last executing test programs: 5m42.043409155s ago: executing program 4 (id=632): r0 = socket(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)={0x40, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @action={{{}, {}, @device_a, @device_b, @from_mac=@broadcast, {0x0, 0xff}}, @ext_ch_sw={0x4, 0x4, {{0x1, 0x3, 0x8}, @void}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x10, [{}, {0x0, 0x100000000000000}]}, 0x60) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x8000002) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x25dfdbff, {0x60, 0x0, 0x0, r4, {0x0, 0x3}, {0xffff, 0xffff}, {0x7}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x3b9aca40f}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x1}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x24040040}, 0x44040) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r5) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x14, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x3c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 5m41.536109576s ago: executing program 4 (id=638): socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r0) r1 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r2 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, 0x0, 0x0) write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[], 0x101d0) close(r0) 5m41.397932845s ago: executing program 4 (id=640): mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="66643d0c79d3846101009049ca56f0a2f7", @ANYRESHEX, @ANYRESDEC=0x0, @ANYBLOB=',gro']) syz_open_dev$sg(&(0x7f00000001c0), 0x508d48d4, 0x40902) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)}], 0x1, &(0x7f00000008c0)=ANY=[@ANYBLOB="b800000000d983fd49e32f4399000000a0000000bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab4264c8ba94065d11d8ee27dd16f4a0342bed8a3c79acd4bb1f9f46ef28a63b329e09a86c62f907539c9af6f1b0bc0051"], 0xb8, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd091180968", 0x79}, {&(0x7f0000000ac0)="3fe4c8a3288f", 0x6}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea6b2dc4fc", 0x2a}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8c91e9d056039df63390376a7359c6fc2059d1e3ffeec1ff0f4c09099e8e61c268324d0fc621f", 0x7e}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462bf1b689280ebc67640f4534eef4b7ffd85963bc5d8b", 0x99}], 0x5, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000340)={0x10000, 0x2, 0x8000000, 0x2000, &(0x7f0000001000/0x2000)=nil}) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 5m40.688556317s ago: executing program 4 (id=648): r0 = socket$kcm(0x23, 0x5, 0x0) sendmsg$sock(r0, 0x0, 0x84) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000240)=0x9, 0x4) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @broadcast}) write$tun(r1, &(0x7f0000000780)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff0000006584ad3142"], 0x78) 5m38.801668851s ago: executing program 4 (id=658): bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="070000000000000000000c0000001c00038008000400001000000800020020000000080005007180bbda180001801400020073797a5f74756e"], 0x48}, 0x1, 0x0, 0x0, 0x24004800}, 0x0) 5m38.069799947s ago: executing program 4 (id=663): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r1, 0x1, 0x4, 0x25dfdbfe, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20040801}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r3}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000000000085000000a500000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xf99017019b42da6b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000040)=r4, 0x4) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 5m22.81539937s ago: executing program 32 (id=663): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r1, 0x1, 0x4, 0x25dfdbfe, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20040801}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r3}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000000000085000000a500000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xf99017019b42da6b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000040)=r4, 0x4) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 2m10.696911142s ago: executing program 0 (id=1937): r0 = socket(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={0x0}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x10, [{}, {0x0, 0x100000000000000}]}, 0x60) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x8000002) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x25dfdbff, {0x60, 0x0, 0x0, r4, {0x0, 0x3}, {0xffff, 0xffff}, {0x7}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x3b9aca40f}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x1}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x24040040}, 0x44040) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r5) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x5}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000040)=r8, 0x4) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x14, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x3c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 2m6.585303578s ago: executing program 0 (id=1943): socket$kcm(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, 0x0, 0x0) 2m6.199619355s ago: executing program 0 (id=1946): openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x42, 0x2) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='freezer.self_freezing\x00', 0x275a, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x50, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) pipe(&(0x7f0000000240)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1m57.102508529s ago: executing program 3 (id=1957): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x1}, 0x10) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904001ffffffff0000000000000000800040001000000", 0x24) 1m56.869458827s ago: executing program 3 (id=1958): r0 = socket(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)={0x1c, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x10, [{}, {0x0, 0x100000000000000}]}, 0x60) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x8000002) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x25dfdbff, {0x60, 0x0, 0x0, r4, {0x0, 0x3}, {0xffff, 0xffff}, {0x7}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x3b9aca40f}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x1}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x24040040}, 0x44040) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r5) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x5}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000040)=r8, 0x4) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x14, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x3c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 1m55.795995046s ago: executing program 0 (id=1960): r0 = syz_usb_connect$uac3(0x0, 0xa0, &(0x7f0000002440)=ANY=[@ANYBLOB="12011003000000403512100040000102030109028e000301002040080b0201012130c60904000000010130000a2401042a00ff0f0000132403050001020602028000000700100002000f24090202000000", @ANYRES16], &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, &(0x7f00000005c0)={0x44, &(0x7f0000000240)={0x20, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$sierra_net(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000002240)={0x88, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000640)={0x44, &(0x7f0000002380)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000001640)={0x44, &(0x7f0000001400)={0x20, 0xe, 0x4, "4cd3e3d9"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1m55.081938602s ago: executing program 3 (id=1962): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x140) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000000)='./bus\x00') r2 = creat(&(0x7f0000001340)='./file0\x00', 0xecf86c37d53049cc) close(r2) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) linkat(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on}]}) chdir(&(0x7f00000003c0)='./bus\x00') linkat(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file7\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0x0) 1m52.715622926s ago: executing program 0 (id=1965): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x140) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000000)='./bus\x00') r2 = creat(&(0x7f0000001340)='./file0\x00', 0xecf86c37d53049cc) close(r2) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 1m50.475364608s ago: executing program 5 (id=1968): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='yeah', 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, 0x0, 0x0, 0xb, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 1m49.669939601s ago: executing program 5 (id=1971): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[]) getxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000180)=@known='system.posix_acl_access\x00', 0x0, 0x0) 1m48.692607072s ago: executing program 5 (id=1974): mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000080)={&(0x7f00006c6000/0x400000)=nil, &(0x7f000018b000/0x3000)=nil, 0x400000, 0x0, 0x6040000}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = syz_open_dev$sndmidi(0x0, 0x2, 0x143102) writev(r2, 0x0, 0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, 0x0, 0x2000000) 1m48.077943792s ago: executing program 5 (id=1975): syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0) 1m46.538007461s ago: executing program 3 (id=1978): r0 = msgget$private(0x0, 0x1c0) msgctl$IPC_SET(r0, 0x1, &(0x7f0000258f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x96}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) msgsnd(r0, &(0x7f00000000c0)={0x3}, 0x8, 0x0) landlock_restrict_self(0xffffffffffffffff, 0xe) 1m45.358233663s ago: executing program 5 (id=1982): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r0, 0x2, &(0x7f0000000180)={0x0, 0x6c00}) 1m45.228269087s ago: executing program 0 (id=1983): timer_create(0x0, 0x0, &(0x7f0000000340)) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000c40)='attr/fscreate\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000200)=[{0x6, 0x22, 0x3, 0x50000}]}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), 0xffffffffffffffff) syz_clone3(&(0x7f0000000080)={0x1810000, 0x0, 0x0, 0x0, {0x20080027}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 1m44.896926242s ago: executing program 3 (id=1985): mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000080)={&(0x7f00006c6000/0x400000)=nil, &(0x7f000018b000/0x3000)=nil, 0x400000, 0x0, 0x6040000}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x143102) ioctl$UFFDIO_REGISTER(r1, 0xc020aa07, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1, 0x2}) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, 0x0, 0x2000000) 1m44.473253132s ago: executing program 5 (id=1987): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0x78b}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)=@x86={0x6b, 0x4, 0x7, 0x0, 0x0, 0x0, 0x4, 0xa, 0xd, 0xa0, 0x8, 0x5, 0x0, 0x1000, 0xa, 0x3, 0x3, 0x2e, 0xff, '\x00', 0x1, 0xffffffffffffff7f}) 1m43.64811795s ago: executing program 3 (id=1988): openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x42, 0x2) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='freezer.self_freezing\x00', 0x275a, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x50, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) pipe(&(0x7f0000000240)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1m28.27255968s ago: executing program 33 (id=1983): timer_create(0x0, 0x0, &(0x7f0000000340)) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000c40)='attr/fscreate\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000200)=[{0x6, 0x22, 0x3, 0x50000}]}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), 0xffffffffffffffff) syz_clone3(&(0x7f0000000080)={0x1810000, 0x0, 0x0, 0x0, {0x20080027}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 1m28.272128219s ago: executing program 34 (id=1987): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0x78b}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)=@x86={0x6b, 0x4, 0x7, 0x0, 0x0, 0x0, 0x4, 0xa, 0xd, 0xa0, 0x8, 0x5, 0x0, 0x1000, 0xa, 0x3, 0x3, 0x2e, 0xff, '\x00', 0x1, 0xffffffffffffff7f}) 1m27.000232162s ago: executing program 35 (id=1988): openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x42, 0x2) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='freezer.self_freezing\x00', 0x275a, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x50, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) pipe(&(0x7f0000000240)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1m23.248610961s ago: executing program 2 (id=2008): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) 1m22.41588682s ago: executing program 2 (id=2009): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'geneve0\x00', &(0x7f0000000180)=@ethtool_drvinfo={0x3, "088faeae71cb2c8016ce5a26dd57c8e3b85de050ad1065e1247fbdd7b48a2cad", "faa4a2190f2056f3dd98242c2765ebd4628d27b3a438bb2c3942914d8fc252bd", "56b1e81bca36bfb15636d23a08b57c399ad0be96573c8a040b6ca0ee92a61519", "f11944190968857758729f09206d229d45de48ab6da2f85bfcd59e046c65c4c3", "b81ed2ff398d4d079510c21b16f048516ac785fd228f4f85015fe9f272d7de5b", "99a40c1bddc8b91781d9bc15", 0x1ff, 0xc3e, 0x6b9, 0x3}}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x58}}, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000106a05310300000000000109022400010000800009040002010300010009210000000122f80409058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) 1m19.142674734s ago: executing program 2 (id=2011): r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b510f210950b2a7773820102030109022400010000000009042200028953950009050a02ff0300fa000905820250"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f00000005c0)={0x34, &(0x7f0000000600)=ANY=[@ANYBLOB="001606"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="510f02"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000640)={0x44, &(0x7f00000002c0)={0x20, 0x30, 0x7c, "2038167ee65053de477b345b263cd979ec9ed6f4ef5c569b599a6b0ffca4572f0404f23d2c45993efa287159b36635170b56d70ce85274dcb60968856e67c90bb4341dca61cd07197014a3868bd27718ba55d452ccf08619248385727b94696629dd8be15a396581822bbd2b2d654787457915e3aea7ec8f8d3daed7"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 1m13.022507731s ago: executing program 2 (id=2015): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f00000002c0)={0x3, {0x47, 0x0, 0x6f, 0x7, 0x280, 0x2}}) 1m12.164787828s ago: executing program 2 (id=2017): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x0, 0x2, 0x0, 0x1, 0x1, 0xfffffffe}}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha3-512)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r2 = socket(0xf, 0x1, 0x10002) getsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, 0x0, &(0x7f00000000c0)) r3 = accept$alg(r1, 0x0, 0x0) recvmmsg(r3, &(0x7f00000036c0)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x40000022, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x15, 0xe, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r4, &(0x7f0000000140)="24000000010006", 0x7) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x1d, 0x0, 0x0, 0x0, 0x4, 0x2, 0x1}}) 1m8.325768057s ago: executing program 2 (id=2019): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x6) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f00009b3000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000040)="b9410101c0b800800000ba000000000f3067f0428170c939000000c744240059000000c7442402ac030231ff1c240f20d835080000000f22d80fc76f06400f239cc01643c744240000000000c744240206000000c7442406000000000f01142466460f2f8c6902000000b9da0b00000f32", 0x71}], 0x1, 0x1, 0x0, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000100)={0x1, 0x0, [{0x40000001, 0xfffffffd, 0x0, 0xc, 0x0, 0xf87, 0x2}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 51.165508091s ago: executing program 36 (id=2019): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x6) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f00009b3000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000040)="b9410101c0b800800000ba000000000f3067f0428170c939000000c744240059000000c7442402ac030231ff1c240f20d835080000000f22d80fc76f06400f239cc01643c744240000000000c744240206000000c7442406000000000f01142466460f2f8c6902000000b9da0b00000f32", 0x71}], 0x1, 0x1, 0x0, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000100)={0x1, 0x0, [{0x40000001, 0xfffffffd, 0x0, 0xc, 0x0, 0xf87, 0x2}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23.999348603s ago: executing program 1 (id=2046): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200fffe540004802800018007000100637400001c0002800800014000000002080002400000001305000300010000002800018007000100637400001c0002800800024000000011080004400000000c05000300010000000900010073797a30000000000900020073797a3200000000140000"], 0xa8}, 0x1, 0x0, 0x0, 0x840}, 0x2000c0c2) 21.076239906s ago: executing program 1 (id=2047): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r0, r2, 0x16, 0x0, @void}, 0x10) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) 20.361413092s ago: executing program 1 (id=2048): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000800)=ANY=[@ANYBLOB="00110200000036"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) 17.195488396s ago: executing program 1 (id=2049): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x2) r1 = socket$unix(0x1, 0x1, 0x0) connect$unix(r1, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) accept$unix(r0, &(0x7f0000000000), &(0x7f0000000100)=0x6e) 16.895054634s ago: executing program 1 (id=2050): r0 = fsopen(&(0x7f0000000b40)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000040)='ro\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) 15.525683737s ago: executing program 1 (id=2051): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x2501, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='D'], 0x44}, 0x1, 0x0, 0x0, 0x6cb3fe8b19b50fba}, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1, 0x4, 0x41, 0xc3d, 0x0, 0x9, 0x0, 0x8000000a1d, 0x0, 0x8585, 0x79, 0x3, 0x5], 0xeeee0000, 0x1002d2}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0x4000, 0xe000, 0x0, 0x77, 0x0, 0x3, 0xcb, 0x2, 0x0, 0x6, 0x6}, {0x2, 0x9000, 0x0, 0xeb, 0x2, 0x0, 0x0, 0xff, 0x7, 0x0, 0x3}, {0xeeee0000, 0x4, 0xa, 0x0, 0x5, 0xc4, 0x5, 0x1, 0x45, 0x3, 0x4, 0xfc}, {0x1, 0x0, 0x9, 0x4, 0x81, 0x0, 0x9, 0x0, 0x3, 0x0, 0x9}, {0x4, 0xffff1000, 0x3, 0x4, 0x0, 0x4, 