last executing test programs: 5m22.677114389s ago: executing program 0 (id=773): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000940)={{}, 'syz0\x00'}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x12) ioctl$UI_SET_SNDBIT(r0, 0x4004556a, 0x1) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) r2 = dup(r1) write$uinput_user_dev(r2, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x80000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4]}, 0x45c) 5m22.120410514s ago: executing program 0 (id=776): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000280), 0xb8441) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, '.\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) get_robust_list(r0, &(0x7f0000000500)=&(0x7f0000000440)={&(0x7f0000000300), 0x0, &(0x7f0000000400)={&(0x7f0000000240)}}, 0x0) setsockopt$packet_int(r3, 0x107, 0x12, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r4, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x2c00000000000800, 0x0, 0x6, 0x1, 0x0, "ef359f413b171534a6d2a48fafddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0e39c2eb09000000e677df701905b9aafab4afaaf755a3f6000400", "036c47c6780820d1cbf79bb0566f249fa3f6bd9bffbcdb692ded71036951ca171ce1a311ef54ec32031e14efbcc097fce47d85272036dc78388e3dc177e9b496", "b732676c181ce6bb0100ce21aa4500000000006c8000"}) openat$cgroup_ro(r4, &(0x7f0000000540)='memory.stat\x00', 0x275a, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r6 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000001700), 0x2000, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f0000000000)={0x0, "f3c492eb0165203d36bec7080089b42c000004002231a110000000005900", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f0000000380)={0x4, "a901d699301d6043de9c03e96a7e02000000000000041a92b0000000000800", 0xffffffffffffffff}) socket$isdn_base(0x22, 0x3, 0x0) ioctl$SYNC_IOC_MERGE(r7, 0xc0303e03, &(0x7f0000000080)={"fe0d1acce4a37ef94acd000200", r8, 0xffffffffffffffff}) dup(r9) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') close_range(r5, 0xffffffffffffffff, 0x0) 5m20.864078432s ago: executing program 0 (id=777): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffd51, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005345c0f63cdc2e82818254950ee03568b8809a1f04c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab66c1aae9314d7381fcfeb970bea672010000000000000043144648a07a975bd89dc398712376610faa54f12495b4659be8673086f6f3543205d4bc4ce05b8b961103673dff7f158052e62bfbdcddde6985f3f1ac5d9a94cc53207899762a07282a1914452d11858e795a3ca30a101af5574f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5ed44039aab46419496362e54cfad05b4004ac71a003d7b85d07191bed4e5a8908263722d4146f7ed569985439baa355cf3d8731f5e7a237bc06d035a8d601f21746d880819f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c5b9f87d988c9fbd2b9d9b4e2d71753b1549fa734f0b2e5fcf9549804cddad721971637f9c9730a9cc384eed30345979db9c93e1c52f42cad0a4d4f9436d3f39b0ed09c395dc6e970366087a8e4daeeb1b017006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f710c490ecd085d2811a7555c53030000007f00000000bfa6478eb96b079c277e2910b7ccdc3d672ed34aa65278c549e2abb549ad954884289130bc71cee2b7de62bf48129ae1af052a2d46a6165eb0954dac7265f1f425735acf6377793946b3229e861d8ea49806b3b533345d36ecef9df700000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c000000aaae37f044bcadeb0f6846582b7653665aa336db9f0384d3c7ddf79c2e0000000000000000000000000000000000000000000000e154aa0d3e41986a668ee1e5ef93a8ceac75f44aae95e26742f895f287111f8ee86f7e3ffb63cfb0e345cf7fc63dd2b0d30977899c6f03640040af4db71f7452bfc79a05118d8bb42b63b195771e42f9942ec626bd4b5461b74324012164e8"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000005c0)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB="0200"], 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000180)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="0200"], 0x10) 5m20.796714905s ago: executing program 0 (id=779): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) getpid() bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x70000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x882) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$IMGETVERSION(0xffffffffffffffff, 0x80044942, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd600a8435001c0600000000000000000000a652ff00000000fe80000000aa000004"], 0x0) r4 = syz_open_dev$vivid(&(0x7f0000000200), 0x2, 0x2) ioctl$VIDIOC_TRY_FMT(r4, 0xc0d05640, &(0x7f0000000780)={0xa, @sdr={0x39565559}}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000dc020078000000000000000000000000ff02000000000000e26ea725000000010000"], 0xb8}}, 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7e9, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r6, 0xc0405602, &(0x7f0000000100)={0x6, 0x1, 0x0, "abd657bebbdd23613cfda38214fc0e59299e701cef6329784aa62d2f521ee9cc"}) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="65010000"], 0x188}}, 0x0) 5m17.611847732s ago: executing program 0 (id=784): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000740)={{0x12, 0x1, 0x0, 0xed, 0x3e, 0xc9, 0x8, 0xccd, 0xb3, 0x2dee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xb0, 0x87, 0x1d}}]}}]}}, 0x0) ioctl$EVIOCRMFF(r0, 0x550c, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) 5m16.181743769s ago: executing program 2 (id=789): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0xffffffffffffffb8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket$inet_tcp(0x2, 0x1, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r4}, &(0x7f0000000540), &(0x7f0000000580)=r5}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={0xffffffffffffffff, &(0x7f0000000780)}, 0x20) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) recvmmsg(r6, &(0x7f0000000a40), 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x3, 0xb, 0x4, 0x210, r0, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x3, 0x4, @void, @value, @void, @value}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r7, @ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0, r8}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 5m16.173875383s ago: executing program 3 (id=790): r0 = timerfd_create(0x0, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x1c5c7e, 0x0) r1 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) close(r1) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) timerfd_settime(r0, 0x3, &(0x7f0000000080)={{0x0, 0x3938700}, {0x77359400}}, 0x0) clock_adjtime(0x0, &(0x7f0000000000)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}) 5m15.816790881s ago: executing program 3 (id=792): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000580)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000000c0)={0x2c, &(0x7f0000000080)={0x0, 0xf, 0xb}, 0x0, 0x0, 0x0, 0x0}) 5m15.049939886s ago: executing program 2 (id=794): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000003c0)={0x0, 0x0, @pic={0x0, 0x3f}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0x2c0710}) ioctl$KVM_CAP_X86_DISABLE_EXITS(r1, 0x4068aea3, &(0x7f0000000000)={0x8f, 0x0, 0x6}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5m14.807541896s ago: executing program 2 (id=797): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0xffffffffffffffb8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket$inet_tcp(0x2, 0x1, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r4}, &(0x7f0000000540), &(0x7f0000000580)=r5}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={0xffffffffffffffff, &(0x7f0000000780)}, 