9 interface 48 altsetting 1 has a duplicate endpoint with address 0xB, skipping [ 98.919791][ T5083] usb 4-1: config 9 interface 48 altsetting 1 has a duplicate endpoint with address 0x6, skipping [ 98.948301][ T5083] usb 4-1: config 9 interface 29 has no altsetting 0 [ 98.955272][ T5083] usb 4-1: config 9 interface 4 has no altsetting 0 [ 98.984200][ T5083] usb 4-1: config 9 interface 48 has no altsetting 0 [ 99.015686][ T5083] usb 4-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 99.042532][ T5083] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.084196][ T5083] usb 4-1: Product: Е [ 99.088662][ T5083] usb 4-1: Manufacturer: о [ 99.271830][ T5491] netlink: 4 bytes leftover after parsing attributes in process `syz.4.102'. [ 99.369995][ T5083] usb 4-1: unknown interface protocol 0x4f, assuming v1 [ 99.377147][ T5083] usb 4-1: cannot find UAC_HEADER [ 99.432917][ T5083] snd-usb-audio 4-1:9.4: probe with driver snd-usb-audio failed with error -22 [ 99.475894][ T5491] netlink: 4 bytes leftover after parsing attributes in process `syz.4.102'. [ 99.495181][ T5491] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 99.505032][ T5083] usb 4-1: USB disconnect, device number 4 [ 99.576258][ T5491] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 99.620793][ T4479] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 99.871367][ T5516] validate_nla: 1 callbacks suppressed [ 99.871390][ T5516] netlink: 'syz.0.111': attribute type 21 has an invalid length. [ 99.950630][ T5516] netlink: 128 bytes leftover after parsing attributes in process `syz.0.111'. [ 99.953070][ T5134] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 99.993813][ T5516] netlink: 'syz.0.111': attribute type 4 has an invalid length. [ 100.038360][ T5516] netlink: 'syz.0.111': attribute type 5 has an invalid length. [ 100.046255][ T5516] netlink: 3 bytes leftover after parsing attributes in process `syz.0.111'. [ 100.164824][ T5134] usb 2-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 100.174487][ T4479] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 100.183975][ T4479] Bluetooth: hci4: Injecting HCI hardware error event [ 100.192335][ T5097] Bluetooth: hci4: hardware error 0x00 [ 100.200015][ T5134] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.218373][ T5119] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 100.227167][ T5134] usb 2-1: config 0 descriptor?? [ 100.408627][ T5119] usb 3-1: Using ep0 maxpacket: 32 [ 100.420767][ T5119] usb 3-1: New USB device found, idVendor=0458, idProduct=7006, bcdDevice=69.91 [ 100.438326][ T5119] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.489300][ T5119] usb 3-1: config 0 descriptor?? [ 100.500717][ T5119] gspca_main: sunplus-2.14.0 probing 0458:7006 [ 100.588282][ C0] hrtimer: interrupt took 85513 ns [ 101.449879][ T5543] netlink: 4 bytes leftover after parsing attributes in process `syz.0.121'. [ 101.621494][ T5546] netlink: 4 bytes leftover after parsing attributes in process `syz.0.121'. [ 101.879346][ T5134] pegasus 2-1:0.0: can't reset MAC [ 101.888335][ T5134] pegasus 2-1:0.0: probe with driver pegasus failed with error -5 [ 101.909799][ T5119] gspca_sunplus: reg_r err -71 [ 101.915557][ T5119] sunplus 3-1:0.0: probe with driver sunplus failed with error -71 [ 101.936141][ T5134] usb 2-1: USB disconnect, device number 5 [ 101.950465][ T5119] usb 3-1: USB disconnect, device number 3 [ 102.123277][ T4479] Bluetooth: hci3: unexpected event 0x2f length: 509 > 260 [ 102.184702][ T5562] netlink: 'syz.4.126': attribute type 21 has an invalid length. [ 102.203203][ T5562] netlink: 128 bytes leftover after parsing attributes in process `syz.4.126'. [ 102.212359][ T5562] netlink: 'syz.4.126': attribute type 4 has an invalid length. [ 102.220286][ T5562] netlink: 'syz.4.126': attribute type 5 has an invalid length. [ 102.231324][ T5562] netlink: 3 bytes leftover after parsing attributes in process `syz.4.126'. [ 102.288451][ T5204] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 102.328663][ T5097] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 102.494070][ T5204] usb 4-1: not running at top speed; connect to a high speed hub [ 102.512183][ T5204] usb 4-1: config 9 has an invalid interface number: 29 but max is 2 [ 102.530770][ T5204] usb 4-1: config 9 has an invalid interface number: 4 but max is 2 [ 102.548003][ T5204] usb 4-1: config 9 contains an unexpected descriptor of type 0x1, skipping [ 102.567265][ T5204] usb 4-1: config 9 has an invalid interface number: 48 but max is 2 [ 102.582610][ T5204] usb 4-1: config 9 has no interface number 0 [ 102.601886][ T5204] usb 4-1: config 9 has no interface number 1 [ 102.627538][ T5204] usb 4-1: config 9 has no interface number 2 [ 102.636200][ T5204] usb 4-1: config 9 interface 29 altsetting 4 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 102.657803][ T5204] usb 4-1: config 9 interface 29 altsetting 4 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 102.670224][ T5204] usb 4-1: config 9 interface 4 altsetting 251 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 102.681804][ T5204] usb 4-1: config 9 interface 4 altsetting 251 has a duplicate endpoint with address 0x3, skipping [ 102.692752][ T5204] usb 4-1: config 9 interface 4 altsetting 251 has an invalid descriptor for endpoint zero, skipping [ 102.704007][ T5204] usb 4-1: config 9 interface 4 altsetting 251 has a duplicate endpoint with address 0xA, skipping [ 102.746956][ T5204] usb 4-1: config 9 interface 4 altsetting 251 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 102.768493][ T5204] usb 4-1: config 9 interface 48 altsetting 1 endpoint 0xF has invalid maxpacket 1023, setting to 64 [ 102.788457][ T5204] usb 4-1: config 9 interface 48 altsetting 1 endpoint 0x5 has invalid wMaxPacketSize 0 [ 102.824336][ T5204] usb 4-1: config 9 interface 48 altsetting 1 has a duplicate endpoint with address 0x3, skipping [ 102.867644][ T5204] usb 4-1: config 9 interface 48 altsetting 1 has a duplicate endpoint with address 0xA, skipping [ 102.888307][ T5204] usb 4-1: config 9 interface 48 altsetting 1 has a duplicate endpoint with address 0x7, skipping [ 102.927518][ T5204] usb 4-1: config 9 interface 48 altsetting 1 has a duplicate endpoint with address 0xB, skipping [ 102.961773][ T5204] usb 4-1: config 9 interface 48 altsetting 1 has a duplicate endpoint with address 0x6, skipping [ 103.002964][ T5204] usb 4-1: config 9 interface 29 has no altsetting 0 [ 103.030263][ T5204] usb 4-1: config 9 interface 4 has no altsetting 0 [ 103.036954][ T5204] usb 4-1: config 9 interface 48 has no altsetting 0 [ 103.075296][ T5204] usb 4-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 103.101521][ T5204] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.140413][ T5204] usb 4-1: Product: Е [ 103.144572][ T5204] usb 4-1: Manufacturer: о [ 103.475957][ T5598] netlink: 'syz.0.138': attribute type 21 has an invalid length. [ 103.538778][ T5598] netlink: 'syz.0.138': attribute type 4 has an invalid length. [ 103.598847][ T5598] netlink: 'syz.0.138': attribute type 5 has an invalid length. [ 103.673736][ T5598] __nla_validate_parse: 3 callbacks suppressed [ 103.673758][ T5598] netlink: 3 bytes leftover after parsing attributes in process `syz.0.138'. [ 103.690394][ T5204] usb 4-1: unknown interface protocol 0x4f, assuming v1 [ 103.697482][ T5204] usb 4-1: cannot find UAC_HEADER [ 103.717915][ T5204] snd-usb-audio 4-1:9.4: probe with driver snd-usb-audio failed with error -22 [ 104.545001][ T5204] usb 4-1: USB disconnect, device number 5 [ 104.928334][ T5134] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 104.977565][ T5133] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 105.132311][ T5134] usb 2-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 105.152035][ T5134] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.169003][ T5133] usb 1-1: Using ep0 maxpacket: 32 [ 105.196014][ T5133] usb 1-1: New USB device found, idVendor=0458, idProduct=7006, bcdDevice=69.91 [ 105.211139][ T5134] usb 2-1: config 0 descriptor?? [ 105.221783][ T5133] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.239683][ T5133] usb 1-1: config 0 descriptor?? [ 105.256165][ T5133] gspca_main: sunplus-2.14.0 probing 0458:7006 [ 105.352580][ T5624] netlink: 4 bytes leftover after parsing attributes in process `syz.2.147'. [ 105.480259][ T5204] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 105.482812][ T5624] netlink: 4 bytes leftover after parsing attributes in process `syz.2.147'. [ 105.666807][ T29] audit: type=1800 audit(1719560906.515:89): pid=5632 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.4.149" name="bus" dev="sda1" ino=1959 res=0 errno=0 [ 105.682648][ T5204] usb 4-1: Using ep0 maxpacket: 8 [ 105.689960][ T29] audit: type=1800 audit(1719560906.525:90): pid=5632 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.4.149" name="bus" dev="sda1" ino=1959 res=0 errno=0 [ 105.700187][ T5204] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 105.737867][ T5083] hid (null): global environment stack underflow [ 105.749835][ T5083] hid-generic 0000:0000:0000.0004: global environment stack underflow [ 105.760063][ T5083] hid-generic 0000:0000:0000.0004: item 0 4 1 11 parsing failed [ 105.769435][ T5083] hid-generic 0000:0000:0000.0004: probe with driver hid-generic failed with error -22 [ 105.783089][ T29] audit: type=1800 audit(1719560906.605:91): pid=5635 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.4.149" name="bus" dev="sda1" ino=1959 res=0 errno=0 [ 105.803976][ T5204] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 105.804013][ T5204] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.812278][ T5204] usb 4-1: config 0 descriptor?? [ 105.814351][ T29] audit: type=1804 audit(1719560906.615:92): pid=5632 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.4.149" name="/root/syzkaller.Oz7L5D/23/bus" dev="sda1" ino=1959 res=1 errno=0 [ 106.008592][ T5097] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 106.017717][ T5097] Bluetooth: hci3: Injecting HCI hardware error event [ 106.027377][ T5097] Bluetooth: hci3: hardware error 0x00 [ 106.035732][ T25] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 106.098859][ T5119] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 106.233766][ T25] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 106.248259][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.257110][ T25] usb 3-1: Product: syz [ 106.261642][ T25] usb 3-1: Manufacturer: syz [ 106.266272][ T25] usb 3-1: SerialNumber: syz [ 106.277537][ T25] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 106.288534][ T5119] usb 5-1: Using ep0 maxpacket: 16 [ 106.307657][ T5164] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 106.324670][ T5119] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 106.339631][ T5119] usb 5-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 106.349160][ T5119] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.363300][ T5119] usb 5-1: config 0 descriptor?? [ 106.641397][ T5632] overlay: ./bus is not a directory [ 106.660066][ T29] audit: type=1804 audit(1719560907.445:93): pid=5632 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.4.149" name="/root/syzkaller.Oz7L5D/23/bus" dev="sda1" ino=1959 res=1 errno=0 [ 106.684290][ T5133] gspca_sunplus: reg_r err -71 [ 106.694581][ T5635] kAFS: unparsable volume name [ 106.700529][ T5133] sunplus 1-1:0.0: probe with driver sunplus failed with error -71 [ 106.727487][ T5133] usb 1-1: USB disconnect, device number 5 [ 106.798398][ T5119] usbhid 5-1:0.0: can't add hid device: -71 [ 106.837567][ T5119] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 106.870231][ T5119] usb 5-1: USB disconnect, device number 6 [ 106.978855][ T5134] pegasus 2-1:0.0: can't reset MAC [ 106.989452][ T5134] pegasus 2-1:0.0: probe with driver pegasus failed with error -5 [ 107.009703][ T5134] usb 2-1: USB disconnect, device number 6 [ 108.180991][ T5097] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 108.261558][ T5204] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 108.356457][ T5204] usb 4-1: USB disconnect, device number 6 [ 108.391523][ T5204] iowarrior 4-1:0.0: I/O-Warror #0 now disconnected [ 110.424770][ T5659] sched: RT throttling activated [ 114.247636][ T5119] hid (null): global environment stack underflow [ 114.265562][ T5119] hid-generic 0000:0000:0000.0005: global environment stack underflow [ 114.287641][ T5119] hid-generic 0000:0000:0000.0005: item 0 4 1 11 parsing failed [ 114.297761][ T5119] hid-generic 0000:0000:0000.0005: probe with driver hid-generic failed with error -22 [ 114.650587][ T5133] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 114.850903][ T5133] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 114.867499][ T5133] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.875998][ T5133] usb 1-1: Product: syz [ 114.886480][ T5133] usb 1-1: Manufacturer: syz [ 114.908314][ T5133] usb 1-1: SerialNumber: syz [ 114.930936][ T5133] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 114.954546][ T5119] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 114.988329][ T5132] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 115.121800][ T5668] netlink: 'syz.4.163': attribute type 10 has an invalid length. [ 122.160015][ T5668] veth1_macvtap: left promiscuous mode [ 126.642788][ T5119] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 133.717957][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 135.576238][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 150.218331][ T5119] ath9k_htc: Failed to initialize the device [ 154.448444][ T5132] usb 5-1: Using ep0 maxpacket: 16 [ 154.629083][ T5133] usb 1-1: USB disconnect, device number 6 [ 154.830675][ T5133] usb 1-1: ath9k_htc: USB layer deinitialized [ 155.437124][ T5670] netlink: 4 bytes leftover after parsing attributes in process `syz.1.164'. [ 157.398301][ T5675] netlink: 4 bytes leftover after parsing attributes in process `syz.1.164'. [ 157.577333][ T5132] usb 5-1: device descriptor read/all, error -71 [ 159.638837][ T4479] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 159.658401][ T4479] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 159.667737][ T4479] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 159.678696][ T4479] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 159.687173][ T4479] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 159.698845][ T4479] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 160.170728][ T5084] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 160.200600][ T5084] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 160.209848][ T5087] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 160.226305][ T5084] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 160.233592][ T5087] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 160.242025][ T5084] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 160.250458][ T5087] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 160.259711][ T5084] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 160.268060][ T5087] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 160.279505][ T5087] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 160.287094][ T5084] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 160.296744][ T5097] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 160.459594][ T5092] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 160.471241][ T5092] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 160.486470][ T5092] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 160.510817][ T5092] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 160.519816][ T5092] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 160.527370][ T5092] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 160.559331][ T5092] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 160.569108][ T5092] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 160.578880][ T5092] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 160.617686][ T5087] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 160.626135][ T5087] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 160.642459][ T5087] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 161.768615][ T5084] Bluetooth: hci0: command tx timeout [ 162.648718][ T5087] Bluetooth: hci6: command tx timeout [ 162.654831][ T5087] Bluetooth: hci5: command tx timeout [ 162.673284][ T5084] Bluetooth: hci3: command tx timeout [ 162.729246][ T5084] Bluetooth: hci7: command tx timeout [ 163.858574][ T5084] Bluetooth: hci0: command tx timeout [ 164.741681][ T5084] Bluetooth: hci3: command tx timeout [ 164.747168][ T5084] Bluetooth: hci5: command tx timeout [ 164.752872][ T5087] Bluetooth: hci6: command tx timeout [ 164.818350][ T5087] Bluetooth: hci7: command tx timeout [ 165.938826][ T5087] Bluetooth: hci0: command tx timeout [ 166.818531][ T5087] Bluetooth: hci6: command tx timeout [ 166.824054][ T5087] Bluetooth: hci5: command tx timeout [ 166.829677][ T5084] Bluetooth: hci3: command tx timeout [ 166.898487][ T5087] Bluetooth: hci7: command tx timeout [ 168.018538][ T5087] Bluetooth: hci0: command tx timeout [ 168.898401][ T5087] Bluetooth: hci5: command tx timeout [ 168.904015][ T5087] Bluetooth: hci6: command tx timeout [ 168.909707][ T5084] Bluetooth: hci3: command tx timeout [ 168.983135][ T5087] Bluetooth: hci7: command tx timeout [ 195.093439][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.100210][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 221.708913][ T5097] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 221.728576][ T5097] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 221.737159][ T5097] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 221.745669][ T5097] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 221.753993][ T5097] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 221.762291][ T5097] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 221.989495][ T5087] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 222.000103][ T5087] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 222.016816][ T5087] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 222.025586][ T5087] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 222.039209][ T5087] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 222.047481][ T5087] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 222.325032][ T4479] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 222.335411][ T4479] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 222.345468][ T4479] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 222.355114][ T4479] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 222.363614][ T4479] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 222.372127][ T4479] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 222.436139][ T5097] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 222.447112][ T5097] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 222.465805][ T5097] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 222.474448][ T5097] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 222.483579][ T5097] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 222.495176][ T5097] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 222.503690][ T5097] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 222.548614][ T5097] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 222.576262][ T5097] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 222.585261][ T5097] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 222.594361][ T5097] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 222.602781][ T5097] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 223.858503][ T5084] Bluetooth: hci1: command tx timeout [ 224.099011][ T5084] Bluetooth: hci8: command tx timeout [ 224.508277][ T5084] Bluetooth: hci9: command tx timeout [ 224.578577][ T5084] Bluetooth: hci10: command tx timeout [ 224.658766][ T5084] Bluetooth: hci11: command tx timeout [ 225.938377][ T5084] Bluetooth: hci1: command tx timeout [ 226.178622][ T5084] Bluetooth: hci8: command tx timeout [ 226.585335][ T5084] Bluetooth: hci9: command tx timeout [ 226.658572][ T5084] Bluetooth: hci10: command tx timeout [ 226.746392][ T5084] Bluetooth: hci11: command tx timeout [ 228.018476][ T5084] Bluetooth: hci1: command tx timeout [ 228.267452][ T5084] Bluetooth: hci8: command tx timeout [ 228.658558][ T5084] Bluetooth: hci9: command tx timeout [ 228.738443][ T5084] Bluetooth: hci10: command tx timeout [ 228.828440][ T5084] Bluetooth: hci11: command tx timeout [ 230.104327][ T5084] Bluetooth: hci1: command tx timeout [ 230.339086][ T5084] Bluetooth: hci8: command tx timeout [ 230.744060][ T5084] Bluetooth: hci9: command tx timeout [ 230.824488][ T5084] Bluetooth: hci10: command tx timeout [ 230.898679][ T5084] Bluetooth: hci11: command tx timeout [ 254.865216][ T5164] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 255.683557][ T5080] syz-executor (5080) used greatest stack depth: 18736 bytes left [ 256.281789][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.290007][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.454722][ T5081] syz-executor (5081) used greatest stack depth: 18448 bytes left [ 279.550337][ T5097] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 279.567572][ T5097] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 279.577865][ T5097] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 279.587044][ T5097] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 279.602485][ T5097] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 279.624983][ T5097] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 280.307435][ T5097] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 280.317069][ T5097] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 280.325760][ T5097] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 280.334324][ T5097] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 280.342545][ T5097] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 280.350508][ T5097] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 281.699570][ T5097] Bluetooth: hci0: command tx timeout [ 282.152455][ T5087] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 282.185414][ T5087] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 282.195357][ T5087] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 282.211694][ T5087] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 282.219575][ T5087] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 282.231193][ T5087] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 282.238833][ T5087] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 282.248107][ T5087] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 282.258656][ T5087] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 282.267162][ T5087] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 282.274881][ T4479] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 282.283426][ T5087] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 282.418605][ T5087] Bluetooth: hci2: command tx timeout [ 282.435185][ T5087] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 282.447425][ T5087] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 282.462258][ T5087] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 282.471823][ T5087] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 282.488999][ T5087] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 282.496773][ T5087] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 283.778320][ T5087] Bluetooth: hci0: command tx timeout [ 284.328860][ T4479] Bluetooth: hci4: command tx timeout [ 284.338267][ T5087] Bluetooth: hci3: command tx timeout [ 284.492058][ T4479] Bluetooth: hci2: command tx timeout [ 284.578397][ T4479] Bluetooth: hci5: command tx timeout [ 285.858478][ T4479] Bluetooth: hci0: command tx timeout [ 286.426647][ T4479] Bluetooth: hci4: command tx timeout [ 286.433093][ T4479] Bluetooth: hci3: command tx timeout [ 286.578588][ T4479] Bluetooth: hci2: command tx timeout [ 286.658527][ T4479] Bluetooth: hci5: command tx timeout [ 287.948228][ T4479] Bluetooth: hci0: command tx timeout [ 288.498475][ T4479] Bluetooth: hci3: command tx timeout [ 288.504197][ T4479] Bluetooth: hci4: command tx timeout [ 288.658528][ T4479] Bluetooth: hci2: command tx timeout [ 288.738671][ T4479] Bluetooth: hci5: command tx timeout [ 290.568806][ T4479] Bluetooth: hci4: command tx timeout [ 290.574514][ T4479] Bluetooth: hci3: command tx timeout [ 290.818327][ T4479] Bluetooth: hci5: command tx timeout [ 317.845239][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.851830][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 341.744494][ T5087] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 341.788493][ T5087] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 341.797459][ T5087] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 341.806093][ T5087] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 341.819335][ T5087] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 341.826906][ T5087] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 342.527607][ T4479] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 342.538302][ T4479] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 342.546793][ T4479] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 342.556005][ T4479] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 342.564849][ T4479] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 342.572745][ T4479] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 343.399664][ T5098] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 343.409567][ T5098] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 343.417817][ T5098] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 343.431196][ T5098] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 343.440032][ T5098] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 343.448526][ T5098] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 343.497879][ T5098] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 343.508055][ T5098] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 343.516779][ T5098] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 343.529170][ T5098] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 343.538023][ T5098] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 343.546080][ T5098] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 343.652450][ T5094] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 343.668470][ T5094] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 343.676939][ T5094] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 343.686398][ T5094] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 343.695159][ T5094] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 343.702775][ T5094] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 343.938620][ T5098] Bluetooth: hci6: command tx timeout [ 344.658607][ T5098] Bluetooth: hci7: command tx timeout [ 345.359493][ T5098] Bluetooth: hci1: command 0x0406 tx timeout [ 345.365684][ T5098] Bluetooth: hci8: command 0x0406 tx timeout [ 345.372024][ T5094] Bluetooth: hci9: command 0x0406 tx timeout [ 345.379148][ T53] Bluetooth: hci10: command 0x0406 tx timeout [ 345.385315][ T53] Bluetooth: hci11: command 0x0406 tx timeout [ 345.540007][ T4479] Bluetooth: hci12: command tx timeout [ 345.619332][ T4479] Bluetooth: hci13: command tx timeout [ 345.778462][ T5087] Bluetooth: hci14: command tx timeout [ 346.018737][ T5084] Bluetooth: hci6: command tx timeout [ 346.740513][ T5092] Bluetooth: hci7: command tx timeout [ 347.618473][ T5092] Bluetooth: hci12: command tx timeout [ 