0x0, 0x6, 0x2, 0x34, 0x4}, {0xffff1000, 0x1, 0x0, 0x6, 0x8, 0x0, 0x2, 0x1c, 0xa3, 0xff, 0x5}, {0xeeee8000, 0xdddd1000, 0xa, 0x4, 0x0, 0x0, 0x7, 0x20}, {0x0, 0x6000, 0xa, 0x0, 0xa4, 0x7, 0x8, 0x40, 0x26, 0xf, 0x0, 0xfe}, {0x80a0000, 0x7}, {0x3000, 0xfffd}, 0xddf9ffdb, 0x0, 0x0, 0x120, 0x0, 0xf801, 0xdddd1000, [0x80000001, 0x0, 0xffffffffffffffff, 0xfffffffffffffffe]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 0s ago: executing program 37 (id=2051): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x2501, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='D'], 0x44}, 0x1, 0x0, 0x0, 0x6cb3fe8b19b50fba}, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1, 0x4, 0x41, 0xc3d, 0x0, 0x9, 0x0, 0x8000000a1d, 0x0, 0x8585, 0x79, 0x3, 0x5], 0xeeee0000, 0x1002d2}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0x4000, 0xe000, 0x0, 0x77, 0x0, 0x3, 0xcb, 0x2, 0x0, 0x6, 0x6}, {0x2, 0x9000, 0x0, 0xeb, 0x2, 0x0, 0x0, 0xff, 0x7, 0x0, 0x3}, {0xeeee0000, 0x4, 0xa, 0x0, 0x5, 0xc4, 0x5, 0x1, 0x45, 0x3, 0x4, 0xfc}, {0x1, 0x0, 0x9, 0x4, 0x81, 0x0, 0x9, 0x0, 0x3, 0x0, 0x9}, {0x4, 0xffff1000, 0x3, 0x4, 0x0, 0x4, 0x0, 0x6, 0x2, 0x34, 0x4}, {0xffff1000, 0x1, 0x0, 0x6, 0x8, 0x0, 0x2, 0x1c, 0xa3, 0xff, 0x5}, {0xeeee8000, 0xdddd1000, 0xa, 0x4, 0x0, 0x0, 0x7, 0x20}, {0x0, 0x6000, 0xa, 0x0, 0xa4, 0x7, 0x8, 0x40, 0x26, 0xf, 0x0, 0xfe}, {0x80a0000, 0x7}, {0x3000, 0xfffd}, 0xddf9ffdb, 0x0, 0x0, 0x120, 0x0, 0xf801, 0xdddd1000, [0x80000001, 0x0, 0xffffffffffffffff, 0xfffffffffffffffe]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) kernel console output (not intermixed with test programs): trings: Mfr=0, Product=0, SerialNumber=0 [ 304.360512][ T202] usb 1-1: config 0 descriptor?? [ 304.847052][ T5331] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 304.918998][ T202] usbhid 1-1:0.1: can't add hid device: -71 [ 304.919127][ T202] usbhid 1-1:0.1: probe with driver usbhid failed with error -71 [ 305.033696][ T202] usb 1-1: USB disconnect, device number 4 [ 305.090019][ T5331] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 32314, setting to 64 [ 305.090291][ T5331] usb 6-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 305.090316][ T5331] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.247088][ T5331] usb 6-1: config 0 descriptor?? [ 305.256688][ T9641] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 305.733716][ T5331] hid_parser_main: 5 callbacks suppressed [ 305.733742][ T5331] elan 0003:04F3:0755.0008: unknown main item tag 0x0 [ 305.733776][ T5331] elan 0003:04F3:0755.0008: unknown main item tag 0x0 [ 305.734214][ T5331] elan 0003:04F3:0755.0008: unknown main item tag 0x0 [ 305.734244][ T5331] elan 0003:04F3:0755.0008: unknown main item tag 0x0 [ 305.734273][ T5331] elan 0003:04F3:0755.0008: unknown main item tag 0x0 [ 305.845100][ T5734] asix 3-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 305.845133][ T5734] asix 3-1:0.34 (unnamed net_device) (uninitialized): Failed to write Medium Mode mode to 0x0306: ffffffb9 [ 305.845396][ T5734] asix 3-1:0.34: probe with driver asix failed with error -71 [ 305.935054][ T5734] usb 3-1: USB disconnect, device number 4 [ 305.982669][ T5331] elan 0003:04F3:0755.0008: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.5-1/input0 [ 306.097139][ T5331] usb 6-1: USB disconnect, device number 9 [ 306.930235][ T9692] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1285'. [ 308.606373][ T9729] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1299'. [ 308.816343][ T9741] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1302'. [ 309.665900][ T9775] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1314'. [ 310.269961][ T9788] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1318'. [ 310.906637][ T9807] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1325'. [ 312.037457][ T822] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 312.197039][ T822] usb 2-1: Using ep0 maxpacket: 32 [ 312.204018][ T822] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 312.204048][ T822] usb 2-1: config 0 has no interface number 0 [ 312.206819][ T822] usb 2-1: config 0 interface 184 has no altsetting 0 [ 312.245849][ T822] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 312.245873][ T822] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.245889][ T822] usb 2-1: Product: syz [ 312.245901][ T822] usb 2-1: Manufacturer: syz [ 312.245913][ T822] usb 2-1: SerialNumber: syz [ 312.321895][ T822] usb 2-1: config 0 descriptor?? [ 312.390948][ T9833] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1332'. [ 313.002537][ T822] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 313.002568][ T822] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 313.002588][ T822] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 313.003806][ T822] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -32 [ 313.086793][ T822] usb 2-1: USB disconnect, device number 6 [ 314.662139][ T9872] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1345'. [ 316.317115][ T5331] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 316.471445][ T5331] usb 1-1: Using ep0 maxpacket: 32 [ 316.483405][ T5331] usb 1-1: config 2 has an invalid interface number: 88 but max is 0 [ 316.483434][ T5331] usb 1-1: config 2 has no interface number 0 [ 316.483480][ T5331] usb 1-1: config 2 interface 88 altsetting 25 bulk endpoint 0x6 has invalid maxpacket 256 [ 316.483509][ T5331] usb 1-1: config 2 interface 88 has no altsetting 0 [ 316.515527][ T5331] usb 1-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.06 [ 316.515619][ T5331] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1 [ 316.515679][ T5331] usb 1-1: Product: syz [ 316.515712][ T5331] usb 1-1: Manufacturer: syz [ 316.515747][ T5331] usb 1-1: SerialNumber: syz [ 316.640046][ T9910] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 316.872492][ T9910] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 317.083991][ T5331] asix 1-1:2.88 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 317.088031][ T5331] asix 1-1:2.88: probe with driver asix failed with error -71 [ 317.110768][ T5769] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 317.112037][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.167913][ T5331] usb 1-1: USB disconnect, device number 5 [ 317.286998][ T5769] usb 6-1: Using ep0 maxpacket: 16 [ 317.290251][ T5769] usb 6-1: unable to get BOS descriptor or descriptor too short [ 317.291876][ T5769] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 317.291899][ T5769] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 317.291920][ T5769] usb 6-1: config 1 has no interface number 0 [ 317.296190][ T5769] usb 6-1: New USB device found, idVendor=0582, idProduct=00a3, bcdDevice= 0.40 [ 317.296218][ T5769] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.296239][ T5769] usb 6-1: Product: syz [ 317.296255][ T5769] usb 6-1: Manufacturer: syz [ 317.296270][ T5769] usb 6-1: SerialNumber: syz [ 317.773790][ T5769] usb 6-1: USB disconnect, device number 10 [ 317.933392][ T9009] udevd[9009]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 319.248552][ T202] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 319.401820][ T202] usb 4-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 319.401855][ T202] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 319.401881][ T202] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 319.401923][ T202] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 319.401946][ T202] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.476657][ T9963] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 320.287056][ T11] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 320.387053][ T5768] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 320.447551][ T9984] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 320.450300][ T9984] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 320.483032][ T9984] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 320.485087][ T9984] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 320.587025][ T5768] usb 6-1: Using ep0 maxpacket: 8 [ 320.616295][ T5768] usb 6-1: config 0 interface 0 has no altsetting 0 [ 320.616331][ T5768] usb 6-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 320.616415][ T5768] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.670830][ T5768] usb 6-1: config 0 descriptor?? [ 321.162886][ T5768] hid (null): invalid report_size 54881 [ 321.202218][ T11] usb 2-1: unable to get BOS descriptor or descriptor too short [ 321.205298][ T11] usb 2-1: no configurations [ 321.205316][ T11] usb 2-1: can't read configurations, error -22 [ 321.237691][ T5768] nintendo 0003:057E:200E.0009: unknown main item tag 0x2 [ 321.237727][ T5768] nintendo 0003:057E:200E.0009: unknown main item tag 0x6 [ 321.237825][ T5768] nintendo 0003:057E:200E.0009: ignoring exceeding usage max [ 321.241986][ T5768] nintendo 0003:057E:200E.0009: invalid report_size 54881 [ 321.242007][ T5768] nintendo 0003:057E:200E.0009: item 0 2 1 7 parsing failed [ 321.242771][ T5768] nintendo 0003:057E:200E.0009: HID parse failed [ 321.327837][ T5768] nintendo 0003:057E:200E.0009: probe - fail = -22 [ 321.327958][ T5768] nintendo 0003:057E:200E.0009: probe with driver nintendo failed with error -22 [ 321.390804][ T5331] usb 6-1: USB disconnect, device number 11 [ 321.578248][ T5734] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 321.747299][ T5734] usb 1-1: Using ep0 maxpacket: 16 [ 321.749926][ T5734] usb 1-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 321.749958][ T5734] usb 1-1: config 0 interface 0 has no altsetting 0 [ 321.749991][ T5734] usb 1-1: New USB device found, idVendor=056a, idProduct=00cc, bcdDevice= 0.00 [ 321.750014][ T5734] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.770685][ T5734] usb 1-1: config 0 descriptor?? [ 322.318336][ T5734] wacom 0003:056A:00CC.000A: ignoring exceeding usage max [ 322.320269][ T5734] wacom 0003:056A:00CC.000A: unknown main item tag 0x6 [ 322.320363][ T5734] wacom 0003:056A:00CC.000A: ignoring exceeding usage max [ 322.417033][ T9] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 322.545443][ T5331] usb 1-1: USB disconnect, device number 6 [ 322.574754][ T9] usb 6-1: config 220 has an invalid interface number: 76 but max is 2 [ 322.574784][ T9] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 322.574805][ T9] usb 6-1: config 220 has no interface number 2 [ 322.574882][ T9] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 322.574910][ T9] usb 6-1: config 220 interface 0 has no altsetting 0 [ 322.574929][ T9] usb 6-1: config 220 interface 76 has no altsetting 0 [ 322.574947][ T9] usb 6-1: config 220 interface 1 has no altsetting 0 [ 322.644270][ T9] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 322.644301][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.644321][ T9] usb 6-1: Product: syz [ 322.644925][ T9] usb 6-1: Manufacturer: syz [ 322.644944][ T9] usb 6-1: SerialNumber: syz [ 322.784432][T10024] syzkaller0: entered promiscuous mode [ 322.784457][T10024] syzkaller0: entered allmulticast mode [ 322.935878][ T9] uvcvideo 6-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 322.935912][ T9] uvcvideo 6-1:220.0: No valid video chain found. [ 322.935972][ T9] usb 6-1: selecting invalid altsetting 0 [ 323.023636][ T9] usb 6-1: selecting invalid altsetting 0 [ 323.023678][ T9] usbtest 6-1:220.1: probe with driver usbtest failed with error -22 [ 323.044598][ T9] usb 6-1: USB disconnect, device number 12 [ 323.690638][ T202] aiptek 4-1:17.0: Aiptek using 400 ms programming speed [ 323.714591][ T202] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:17.0/input/input12 [ 323.967002][T10039] tipc: Started in network mode [ 323.967025][T10039] tipc: Node identity 4, cluster identity 4711 [ 323.967038][T10039] tipc: Node number set to 4 [ 324.329056][ T202] usb 4-1: USB disconnect, device number 6 [ 324.329150][ C0] aiptek 4-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 324.476026][T10050] tipc: Started in network mode [ 324.476046][T10050] tipc: Node identity 2007ff, cluster identity 4711 [ 324.476058][T10050] tipc: Node number set to 2099199 [ 324.612943][T10055] ======================================================= [ 324.612943][T10055] WARNING: The mand mount option has been deprecated and [ 324.612943][T10055] and is ignored by this kernel. Remove the mand [ 324.612943][T10055] option from the mount to silence this warning. [ 324.612943][T10055] ======================================================= [ 324.834238][ T1561] tipc: Subscription rejected, illegal request [ 325.103566][T10065] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1410'. [ 325.103609][T10065] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1410'. [ 325.350549][T10070] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1412'. [ 326.157606][ T5768] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 326.300829][ T5768] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 327.468678][ T9] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 327.499608][T10113] mmap: syz.5.1426 (10113): VmData 37466112 exceed data ulimit 2. Update limits or use boot option ignore_rlimit_data. [ 327.618299][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 327.623342][ T9] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 327.623368][ T9] usb 2-1: config 0 has no interface number 0 [ 327.623419][ T9] usb 2-1: config 0 interface 184 has no altsetting 0 [ 327.625929][ T9] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 327.625954][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.625974][ T9] usb 2-1: Product: syz [ 327.625994][ T9] usb 2-1: Manufacturer: syz [ 327.626004][ T9] usb 2-1: SerialNumber: syz [ 327.737198][ T9] usb 2-1: config 0 descriptor?? [ 328.383705][ T9] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 328.383736][ T9] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 329.239593][T10142] binder: 10141:10142 ioctl c0385868 0 returned -22 [ 331.895746][T10203] capability: warning: `syz.5.1456' uses deprecated v2 capabilities in a way that may be insecure [ 331.909126][ T9] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000003c: -71 [ 331.909156][ T9] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read BULK_IN_DLY: -71 [ 331.909176][ T9] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 331.909468][ T9] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71 [ 331.993578][ T9] usb 2-1: USB disconnect, device number 9 [ 332.821182][T10211] syz.2.1459 (10211) used greatest stack depth: 18408 bytes left [ 333.490636][ T5331] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 333.490793][ T5734] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 334.207120][ T5734] usb 3-1: Using ep0 maxpacket: 8 [ 334.207352][ T5331] usb 4-1: Using ep0 maxpacket: 32 [ 334.209472][ T5734] usb 3-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 334.209504][ T5734] usb 3-1: config 0 interface 0 has no altsetting 0 [ 334.209538][ T5734] usb 3-1: New USB device found, idVendor=17ef, idProduct=60a4, bcdDevice= 0.00 [ 334.209563][ T5734] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.213542][ T5331] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 334.213576][ T5331] usb 4-1: config 0 has no interface number 0 [ 334.282189][ T5331] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 334.282221][ T5331] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.282242][ T5331] usb 4-1: Product: syz [ 334.282257][ T5331] usb 4-1: Manufacturer: syz [ 334.282273][ T5331] usb 4-1: SerialNumber: syz [ 334.356741][ T5331] usb 4-1: config 0 descriptor?? [ 334.400226][ T5734] usb 3-1: config 0 descriptor?? [ 334.981913][ T5734] lenovo 0003:17EF:60A4.000C: unknown main item tag 0x4 [ 334.981949][ T5734] lenovo 0003:17EF:60A4.000C: reserved main item tag 0xd [ 335.080564][ T5734] lenovo 0003:17EF:60A4.000C: hidraw0: USB HID v0.7f Device [HID 17ef:60a4] on usb-dummy_hcd.2-1/input0 [ 335.208397][ T5734] usb 3-1: USB disconnect, device number 5 [ 335.212495][ T5331] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 335.212525][ T5331] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 335.373087][T10255] fido_id[10255]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 335.460296][T10257] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1474'. [ 335.884165][T10266] bond0: entered promiscuous mode [ 335.884189][T10266] bond_slave_0: entered promiscuous mode [ 335.885209][T10266] bond_slave_1: entered promiscuous mode [ 335.913483][T10266] batadv0: entered promiscuous mode [ 335.926574][T10266] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 336.024971][ T5331] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 336.025268][ T5331] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 336.089110][ T5331] usb 4-1: USB disconnect, device number 7 [ 336.881162][T10289] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1487'. [ 336.968159][T10287] macvtap1: entered promiscuous mode [ 336.968181][T10287] vlan0: entered promiscuous mode [ 337.467200][ T11] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 337.641651][ T11] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 337.641718][ T11] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 337.644851][ T11] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 337.644879][ T11] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.644901][ T11] usb 6-1: Product: syz [ 337.644917][ T11] usb 6-1: Manufacturer: syz [ 337.644932][ T11] usb 6-1: SerialNumber: syz [ 338.052542][T10329] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1501'. [ 338.930578][ T11] cdc_ncm 6-1:1.0: bind() failure [ 338.985938][ T11] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 338.985977][ T11] cdc_ncm 6-1:1.1: bind() failure [ 339.037294][ T11] usb 6-1: USB disconnect, device number 13 [ 339.435151][T10355] loop7: detected capacity change from 0 to 7 [ 339.579106][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 339.579322][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 339.735085][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 339.735189][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 339.741965][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 339.742175][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 339.764973][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 339.765057][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 339.793161][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 