0x20) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) recvmmsg(r6, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000001080)=""/4096, 0x1000}], 0x1}}, {{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000100)=""/210, 0xd2}, {0x0}, {0x0}, {0x0}, {&(0x7f0000002080)=""/4096, 0x1000}, {&(0x7f0000000740)=""/191, 0xbf}], 0x6}}], 0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x3, 0xb, 0x4, 0x210, r0, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x3, 0x4, @void, @value, @void, @value}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r7, @ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0, r8}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 5m13.800430197s ago: executing program 2 (id=800): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000480)={@map=0xffffffffffffffff, 0x35, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$nl_route(0x10, 0x3, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x12, 0x10, 0xfa00, {&(0x7f0000005480)}}, 0x18) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c80)=ANY=[@ANYRESHEX=r0, @ANYRES32=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4048804) socket$kcm(0x21, 0x2, 0x2) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$int_in(r3, 0x5452, &(0x7f0000000280)=0xffffffffffffffff) sendto$inet6(r3, &(0x7f0000000100)="a4", 0x1, 0x4001, &(0x7f0000000400)={0xa, 0x4e24, 0x0, @mcast1}, 0x1c) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r3, 0xc400941d, &(0x7f0000000440)={0x0, 0x0, 0x7, 0x1}) ioctl$BTRFS_IOC_GET_DEV_STATS(r2, 0xc4089434, &(0x7f0000000840)={r4, 0x8000000000000001, 0x0, [0x3, 0x14db, 0xffff, 0x7, 0x2], [0x7f, 0x2, 0xfffffffffffffff9, 0xffffffffffff0001, 0x95de, 0x6, 0x9, 0x100, 0x8, 0x1, 0x3, 0x5, 0xf, 0x7c95, 0x9, 0x4, 0x6, 0x1, 0x0, 0x80000001, 0x6f, 0xb1, 0x4, 0x6, 0xff, 0x5, 0x5, 0x7, 0x4, 0x100, 0x5, 0x0, 0x1000, 0xb94, 0x9, 0x80000000, 0x9, 0x3ff, 0x0, 0x1, 0xb, 0x2, 0x3, 0x1, 0x0, 0x0, 0x3, 0x2, 0xffffffffffff8001, 0x8, 0x9, 0xffffffff, 0x0, 0x454ae0392, 0x1, 0x0, 0x9, 0xce, 0x1, 0x4, 0x3, 0x4, 0x4, 0x100000001, 0x5ed, 0x3, 0x800, 0xfffffffffffffffd, 0x999, 0x0, 0x5, 0xfffffffffffffffe, 0x0, 0x3, 0xfffffffeffffffff, 0x6, 0x8000000000000000, 0x4, 0x1000, 0x5, 0x10000, 0x3, 0x7, 0xbe01, 0xd, 0x6ee3, 0x9, 0x0, 0x6e1c, 0xffffffffffffffff, 0x65, 0x7, 0x7, 0x2, 0x7, 0xfffffffffffffffc, 0x4, 0x2, 0x89e1, 0x2, 0x101, 0x3, 0xb, 0xd, 0x80, 0x6, 0x3, 0x8536, 0x2, 0x1, 0x6, 0x9734, 0x3, 0x1, 0x7ff, 0x298, 0x1, 0x5, 0x1000, 0x6]}) sendto$inet6(r3, &(0x7f0000000300)="8b", 0x1, 0x4800, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r3, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000080), 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x198780, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = eventfd2(0xfe, 0x800) ioctl$KVM_IOEVENTFD(r6, 0x4040ae79, &(0x7f00000000c0)={0x4, 0x0, 0x1, r7, 0xb}) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000040)={0x10200, 0x2, 0xd000, 0x1000, &(0x7f0000ffe000/0x1000)=nil}) ioctl$KVM_IOEVENTFD(r6, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x2, r7, 0xb}) 5m12.434890222s ago: executing program 4 (id=801): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000032c0)={0x2c, r0, 0x1, 0x70bd2a, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xf9}]}, 0x2c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000c40)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r5, @ANYBLOB="22003300d0000000ef0111000001080211000000505050505050000004040000000000000600cd"], 0x48}}, 0x0) 5m12.138063713s ago: executing program 4 (id=802): r0 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000140)=ANY=[@ANYRES64=r0, @ANYRES16=r0, @ANYRES8=r0, @ANYRES32, @ANYRES64=r0, @ANYRES8=r0], 0x50) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB], 0x144}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) syz_emit_ethernet(0x46, &(0x7f0000000740)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb86dd6000000000103a0000000000000000000000ffffac141400ff0200000000000000000000000000018b00907800000000000000000000000084cba74d6902cfa68cbbbd9db5f94ab5a34cbb584e649f4b8fc86c697ec3324677b652539c062ab450414bbf739121e1de909aef1dd76a20545b0daab2e7c8eebe0d99cc97aa837b5fcf55d119effd1b974ec3658679b4fa48704adc7cc40dfca09b38ce606c846792665a4d8ed924253953691fc95b4ca435cc1f93d7620e114515f8e7a581df6d98c58b74a51958e0d89783ae949e6069bd0494f6460d37f55b35acda954f00cfc49ba031a0"], 0x0) 5m11.898206767s ago: executing program 3 (id=803): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4040aea0, &(0x7f0000000000)=@x86={0x3, 0xd, 0x3f, 0x0, 0x12dbd419, 0xa, 0x5, 0x35, 0x3, 0x6e, 0x4, 0x6, 0x0, 0xffff, 0x3, 0x8, 0x7, 0x9, 0x5, '\x00', 0x4, 0x72}) 5m11.802136918s ago: executing program 1 (id=804): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0xffffffffffffffb8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket$inet_tcp(0x2, 0x1, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r4}, &(0x7f0000000540), &(0x7f0000000580)=r5}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={0xffffffffffffffff, &(0x7f0000000780)}, 0x20) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) recvmmsg(r6, &(0x7f0000000a40), 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x3, 0xb, 0x4, 0x210, r0, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x3, 0x4, @void, @value, @void, @value}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r7, @ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0, r8}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 5m11.543747118s ago: executing program 4 (id=805): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000140)={0x0, 0x0}) r3 = syz_open_procfs(r2, &(0x7f0000000600)='fd/4\x00') ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r3, 0x8004587d, 0x0) 5m10.758191626s ago: executing program 1 (id=806): r0 = socket(0xf, 0x3, 0x2) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x11, 0x800000003, 0x0) r1 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r2, {0x0, 0xfff2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}}, 0x0) 5m10.615224274s ago: executing program 4 (id=807): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local}) close(r2) 5m10.567135743s ago: executing program 2 (id=808): r0 = open(&(0x7f0000000300)='./bus\x00', 0x169042, 0x0) ftruncate(r0, 0xcc3a) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = dup(r1) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20040008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080)='sit0\x00', 0x10) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x8000fbffc001) 5m10.523810291s ago: executing program 1 (id=809): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, r4}]}, 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}]}, 0x24}}, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000240)={@private1={0xfc, 0x1, '\x00', 0x4}, @dev={0xfe, 0x80, '\x00', 0x42}, @private2, 0x0, 0x0, 0x0, 0x400, 0x0, 0x2000002, r4}) 5m10.485689766s ago: executing program 3 (id=810): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000200)={0x1, 0x0, 0x0, &(0x7f0000000140)=""/41, 0x0}) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)) r2 = dup(r1) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x1, r2}) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f00000001c0)=0x304008000) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f00000003c0)={0x1}) 5m10.383380266s ago: executing program 1 (id=811): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r0, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) munlock(&(0x7f0000006000/0x9000)=nil, 