347.698450][ T5092] Bluetooth: hci13: command tx timeout [ 347.858324][ T5092] Bluetooth: hci14: command tx timeout [ 348.098692][ T5092] Bluetooth: hci6: command tx timeout [ 348.818424][ T5092] Bluetooth: hci7: command tx timeout [ 349.703443][ T5092] Bluetooth: hci12: command tx timeout [ 349.781422][ T5092] Bluetooth: hci13: command tx timeout [ 349.938273][ T5092] Bluetooth: hci14: command tx timeout [ 350.178708][ T5092] Bluetooth: hci6: command tx timeout [ 350.898702][ T5092] Bluetooth: hci7: command tx timeout [ 351.778508][ T5092] Bluetooth: hci12: command tx timeout [ 351.858269][ T5092] Bluetooth: hci13: command tx timeout [ 352.018373][ T5092] Bluetooth: hci14: command tx timeout [ 379.257727][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.264517][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 401.478406][ T30] INFO: task kworker/0:2:58 blocked for more than 143 seconds. [ 401.486443][ T30] Not tainted 6.10.0-rc5-syzkaller-00175-g6d6444ba8205 #0 [ 401.503219][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 401.512167][ T30] task:kworker/0:2 state:D stack:24368 pid:58 tgid:58 ppid:2 flags:0x00004000 [ 401.533485][ T30] Workqueue: events linkwatch_event [ 401.538865][ T30] Call Trace: [ 401.542228][ T30] [ 401.547569][ T30] __schedule+0x1796/0x49d0 [ 401.567808][ T30] ? __pfx___schedule+0x10/0x10 [ 401.572819][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 401.579359][ T30] ? __pfx_lock_release+0x10/0x10 [ 401.584539][ T30] ? kick_pool+0x45c/0x620 [ 401.602680][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 401.608010][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 401.638332][ T30] ? schedule+0x90/0x320 [ 401.642666][ T30] schedule+0x14b/0x320 [ 401.646866][ T30] schedule_preempt_disabled+0x13/0x30 [ 401.660868][ T30] __mutex_lock+0x6a4/0xd70 [ 401.665554][ T30] ? __mutex_lock+0x527/0xd70 [ 401.670596][ T30] ? linkwatch_event+0xe/0x60 [ 401.675327][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 401.694478][ T30] ? process_scheduled_works+0x945/0x1830 [ 401.702648][ T30] linkwatch_event+0xe/0x60 [ 401.707209][ T30] process_scheduled_works+0xa2c/0x1830 [ 401.717565][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 401.725031][ T30] ? assign_work+0x364/0x3d0 [ 401.731539][ T30] worker_thread+0x86d/0xd50 [ 401.736192][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 401.746862][ T30] ? __kthread_parkme+0x169/0x1d0 [ 401.753200][ T30] ? __pfx_worker_thread+0x10/0x10 [ 401.758571][ T30] kthread+0x2f0/0x390 [ 401.762714][ T30] ? __pfx_worker_thread+0x10/0x10 [ 401.768063][ T30] ? __pfx_kthread+0x10/0x10 [ 401.773010][ T30] ret_from_fork+0x4b/0x80 [ 401.777665][ T30] ? __pfx_kthread+0x10/0x10 [ 401.790703][ T30] ret_from_fork_asm+0x1a/0x30 [ 401.796011][ T30] [ 401.799227][ T30] INFO: task kworker/u8:8:2794 blocked for more than 143 seconds. [ 401.807200][ T30] Not tainted 6.10.0-rc5-syzkaller-00175-g6d6444ba8205 #0 [ 401.834518][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 401.846850][ T30] task:kworker/u8:8 state:D stack:20240 pid:2794 tgid:2794 ppid:2 flags:0x00004000 [ 401.862810][ T30] Workqueue: netns cleanup_net [ 401.867677][ T30] Call Trace: [ 401.872657][ T30] [ 401.875637][ T30] __schedule+0x1796/0x49d0 [ 401.880274][ T30] ? __pfx___schedule+0x10/0x10 [ 401.885311][ T30] ? __pfx_lock_release+0x10/0x10 [ 401.896497][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 401.902116][ T30] ? kthread_data+0x52/0xd0 [ 401.906662][ T30] ? schedule+0x90/0x320 [ 401.917009][ T30] ? wq_worker_sleeping+0x66/0x240 [ 401.922243][ T30] ? schedule+0x90/0x320 [ 401.927723][ T30] schedule+0x14b/0x320 [ 401.938163][ T30] schedule_preempt_disabled+0x13/0x30 [ 401.943697][ T30] __mutex_lock+0x6a4/0xd70 [ 401.950808][ T30] ? __mutex_lock+0x527/0xd70 [ 401.956069][ T30] ? wg_netns_pre_exit+0x1f/0x1e0 [ 401.973954][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 401.981458][ T30] ? __local_bh_enable_ip+0x168/0x200 [ 401.986973][ T30] ? cleanup_net+0x427/0xcc0 [ 401.992919][ T30] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 402.004678][ T30] wg_netns_pre_exit+0x1f/0x1e0 [ 402.012672][ T30] cleanup_net+0x615/0xcc0 [ 402.017144][ T30] ? __pfx_cleanup_net+0x10/0x10 [ 402.028269][ T30] ? process_scheduled_works+0x945/0x1830 [ 402.035960][ T30] process_scheduled_works+0xa2c/0x1830 [ 402.047607][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 402.054031][ T30] ? assign_work+0x364/0x3d0 [ 402.058797][ T30] worker_thread+0x86d/0xd50 [ 402.086819][ T30] ? __kthread_parkme+0x169/0x1d0 SYZFAIL: failed to recv rpc fd=3 want=4 sent=0 n=0 (errno 9: Bad file descriptor) [