339.793245][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 339.800171][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 339.800607][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 339.907604][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 339.907692][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 339.908035][T10355] ldm_validate_partition_table(): Disk read failed. [ 339.910867][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 339.910922][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 339.922266][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 339.922484][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 339.931163][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 339.931374][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 339.933241][T10355] Dev loop7: unable to read RDB block 0 [ 339.974304][T10355] loop7: unable to read partition table [ 339.974856][T10355] loop7: partition table beyond EOD, truncated [ 340.005645][T10355] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 340.087014][ T5734] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 340.285928][ T5734] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 340.285990][ T5734] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 340.286014][ T5734] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 340.380396][ T5734] usb 3-1: config 0 descriptor?? [ 340.619007][ T5734] usbhid 3-1:0.0: can't add hid device: -71 [ 340.619132][ T5734] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 340.651393][ T5734] usb 3-1: USB disconnect, device number 6 [ 340.904154][T10368] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1514'. [ 341.087049][ T5331] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 341.166992][ T5734] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 341.242139][ T5331] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 341.242168][ T5331] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 341.244157][ T5331] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 341.244186][ T5331] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 341.244207][ T5331] usb 4-1: SerialNumber: syz [ 341.335436][ T5734] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 341.335489][ T5734] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 341.335514][ T5734] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.382241][ T5734] usb 3-1: config 0 descriptor?? [ 341.574531][ T5331] usb 4-1: 0:2 : does not exist [ 341.594210][ T5331] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 341.626160][ T5331] usb 4-1: 5:0: failed to get current value for ch 1 (-22) [ 341.813784][ T5331] usb 4-1: USB disconnect, device number 8 [ 341.920565][ T9009] udevd[9009]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 342.234999][ T5734] aiptek 3-1:0.0: Aiptek using 400 ms programming speed [ 342.256684][ T5734] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input13 [ 342.763228][ T202] usb 3-1: USB disconnect, device number 7 [ 342.763280][ C1] aiptek 3-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 343.922532][T10405] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1526'. [ 344.472247][T10392] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 344.477145][T10392] block device autoloading is deprecated and will be removed. [ 344.782847][ T5609] Bluetooth: hci5: command 0x0406 tx timeout [ 345.352595][ T5612] Bluetooth: hci2: unexpected event for opcode 0x2005 [ 346.017016][ T202] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 346.166954][ T202] usb 6-1: Using ep0 maxpacket: 32 [ 346.185121][ T202] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 346.185149][ T202] usb 6-1: config 0 has no interface number 0 [ 346.185197][ T202] usb 6-1: config 0 interface 184 has no altsetting 0 [ 346.212934][ T202] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 346.212964][ T202] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.212986][ T202] usb 6-1: Product: syz [ 346.213000][ T202] usb 6-1: Manufacturer: syz [ 346.213014][ T202] usb 6-1: SerialNumber: syz [ 346.253399][ T202] usb 6-1: config 0 descriptor?? [ 346.880678][ T202] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 346.880703][ T202] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 346.967321][ T5768] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 347.137083][ T5768] usb 3-1: Using ep0 maxpacket: 32 [ 347.147089][ T5768] usb 3-1: config 0 has no interfaces? [ 347.161240][ T5768] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 347.161269][ T5768] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.161348][ T5768] usb 3-1: Product: syz [ 347.161363][ T5768] usb 3-1: Manufacturer: syz [ 347.161377][ T5768] usb 3-1: SerialNumber: syz [ 347.223184][ T5768] usb 3-1: config 0 descriptor?? [ 347.454153][T10465] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 347.456743][T10465] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 347.490005][T10465] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 347.491483][T10465] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 347.727561][ T5734] usb 3-1: USB disconnect, device number 8 [ 348.128951][T10481] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 348.157198][T10480] iommufd_mock iommufd_mock0: Adding to iommu group 1 [ 348.934556][T10496] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 348.934586][T10496] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 349.047085][T10496] vhci_hcd vhci_hcd.0: Device attached [ 349.085443][T10500] vhci_hcd: connection closed [ 349.144838][ T1175] vhci_hcd vhci_hcd.1: stop threads [ 349.145792][ T1175] vhci_hcd vhci_hcd.1: release socket [ 349.186457][ T1175] vhci_hcd vhci_hcd.1: disconnect device [ 349.199709][ T5331] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 349.549418][ T5612] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 350.121327][ T202] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000003c: -71 [ 350.121356][ T202] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to write BULK_IN_DLY: -71 [ 350.121375][ T202] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 350.121630][ T202] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -71 [ 350.212331][ T202] usb 6-1: USB disconnect, device number 14 [ 350.489709][T10526] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 350.489753][T10526] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 350.489800][T10526] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 350.588470][T10526] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 350.755418][T10526] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 350.829211][ T202] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 351.008404][ T202] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 351.008468][ T202] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 351.013129][ T202] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 351.013156][ T202] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 351.013175][ T202] usb 1-1: Product: syz [ 351.013188][ T202] usb 1-1: Manufacturer: syz [ 351.013202][ T202] usb 1-1: SerialNumber: syz [ 351.103147][ T202] cdc_mbim 1-1:1.0: skipping garbage [ 351.332413][T10536] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 351.964009][T10536] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 351.964594][ T202] cdc_mbim 1-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 351.964617][ T202] cdc_mbim 1-1:1.0: setting rx_max = 2048 [ 352.166317][ T202] cdc_mbim 1-1:1.0: setting tx_max = 32 [ 352.449679][ T202] cdc_mbim 1-1:1.0: cdc-wdm0: USB WDM device [ 352.509430][ T202] wwan wwan0: port wwan0mbim0 attached [ 352.552654][ T202] cdc_mbim 1-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.0-1, CDC MBIM, 8e:3d:c8:1b:b1:b4 [ 352.597713][ T202] usb 1-1: USB disconnect, device number 7 [ 352.614477][ T202] cdc_mbim 1-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.0-1, CDC MBIM [ 353.008803][ T202] wwan wwan0: port wwan0mbim0 disconnected [ 353.625139][T10593] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 354.225143][T10605] syzkaller1: entered promiscuous mode [ 354.225170][T10605] syzkaller1: entered allmulticast mode [ 354.600504][ T202] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 354.733031][T10624] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1609'. [ 354.733051][T10624] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1609'. [ 354.778701][ T202] usb 6-1: Using ep0 maxpacket: 16 [ 354.790040][ T202] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 354.797678][ T202] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 354.797717][ T202] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.797738][ T202] usb 6-1: Product: syz [ 354.797752][ T202] usb 6-1: Manufacturer: syz [ 354.797766][ T202] usb 6-1: SerialNumber: syz [ 354.849600][ T202] usb 6-1: config 0 descriptor?? [ 354.885856][ T202] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 354.885892][ T202] em28xx 6-1:0.0: DVB interface 0 found: bulk [ 355.486009][ T202] em28xx 6-1:0.0: chip ID is em2765 [ 355.615062][ T36] audit: type=1326 audit(1783063130.154:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10644 comm="syz.2.1617" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6146bde59 code=0x7ffc0000 [ 355.615122][ T36] audit: type=1326 audit(1783063130.154:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10644 comm="syz.2.1617" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6146bde59 code=0x7ffc0000 [ 355.615171][ T36] audit: type=1326 audit(1783063130.154:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10644 comm="syz.2.1617" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fb6146bde59 code=0x7ffc0000 [ 355.700951][ T36] audit: type=1326 audit(1783063130.154:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10644 comm="syz.2.1617" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6146bde59 code=0x7ffc0000 [ 355.701008][ T36] audit: type=1326 audit(1783063130.244:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10644 comm="syz.2.1617" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6146bde59 code=0x7ffc0000 [ 355.752556][ T36] audit: type=1326 audit(1783063130.294:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10644 comm="syz.2.1617" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb61467e68e code=0x7ffc0000 [ 355.754907][ T36] audit: type=1326 audit(1783063130.294:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10644 comm="syz.2.1617" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb61467e68e code=0x7ffc0000 [ 355.759801][ T36] audit: type=1326 audit(1783063130.304:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10644 comm="syz.2.1617" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb61467e68e code=0x7ffc0000 [ 355.761285][ T36] audit: type=1326 audit(1783063130.304:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10644 comm="syz.2.1617" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb61467e68e code=0x7ffc0000 [ 355.778167][ T36] audit: type=1326 audit(1783063130.314:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10644 comm="syz.2.1617" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb61467e68e code=0x7ffc0000 [ 356.403673][T10655] syzkaller1: entered promiscuous mode [ 356.403701][T10655] syzkaller1: entered allmulticast mode [ 356.501895][ T202] em28xx 6-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 356.501927][ T202] em28xx 6-1:0.0: board has no eeprom [ 356.822525][ T202] em28xx 6-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 356.822612][ T202] em28xx 6-1:0.0: dvb set to bulk mode. [ 356.879226][ T5768] em28xx 6-1:0.0: Binding DVB extension [ 356.902795][ T202] usb 6-1: USB disconnect, device number 15 [ 356.929187][ T202] em28xx 6-1:0.0: Disconnecting em28xx [ 357.142967][ T5768] em28xx 6-1:0.0: Registering input extension [ 357.154601][ T202] em28xx 6-1:0.0: Closing input extension [ 357.938845][T10684] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1630'. [ 357.938950][T10684] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1630'. [ 358.017580][ T202] em28xx 6-1:0.0: Freeing device [ 358.017601][T10687] netlink: 'syz.3.1630': attribute type 10 has an invalid length. [ 358.236069][ T1175] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 358.236263][ T1175] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 358.236495][ T1175] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 358.236682][T10684] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1630'. [ 358.236713][T10684] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1630'. [ 358.322670][ T1175] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 358.682626][T10701] syzkaller1: entered promiscuous mode [ 358.682651][T10701] syzkaller1: entered allmulticast mode [ 359.561016][ T5612] Bluetooth: hci2: unexpected event for opcode 0x2005 [ 359.748475][ T202] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 359.919969][ T202] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 359.920017][ T202] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 359.920040][ T202] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 359.920083][ T202] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 359.920104][ T202] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.000397][ T202] usb 1-1: config 0 descriptor?? [ 360.667070][ T9] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 360.925155][ T9] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 360.925258][ T9] usb 2-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 360.925279][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 360.925330][ T9] usb 2-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 360.925425][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 360.925451][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 361.010456][ T9] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 361.010487][ T9] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 361.010571][ T9] usb 2-1: Product: syz [ 361.010592][ T9] usb 2-1: Manufacturer: syz [ 361.055374][T10748] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 361.070031][ T9] cdc_wdm 2-1:1.0: skipping garbage [ 361.070051][ T9] cdc_wdm 2-1:1.0: skipping garbage [ 361.127807][ T9] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 361.127830][ T9] cdc_wdm 2-1:1.0: Unknown control protocol [ 361.242081][ T5612] Bluetooth: hci2: unexpected event for opcode 0x2005 [ 361.399838][ T56] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 361.400010][ T56] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 361.400044][ T56] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 361.400073][ T56] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 361.451988][T10771] bridge_slave_0: left allmulticast mode [ 361.452038][T10771] bridge_slave_0: left promiscuous mode [ 361.467131][ T5331] usb 2-1: USB disconnect, device number 10 [ 361.491777][T10771] bridge0: port 1(bridge_slave_0) entered disabled state [ 361.533298][T10748] cdc_wdm 2-1:1.0: Error submitting int urb - -2 [ 361.555097][T10772] cdc_wdm 2-1:1.0: Error submitting int urb - -19 [ 361.712271][T10771] bridge_slave_1: left allmulticast mode [ 361.712303][T10771] bridge_slave_1: left promiscuous mode [ 361.713833][T10771] bridge0: port 2(bridge_slave_1) entered disabled state [ 361.910567][T10771] bond0: (slave bond_slave_0): Releasing backup interface [ 362.008825][T10771] bond0: (slave bond_slave_1): Releasing backup interface [ 362.104146][T10771] team_slave_0: left allmulticast mode [ 362.145524][T10771] team0: Port device team_slave_0 removed [ 362.150113][T10771] team_slave_1: left allmulticast mode [ 362.191915][T10771] team0: Port device team_slave_1 removed [ 362.192318][T10771] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 362.307049][T10771] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 362.352679][T10771] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 362.519150][ T202] usbhid 1-1:0.0: can't add hid device: -71 [ 362.519357][ T202] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 362.571988][ T202] usb 1-1: USB disconnect, device number 8 [ 362.597172][ T5768] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 362.747439][ T5768] usb 3-1: Using ep0 maxpacket: 16 [ 362.749710][ T5768] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 362.749758][ T5768] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 362.749785][ T5768] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 362.749809][ T5768] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 362.749829][ T5768] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 362.751078][ T5768] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 362.751102][ T5768] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 362.751121][ T5768] usb 3-1: Manufacturer: syz [ 362.856754][ T5768] usb 3-1: config 0 descriptor?? [ 363.306945][ T5768] rc_core: IR keymap rc-hauppauge not found [ 363.306965][ T5768] Registered IR keymap rc-empty [ 363.307817][ T5768] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 363.337795][ T5768] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 363.410915][ T5768] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 363.440081][ T5768] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input15 [ 363.473725][ T5768] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 363.487002][ T5768] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 363.507186][ T5768] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 363.527000][ T5768] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 363.548346][ T5768] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 363.566994][ T5768] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 363.587040][ T5768] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 363.607094][ T5768] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 363.627025][ T5768] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 363.646988][ T5768] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 363.708688][ T5768] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 363.708715][ T5768] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 363.771731][ T5768] usb 3-1: USB disconnect, device number 9 [ 364.260754][T10825] siw: device registration error -23 [ 364.400027][T10830] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 364.400057][T10830] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 