0x9000) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) write$binfmt_elf64(r1, &(0x7f00000000c0)=ANY=[], 0xc63b9e35) 5m10.350787859s ago: executing program 3 (id=812): write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f}}, 0x50) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = dup(r3) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000008000010"]) 5m10.27580525s ago: executing program 4 (id=813): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000100)=0x417, 0x4) connect$inet(r0, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x101}]}, 0x10) write$binfmt_misc(r0, &(0x7f0000000080), 0x3a7) writev(r0, &(0x7f0000000380)=[{&(0x7f0000000180)='~', 0x1}], 0x1) sendto$inet(r0, &(0x7f00000002c0)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a660bbf56352083db9d40454a67f8010000004bd29585885c89773ca3ba28a1e85ffe2a9220e0ecd440e345b745bf2146835ad015c801f95be5b890e44fb3dfbe8e88a1e5176e584c970207f23b0073ca5375abddf56331be396eaa2398ea66b93a74fd4147e826abed1b5d1de578682288c19ac23c1ccc1cdd936d2571c3510b0000000000000000000000000000000000f32bb3874c926a8944caa4677d2eae3bc831e748000000", 0xfffffffffffffe88, 0x1d4c, 0x0, 0x0) 5m10.138793459s ago: executing program 3 (id=814): openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0x98) syz_usb_connect(0x0, 0x2d, &(0x7f00000003c0)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea0009058703"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r1 = epoll_create(0x1) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)) 5m9.644514233s ago: executing program 2 (id=815): r0 = syz_io_uring_setup(0x24f5, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) io_uring_enter(r0, 0x0, 0x400000, 0x1, 0x0, 0x0) io_uring_enter(r0, 0x52e, 0x0, 0x0, 0x0, 0x0) 5m9.407853406s ago: executing program 1 (id=816): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_CT_DIRECTION={0x5}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x13}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x1c, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0xfe, 0x0, 0x0, 0x1c, {[@window={0xe, 0x3, 0x2}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) 5m6.48535576s ago: executing program 4 (id=817): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=@newqdisc={0x4c, 0x14, 0x0, 0x0, 0x0, {0x2}, [@TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x0]}}]}]}, 0x4c}}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000500)={"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"}) 3m20.848535676s ago: executing program 0 (id=784): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000740)={{0x12, 0x1, 0x0, 0xed, 0x3e, 0xc9, 0x8, 0xccd, 0xb3, 0x2dee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xb0, 0x87, 0x1d}}]}}]}}, 0x0) ioctl$EVIOCRMFF(r0, 0x550c, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) 0s ago: executing program 1 (id=818): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000041}, 0x40084) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(0xffffffffffffffff, 0xc0045009, &(0x7f0000000000)=0x1) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000327000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) kernel console output (not intermixed with test programs): ice team_slave_1 removed [ 240.812795][ T5419] team0 (unregistering): Port device team_slave_0 removed [ 240.984416][ T5419] team0 (unregistering): Port device team_slave_0 removed [ 241.195731][ T5793] hsr_slave_0: entered promiscuous mode [ 241.208006][ T5793] hsr_slave_1: entered promiscuous mode [ 241.530256][ T5750] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 241.543606][ T5750] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 241.554572][ T5750] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 241.576964][ T5750] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 241.824069][ T5750] 8021q: adding VLAN 0 to HW filter on device bond0 [ 241.864679][ T5750] 8021q: adding VLAN 0 to HW filter on device team0 [ 241.920931][ T5426] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.928154][ T5426] bridge0: port 1(bridge_slave_0) entered forwarding state [ 242.007036][ T5791] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.024543][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.031769][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 242.041836][ T5757] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 242.057900][ T5757] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 242.124970][ T5791] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.145769][ T5757] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 242.163737][ T5757] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 242.224561][ T5791] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.255366][ T5750] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 242.313057][ T5791] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.394199][ T5237] Bluetooth: hci0: command tx timeout [ 242.470467][ T5757] 8021q: adding VLAN 0 to HW filter on device bond0 [ 242.547910][ T5757] 8021q: adding VLAN 0 to HW filter on device team0 [ 242.570550][ T1118] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.578004][ T1118] bridge0: port 1(bridge_slave_0) entered forwarding state [ 242.594546][ T5750] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 242.625059][ T1118] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.632264][ T1118] bridge0: port 2(bridge_slave_1) entered forwarding state [ 242.640187][ T5237] Bluetooth: hci1: command tx timeout [ 242.769823][ T5750] veth0_vlan: entered promiscuous mode [ 242.801960][ T5750] veth1_vlan: entered promiscuous mode [ 242.835564][ T5750] veth0_macvtap: entered promiscuous mode [ 242.901823][ T5750] veth1_macvtap: entered promiscuous mode [ 242.937824][ T5750] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 242.956408][ T5750] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.978619][ T5750] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 242.986946][ T5419] bridge_slave_1: left allmulticast mode [ 242.992627][ T5419] bridge_slave_1: left promiscuous mode [ 243.010166][ T5419] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.019504][ T5419] bridge_slave_0: left allmulticast mode [ 243.025201][ T5419] bridge_slave_0: left promiscuous mode [ 243.032241][ T5419] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.043705][ T5419] bridge_slave_1: left allmulticast mode [ 243.051569][ T5419] bridge_slave_1: left promiscuous mode [ 243.063879][ T5419] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.076666][ T5419] bridge_slave_0: left allmulticast mode [ 243.082374][ T5419] bridge_slave_0: left promiscuous mode [ 243.099251][ T5419] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.562068][ T5419] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 243.575357][ T5419] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 243.595663][ T5419] bond0 (unregistering): Released all slaves [ 243.803872][ T5419] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 243.816786][ T5419] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 243.834958][ T5419] bond0 (unregistering): Released all slaves [ 243.920272][ T5750] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 243.931903][ T5750] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.958455][ T5750] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 243.990028][ T5750] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.011306][ T5750] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.020746][ T5750] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.029986][ T5750] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.194033][ T5762] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 244.204863][ T5762] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 244.238612][ T5762] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 244.255912][ T5762] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 244.276565][ T5757] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 244.413949][ T5419] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 244.423307][ T5419] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 244.441870][ T5419] hsr_slave_0: left promiscuous mode [ 244.450961][ T5419] hsr_slave_1: left promiscuous mode [ 244.459490][ T5419] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 244.469051][ T5419] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 244.478566][ T5419] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 244.486648][ T5419] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 244.502287][ T5419] veth1_macvtap: left promiscuous mode [ 244.510886][ T5419] veth0_macvtap: left promiscuous mode [ 244.516626][ T5419] veth1_vlan: left promiscuous mode [ 244.522125][ T5419] veth0_vlan: left promiscuous mode [ 244.633915][ T5419] team0 (unregistering): Port device team_slave_1 removed [ 244.663295][ T5419] team0 (unregistering): Port device team_slave_0 removed [ 245.095595][ T5419] team0 (unregistering): Port device team_slave_1 removed [ 245.140253][ T5419] team0 (unregistering): Port device team_slave_0 removed [ 245.594240][ T5791] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 245.635572][ T5791] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 245.650002][ T5791] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 245.674610][ T5791] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 245.708520][ T5372] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 245.739872][ T5372] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 245.779653][ T5757] veth0_vlan: entered promiscuous mode [ 245.811491][ T5757] veth1_vlan: entered promiscuous mode [ 245.892253][ T5793] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 245.928665][ T5793] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 245.952544][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 245.961959][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 245.979240][ T5793] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 246.061698][ T5793] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 246.142597][ T5762] 8021q: adding VLAN 0 to HW filter on device bond0 [ 246.179758][ T5757] veth0_macvtap: entered promiscuous mode [ 246.203886][ T5757] veth1_macvtap: entered promiscuous mode [ 246.325794][ T5757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 246.343625][ T5757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.381898][ T5757] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 246.486710][ T5757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 246.501019][ T5757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.512845][ T5757] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 246.530897][ T5762] 8021q: adding VLAN 0 to HW filter on device team0 [ 246.541258][ T5791] 8021q: adding VLAN 0 to HW filter on device bond0 [ 246.561696][ T1118] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.568867][ T1118] bridge0: port 1(bridge_slave_0) entered forwarding state [ 246.593131][ T5791] 8021q: adding VLAN 0 to HW filter on device team0 [ 246.607791][ T5757] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.617691][ T5757] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.629444][ T5757] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.639655][ T5757] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.672563][ T1118] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.679749][ T1118] bridge0: port 1(bridge_slave_0) entered forwarding state [ 246.690804][ T1118] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.697971][ T1118] bridge0: port 2(bridge_slave_1) entered forwarding state [ 246.723095][ T1118] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.730298][ T1118] bridge0: port 2(bridge_slave_1) entered forwarding state [ 246.870713][ T3117] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 246.883965][ T3117] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 246.930571][ T5793] 8021q: adding VLAN 0 to HW filter on device bond0 [ 246.964948][ T3117] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 246.977154][ T3117] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 246.998909][ T5793] 8021q: adding VLAN 0 to HW filter on device team0 [ 247.061901][ T5426] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.069083][ T5426] bridge0: port 1(bridge_slave_0) entered forwarding state [ 247.114820][ T5426] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.122223][ T5426] bridge0: port 2(bridge_slave_1) entered forwarding state [ 247.412377][ T5791] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 247.441448][ T5762] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 247.585072][ T5791] veth0_vlan: entered promiscuous mode [ 247.631886][ T5791] veth1_vlan: entered promiscuous mode [ 247.743592][ T5791] veth0_macvtap: entered promiscuous mode [ 247.768373][ T5791] veth1_macvtap: entered promiscuous mode [ 247.821322][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 247.840902][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.851727][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 247.864703][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.882949][ T5791] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 247.904358][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 247.935456][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.953499][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 247.977271][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.999183][ T5791] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 248.043545][ T5793] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 248.090012][ T5791] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.116254][ T5791] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.135328][ T5791] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.161598][ T5791] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.210020][ T6003] vlan2: entered promiscuous mode [ 248.215130][ T6003] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 248.222983][ T6003] vlan2: entered allmulticast mode [ 248.234929][ T6003] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 248.253844][ T6003] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 248.264414][ T6003] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 248.395667][ T5762] veth0_vlan: entered promiscuous mode [ 248.513483][ T5793] veth0_vlan: entered promiscuous mode [ 248.528963][ T5793] veth1_vlan: entered promiscuous mode [ 248.541864][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 248.574045][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 248.584436][ T5762] veth1_vlan: entered promiscuous mode [ 248.647348][ T5403] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 248.655235][ T5403] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 248.681560][ T5793] veth0_macvtap: entered promiscuous mode [ 248.712462][ T5793] veth1_macvtap: entered promiscuous mode [ 248.784584][ T5762] veth0_macvtap: entered promiscuous mode [ 248.820421][ T5793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 248.831264][ T5793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.841809][ T5793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 248.853578][ T5793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.863909][ T5793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 248.875050][ T5793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.888064][ T5793] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 248.899239][ T5793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 248.912559][ T5793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.923090][ T5793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 248.934275][ T5793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.944796][ T5793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 248.955668][ T5793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.970911][ T5793] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 248.982469][ T5762] veth1_macvtap: entered promiscuous mode [ 249.044876][ T6022] process 'syz.1.57' launched './file0' with NULL argv: empty string added [ 249.055535][ T5762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 249.072778][ T5762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.076890][ T5230] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 249.084935][ T5762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 249.120174][ T5762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.137840][ T5762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 249.160892][ T5762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.171428][ T5762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 249.182588][ T5762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.184296][ T6026] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 249.194929][ T5762] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 249.225277][ T5793] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.234714][ T5793] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.244501][ T5793] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.255037][ T5793] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.277274][ T5762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 249.286326][ T5230] usb 4-1: Using ep0 maxpacket: 16 [ 249.293205][ T5762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.304013][ T5762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 249.308287][ T5230] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 249.321767][ T5762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.327051][ T5230] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 249.345172][ T5762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 249.347233][ T5230] usb 4-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 249.364548][ T5762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.370693][ T5230] usb 4-1: config 0 interface 0 has no altsetting 0 [ 249.390825][ T5230] usb 4-1: New USB device found, idVendor=045e, idProduct=05da, bcdDevice= 0.00 [ 249.399992][ T5230] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.410107][ T5762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 249.422604][ T5230] usb 4-1: config 0 descriptor?? [ 249.428413][ T5762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.440372][ T5762] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 249.505333][ T5762] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.534887][ T5762] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.544338][ T5762] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.557757][ T5762] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.711181][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 249.723730][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 249.815141][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 249.826085][ T3117] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 249.840974][ T3117] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 249.845335][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 249.870561][ T5230] hid-generic 0003:045E:05DA.0003: unbalanced collection at end of report description [ 249.896669][ T5230] hid-generic 0003:045E:05DA.0003: probe with driver hid-generic failed with error -22 [ 249.931031][ T5426] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 249.970536][ T5426] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 250.157952][ T5345] usb 4-1: USB disconnect, device number 3 [ 250.378183][ T5230] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 250.508996][ T6040] netlink: 'syz.2.63': attribute type 1 has an invalid length. [ 250.523414][ T6040] netlink: 9352 bytes leftover after parsing attributes in process `syz.2.63'. [ 250.533083][ T6040] netlink: 'syz.2.63': attribute type 1 has an invalid length. [ 250.546586][ T6040] netlink: 'syz.2.63': attribute type 2 has an invalid length. [ 250.655496][ T5230] usb 5-1: Using ep0 maxpacket: 16 [ 250.728112][ T6046] use of bytesused == 0 is deprecated and will be removed in the future, [ 250.734102][ T5230] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 250.748947][ T5230] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 250.759939][ T5230] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 250.773820][ T5230] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 250.783313][ T5230] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.797816][ T6046] use the actual size instead. [ 250.804448][ T5230] usb 5-1: config 0 descriptor?? [ 251.076491][ T5220] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 251.115630][ T6061] netlink: 1028 bytes leftover after parsing attributes in process `syz.2.72'. [ 251.136698][ T6061] sch_tbf: burst 0 is lower than device bridge_slave_0 mtu (1514) ! [ 251.222106][ T5230] microsoft 0003:045E:07DA.0004: unbalanced collection at end of report description [ 251.238214][ T5220] usb 4-1: Using ep0 maxpacket: 32 [ 251.251774][ T5230] microsoft 0003:045E:07DA.0004: parse failed [ 251.260845][ T5220] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 251.272144][ T5220] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 251.285575][ T5230] microsoft 0003:045E:07DA.0004: probe with driver microsoft failed with error -22 [ 251.300772][ T6067] TCP: request_sock_TCP: Possible SYN flooding on port [::ffff:0.0.0.0]:20002. Sending cookies. [ 251.313748][ T5220] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 251.332903][ T5220] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.370303][ T5220] usb 4-1: config 0 descriptor?? [ 251.381644][ T5220] hub 4-1:0.0: USB hub found [ 251.439878][ T8] usb 5-1: USB disconnect, device number 2 [ 251.600463][ T5220] hub 4-1:0.0: 1 port detected [ 251.856392][ T5220] hub 4-1:0.0: hub_hub_status failed (err = -71) [ 251.964718][ T5220] hub 4-1:0.0: config failed, can't get hub status (err -71) [ 252.186728][ T5220] usbhid 4-1:0.0: can't add hid device: -71 [ 252.228663][ T5220] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 252.281182][ T5220] usb 4-1: USB disconnect, device number 4 [ 252.372506][ T6078] netlink: 812 bytes leftover after parsing attributes in process `syz.1.79'. [ 252.482600][ T6080] netlink: 'syz.2.80': attribute type 2 has an invalid length. [ 253.874070][ T6116] netlink: 2 bytes leftover after parsing attributes in process `syz.2.94'. [ 254.238248][ T6128] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 254.289633][ T6128] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 255.914265][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.926943][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.286471][ T5273] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 256.303061][ C1] raw-gadget.1 gadget.4: ignoring, device is not running [ 256.441692][ T5273] usb 5-1: device descriptor read/64, error -32 [ 256.796467][ T5273] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 257.022471][ T5273] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 257.052806][ T5273] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 257.062765][ T5273] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 257.074617][ T5273] usb 5-1: config 0 interface 0 has no altsetting 0 [ 257.091471][ T5273] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 257.102726][ T5273] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 257.111594][ T6176] netlink: 124 bytes leftover after parsing attributes in process `syz.1.117'. [ 257.114788][ T5273] usb 5-1: config 0 interface 0 has no altsetting 0 [ 257.287111][ T6180] gretap0: entered promiscuous mode [ 257.295370][ T6180] gretap0: left promiscuous mode [ 257.318882][ T6181] netlink: 8 bytes leftover after parsing attributes in process `syz.1.120'. [ 257.343108][ T5220] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 257.352307][ T5273] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 257.361495][ T5273] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 257.372860][ T5273] usb 5-1: config 0 interface 0 has no altsetting 0 [ 257.385100][ T5273] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 257.395369][ T5273] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 257.407251][ T5273] usb 5-1: config 0 interface 0 has no altsetting 0 [ 257.531541][ T5273] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 257.544265][ T5273] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 257.596259][ T5220] usb 4-1: Using ep0 maxpacket: 8 [ 257.616552][ T5220] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 257.645278][ T5273] usb 5-1: config 0 interface 0 has no altsetting 0 [ 257.826880][ T5220] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 257.865191][ T5273] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 257.949974][ T5273] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 258.058563][ T5220] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 258.069425][ T5273] usb 5-1: config 0 interface 0 has no altsetting 0 [ 258.077035][ T5220] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 258.094319][ T5220] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 258.103764][ T5220] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.112630][ T5273] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 258.122406][ T5273] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 258.135266][ T5273] usb 5-1: config 0 interface 0 has no altsetting 0 [ 258.159248][ T5273] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 258.185632][ T5273] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 258.224720][ T5273] usb 5-1: config 0 interface 0 has no altsetting 0 [ 258.258262][ T5273] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 258.273057][ T5273] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 258.284932][ T5273] usb 5-1: Product: syz [ 258.310590][ T5273] usb 5-1: Manufacturer: syz [ 258.315662][ T5273] usb 5-1: SerialNumber: syz [ 258.367194][ T5220] usb 4-1: GET_CAPABILITIES returned 0 [ 258.375749][ T5220] usbtmc 4-1:16.0: can't read capabilities [ 258.389588][ T5273] usb 5-1: config 0 descriptor?? [ 258.435690][ T5273] yurex 5-1:0.0: USB YUREX device now attached to Yurex #1 [ 258.598771][ T5225] usb 4-1: USB disconnect, device number 5 [ 258.727266][ T8] usb 5-1: USB disconnect, device number 4 [ 258.743362][ T6203] kvm: kvm [6202]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010001) = 0x40 [ 258.748976][ T8] yurex 5-1:0.0: USB YUREX #1 now disconnected [ 259.302476][ T6227] syz.0.134 uses obsolete (PF_INET,SOCK_PACKET) [ 259.443653][ T6233] netlink: 8 bytes leftover after parsing attributes in process `syz.0.137'. [ 259.460417][ T5230] psmouse serio2: Failed to reset mouse on : -5 [ 259.474374][ T6233] netlink: 36 bytes leftover after parsing attributes in process `syz.0.137'. [ 259.529312][ T6233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 259.564984][ T6233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.580684][ T6233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 259.593907][ T6233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.614966][ T6233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 259.644663][ T6233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.659200][ T6233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 259.686315][ T6233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.714743][ T6233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 259.752535][ T6233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.030431][ T6317] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 263.655177][ T6327] netlink: 20 bytes leftover after parsing attributes in process `syz.3.168'. [ 264.156291][ T5230] misc userio: Buffer overflowed, userio client isn't keeping up [ 265.418067][ T5230] input: PS/2 Generic Mouse as /devices/serio2/input/input5 [ 265.748185][ T5230] psmouse serio2: Failed to enable mouse on [ 267.151134][ T6421] warning: `syz.3.185' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 268.040898][ T5237] Bluetooth: hci0: ACL packet for unknown connection handle 0 [ 269.881733][ T6484] Zero length message leads to an empty skb [ 272.782625][ T6555] mac80211_hwsim hwsim19 wlan0: entered promiscuous mode [ 272.790730][ T6555] macvlan2: entered allmulticast mode [ 272.796396][ T6555] mac80211_hwsim hwsim19 wlan0: entered allmulticast mode [ 272.881604][ T6555] mac80211_hwsim hwsim19 wlan0: left promiscuous mode [ 274.401427][ T6583] netlink: 'syz.0.233': attribute type 2 has an invalid length. [ 274.427158][ T6583] netlink: 'syz.0.233': attribute type 1 has an invalid length. [ 274.456444][ T6583] netlink: 181400 bytes leftover after parsing attributes in process `syz.0.233'. [ 274.612883][ T5237] Bluetooth: hci0: ISO packet for unknown connection handle 0 [ 274.706608][ T5273] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 274.919565][ T5273] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 274.931036][ T5273] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 274.944496][ T5237] Bluetooth: hci6: SCO packet for unknown connection handle 0 [ 274.950789][ T5273] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 274.996505][ T5273] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 275.006566][ T5273] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 275.016737][ T5273] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 275.148664][ T5273] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 275.158624][ T5273] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.167040][ T5273] usb 3-1: Product: syz [ 275.171754][ T5273] usb 3-1: Manufacturer: syz [ 275.176536][ T5273] usb 3-1: SerialNumber: syz [ 275.306532][ T6625] netlink: 'syz.0.253': attribute type 29 has an invalid length. [ 275.339055][ T6625] netlink: 