364.402767][T10830] vhci_hcd vhci_hcd.0: Device attached [ 364.405456][T10831] vhci_hcd: connection closed [ 364.513052][ T66] vhci_hcd vhci_hcd.5: stop threads [ 364.513079][ T66] vhci_hcd vhci_hcd.5: release socket [ 364.513118][ T66] vhci_hcd vhci_hcd.5: disconnect device [ 364.857743][ T11] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 365.006944][ T11] usb 1-1: Using ep0 maxpacket: 16 [ 365.012541][ T11] usb 1-1: config 0 has an invalid interface number: 34 but max is 0 [ 365.012568][ T11] usb 1-1: config 0 has no interface number 0 [ 365.012623][ T11] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 365.012662][ T11] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 365.070498][ T11] usb 1-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 365.070529][ T11] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 365.070549][ T11] usb 1-1: Product: syz [ 365.070564][ T11] usb 1-1: Manufacturer: syz [ 365.070579][ T11] usb 1-1: SerialNumber: syz [ 365.140127][ T11] usb 1-1: config 0 descriptor?? [ 365.141366][T10838] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 365.141634][T10838] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 365.353597][T10838] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 365.353879][T10838] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 365.542810][T10857] netlink: 'syz.1.1678': attribute type 1 has an invalid length. [ 365.560151][ T11] asix 1-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 366.783871][T10883] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 366.842048][T10883] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 366.849202][T10883] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 366.873111][T10883] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1687'. [ 366.882380][T10883] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 367.704325][T10897] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1691'. [ 367.743079][ T66] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 367.743355][ T66] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 367.743490][ T66] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 367.743533][ T66] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 367.743709][T10897] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1691'. [ 367.773790][T10897] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1691'. [ 367.796040][T10897] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1691'. [ 368.011126][ T11] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 368.011157][ T11] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9 [ 368.011431][ T11] asix 1-1:0.34: probe with driver asix failed with error -71 [ 368.060689][ T11] usb 1-1: USB disconnect, device number 9 [ 368.163351][ T3356] Bluetooth: (null): Invalid header checksum [ 368.189052][ T3356] Bluetooth: (null): Invalid header checksum [ 369.011285][T10909] bridge0: port 2(bridge_slave_1) entered disabled state [ 369.085677][T10911] netlink: 'syz.0.1696': attribute type 1 has an invalid length. [ 369.863084][T10937] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 369.863116][T10937] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 369.863245][T10937] vhci_hcd vhci_hcd.0: Device attached [ 369.864838][T10938] vhci_hcd: connection closed [ 369.865259][ T14] vhci_hcd vhci_hcd.2: stop threads [ 369.865288][ T14] vhci_hcd vhci_hcd.2: release socket [ 369.865333][ T14] vhci_hcd vhci_hcd.2: disconnect device [ 370.006405][T10943] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 370.476321][ T1175] Bluetooth: (null): Invalid header checksum [ 370.722238][T10958] bond2: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 370.918358][T10958] bond2: (slave lo): making interface the new active one [ 370.961022][T10958] bond2: (slave lo): Enslaving as an active interface with an up link [ 370.987167][T10958] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 371.922346][T10991] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 371.922377][T10991] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 371.922612][T10991] vhci_hcd vhci_hcd.0: Device attached [ 371.965795][T10992] vhci_hcd: connection closed [ 371.970250][ T1561] vhci_hcd vhci_hcd.0: stop threads [ 371.970277][ T1561] vhci_hcd vhci_hcd.0: release socket [ 371.970315][ T1561] vhci_hcd vhci_hcd.0: disconnect device [ 372.307258][ T5733] IPVS: starting estimator thread 0... [ 372.397290][T11003] IPVS: using max 8 ests per chain, 19200 per kthread [ 373.958787][T11034] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 373.958815][T11034] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 373.958908][T11034] vhci_hcd vhci_hcd.0: Device attached [ 373.990087][T11036] vhci_hcd: connection closed [ 373.992247][ T1175] vhci_hcd vhci_hcd.1: stop threads [ 373.992274][ T1175] vhci_hcd vhci_hcd.1: release socket [ 373.992313][ T1175] vhci_hcd vhci_hcd.1: disconnect device [ 374.299246][ T5331] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 374.448488][ T5331] usb 4-1: Using ep0 maxpacket: 16 [ 374.450427][ T5331] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 374.456459][ T5331] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 374.456488][ T5331] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.456508][ T5331] usb 4-1: Product: syz [ 374.456523][ T5331] usb 4-1: Manufacturer: syz [ 374.456538][ T5331] usb 4-1: SerialNumber: syz [ 374.503141][ T5331] usb 4-1: config 0 descriptor?? [ 374.616714][ T5331] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 374.618434][ T5331] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 375.202235][ T5331] em28xx 4-1:0.0: chip ID is em2765 [ 375.844439][ T5331] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 375.844478][ T5331] em28xx 4-1:0.0: board has no eeprom [ 376.179658][ T5331] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 376.179691][ T5331] em28xx 4-1:0.0: dvb set to bulk mode. [ 376.181130][ T5734] em28xx 4-1:0.0: Binding DVB extension [ 376.390476][ T5331] usb 4-1: USB disconnect, device number 9 [ 376.401753][ T5331] em28xx 4-1:0.0: Disconnecting em28xx [ 376.855967][ T5734] em28xx 4-1:0.0: Registering input extension [ 376.897454][ T5331] em28xx 4-1:0.0: Closing input extension [ 377.116726][ T5331] em28xx 4-1:0.0: Freeing device [ 377.476156][T11125] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 377.476185][T11125] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 377.498428][T11125] vhci_hcd vhci_hcd.0: Device attached [ 377.518934][T11128] vhci_hcd: connection closed [ 377.559228][T11082] vhci_hcd vhci_hcd.1: stop threads [ 377.559256][T11082] vhci_hcd vhci_hcd.1: release socket [ 377.559295][T11082] vhci_hcd vhci_hcd.1: disconnect device [ 378.344271][ T5612] Bluetooth: hci5: connection err: -111 [ 378.550659][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.161812][T11179] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 379.161840][T11179] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 379.233751][T11179] vhci_hcd vhci_hcd.0: Device attached [ 379.236202][T11180] vhci_hcd: connection closed [ 379.248987][T11082] vhci_hcd vhci_hcd.1: stop threads [ 379.249009][T11082] vhci_hcd vhci_hcd.1: release socket [ 379.327087][T11082] vhci_hcd vhci_hcd.1: disconnect device [ 383.158259][T11291] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 383.158287][T11291] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 383.158379][T11291] vhci_hcd vhci_hcd.0: Device attached [ 383.202887][T11291] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 383.202915][T11291] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 383.227232][T11291] vhci_hcd vhci_hcd.0: Device attached [ 383.234016][T11291] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(8) [ 383.234042][T11291] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 383.234155][T11291] vhci_hcd vhci_hcd.0: Device attached [ 383.251195][T11291] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(11) [ 383.251260][T11291] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 383.251355][T11291] vhci_hcd vhci_hcd.0: Device attached [ 383.299035][T11301] vhci_hcd: connection closed [ 383.304829][T11105] vhci_hcd vhci_hcd.2: stop threads [ 383.304856][T11105] vhci_hcd vhci_hcd.2: release socket [ 383.304935][T11105] vhci_hcd vhci_hcd.2: disconnect device [ 383.328167][T11299] vhci_hcd: connection closed [ 383.328537][T11297] vhci_hcd: connection closed [ 383.334627][T11105] vhci_hcd vhci_hcd.2: stop threads [ 383.334652][T11105] vhci_hcd vhci_hcd.2: release socket [ 383.334733][T11105] vhci_hcd vhci_hcd.2: disconnect device [ 383.336546][T11105] vhci_hcd vhci_hcd.2: stop threads [ 383.336564][T11105] vhci_hcd vhci_hcd.2: release socket [ 383.336603][T11105] vhci_hcd vhci_hcd.2: disconnect device [ 383.353995][T11293] vhci_hcd: connection closed [ 383.364925][T11083] vhci_hcd vhci_hcd.2: stop threads [ 383.364950][T11083] vhci_hcd vhci_hcd.2: release socket [ 383.365021][T11083] vhci_hcd vhci_hcd.2: disconnect device [ 383.417043][ T202] usb 37-1: new high-speed USB device number 2 using vhci_hcd [ 383.417293][ T202] usb 37-1: enqueue for inactive port 0 [ 383.487020][ T202] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 384.889649][T11344] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 384.889678][T11344] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 384.890133][T11344] vhci_hcd vhci_hcd.0: Device attached [ 384.954322][T11348] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(10) [ 384.954352][T11348] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 384.964758][T11348] vhci_hcd vhci_hcd.0: Device attached [ 384.988266][T11344] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 384.988294][T11344] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 384.988632][T11344] vhci_hcd vhci_hcd.0: Device attached [ 385.062061][T11348] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(13) [ 385.062088][T11348] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 385.152934][T11348] vhci_hcd vhci_hcd.0: Device attached [ 385.156554][T11351] vhci_hcd: connection closed [ 385.165400][T11349] vhci_hcd: connection closed [ 385.165689][T11345] vhci_hcd: connection closed [ 385.165944][T11347] vhci_hcd: connection closed [ 385.202352][T11082] vhci_hcd vhci_hcd.0: stop threads [ 385.202383][T11082] vhci_hcd vhci_hcd.0: release socket [ 385.204556][T11082] vhci_hcd vhci_hcd.0: disconnect device [ 385.204716][T11082] vhci_hcd vhci_hcd.0: stop threads [ 385.204734][T11082] vhci_hcd vhci_hcd.0: release socket [ 385.262361][ T5769] usb 33-1: new high-speed USB device number 2 using vhci_hcd [ 385.290261][T11082] vhci_hcd vhci_hcd.0: disconnect device [ 385.316644][T11082] vhci_hcd vhci_hcd.0: stop threads [ 385.316674][T11082] vhci_hcd vhci_hcd.0: release socket [ 385.337741][T11082] vhci_hcd vhci_hcd.0: disconnect device [ 385.338220][T11082] vhci_hcd vhci_hcd.0: stop threads [ 385.338244][T11082] vhci_hcd vhci_hcd.0: release socket [ 385.339280][T11082] vhci_hcd vhci_hcd.0: disconnect device [ 387.446669][T11406] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 387.446699][T11406] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 387.446798][T11406] vhci_hcd vhci_hcd.0: Device attached [ 387.495900][T11406] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 387.495929][T11406] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 387.496025][T11406] vhci_hcd vhci_hcd.0: Device attached [ 387.531443][T11406] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(9) [ 387.531470][T11406] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 387.531566][T11406] vhci_hcd vhci_hcd.0: Device attached [ 387.543633][T11406] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(12) [ 387.543718][T11406] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 387.543988][T11406] vhci_hcd vhci_hcd.0: Device attached [ 387.590678][T11414] vhci_hcd: connection closed [ 387.591006][T11417] vhci_hcd: connection closed [ 387.591265][T11407] vhci_hcd: connection reset by peer [ 387.591268][T11411] vhci_hcd: connection closed [ 387.597106][ T42] vhci_hcd vhci_hcd.0: stop threads [ 387.597133][ T42] vhci_hcd vhci_hcd.0: release socket [ 387.597203][ T42] vhci_hcd vhci_hcd.0: disconnect device [ 387.600002][ T42] vhci_hcd vhci_hcd.0: stop threads [ 387.600045][ T42] vhci_hcd vhci_hcd.0: release socket [ 387.600235][ T42] vhci_hcd vhci_hcd.0: disconnect device [ 387.615320][ T42] vhci_hcd vhci_hcd.0: stop threads [ 387.615379][ T42] vhci_hcd vhci_hcd.0: release socket [ 387.616089][ T42] vhci_hcd vhci_hcd.0: disconnect device [ 387.675619][ T42] vhci_hcd vhci_hcd.0: stop threads [ 387.675639][ T42] vhci_hcd vhci_hcd.0: release socket [ 387.675696][ T42] vhci_hcd vhci_hcd.0: disconnect device [ 388.015628][T11427] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 388.016049][T11427] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 388.735344][T11440] bridge0: port 3(syz_tun) entered blocking state [ 388.763066][T11440] bridge0: port 3(syz_tun) entered disabled state [ 388.887557][T11440] syz_tun: entered allmulticast mode [ 388.918358][T11440] syz_tun: entered promiscuous mode [ 388.956517][T11440] bridge0: port 3(syz_tun) entered blocking state [ 388.965950][T11440] bridge0: port 3(syz_tun) entered forwarding state [ 389.273100][T11453] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 389.412689][T11453] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 389.482509][T11453] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 390.338827][T11473] pim6reg1: entered promiscuous mode [ 390.338855][T11473] pim6reg1: entered allmulticast mode [ 390.473749][ T5769] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 391.777213][ T5734] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 391.870286][ T202] usb usb34-port1: attempt power cycle [ 391.947310][ T5734] usb 3-1: Using ep0 maxpacket: 32 [ 391.958545][ T5734] usb 3-1: too many configurations: 93, using maximum allowed: 8 [ 391.961631][ T5734] usb 3-1: config 0 has no interfaces? [ 392.006614][ T5734] usb 3-1: config 0 has no interfaces? [ 392.013494][ T5734] usb 3-1: config 0 has no interfaces? [ 392.014860][ T5734] usb 3-1: config 0 has no interfaces? [ 392.028721][ T5734] usb 3-1: config 0 has no interfaces? [ 392.033911][ T5734] usb 3-1: config 0 has no interfaces? [ 392.035069][ T5734] usb 3-1: config 0 has no interfaces? [ 392.037466][ T5734] usb 3-1: config 0 has no interfaces? [ 392.064051][ T5734] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 392.064073][ T5734] usb 3-1: New USB device strings: Mfr=136, Product=188, SerialNumber=114 [ 392.064110][ T5734] usb 3-1: Product: syz [ 392.064126][ T5734] usb 3-1: Manufacturer: syz [ 392.064142][ T5734] usb 3-1: SerialNumber: syz [ 392.113530][ T5734] usb 3-1: config 0 descriptor?? [ 392.514732][ T202] usb usb34-port1: unable to enumerate USB device [ 392.632968][ T5734] usb 3-1: USB disconnect, device number 10 [ 393.517167][T11534] bridge0: port 1(syz_tun) entered blocking state [ 393.517368][T11534] bridge0: port 1(syz_tun) entered disabled state [ 393.517588][T11534] syz_tun: entered allmulticast mode [ 393.643911][T11534] syz_tun: entered promiscuous mode [ 393.884004][T11553] syzkaller1: entered promiscuous mode [ 393.884032][T11553] syzkaller1: entered allmulticast mode [ 395.904185][T11584] netlink: 'syz.5.1900': attribute type 11 has an invalid length. [ 396.974739][T11603] syzkaller1: entered promiscuous mode [ 396.974766][T11603] syzkaller1: entered allmulticast mode [ 397.363841][T11608] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 397.363872][T11608] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 397.384257][T11608] vhci_hcd vhci_hcd.0: Device attached [ 397.417012][T11608] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 397.417041][T11608] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 397.417136][T11608] vhci_hcd vhci_hcd.0: Device attached [ 397.449242][T11608] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(9) [ 397.449273][T11608] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 397.449333][T11608] vhci_hcd vhci_hcd.0: Device attached [ 397.454412][T11608] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(12) [ 397.454442][T11608] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 397.454502][T11608] vhci_hcd vhci_hcd.0: Device attached [ 397.511624][T11615] vhci_hcd: connection closed [ 397.512317][ T1498] vhci_hcd vhci_hcd.0: stop threads [ 397.512345][ T1498] vhci_hcd vhci_hcd.0: release socket [ 397.512398][ T1498] vhci_hcd vhci_hcd.0: disconnect device [ 397.516576][T11613] vhci_hcd: connection closed [ 397.539428][T11609] vhci_hcd: connection closed [ 397.539716][T11611] vhci_hcd: connection closed [ 397.543390][ T14] vhci_hcd vhci_hcd.0: stop threads [ 397.543428][ T14] vhci_hcd vhci_hcd.0: release socket [ 397.543521][ T14] vhci_hcd vhci_hcd.0: disconnect device [ 397.573641][ T14] vhci_hcd vhci_hcd.0: stop threads [ 397.573662][ T14] vhci_hcd vhci_hcd.0: release socket [ 397.573741][ T14] vhci_hcd vhci_hcd.0: disconnect device [ 397.573912][ T14] vhci_hcd vhci_hcd.0: stop threads [ 397.573929][ T14] vhci_hcd vhci_hcd.0: release socket [ 397.573997][ T14] vhci_hcd vhci_hcd.0: disconnect device [ 397.611446][ T5734] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 399.452853][ T5613] usb usb34-port1: attempt power cycle [ 400.303548][ T5613] usb usb34-port1: unable to enumerate USB device [ 400.417033][ T202] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 400.603737][ T202] usb 6-1: Using ep0 maxpacket: 16 [ 400.832776][ T202] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 400.832804][ T202] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 400.862023][ T202] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 400.862054][ T202] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 400.862074][ T202] usb 6-1: Product: syz [ 400.862089][ T202] usb 6-1: Manufacturer: syz [ 400.862104][ T202] usb 6-1: SerialNumber: syz [ 401.348353][ T202] usb 6-1: 0:2 : does not exist [ 401.379788][ T202] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 401.954118][ T202] usb 6-1: USB disconnect, device number 16 [ 402.354399][ T9009] udevd[9009]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 407.241483][T11672] process 'syz.2.1928' launched './file0' with NULL argv: empty string added [ 410.144112][T11678] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 410.144141][T11678] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 411.626940][ T5733] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 412.827858][ T5733] usb 3-1: Using ep0 maxpacket: 16 [ 413.186632][ T5733] usb 3-1: config 0 interface 0 has no altsetting 0 [ 413.186676][ T5733] usb 3-1: New USB device found, idVendor=17ef, idProduct=60b5, bcdDevice= 0.00 [ 413.186702][ T5733] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 413.240513][ T5733] usb 3-1: config 0 descriptor?? [ 414.444998][ T5733] lenovo 0003:17EF:60B5.000D: unknown main item tag 0x1 [ 414.445040][ T5733] lenovo 0003:17EF:60B5.000D: ignoring exceeding usage max [ 414.474372][ T5733] lenovo 0003:17EF:60B5.000D: ignoring exceeding usage max [ 414.507725][ T5733] lenovo 0003:17EF:60B5.000D: hidraw0: USB HID v0.81 Device [HID 17ef:60b5] on usb-dummy_hcd.2-1/input0 [ 414.788906][ T5733] usb 3-1: USB disconnect, device number 11 [ 415.017819][T11702] fido_id[11702]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 415.506969][ T202] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 415.999405][ T202] usb 4-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=26.50 [ 415.999444][ T202] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 415.999460][ T202] usb 4-1: Product: syz [ 415.999471][ T202] usb 4-1: Manufacturer: syz [ 415.999481][ T202] usb 4-1: SerialNumber: syz [ 416.159497][ T202] usb 4-1: config 0 descriptor?? [ 416.483533][ T202] usb 4-1: USB disconnect, device number 10 [ 416.546972][ T9] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 416.708935][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 416.709038][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 65535, setting to 64 [ 416.711430][ T9] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 416.711460][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 416.711482][ T9] usb 3-1: Product: syz [ 416.711497][ T9] usb 3-1: Manufacturer: syz [ 416.711513][ T9] usb 3-1: SerialNumber: syz [ 416.834387][ T9] cdc_mbim 3-1:1.0: skipping garbage [ 419.213935][ T9] cdc_mbim 3-1:1.0: SET_CRC_MODE failed [ 419.224514][ T9] cdc_mbim 3-1:1.0: bind() failure [ 419.292860][ T9] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 419.292907][ T9] cdc_ncm 3-1:1.1: bind() failure [ 419.364632][ T9] usb 3-1: USB disconnect, device number 12 [ 420.496989][ T9] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 421.010438][ T9] usb 3-1: too many endpoints for config 0 interface 0 altsetting 251: 223, using maximum allowed: 30 [ 421.010489][ T9] usb 3-1: config 0 interface 0 altsetting 251 has 1 endpoint descriptor, different from the interface descriptor's value: 223 [ 421.010520][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 421.010554][ T9] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.00 [ 421.010593][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 421.056554][ T9] usb 3-1: config 0 descriptor?? [ 421.752596][ T9] appleir 0003:05AC:8243.000E: ignoring exceeding usage max [ 421.754339][ T9] appleir 0003:05AC:8243.000E: unknown main item tag 0x6 [ 421.754434][ T9] appleir 0003:05AC:8243.000E: reserved main item tag 0xd [ 421.754463][ T9] appleir 0003:05AC:8243.000E: item fetching failed at offset 39/40 [ 421.812879][ T9] appleir 0003:05AC:8243.000E: parse failed [ 421.813001][ T9] appleir 0003:05AC:8243.000E: probe with driver appleir failed with error -22 [ 422.094452][ T5734] usb 3-1: USB disconnect, device number 13 [ 427.586970][ T5733] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 427.770190][ T5733] usb 1-1: unable to get BOS descriptor or descriptor too short [ 427.771783][ T5733] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 427.771809][ T5733] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 428.033641][ T5733] usb 1-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 428.033675][ T5733] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.033696][ T5733] usb 1-1: Product: syz [ 428.033714][ T5733] usb 1-1: Manufacturer: syz [ 428.033729][ T5733] usb 1-1: SerialNumber: syz [ 428.193668][ T5733] usb 1-1: selecting invalid altsetting 1 [ 428.194423][ T5733] usb 1-1: unit 6 not found! [ 429.744537][ T5733] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 429.813160][ T5733] usb 1-1: USB disconnect, device number 10 [ 430.046860][ T9009] udevd[9009]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 435.737104][ T5733] usb 6-1: new low-speed USB device number 17 using dummy_hcd [ 436.041412][ T5733] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 436.041443][ T5733] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 436.041500][ T5733] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 436.041531][ T5733] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 27759, setting to 8 [ 436.041577][ T5733] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 436.041603][ T5733] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 436.127796][T11808] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 436.148561][ T5733] hub 6-1:1.0: bad descriptor, ignoring hub [ 436.148601][ T5733] hub 6-1:1.0: probe with driver hub failed with error -5 [ 436.149713][ T5733] cdc_wdm 6-1:1.0: skipping garbage [ 436.149730][ T5733] cdc_wdm 6-1:1.0: skipping garbage [ 436.183863][ T5733] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 436.183885][ T5733] cdc_wdm 6-1:1.0: Unknown control protocol [ 436.450692][ T5733] usb 6-1: USB disconnect, device number 17 [ 437.906925][ T5734] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 438.102305][ T5734] usb 2-1: Using ep0 maxpacket: 16 [ 438.109012][ T5734] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 438.109039][ T5734] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 438.178843][ T5734] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 438.178910][ T5734] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 438.178931][ T5734] usb 2-1: Product: syz [ 438.178946][ T5734] usb 2-1: Manufacturer: syz [ 438.178961][ T5734] usb 2-1: SerialNumber: syz [ 438.906218][ T5734] usb 2-1: 0:2 : does not exist [ 438.942797][ T5734] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 439.847509][ T5734] usb 2-1: USB disconnect, device number 11 [ 439.991720][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.596904][ T5769] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 440.729304][ T9009] udevd[9009]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 440.832568][ T5769] usb 3-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 440.832599][ T5769] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 440.846510][ T5769] usb 3-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 440.846599][ T5769] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 440.846680][ T5769] usb 3-1: Product: syz [ 440.846720][ T5769] usb 3-1: Manufacturer: syz [ 440.846761][ T5769] usb 3-1: SerialNumber: syz [ 442.073637][ T5769] usb 3-1: unit 4 not found! [ 442.370392][ T5769] usb 3-1: USB disconnect, device number 14 [ 443.746950][ T5769] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 444.010642][ T5769] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 444.010674][ T5769] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 444.018210][ T5769] usb 3-1: config 0 descriptor?? [ 445.538112][ T5769] usb 3-1: Cannot set autoneg [ 445.538416][ T5769] MOSCHIP usb-ethernet driver 3-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 445.595590][ T5769] usb 3-1: USB disconnect, device number 15 [ 453.387851][ T5734] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 453.646961][ T5734] usb 3-1: Using ep0 maxpacket: 16 [ 453.649227][ T5734] usb 3-1: config 0 has an invalid interface number: 34 but max is 0 [ 453.649254][ T5734] usb 3-1: config 0 has no interface number 0 [ 453.649301][ T5734] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 453.649328][ T5734] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 453.652259][ T5734] usb 3-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 453.652290][ T5734] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 453.652311][ T5734] usb 3-1: Product: syz [ 453.652327][ T5734] usb 3-1: Manufacturer: syz [ 453.652344][ T5734] usb 3-1: SerialNumber: syz [ 453.743147][ T5734] usb 3-1: config 0 descriptor?? [ 453.746211][T11886] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 453.746410][T11886] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 454.002493][T11886] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 454.003019][T11886] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 454.223135][ T5734] asix 3-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 455.554751][ T5609] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 455.674761][ T5609] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 455.704019][ T5609] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 455.718320][ T5609] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 455.719934][ T5609] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 456.860608][ T5612] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 456.908680][ T5612] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 456.911620][ T5612] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 456.935439][ T5612] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 456.965943][ T5612] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 457.772746][ T5734] asix 3-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 457.772782][ T5734] asix 3-1:0.34 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 457.773072][ T5734] asix 3-1:0.34: probe with driver asix failed with error -71 [ 457.854930][ T5734] usb 3-1: USB disconnect, device number 16 [ 458.697191][ T5609] Bluetooth: hci4: command tx timeout [ 459.177089][ T5609] Bluetooth: hci6: command tx timeout [ 459.820398][ T5612] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 459.890937][ T5612] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 459.909061][ T5612] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 459.947760][ T5612] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 459.952812][ T5612] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 460.777047][ T5612] Bluetooth: hci4: command tx timeout [ 460.804530][ T5733] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 461.216928][ T5733] usb 3-1: Using ep0 maxpacket: 16 [ 461.256941][ T5612] Bluetooth: hci6: command tx timeout [ 461.266023][ T5733] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 461.266057][ T5733] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 461.266080][ T5733] usb 3-1: config 0 interface 0 has no altsetting 0 [ 461.266117][ T5733] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 461.266140][ T5733] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 461.330270][ T5733] usb 3-1: config 0 descriptor?? [ 462.113844][ T5769] usb 3-1: USB disconnect, device number 17 [ 462.221239][ T5612] Bluetooth: hci7: command tx timeout [ 462.856882][ T5612] Bluetooth: hci4: command tx timeout [ 463.336981][ T5612] Bluetooth: hci6: command tx timeout [ 464.186912][ T5769] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 464.297365][ T5612] Bluetooth: hci7: command tx timeout [ 464.367688][ T5769] usb 3-1: Using ep0 maxpacket: 16 [ 464.371128][ T5769] usb 3-1: config 0 has an invalid interface number: 34 but max is 0 [ 464.371152][ T5769] usb 3-1: config 0 has no interface number 0 [ 464.371191][ T5769] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 464.371216][ T5769] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 464.373650][ T5769] usb 3-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 464.373675][ T5769] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 464.373693][ T5769] usb 3-1: Product: syz [ 464.373706][ T5769] usb 3-1: Manufacturer: syz [ 464.373720][ T5769] usb 3-1: SerialNumber: syz [ 464.938375][ T5612] Bluetooth: hci4: command tx timeout [ 464.970098][ T5769] usb 3-1: config 0 descriptor?? [ 464.971116][T11945] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 464.971396][T11945] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 465.229395][T11945] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 465.229546][T11945] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 465.418951][ T5612] Bluetooth: hci6: command tx timeout [ 465.467629][ T5769] asix 3-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 466.377309][ T5612] Bluetooth: hci7: command tx timeout [ 466.654749][T11957] fuse: Unknown parameter 'fd0xffffffffffffffff' [ 468.467088][ T5612] Bluetooth: hci7: command tx timeout [ 469.539830][ T5769] asix 3-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 469.540133][ T5769] asix 3-1:0.34: probe with driver asix failed with error -71 [ 469.680768][ T5769] usb 3-1: USB disconnect, device number 18 [ 470.573592][T11968] binder: BINDER_SET_CONTEXT_MGR already set [ 470.573608][T11968] binder: 11967:11968 ioctl 4018620d 200000000140 returned -16 [ 477.134748][T11895] bridge0: port 1(bridge_slave_0) entered blocking state [ 477.134881][T11895] bridge0: port 1(bridge_slave_0) entered disabled state [ 477.135109][T11895] bridge_slave_0: entered allmulticast mode [ 477.167214][T11895] bridge_slave_0: entered promiscuous mode [ 477.923563][T11895] bridge0: port 2(bridge_slave_1) entered blocking state [ 477.923697][T11895] bridge0: port 2(bridge_slave_1) entered disabled state [ 477.923955][T11895] bridge_slave_1: entered allmulticast mode [ 477.949900][T11895] bridge_slave_1: entered promiscuous mode [ 478.557149][T12005] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 478.557181][T12005] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 479.160522][T11895] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 479.412792][T11895] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 479.750938][T11898] bridge0: port 1(bridge_slave_0) entered blocking state [ 479.751069][T11898] bridge0: port 1(bridge_slave_0) entered disabled state [ 479.751333][T11898] bridge_slave_0: entered allmulticast mode [ 479.778398][T11898] bridge_slave_0: entered promiscuous mode [ 480.578519][T11845] syz_tun (unregistering): left allmulticast mode [ 480.578555][T11845] syz_tun (unregistering): left promiscuous mode [ 480.578673][T11845] bridge0: port 1(syz_tun) entered disabled state [ 482.625161][T11898] bridge0: port 2(bridge_slave_1) entered blocking state [ 482.625331][T11898] bridge0: port 2(bridge_slave_1) entered disabled state [ 482.625579][T11898] bridge_slave_1: entered allmulticast mode [ 482.658994][T11898] bridge_slave_1: entered promiscuous mode [ 483.385235][T11895] team0: Port device team_slave_0 added [ 483.654503][T11895] team0: Port device team_slave_1 added [ 483.827061][T11898] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 484.740774][T11898] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 486.916003][T11895] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 486.916023][T11895] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 486.916055][T11895] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 487.450324][T11895] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 487.450343][T11895] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 487.450373][T11895] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 487.969113][T11898] team0: Port device team_slave_0 added [ 488.500297][T11924] bridge0: port 1(bridge_slave_0) entered blocking state [ 488.500427][T11924] bridge0: port 1(bridge_slave_0) entered disabled state [ 488.500691][T11924] bridge_slave_0: entered allmulticast mode [ 489.553924][T11924] bridge_slave_0: entered promiscuous mode [ 490.535349][T11898] team0: Port device team_slave_1 added [ 492.037079][T11924] bridge0: port 2(bridge_slave_1) entered blocking state [ 492.037210][T11924] bridge0: port 2(bridge_slave_1) entered disabled state [ 492.037426][T11924] bridge_slave_1: entered allmulticast mode [ 492.084916][T11924] bridge_slave_1: entered promiscuous mode [ 493.279558][ T5609] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 493.408885][ T5609] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 493.414941][T11898] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 493.414960][T11898] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 493.414988][T11898] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 493.473170][ T5609] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 493.493128][ T5609] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 493.493959][ T5609] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 493.795145][T11898] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 493.795163][T11898] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 493.795191][T11898] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 493.889846][T11924] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 494.536956][ T5613] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 494.667229][T11895] hsr_slave_0: entered promiscuous mode [ 494.668781][T11895] hsr_slave_1: entered promiscuous mode [ 494.674763][T11924] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 494.699909][ T5613] usb 2-1: Using ep0 maxpacket: 32 [ 494.823634][ T5613] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 494.823661][ T5613] usb 2-1: config 0 has no interface number 0 [ 494.823704][ T5613] usb 2-1: config 0 interface 184 has no altsetting 0 [ 494.831456][ T5613] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 494.831546][ T5613] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 494.831607][ T5613] usb 2-1: Product: syz [ 494.831671][ T5613] usb 2-1: Manufacturer: syz [ 494.831713][ T5613] usb 2-1: SerialNumber: syz [ 495.087691][ T5613] usb 2-1: config 0 descriptor?? [ 495.666963][ T5609] Bluetooth: hci0: command tx timeout [ 496.100771][ T5613] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 496.100803][ T5613] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 496.693393][T11924] team0: Port device team_slave_0 added [ 496.975975][T11924] team0: Port device team_slave_1 added [ 497.030866][ T5613] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 497.030897][ T5613] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 497.030918][ T5613] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 497.031220][ T5613] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -32 [ 497.031422][T11898] hsr_slave_0: entered promiscuous mode [ 497.032949][T11898] hsr_slave_1: entered promiscuous mode [ 497.034048][T11898] debugfs: 'hsr0' already exists in 'hsr' [ 497.034073][T11898] Cannot create hsr debugfs directory [ 497.508331][T11924] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 497.508350][T11924] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 497.508381][T11924] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 497.746914][ T5609] Bluetooth: hci0: command tx timeout [ 497.834068][T11924] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 497.834087][T11924] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 497.834118][T11924] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 498.667108][ T5769] usb 2-1: USB disconnect, device number 12 [ 499.833256][ T5609] Bluetooth: hci0: command tx timeout [ 501.114675][T11924] hsr_slave_0: entered promiscuous mode [ 501.118092][T11924] hsr_slave_1: entered promiscuous mode [ 501.128608][T11924] debugfs: 'hsr0' already exists in 'hsr' [ 501.128636][T11924] Cannot create hsr debugfs directory [ 501.431517][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.896894][ T5609] Bluetooth: hci0: command tx timeout [ 503.105463][T11989] bridge0: port 3(syz_tun) entered disabled state [ 503.475865][T11989] syz_tun (unregistering): left allmulticast mode [ 503.475897][T11989] syz_tun (unregistering): left promiscuous mode [ 503.553589][T11989] bridge0: port 3(syz_tun) entered disabled state [ 506.102610][ T5331] syz1: Port: 1 Link DOWN [ 507.635020][T11105] smbdirect: ib_dev[syz1] removed [ 516.472028][ T5614] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 516.581399][ T5612] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 516.582907][ T5612] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 516.586388][ T5612] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 516.596873][ T5612] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 516.693102][ T5614] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 516.730827][ T5614] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 516.736353][ T5614] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 517.071464][ T5614] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 517.072623][ T5614] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 519.850495][ T5606] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 519.960836][ T5606] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 520.027952][ T5606] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 520.036325][ T5606] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 520.092588][ T5606] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 520.218963][ T5606] Bluetooth: hci2: command tx timeout [ 520.376970][ T5612] Bluetooth: hci3: command tx timeout [ 522.296971][ T5614] Bluetooth: hci2: command tx timeout [ 522.297106][ T5612] Bluetooth: hci5: command tx timeout [ 522.456872][ T5612] Bluetooth: hci3: command tx timeout [ 522.806997][ T5613] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 523.045763][T12035] bridge0: port 1(bridge_slave_0) entered blocking state [ 523.060616][T12035] bridge0: port 1(bridge_slave_0) entered disabled state [ 523.060899][T12035] bridge_slave_0: entered allmulticast mode [ 523.093910][T12035] bridge_slave_0: entered promiscuous mode [ 523.126912][ T5613] usb 2-1: Using ep0 maxpacket: 16 [ 523.130188][ T5613] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 523.133711][ T5613] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 523.133742][ T5613] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 523.133762][ T5613] usb 2-1: Product: syz [ 523.133777][ T5613] usb 2-1: Manufacturer: syz [ 523.133793][ T5613] usb 2-1: SerialNumber: syz [ 523.203447][ T5613] usb 2-1: config 0 descriptor?? [ 523.236441][T12035] bridge0: port 2(bridge_slave_1) entered blocking state [ 523.236573][T12035] bridge0: port 2(bridge_slave_1) entered disabled state [ 523.242374][T12035] bridge_slave_1: entered allmulticast mode [ 523.287173][T12035] bridge_slave_1: entered promiscuous mode [ 524.415872][ T5612] Bluetooth: hci5: command tx timeout [ 524.415911][ T5612] Bluetooth: hci2: command tx timeout [ 524.536868][ T5614] Bluetooth: hci3: command tx timeout [ 525.544214][ T822] usb 2-1: USB disconnect, device number 13 [ 526.456898][ T5614] Bluetooth: hci2: command tx timeout [ 526.456934][ T5614] Bluetooth: hci5: command tx timeout [ 526.616907][ T5612] Bluetooth: hci3: command tx timeout [ 528.538648][ T5612] Bluetooth: hci5: command tx timeout [ 529.294439][T12035] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 533.438601][T11083] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 534.154393][T12035] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 535.829633][T12035] team0: Port device team_slave_0 added [ 536.154569][T12035] team0: Port device team_slave_1 added [ 537.408046][T12035] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 537.408064][T12035] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 537.408093][T12035] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 537.479418][T12035] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 537.479431][T12035] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 537.479452][T12035] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 538.493673][T12035] hsr_slave_0: entered promiscuous mode [ 538.495196][T12035] hsr_slave_1: entered promiscuous mode [ 538.501523][T12035] debugfs: 'hsr0' already exists in 'hsr' [ 538.501602][T12035] Cannot create hsr debugfs directory [ 543.599410][ T5614] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 543.685808][ T5614] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 543.702739][ T5614] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 543.710786][ T5614] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 543.764323][ T5614] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 544.584213][T12104] bridge0: port 1(bridge_slave_0) entered blocking state [ 544.584311][T12104] bridge0: port 1(bridge_slave_0) entered disabled state [ 544.584529][T12104] bridge_slave_0: entered allmulticast mode [ 544.616168][T12104] bridge_slave_0: entered promiscuous mode [ 544.987201][T12104] bridge0: port 2(bridge_slave_1) entered blocking state [ 544.987334][T12104] bridge0: port 2(bridge_slave_1) entered disabled state [ 544.987615][T12104] bridge_slave_1: entered allmulticast mode [ 544.995316][T12104] bridge_slave_1: entered promiscuous mode [ 546.217288][ T5612] Bluetooth: hci4: command tx timeout [ 546.237290][T12104] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 547.081572][T12103] bridge0: port 1(bridge_slave_0) entered blocking state [ 547.081677][T12103] bridge0: port 1(bridge_slave_0) entered disabled state [ 547.081950][T12103] bridge_slave_0: entered allmulticast mode [ 547.121869][T12103] bridge_slave_0: entered promiscuous mode [ 547.589911][T12104] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 547.723273][T12103] bridge0: port 2(bridge_slave_1) entered blocking state [ 547.723412][T12103] bridge0: port 2(bridge_slave_1) entered disabled state [ 547.723719][T12103] bridge_slave_1: entered allmulticast mode [ 547.759113][T12103] bridge_slave_1: entered promiscuous mode [ 548.317048][ T5612] Bluetooth: hci4: command tx timeout [ 548.696224][T12125] bridge0: port 1(bridge_slave_0) entered blocking state [ 548.696357][T12125] bridge0: port 1(bridge_slave_0) entered disabled state [ 548.696565][T12125] bridge_slave_0: entered allmulticast mode [ 548.709179][T12125] bridge_slave_0: entered promiscuous mode [ 548.999684][T12104] team0: Port device team_slave_0 added [ 548.999936][T12125] bridge0: port 2(bridge_slave_1) entered blocking state [ 549.000056][T12125] bridge0: port 2(bridge_slave_1) entered disabled state [ 549.000268][T12125] bridge_slave_1: entered allmulticast mode [ 549.011635][T12125] bridge_slave_1: entered promiscuous mode [ 549.132259][T12103] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 549.773649][T12104] team0: Port device team_slave_1 added [ 549.847817][T12103] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 550.415609][ T5612] Bluetooth: hci4: command tx timeout [ 550.826558][T12125] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 550.948942][T12104] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 550.948962][T12104] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 550.948998][T12104] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 551.069741][T12125] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 551.070734][T12104] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 551.070749][T12104] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 551.070779][T12104] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 551.075158][T12103] team0: Port device team_slave_0 added [ 551.236420][T12035] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 551.685712][T12035] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 551.952516][T12103] team0: Port device team_slave_1 added [ 552.250203][T12035] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 552.457013][ T5612] Bluetooth: hci4: command tx timeout [ 552.725448][T12035] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 553.484982][ T5614] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 553.554802][ T5614] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 553.638430][ T5614] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 553.677067][ T5614] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 553.677874][ T5614] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 553.767951][T12125] team0: Port device team_slave_0 added [ 554.573720][T12125] team0: Port device team_slave_1 added [ 554.575275][T12103] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 554.575292][T12103] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 554.575321][T12103] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 555.009608][T12103] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 555.009626][T12103] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 555.009656][T12103] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 555.514929][T12104] hsr_slave_0: entered promiscuous mode [ 555.534325][T12104] hsr_slave_1: entered promiscuous mode [ 555.546836][T12104] debugfs: 'hsr0' already exists in 'hsr' [ 555.546865][T12104] Cannot create hsr debugfs directory [ 555.896959][ T5614] Bluetooth: hci6: command tx timeout [ 556.166267][T12125] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 556.166284][T12125] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 556.166308][T12125] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 556.310386][T12125] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 556.310404][T12125] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 556.310435][T12125] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 556.880919][T12103] hsr_slave_0: entered promiscuous mode [ 556.898923][T12103] hsr_slave_1: entered promiscuous mode [ 556.904606][T12103] debugfs: 'hsr0' already exists in 'hsr' [ 556.904636][T12103] Cannot create hsr debugfs directory [ 557.983716][ T5614] Bluetooth: hci6: command tx timeout [ 559.622582][T12125] hsr_slave_0: entered promiscuous mode [ 559.637684][T12125] hsr_slave_1: entered promiscuous mode [ 559.643467][T12125] debugfs: 'hsr0' already exists in 'hsr' [ 559.643497][T12125] Cannot create hsr debugfs directory [ 560.057085][ T5614] Bluetooth: hci6: command tx timeout [ 562.154439][ T5614] Bluetooth: hci6: command tx timeout [ 562.875829][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 566.022820][T11083] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 574.562170][T12104] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 575.516233][T12104] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 575.974841][T12184] bridge0: port 1(bridge_slave_0) entered blocking state [ 575.975002][T12184] bridge0: port 1(bridge_slave_0) entered disabled state [ 575.975295][T12184] bridge_slave_0: entered allmulticast mode [ 576.008733][T12184] bridge_slave_0: entered promiscuous mode [ 576.264882][ T5612] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 576.355392][ T5612] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 576.366484][ T5612] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 576.437253][ T5612] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 576.442586][ T5612] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 576.883888][T12184] bridge0: port 2(bridge_slave_1) entered blocking state [ 576.884024][T12184] bridge0: port 2(bridge_slave_1) entered disabled state [ 576.884300][T12184] bridge_slave_1: entered allmulticast mode [ 576.928436][T12184] bridge_slave_1: entered promiscuous mode [ 577.212961][ T5612] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 577.254739][ T5612] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 577.256385][ T5612] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 577.298506][ T5612] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 577.320182][ T5612] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 578.323676][ T5612] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 578.356567][ T5612] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 578.373754][ T5612] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 578.406007][ T5612] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 578.436300][ T5612] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 578.879329][ T5612] Bluetooth: hci0: command tx timeout [ 579.657116][ T5614] Bluetooth: hci1: command tx timeout [ 580.936938][ T5614] Bluetooth: hci0: command tx timeout [ 581.042065][ T5614] Bluetooth: hci7: command tx timeout [ 581.107394][T12184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 581.143736][T12184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 581.746106][ T5614] Bluetooth: hci1: command tx timeout [ 583.016905][ T5614] Bluetooth: hci0: command tx timeout [ 583.105639][ T5614] Bluetooth: hci7: command tx timeout [ 583.435339][T12184] team0: Port device team_slave_0 added [ 583.495277][T12184] team0: Port device team_slave_1 added [ 583.837929][ T5614] Bluetooth: hci1: command tx timeout [ 585.096952][ T5614] Bluetooth: hci0: command tx timeout [ 585.176896][ T5614] Bluetooth: hci7: command tx timeout [ 585.255464][T12184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 585.255483][T12184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 585.255514][T12184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 585.899945][ T5614] Bluetooth: hci1: command tx timeout [ 586.129090][T12184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 586.129108][T12184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 586.129139][T12184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 587.256928][ T5614] Bluetooth: hci7: command tx timeout [ 587.287447][T12204] bridge0: port 1(bridge_slave_0) entered blocking state [ 587.289220][T12204] bridge0: port 1(bridge_slave_0) entered disabled state [ 587.289501][T12204] bridge_slave_0: entered allmulticast mode [ 587.321083][T12204] bridge_slave_0: entered promiscuous mode [ 587.795601][T12204] bridge0: port 2(bridge_slave_1) entered blocking state [ 587.795735][T12204] bridge0: port 2(bridge_slave_1) entered disabled state [ 587.795964][T12204] bridge_slave_1: entered allmulticast mode [ 587.988874][T12204] bridge_slave_1: entered promiscuous mode [ 588.703113][T12184] hsr_slave_0: entered promiscuous mode [ 588.731743][T12184] hsr_slave_1: entered promiscuous mode [ 588.732531][T12184] debugfs: 'hsr0' already exists in 'hsr' [ 588.732550][T12184] Cannot create hsr debugfs directory [ 590.294919][T12204] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 590.461030][T12204] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 592.150603][T12204] team0: Port device team_slave_0 added [ 592.237684][T12204] team0: Port device team_slave_1 added [ 593.380738][T12204] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 593.380776][T12204] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 593.380813][T12204] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 593.801095][T12204] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 593.801115][T12204] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 593.801144][T12204] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 597.240323][T12204] hsr_slave_0: entered promiscuous mode [ 597.251571][T12204] hsr_slave_1: entered promiscuous mode [ 597.259267][T12204] debugfs: 'hsr0' already exists in 'hsr' [ 597.259296][T12204] Cannot create hsr debugfs directory [ 602.663127][T12232] bridge0: port 1(bridge_slave_0) entered blocking state [ 602.663259][T12232] bridge0: port 1(bridge_slave_0) entered disabled state [ 602.663608][T12232] bridge_slave_0: entered allmulticast mode [ 602.694820][T12232] bridge_slave_0: entered promiscuous mode [ 602.901388][T12244] bridge0: port 1(bridge_slave_0) entered blocking state [ 602.901566][T12244] bridge0: port 1(bridge_slave_0) entered disabled state [ 602.901901][T12244] bridge_slave_0: entered allmulticast mode [ 602.948282][T12244] bridge_slave_0: entered promiscuous mode [ 603.170336][T12232] bridge0: port 2(bridge_slave_1) entered blocking state [ 603.170501][T12232] bridge0: port 2(bridge_slave_1) entered disabled state [ 603.170741][T12232] bridge_slave_1: entered allmulticast mode [ 603.295528][T12232] bridge_slave_1: entered promiscuous mode [ 603.407125][T12244] bridge0: port 2(bridge_slave_1) entered blocking state [ 603.407253][T12244] bridge0: port 2(bridge_slave_1) entered disabled state [ 603.407502][T12244] bridge_slave_1: entered allmulticast mode [ 603.413893][T12244] bridge_slave_1: entered promiscuous mode [ 603.471983][T12233] bridge0: port 1(bridge_slave_0) entered blocking state [ 603.472114][T12233] bridge0: port 1(bridge_slave_0) entered disabled state [ 603.472410][T12233] bridge_slave_0: entered allmulticast mode [ 603.716071][T12233] bridge_slave_0: entered promiscuous mode [ 604.573019][ T5612] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 604.777599][ T5612] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 604.931170][ T5612] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 604.955892][ T5612] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 604.964318][ T5612] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 606.294821][T11083] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 606.926635][T12233] bridge0: port 2(bridge_slave_1) entered blocking state [ 606.943699][T12233] bridge0: port 2(bridge_slave_1) entered disabled state [ 606.944038][T12233] bridge_slave_1: entered allmulticast mode [ 606.975382][T12233] bridge_slave_1: entered promiscuous mode [ 607.182460][ T5612] Bluetooth: hci3: command tx timeout [ 607.406360][T12232] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 607.452207][T12244] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 607.616167][T12232] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 607.638286][T12244] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 607.682146][T12233] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 607.978353][T12233] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 609.257231][ T5612] Bluetooth: hci3: command tx timeout [ 609.331597][T12232] team0: Port device team_slave_0 added [ 609.344690][T12244] team0: Port device team_slave_0 added [ 609.431368][T12232] team0: Port device team_slave_1 added [ 609.446975][T12244] team0: Port device team_slave_1 added [ 609.461742][T12233] team0: Port device team_slave_0 added [ 609.935858][T12233] team0: Port device team_slave_1 added [ 610.771622][T12232] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 610.771641][T12232] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 610.771675][T12232] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 610.938614][T12244] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 610.938633][T12244] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 610.938662][T12244] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 611.262234][T12232] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 611.262254][T12232] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 611.262284][T12232] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 611.272622][T12244] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 611.272640][T12244] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 611.272669][T12244] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 611.387269][ T5612] Bluetooth: hci3: command tx timeout [ 611.771945][T12233] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 611.771966][T12233] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 611.771995][T12233] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 612.142969][T12233] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 612.142987][T12233] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 612.143015][T12233] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 613.418305][ T5612] Bluetooth: hci3: command tx timeout [ 613.523237][T12232] hsr_slave_0: entered promiscuous mode [ 613.526557][T12232] hsr_slave_1: entered promiscuous mode [ 613.542567][T12232] debugfs: 'hsr0' already exists in 'hsr' [ 613.542596][T12232] Cannot create hsr debugfs directory [ 613.660454][T12244] hsr_slave_0: entered promiscuous mode [ 613.679417][T12244] hsr_slave_1: entered promiscuous mode [ 613.680612][T12244] debugfs: 'hsr0' already exists in 'hsr' [ 613.680637][T12244] Cannot create hsr debugfs directory [ 615.042762][ T5612] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 615.125736][ T5612] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 615.132553][ T5612] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 615.147415][ T5612] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 615.150909][ T5612] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 615.462528][T12233] hsr_slave_0: entered promiscuous mode [ 615.484367][T12233] hsr_slave_1: entered promiscuous mode [ 615.578065][T12233] debugfs: 'hsr0' already exists in 'hsr' [ 615.578096][T12233] Cannot create hsr debugfs directory [ 617.336956][ T5614] Bluetooth: hci8: command tx timeout [ 619.416997][ T5614] Bluetooth: hci8: command tx timeout [ 621.511309][ T5614] Bluetooth: hci8: command tx timeout [ 623.581533][ T5614] Bluetooth: hci8: command tx timeout [ 624.322401][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.619243][T12296] bridge0: port 1(bridge_slave_0) entered blocking state [ 625.619495][T12296] bridge0: port 1(bridge_slave_0) entered disabled state [ 625.624053][T12296] bridge_slave_0: entered allmulticast mode [ 625.648628][T12296] bridge_slave_0: entered promiscuous mode [ 625.823742][T12296] bridge0: port 2(bridge_slave_1) entered blocking state [ 625.823874][T12296] bridge0: port 2(bridge_slave_1) entered disabled state [ 625.824221][T12296] bridge_slave_1: entered allmulticast mode [ 625.837397][T12296] bridge_slave_1: entered promiscuous mode [ 626.289348][T12296] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 626.498305][T12296] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 627.303573][T12296] team0: Port device team_slave_0 added [ 627.362637][T12296] team0: Port device team_slave_1 added [ 627.580633][T12296] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 627.580652][T12296] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 627.580682][T12296] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 627.643742][T12296] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 627.643761][T12296] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 627.643792][T12296] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 629.549293][T12296] hsr_slave_0: entered promiscuous mode [ 629.550956][T12296] hsr_slave_1: entered promiscuous mode [ 629.552075][T12296] debugfs: 'hsr0' already exists in 'hsr' [ 629.552100][T12296] Cannot create hsr debugfs directory [ 630.585858][T12309] bridge0: port 1(bridge_slave_0) entered blocking state [ 630.585990][T12309] bridge0: port 1(bridge_slave_0) entered disabled state [ 630.586247][T12309] bridge_slave_0: entered allmulticast mode [ 630.610851][T12309] bridge_slave_0: entered promiscuous mode [ 630.714972][T12309] bridge0: port 2(bridge_slave_1) entered blocking state [ 630.715149][T12309] bridge0: port 2(bridge_slave_1) entered disabled state [ 630.715489][T12309] bridge_slave_1: entered allmulticast mode [ 630.756093][T12309] bridge_slave_1: entered promiscuous mode [ 631.215318][T12309] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 631.368922][T12309] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 631.988595][T12309] team0: Port device team_slave_0 added [ 632.157926][T12309] team0: Port device team_slave_1 added [ 632.756249][T12309] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 632.756268][T12309] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 632.756299][T12309] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 632.770760][T12309] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 632.770807][T12309] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 632.770890][T12309] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 633.851525][T12309] hsr_slave_0: entered promiscuous mode [ 633.854948][T12309] hsr_slave_1: entered promiscuous mode [ 633.885404][T12309] debugfs: 'hsr0' already exists in 'hsr' [ 633.885435][T12309] Cannot create hsr debugfs directory [ 635.372395][ T5612] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 635.519288][ T5612] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 635.527284][ T5612] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 635.528964][ T5612] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 635.534605][ T5612] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 637.036408][ T5612] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 637.103349][ T5612] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 637.109286][ T5612] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 637.132530][T11083] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 637.134385][ T5612] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 637.160572][ T5612] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 637.657467][ T5614] Bluetooth: hci9: command tx timeout [ 638.383058][ T5612] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 638.422534][ T5612] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 638.457489][ T5612] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 638.485516][ T5612] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 638.490539][ T5612] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 639.582237][ T5614] Bluetooth: hci10: command tx timeout [ 639.755155][ T5614] Bluetooth: hci9: command tx timeout [ 640.856946][ T5606] Bluetooth: hci11: command tx timeout [ 641.656828][ T5606] Bluetooth: hci10: command tx timeout [ 641.941292][ T5606] Bluetooth: hci2: command 0x0406 tx timeout [ 641.941331][ T5612] Bluetooth: hci9: command tx timeout [ 642.953056][ T5614] Bluetooth: hci11: command tx timeout [ 643.738381][ T5614] Bluetooth: hci10: command tx timeout [ 643.977061][ T5614] Bluetooth: hci9: command tx timeout [ 645.016909][ T5612] Bluetooth: hci11: command tx timeout [ 645.817006][ T5612] Bluetooth: hci10: command tx timeout [ 646.856952][ T5612] Bluetooth: hci5: command 0x0406 tx timeout [ 647.206872][ T5612] Bluetooth: hci11: command tx timeout [ 651.463394][T12337] bridge0: port 1(bridge_slave_0) entered blocking state [ 651.463504][T12337] bridge0: port 1(bridge_slave_0) entered disabled state [ 651.463790][T12337] bridge_slave_0: entered allmulticast mode [ 651.465975][T12337] bridge_slave_0: entered promiscuous mode [ 651.811375][T12337] bridge0: port 2(bridge_slave_1) entered blocking state [ 651.811581][T12337] bridge0: port 2(bridge_slave_1) entered disabled state [ 651.811916][T12337] bridge_slave_1: entered allmulticast mode [ 651.875731][T12337] bridge_slave_1: entered promiscuous mode [ 652.701748][T12337] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 652.882062][T12337] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 652.882312][T12344] bridge0: port 1(bridge_slave_0) entered blocking state [ 652.882437][T12344] bridge0: port 1(bridge_slave_0) entered disabled state [ 652.882753][T12344] bridge_slave_0: entered allmulticast mode [ 652.945725][T12344] bridge_slave_0: entered promiscuous mode [ 653.397115][T12344] bridge0: port 2(bridge_slave_1) entered blocking state [ 653.397297][T12344] bridge0: port 2(bridge_slave_1) entered disabled state [ 653.397605][T12344] bridge_slave_1: entered allmulticast mode [ 653.404629][T12344] bridge_slave_1: entered promiscuous mode [ 654.412408][T12350] bridge0: port 1(bridge_slave_0) entered blocking state [ 654.412642][T12350] bridge0: port 1(bridge_slave_0) entered disabled state [ 654.412952][T12350] bridge_slave_0: entered allmulticast mode [ 654.450076][T12350] bridge_slave_0: entered promiscuous mode [ 654.484597][T12337] team0: Port device team_slave_0 added [ 655.054755][T12350] bridge0: port 2(bridge_slave_1) entered blocking state [ 655.054909][T12350] bridge0: port 2(bridge_slave_1) entered disabled state [ 655.055277][T12350] bridge_slave_1: entered allmulticast mode [ 655.094295][T12350] bridge_slave_1: entered promiscuous mode [ 655.123518][T12337] team0: Port device team_slave_1 added [ 655.169208][T12344] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 655.554045][T12344] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 656.241614][T12350] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 656.243929][T12337] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 656.243947][T12337] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 656.243974][T12337] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 656.465290][T12350] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 656.483391][T12337] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 656.483410][T12337] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 656.483440][T12337] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 656.505556][T12344] team0: Port device team_slave_0 added [ 657.808345][T12344] team0: Port device team_slave_1 added [ 659.518122][T12350] team0: Port device team_slave_0 added [ 659.911516][T12350] team0: Port device team_slave_1 added [ 660.789716][T12344] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 660.789735][T12344] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 660.789765][T12344] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 661.234096][T12344] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 661.234113][T12344] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 661.234136][T12344] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 661.400124][T12337] hsr_slave_0: entered promiscuous mode [ 661.405389][T12337] hsr_slave_1: entered promiscuous mode [ 661.433366][T12337] debugfs: 'hsr0' already exists in 'hsr' [ 661.433396][T12337] Cannot create hsr debugfs directory [ 661.444867][T12350] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 661.444920][T12350] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 661.444994][T12350] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 661.715839][T12350] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 661.715860][T12350] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 661.715889][T12350] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 666.643090][T12344] hsr_slave_0: entered promiscuous mode [ 666.655989][T12344] hsr_slave_1: entered promiscuous mode [ 666.667437][T12344] debugfs: 'hsr0' already exists in 'hsr' [ 666.667472][T12344] Cannot create hsr debugfs directory [ 666.868375][ T5606] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 666.886033][ T5606] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 666.958259][ T5606] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 666.976455][ T5606] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 666.993068][ T5606] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 667.417471][ T5612] Bluetooth: hci4: command 0x0406 tx timeout [ 667.825197][T11083] bridge_slave_1: left allmulticast mode [ 667.825245][T11083] bridge_slave_1: left promiscuous mode [ 667.872125][T11083] bridge0: port 2(bridge_slave_1) entered disabled state [ 668.664364][T11083] bridge_slave_0: left allmulticast mode [ 668.664404][T11083] bridge_slave_0: left promiscuous mode [ 668.686218][T11083] bridge0: port 1(bridge_slave_0) entered disabled state [ 669.177306][ T5614] Bluetooth: hci12: command tx timeout [ 671.257923][ T5614] Bluetooth: hci12: command tx timeout [ 673.337297][ T5614] Bluetooth: hci12: command tx timeout [ 675.417511][ T5614] Bluetooth: hci12: command tx timeout [ 675.635843][ T5606] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 675.698267][ T5606] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 675.768908][ T5606] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 675.770165][ T5606] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 675.785471][ T5606] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 677.580448][ T5606] Bluetooth: hci6: command 0x0406 tx timeout [ 677.979739][ T5606] Bluetooth: hci13: command tx timeout [ 680.059336][ T5614] Bluetooth: hci13: command tx timeout [ 682.137722][ T5614] Bluetooth: hci13: command tx timeout [ 683.933024][T11083] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 684.216853][ T5614] Bluetooth: hci13: command tx timeout [ 684.662335][T11083] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 684.784389][T11083] bond0 (unregistering): Released all slaves [ 684.854118][T11083] bond1 (unregistering): Released all slaves [ 685.040264][T11083] bond2 (unregistering): (slave lo): Releasing active interface [ 685.086211][T11083] bond2 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 685.746559][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.957606][T11083] bond2 (unregistering): Released all slaves [ 686.701869][T12350] hsr_slave_0: entered promiscuous mode [ 686.718624][T12350] hsr_slave_1: entered promiscuous mode [ 686.739454][T12350] debugfs: 'hsr0' already exists in 'hsr' [ 686.739483][T12350] Cannot create hsr debugfs directory [ 698.056523][ T5606] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 698.113794][ T5606] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 698.124446][ T5606] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 698.168210][ T5606] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 698.172165][ T5606] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 700.615139][ T5614] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 700.632410][ T5612] Bluetooth: hci14: command tx timeout [ 700.693235][ T5614] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 700.730681][ T5614] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 700.772363][ T5614] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 700.780291][ T5614] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 702.696900][T12453] Bluetooth: hci14: command tx timeout [ 702.942405][T12453] Bluetooth: hci15: command tx timeout [ 703.180935][T12453] Bluetooth: hci1: command 0x0406 tx timeout [ 703.181115][T12453] Bluetooth: hci0: command 0x0406 tx timeout [ 703.181249][T12453] Bluetooth: hci7: command 0x0406 tx timeout [ 704.283215][T12453] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 704.344694][T12453] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 704.347449][T12453] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 704.350454][T12453] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 704.354386][T12453] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 704.780153][T12453] Bluetooth: hci14: command tx timeout [ 705.021733][T12453] Bluetooth: hci15: command tx timeout [ 706.666584][ T5257] 8021q: adding VLAN 0 to HW filter on device eth5 [ 706.866896][ T5612] Bluetooth: hci14: command tx timeout [ 707.096977][ T5612] Bluetooth: hci15: command tx timeout [ 708.306824][ T5612] Bluetooth: hci9: command tx timeout [ 709.176776][ T5609] Bluetooth: hci15: command tx timeout [ 710.376832][ T5609] Bluetooth: hci9: command tx timeout [ 712.456900][ T5609] Bluetooth: hci9: command tx timeout [ 714.576589][ T5609] Bluetooth: hci9: command tx timeout [ 724.076504][ T5257] 8021q: adding VLAN 0 to HW filter on device eth6 [ 724.896654][ T37] INFO: task syz-executor:12125 blocked for more than 143 seconds. [ 724.975302][ T37] Tainted: G L syzkaller #0 [ 724.975322][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 724.975333][ T37] task:syz-executor state:D stack:18704 pid:12125 tgid:12125 ppid:1 task_flags:0x400140 flags:0x00080002 [ 724.975406][ T37] Call Trace: [ 724.975434][ T37] [ 724.975536][ T37] __schedule+0x16dc/0x5500 [ 724.975741][ T37] ? rt_mutex_adjust_prio_chain+0x347/0x2140 [ 724.975818][ T37] ? lockdep_hardirqs_on+0x7a/0x110 [ 724.975858][ T37] ? __pfx___schedule+0x10/0x10 [ 724.975903][ T37] rt_mutex_schedule+0x76/0xf0 [ 724.976017][ T37] rt_mutex_slowlock_block+0x55c/0x680 [ 724.976058][ T37] rt_mutex_slowlock+0x2d4/0x780 [ 724.976086][ T37] ? rt_mutex_slowlock+0x1f2/0x780 [ 724.976111][ T37] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 724.976149][ T37] ? del_device_store+0xd6/0x370 [ 724.976251][ T37] ? del_device_store+0xd6/0x370 [ 724.976289][ T37] ? del_device_store+0xd6/0x370 [ 724.976318][ T37] mutex_lock_nested+0x168/0x1d0 [ 724.976340][ T37] ? sysfs_file_kobj+0x1a/0x230 [ 724.976450][ T37] del_device_store+0xd6/0x370 [ 724.976480][ T37] ? sysfs_file_kobj+0x1a/0x230 [ 724.976510][ T37] ? __pfx_del_device_store+0x10/0x10 [ 724.976542][ T37] ? sysfs_file_kobj+0x1e4/0x230 [ 724.976576][ T37] ? sysfs_kf_write+0x166/0x260 [ 724.976614][ T37] ? __pfx_sysfs_kf_write+0x10/0x10 [ 724.976645][ T37] kernfs_fop_write_iter+0x3a5/0x540 [ 725.366892][ T37] vfs_write+0x61e/0xbb0 [ 725.367065][ T37] ? __pfx_vfs_write+0x10/0x10 [ 725.367096][ T37] ? do_sys_openat2+0x14e/0x200 [ 725.367129][ T37] ? kmem_cache_free+0x187/0x6c0 [ 725.367220][ T37] ksys_write+0x156/0x270 [ 725.367251][ T37] ? __pfx_ksys_write+0x10/0x10 [ 725.367287][ T37] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 725.367340][ T37] do_syscall_64+0x174/0x580 [ 725.367404][ T37] ? clear_bhb_loop+0x40/0x90 [ 725.367433][ T37] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 725.367464][ T37] RIP: 0033:0x7fb49c8ae68e [ 725.367520][ T37] RSP: 002b:00007ffdc9756fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 725.367570][ T37] RAX: ffffffffffffffda RBX: 0000555587e3d500 RCX: 00007fb49c8ae68e [ 725.367586][ T37] RDX: 0000000000000001 RSI: 00007ffdc9757070 RDI: 0000000000000005 [ 725.367599][ T37] RBP: 00007fb49c9846f2 R08: 0000000000000000 R09: 0000000000000000 [ 725.367612][ T37] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 725.367625][ T37] R13: 00007ffdc9757070 R14: 00007fb49d6a4620 R15: 0000000000000003 [ 725.367667][ T37] [ 725.367734][ T37] [ 725.367734][ T37] Showing all locks held in the system: [ 725.367750][ T37] 4 locks held by ktimers/0/16: [ 725.367794][ T37] 4 locks held by rcuc/0/20: [ 725.367808][ T37] 4 locks held by rcuc/1/28: [ 725.367821][ T37] 1 lock held by khungtaskd/37: [ 725.367833][ T37] #0: ffffffff8e1c2fc0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 725.367923][ T37] 3 locks held by kworker/0:2/202: [ 725.367936][ T37] #0: ffff88813ff1b938 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 725.368036][ T37] #1: ffffc90003bc7c40 (netdev_work){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 725.368092][ T37] #2: ffffffff8f5b0338 (rtnl_mutex){+.+.}-{4:4}, at: netdev_work_proc+0x72/0x7f0 [ 725.368252][ T37] 6 locks held by kworker/u8:14/3356: [ 725.368268][ T37] 2 locks held by dhcpcd/5257: [ 725.368280][ T37] #0: ffff88803c610928 (nlk_cb_mutex-ROUTE){+.+.}-{4:4}, at: __netlink_dump_start+0xf4/0x7b0 [ 725.372663][ T37] #1: ffffffff8f5b0338 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_dump_ifinfo+0xa74/0x14b0 [ 725.372844][ T37] 2 locks held by getty/5351: [ 725.372858][ T37] #0: ffff88803702b0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 725.372975][ T37] #1: ffffc90003cbe2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x460/0x1360 [ 725.373068][ T37] 2 locks held by kworker/0:6/5768: [ 725.373086][ T37] 3 locks held by kworker/u8:15/11082: [ 725.373099][ T37] #0: ffff888032b21938 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 725.373158][ T37] #1: ffffc9000755fc40 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 725.373215][ T37] #2: ffffffff8f5b0338 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x123/0x16e0 [ 725.373341][ T37] 3 locks held by kworker/u8:16/11083: [ 725.373354][ T37] #0: ffff88801aea0938 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 725.373410][ T37] #1: ffffc90006c07c40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 725.373466][ T37] #2: ffffffff8f5a17a0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf5/0x810 [ 725.373556][ T37] 4 locks held by kworker/u8:59/11270: [ 725.373572][ T37] 7 locks held by syz-executor/12103: [ 725.373584][ T37] #0: ffff8880371ac500 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 725.373653][ T37] #1: ffff88804d0efc78 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540 [ 725.373711][ T37] #2: ffff888029acca58 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540 [ 725.373781][ T37] #3: ffffffff8ee25d98 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 725.373844][ T37] #4: ffff888064325160 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb9/0x880 [ 725.373979][ T37] #5: ffff888065ba2310 (&devlink->lock_key#7){+.+.}-{4:4}, at: nsim_drv_remove+0x50/0x160 [ 725.374076][ T37] #6: ffffffff8e1c9170 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 725.374169][ T37] 4 locks held by syz-executor/12125: [ 725.374182][ T37] #0: ffff8880371ac500 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 725.374241][ T37] #1: ffff88807ac42c78 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540 [ 725.374299][ T37] #2: ffff888029acca58 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540 [ 725.374361][ T37] #3: ffffffff8ee25d98 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 725.374423][ T37] 4 locks held by syz-executor/12184: [ 725.374435][ T37] #0: ffff8880371ac500 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 725.374492][ T37] #1: ffff88804d086478 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540 [ 725.374548][ T37] #2: ffff888029acca58 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540 [ 725.374611][ T37] #3: ffffffff8ee25d98 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 725.374672][ T37] 4 locks held by syz-executor/12204: [ 725.374685][ T37] #0: ffff8880371ac500 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 725.374750][ T37] #1: ffff8880417f9878 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540 [ 725.374808][ T37] #2: ffff888029acca58 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540 [ 725.374872][ T37] #3: ffffffff8ee25d98 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 725.374933][ T37] 4 locks held by syz-executor/12232: [ 725.374946][ T37] #0: ffff8880371ac500 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 725.375004][ T37] #1: ffff888085905c78 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540 [ 725.375061][ T37] #2: ffff888029acca58 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540 [ 725.375123][ T37] #3: ffffffff8ee25d98 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 725.375184][ T37] 4 locks held by syz-executor/12233: [ 725.375196][ T37] #0: ffff8880371ac500 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 725.375255][ T37] #1: ffff8880823efc78 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540 [ 725.375312][ T37] #2: ffff888029acca58 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540 [ 725.375373][ T37] #3: ffffffff8ee25d98 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 725.375433][ T37] 4 locks held by syz-executor/12244: [ 725.375445][ T37] #0: ffff8880371ac500 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 725.375502][ T37] #1: ffff88807add9478 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540 [ 725.375560][ T37] #2: ffff888029acca58 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540 [ 725.375622][ T37] #3: ffffffff8ee25d98 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 725.375685][ T37] 4 locks held by syz-executor/12296: [ 725.375698][ T37] #0: ffff8880371ac500 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 725.375782][ T37] #1: ffff888034d02078 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540 [ 725.375840][ T37] #2: ffff888029acca58 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540 [ 725.375902][ T37] #3: ffffffff8ee25d98 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 725.375964][ T37] 4 locks held by syz-executor/12309: [ 725.375976][ T37] #0: ffff8880371ac500 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 725.376033][ T37] #1: ffff888063dfd078 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540 [ 725.376090][ T37] #2: ffff888029acca58 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540 [ 725.376152][ T37] #3: ffffffff8ee25d98 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 725.376212][ T37] 1 lock held by syz-executor/12337: [ 725.376225][ T37] #0: ffffffff8e1c9170 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 725.376286][ T37] 1 lock held by syz-executor/12344: [ 725.376298][ T37] #0: ffffffff8e1c9170 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 725.376355][ T37] 1 lock held by syz-executor/12350: [ 725.376367][ T37] #0: ffffffff8e1c9170 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 725.376427][ T37] 2 locks held by syz-executor/12404: [ 725.376439][ T37] #0: ffffffff8ed159a8 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 725.376508][ T37] #1: ffffffff8f5b0338 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8a3/0x1bd0 [ 725.376568][ T37] 2 locks held by syz-executor/12411: [ 725.376580][ T37] #0: ffffffff8faf9068 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 725.376647][ T37] #1: ffffffff8f5b0338 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8a3/0x1bd0 [ 725.389908][ T37] 1 lock held by syz-executor/12438: [ 725.389925][ T37] #0: ffffffff8f5b0338 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x767/0xc00 [ 725.389989][ T37] 2 locks held by syz-executor/12446: [ 725.390003][ T37] 2 locks held by syz-executor/12457: [ 725.390015][ T37] #0: ffffffff8f5a17a0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4e2/0x720 [ 725.390075][ T37] #1: ffffffff8f5b0338 (rtnl_mutex){+.+.}-{4:4}, at: register_netdev+0x18/0x60 [ 725.390205][ T37] [ 725.390211][ T37] ============================================= [ 725.390211][ T37] [ 725.390229][ T37] NMI backtrace for cpu 1 [ 725.390260][ T37] CPU: 1 UID: 0 PID: 37 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 725.390290][ T37] Tainted: [L]=SOFTLOCKUP [ 725.390298][ T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 725.390312][ T37] Call Trace: [ 725.390321][ T37] [ 725.390331][ T37] dump_stack_lvl+0xe8/0x150 [ 725.390383][ T37] nmi_cpu_backtrace+0x274/0x2d0 [ 725.390463][ T37] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 725.390563][ T37] nmi_trigger_cpumask_backtrace+0x17a/0x380 [ 725.390592][ T37] sys_info+0x135/0x170 [ 725.390613][ T37] watchdog+0xfd7/0x1030 [ 725.390729][ T37] ? watchdog+0x1c7/0x1030 [ 725.390771][ T37] kthread+0x388/0x470 [ 725.390827][ T37] ? __pfx_watchdog+0x10/0x10 [ 725.390858][ T37] ? __pfx_kthread+0x10/0x10 [ 725.390893][ T37] ret_from_fork+0x514/0xb70 [ 725.390983][ T37] ? __pfx_ret_from_fork+0x10/0x10 [ 725.391016][ T37] ? __switch_to+0xc89/0x1420 [ 725.391088][ T37] ? __pfx_kthread+0x10/0x10 [ 725.391122][ T37] ret_from_fork_asm+0x1a/0x30 [ 725.391162][ T37] [ 725.391177][ T37] Sending NMI from CPU 1 to CPUs 0: [ 725.391208][ C0] NMI backtrace for cpu 0 [ 725.391236][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 725.391262][ C0] Tainted: [L]=SOFTLOCKUP [ 725.391268][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 725.391279][ C0] RIP: 0010:unwind_next_frame+0xd/0x2550 [ 725.391340][ C0] Code: 92 48 89 df e8 14 bb b7 00 eb 88 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 41 57 41 56 41 55 41 54 <53> 48 83 ec 70 49 89 fe 49 bc 00 00 00 00 00 fc ff df 48 83 c7 48 [ 725.391357][ C0] RSP: 0018:ffffc90000156b58 EFLAGS: 00000202 [ 725.391374][ C0] RAX: 0000000000000001 RBX: ffffc90000156c40 RCX: 0000000000000000 [ 725.391387][ C0] RDX: dffffc0000000000 RSI: ffffffff891ac104 RDI: ffffc90000156b88 [ 725.391402][ C0] RBP: ffffc90000156c10 R08: ffffc90000156c50 R09: 0000000000000010 [ 725.391415][ C0] R10: ffffc90000156bd8 R11: ffffffff81b022a0 R12: ffff88801cab0000 [ 725.391428][ C0] R13: ffff8880b86420f0 R14: ffffffff81b022a0 R15: ffffc90000156b88 [ 725.391443][ C0] FS: 0000000000000000(0000) GS:ffff888125c4d000(0000) knlGS:0000000000000000 [ 725.391458][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 725.391470][ C0] CR2: 000055858178d660 CR3: 000000003e5ac000 CR4: 00000000003526f0 [ 725.391487][ C0] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000002 [ 725.391499][ C0] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 725.391512][ C0] Call Trace: [ 725.391518][ C0] [ 725.391526][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 725.391600][ C0] arch_stack_walk+0x11b/0x150 [ 725.391643][ C0] ? process_backlog+0x564/0xc50 [ 725.391695][ C0] stack_trace_save+0xa9/0x100 [ 725.391723][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 725.391751][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 725.391799][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 725.391826][ C0] kasan_save_track+0x3e/0x80 [ 725.391898][ C0] ? kasan_save_track+0x3e/0x80 [ 725.391925][ C0] ? __kasan_slab_alloc+0x6c/0x80 [ 725.391942][ C0] ? kmem_cache_alloc_noprof+0x355/0x650 [ 725.391994][ C0] ? fill_pool+0x165/0x610 [ 725.392071][ C0] ? debug_objects_fill_pool+0x63/0x80 [ 725.392098][ C0] ? debug_object_activate+0x6c/0x3b0 [ 725.392124][ C0] ? call_rcu+0x43/0x8b0 [ 725.392144][ C0] ? skb_release_head_state+0x71/0x360 [ 725.392208][ C0] ? __kfree_skb+0x24/0x210 [ 725.392238][ C0] ? nft_synproxy_eval_v4+0x36a/0x4e0 [ 725.392302][ C0] ? nft_synproxy_do_eval+0x335/0x550 [ 725.392330][ C0] ? nft_do_chain+0x48d/0x1b10 [ 725.392401][ C0] ? nft_do_chain_inet+0x360/0x4b0 [ 725.392460][ C0] ? nf_hook_slow+0xc5/0x220 [ 725.392500][ C0] ? NF_HOOK+0x21f/0x3c0 [ 725.392563][ C0] ? NF_HOOK+0x336/0x3c0 [ 725.392589][ C0] ? process_backlog+0x564/0xc50 [ 725.392635][ C0] __kasan_slab_alloc+0x6c/0x80 [ 725.392654][ C0] kmem_cache_alloc_noprof+0x355/0x650 [ 725.392683][ C0] ? fill_pool+0x165/0x610 [ 725.392708][ C0] ? fill_pool+0x165/0x610 [ 725.392740][ C0] fill_pool+0x165/0x610 [ 725.392769][ C0] ? __pfx_fill_pool+0x10/0x10 [ 725.392798][ C0] ? ip_output+0x5a/0x450 [ 725.392827][ C0] ? debug_objects_fill_pool+0x3b/0x80 [ 725.392854][ C0] ? debug_objects_fill_pool+0x3b/0x80 [ 725.392882][ C0] debug_objects_fill_pool+0x63/0x80 [ 725.392908][ C0] debug_object_activate+0x6c/0x3b0 [ 725.392935][ C0] ? rcuref_put_slowpath+0xc8/0x1d0 [ 725.392978][ C0] ? __pfx_dst_destroy_rcu+0x10/0x10 [ 725.392998][ C0] call_rcu+0x43/0x8b0 [ 725.393022][ C0] ? dst_release+0x126/0x1b0 [ 725.393042][ C0] skb_release_head_state+0x71/0x360 [ 725.393071][ C0] __kfree_skb+0x24/0x210 [ 725.393098][ C0] nft_synproxy_eval_v4+0x36a/0x4e0 [ 725.393125][ C0] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 725.393150][ C0] ? nf_ip_checksum+0x13c/0x510 [ 725.393196][ C0] nft_synproxy_do_eval+0x335/0x550 [ 725.393225][ C0] ? unwind_next_frame+0x8f/0x2550 [ 725.393245][ C0] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 725.393278][ C0] nft_do_chain+0x48d/0x1b10 [ 725.393302][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 725.393323][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 725.393352][ C0] ? __pfx_nft_do_chain+0x10/0x10 [ 725.393381][ C0] ? __lock_acquire+0x683/0x2ce0 [ 725.393434][ C0] ? __lock_acquire+0x683/0x2ce0 [ 725.393456][ C0] nft_do_chain_inet+0x360/0x4b0 [ 725.393481][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 725.393510][ C0] ? NF_HOOK+0x9e/0x3c0 [ 725.393537][ C0] ? NF_HOOK+0x9e/0x3c0 [ 725.393563][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 725.393587][ C0] nf_hook_slow+0xc5/0x220 [ 725.393609][ C0] NF_HOOK+0x21f/0x3c0 [ 725.393637][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 725.393664][ C0] ? NF_HOOK+0x9e/0x3c0 [ 725.393690][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 725.393718][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 725.393750][ C0] ? ip_local_deliver+0x113/0x190 [ 725.393779][ C0] NF_HOOK+0x336/0x3c0 [ 725.393807][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 725.393834][ C0] ? NF_HOOK+0x9e/0x3c0 [ 725.393860][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 725.393887][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 725.393917][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 725.393944][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 725.393969][ C0] ? process_backlog+0x261/0xc50 [ 725.393992][ C0] process_backlog+0x564/0xc50 [ 725.394019][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 725.394070][ C0] __napi_poll+0xae/0x550 [ 725.394093][ C0] net_rx_action+0x621/0xd70 [ 725.394123][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 725.394157][ C0] ? __local_bh_disable_ip+0x3c/0x420 [ 725.394226][ C0] handle_softirqs+0x1d9/0x6c0 [ 725.394252][ C0] run_ktimerd+0x69/0x100 [ 725.394276][ C0] smpboot_thread_fn+0x57c/0xa80 [ 725.394340][ C0] ? smpboot_thread_fn+0x4e/0xa80 [ 725.394368][ C0] kthread+0x388/0x470 [ 725.394393][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 725.394416][ C0] ? __pfx_kthread+0x10/0x10 [ 725.394442][ C0] ret_from_fork+0x514/0xb70 [ 725.394471][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 725.394497][ C0] ? __switch_to+0xc89/0x1420 [ 725.394522][ C0] ? __pfx_kthread+0x10/0x10 [ 725.394549][ C0] ret_from_fork_asm+0x1a/0x30 [ 725.394575][ C0] [ 725.454748][ T37] Kernel panic - not syncing: hung_task: blocked tasks [ 725.454776][ T37] CPU: 1 UID: 0 PID: 37 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 725.454809][ T37] Tainted: [L]=SOFTLOCKUP [ 725.454817][ T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 725.454831][ T37] Call Trace: [ 725.454840][ T37] [ 725.454850][ T37] vpanic+0x56c/0xa60 [ 725.454879][ T37] ? __pfx___schedule+0x10/0x10 [ 725.454909][ T37] ? __pfx_vpanic+0x10/0x10 [ 725.454942][ T37] panic+0xc5/0xd0 [ 725.454962][ T37] ? __pfx_panic+0x10/0x10 [ 725.454981][ T37] ? preempt_schedule_common+0x82/0xd0 [ 725.455010][ T37] ? preempt_schedule_thunk+0x16/0x40 [ 725.455039][ T37] ? nmi_trigger_cpumask_backtrace+0x314/0x380 [ 725.455070][ T37] ? nmi_trigger_cpumask_backtrace+0x319/0x380 [ 725.455100][ T37] watchdog+0x1030/0x1030 [ 725.455143][ T37] ? watchdog+0x1c7/0x1030 [ 725.455184][ T37] kthread+0x388/0x470 [ 725.455219][ T37] ? __pfx_watchdog+0x10/0x10 [ 725.455251][ T37] ? __pfx_kthread+0x10/0x10 [ 725.455284][ T37] ret_from_fork+0x514/0xb70 [ 725.455321][ T37] ? __pfx_ret_from_fork+0x10/0x10 [ 725.455354][ T37] ? __switch_to+0xc89/0x1420 [ 725.455386][ T37] ? __pfx_kthread+0x10/0x10 [ 725.455421][ T37] ret_from_fork_asm+0x1a/0x30 [ 725.455461][ T37] [ 725.456179][ T37] Kernel Offset: disabled