'syz.0.253': attribute type 29 has an invalid length. [ 275.376291][ T5275] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 275.527453][ T5275] usb 5-1: Using ep0 maxpacket: 8 [ 275.538345][ T5275] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 275.559411][ T5275] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 275.591036][ T5275] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 275.603358][ T6633] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 275.634322][ T5275] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 275.664030][ T5275] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 275.674329][ T5275] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.863384][ T6637] netlink: 'syz.1.257': attribute type 3 has an invalid length. [ 275.932702][ T5275] usb 5-1: GET_CAPABILITIES returned 0 [ 276.664137][ T5273] cdc_ncm 3-1:1.0: SET_NTB_FORMAT failed [ 276.672808][ T5275] usbtmc 5-1:16.0: can't read capabilities [ 276.688771][ T5273] cdc_ncm 3-1:1.0: bind() failure [ 276.714042][ T5273] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 276.729325][ T5275] usb 5-1: USB disconnect, device number 5 [ 276.736292][ T5273] cdc_ncm 3-1:1.1: bind() failure [ 276.751357][ T5273] usb 3-1: USB disconnect, device number 3 [ 276.836343][ T6648] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 277.267012][ T5220] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 277.466945][ T5220] usb 4-1: Using ep0 maxpacket: 8 [ 277.619837][ T5220] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 277.628039][ T5220] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 277.642635][ T5220] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 277.662316][ T5220] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 277.676033][ T5220] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 278.517878][ T5220] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 278.557730][ T5220] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 278.558870][ T6668] netlink: 165 bytes leftover after parsing attributes in process `syz.4.268'. [ 278.655850][ T5220] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 278.941372][ T5220] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 278.954147][ T5220] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 278.979515][ T5220] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 278.987340][ T5220] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 278.999446][ T5220] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 279.015007][ T5220] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 279.776360][ T5220] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 279.907475][ T6695] syzkaller1: entered promiscuous mode [ 279.914587][ T6695] syzkaller1: entered allmulticast mode [ 280.459653][ T5220] usb 4-1: string descriptor 0 read error: -71 [ 280.499494][ T5220] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 280.526396][ T5220] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.556104][ T5220] usb 4-1: can't set config #168, error -71 [ 280.586594][ T8] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 280.620165][ T5220] usb 4-1: USB disconnect, device number 6 [ 280.656069][ T6701] team0: Port device macvlan1 added [ 280.896881][ T8] usb 3-1: Using ep0 maxpacket: 32 [ 281.537574][ T8] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 281.546085][ T8] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 281.638717][ T8] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 281.704703][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 281.716814][ T6701] team0: Port device macvlan1 removed [ 281.748419][ T8] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 281.765660][ T8] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 281.839771][ T8] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 281.869693][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.900612][ T8] usb 3-1: config 0 descriptor?? [ 282.208634][ T8] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 4 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 283.077890][ T5275] usb 3-1: USB disconnect, device number 4 [ 283.097876][ T5275] usblp0: removed [ 283.879950][ T6746] netlink: 4 bytes leftover after parsing attributes in process `syz.3.293'. [ 284.066711][ T5273] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 284.226455][ T5273] usb 2-1: Using ep0 maxpacket: 8 [ 284.251899][ T5273] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 284.275604][ T5273] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 284.310992][ T5273] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 284.328186][ T6759] Illegal XDP return value 4294967283 on prog (id 34) dev syz_tun, expect packet loss! [ 284.335371][ T5273] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 284.360339][ T5273] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 284.374979][ T5273] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.528956][ T6762] kvm_intel: kvm [6761]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x1d9) = 0x1 [ 284.547826][ T8] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 284.621475][ T5273] usb 2-1: usb_control_msg returned -32 [ 284.633215][ T5273] usbtmc 2-1:16.0: can't read capabilities [ 284.716524][ T8] usb 5-1: Using ep0 maxpacket: 32 [ 284.735677][ T8] usb 5-1: config 0 has an invalid interface number: 126 but max is 0 [ 284.763708][ T8] usb 5-1: config 0 has no interface number 0 [ 284.781092][ T8] usb 5-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023 [ 284.811177][ T8] usb 5-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8 [ 284.851649][ T8] usb 5-1: config 0 interface 126 has no altsetting 0 [ 284.868264][ T8] usb 5-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c [ 284.877672][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.888859][ T8] usb 5-1: Product: syz [ 284.894025][ T8] usb 5-1: Manufacturer: syz [ 284.899380][ T8] usb 5-1: SerialNumber: syz [ 284.906095][ T8] usb 5-1: config 0 descriptor?? [ 284.914827][ T6757] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 284.925665][ T6757] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 285.369908][ T6775] netlink: 105120 bytes leftover after parsing attributes in process `syz.0.303'. [ 285.373551][ T8] ir_usb 5-1:0.126: IR Dongle converter detected [ 285.395387][ T6774] netlink: 8 bytes leftover after parsing attributes in process `syz.3.304'. [ 285.534876][ T6782] IPVS: Error connecting to the multicast addr [ 285.579066][ T8] usb 5-1: IR Dongle converter now attached to ttyUSB0 [ 285.764388][ T6789] netlink: 12 bytes leftover after parsing attributes in process `syz.2.311'. [ 285.804542][ T8] usb 5-1: USB disconnect, device number 6 [ 285.818525][ T6789] netlink: 104 bytes leftover after parsing attributes in process `syz.2.311'. [ 285.835483][ T8] ir-usb ttyUSB0: IR Dongle converter now disconnected from ttyUSB0 [ 285.852293][ T8] ir_usb 5-1:0.126: device disconnected [ 286.456878][ T5225] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 286.747129][ T5225] usb 4-1: Using ep0 maxpacket: 8 [ 286.866718][ T5275] usb 2-1: USB disconnect, device number 4 [ 286.977008][ T5225] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 286.988364][ T5225] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 286.999702][ T5225] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 287.010397][ T5225] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 287.023589][ T5225] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 287.032002][ T6805] netlink: 'syz.2.317': attribute type 11 has an invalid length. [ 287.034548][ T5225] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.358341][ T5225] usb 4-1: usb_control_msg returned -32 [ 287.363980][ T5225] usbtmc 4-1:16.0: can't read capabilities [ 287.760930][ C0] usbtmc 4-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 287.789049][ T6823] usbtmc 4-1:16.0: Unable to send data, error -71 [ 288.333130][ T6841] netlink: 8 bytes leftover after parsing attributes in process `syz.4.327'. [ 288.342389][ T6841] netlink: 8 bytes leftover after parsing attributes in process `syz.4.327'. [ 288.529038][ T6849] netlink: 'syz.0.329': attribute type 1 has an invalid length. [ 288.565967][ T6849] netlink: 9116 bytes leftover after parsing attributes in process `syz.0.329'. [ 288.585979][ T6849] netlink: 44 bytes leftover after parsing attributes in process `syz.0.329'. [ 288.595366][ T6849] netlink: 'syz.0.329': attribute type 1 has an invalid length. [ 288.603554][ T6849] netlink: 209 bytes leftover after parsing attributes in process `syz.0.329'. [ 288.954948][ T8] usb 4-1: USB disconnect, device number 7 [ 289.024414][ T6870] tipc: Started in network mode [ 289.042464][ T6870] tipc: Node identity f7, cluster identity 4711 [ 289.076381][ T6870] tipc: Node number set to 247 [ 289.249876][ T6882] netlink: 'syz.0.344': attribute type 4 has an invalid length. [ 289.307797][ T6884] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 289.387618][ T6887] netlink: 'syz.4.345': attribute type 3 has an invalid length. [ 289.405094][ T6887] netlink: 130984 bytes leftover after parsing attributes in process `syz.4.345'. [ 289.436714][ T8] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 289.452823][ T6891] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 289.599235][ T8] usb 2-1: Using ep0 maxpacket: 8 [ 289.633726][ T8] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 289.675418][ T8] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 289.701645][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.727102][ T8] usb 2-1: Product: syz [ 289.731522][ T8] usb 2-1: Manufacturer: syz [ 290.468814][ T8] usb 2-1: SerialNumber: syz [ 291.331933][ T6919] netlink: 165 bytes leftover after parsing attributes in process `syz.2.361'. [ 292.320637][ T8] cdc_ncm 2-1:1.0: bind() failure [ 292.334198][ T8] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 292.341256][ T8] cdc_ncm 2-1:1.1: bind() failure [ 292.350767][ T8] usb 2-1: USB disconnect, device number 5 [ 292.814227][ T6953] netlink: 28 bytes leftover after parsing attributes in process `syz.0.374'. [ 292.846446][ T6953] netlink: 'syz.0.374': attribute type 7 has an invalid length. [ 292.858317][ T6953] netlink: 'syz.0.374': attribute type 8 has an invalid length. [ 292.892160][ T6953] netlink: 4 bytes leftover after parsing attributes in process `syz.0.374'. [ 292.932128][ T6953] gretap0: entered promiscuous mode [ 292.953851][ T6953] batadv_slave_1: entered promiscuous mode [ 293.969028][ T6980] input: syz1 as /devices/virtual/input/input6 [ 293.995941][ T6976] af_packet: packet_mmap: vma is busy: 1 [ 294.331352][ T6994] dummy0: entered promiscuous mode [ 294.342980][ T6994] macsec1: entered allmulticast mode [ 294.349596][ T6994] dummy0: entered allmulticast mode [ 294.384560][ T6994] dummy0: left allmulticast mode [ 294.418188][ T6994] dummy0: left promiscuous mode [ 294.429706][ T5303] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 294.586647][ T5303] usb 2-1: Using ep0 maxpacket: 8 [ 294.624154][ T5303] usb 2-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 294.643183][ T5303] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.558692][ T5303] usb 2-1: Product: syz [ 295.563176][ T5303] usb 2-1: Manufacturer: syz [ 295.568030][ T5303] usb 2-1: SerialNumber: syz [ 295.575818][ T5303] usb 2-1: config 0 descriptor?? [ 295.588058][ T5303] gspca_main: sq905-2.14.0 probing 2770:9120 [ 295.783812][ T5237] Bluetooth: hci8: unexpected cc 0x2007 length: 100 > 2 [ 297.030616][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 297.121481][ T5303] gspca_sq905: sq905_read_data: usb_control_msg failed (-71) [ 297.129440][ T5303] sq905 2-1:0.0: probe with driver sq905 failed with error -71 [ 297.148067][ T5303] usb 2-1: USB disconnect, device number 6 [ 298.020360][ T7053] netlink: 20 bytes leftover after parsing attributes in process `syz.2.409'. [ 298.149069][ T7060] random: crng reseeded on system resumption [ 298.163980][ T7063] netlink: 4272 bytes leftover after parsing attributes in process `syz.0.413'. [ 298.189436][ T7063] netlink: 'syz.0.413': attribute type 2 has an invalid length. [ 298.205568][ T7063] netlink: 113 bytes leftover after parsing attributes in process `syz.0.413'. [ 298.305816][ T5275] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 298.466491][ T5275] usb 4-1: Using ep0 maxpacket: 8 [ 298.483313][ T5275] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 298.493889][ T5275] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 298.515260][ T5275] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 298.557423][ T5275] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 298.571581][ T5275] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 298.583818][ T5275] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.797196][ T5303] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 299.035646][ T5303] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 299.088918][ T5303] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 299.237420][ T5303] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 299.365991][ T5275] usb 4-1: GET_CAPABILITIES returned 0 [ 299.371822][ T5275] usbtmc 4-1:16.0: can't read capabilities [ 299.382909][ T5275] usb 4-1: USB disconnect, device number 8 [ 299.399494][ T5303] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 299.445366][ T5303] usb 2-1: New USB device found, idVendor=057e, idProduct=2009, bcdDevice= 0.00 [ 299.469918][ T5303] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.496690][ T5303] usb 2-1: config 0 descriptor?? [ 299.828645][ T5237] Bluetooth: hci8: Controller not accepting commands anymore: ncmd = 0 [ 299.837851][ T5237] Bluetooth: hci8: Injecting HCI hardware error event [ 299.851156][ T5237] Bluetooth: hci8: hardware error 0x00 [ 300.766286][ T5303] nintendo 0003:057E:2009.0005: unknown main item tag 0x0 [ 300.773761][ T5303] nintendo 0003:057E:2009.0005: unknown main item tag 0x0 [ 300.781883][ T5303] nintendo 0003:057E:2009.0005: item fetching failed at offset 2/5 [ 300.791768][ T5303] nintendo 0003:057E:2009.0005: HID parse failed [ 300.866547][ T5275] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 301.100952][ T5275] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 301.133068][ T5275] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 301.186371][ T5275] usb 4-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 301.222906][ T5303] nintendo 0003:057E:2009.0005: probe - fail = -22 [ 301.230422][ T5303] nintendo 0003:057E:2009.0005: probe with driver nintendo failed with error -22 [ 301.244671][ T5303] usb 2-1: USB disconnect, device number 7 [ 301.438457][ T5275] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.450546][ T5275] usb 4-1: config 0 descriptor?? [ 302.287695][ T5275] magicmouse 0003:05AC:0265.0006: unknown main item tag 0x0 [ 302.323571][ T5275] magicmouse 0003:05AC:0265.0006: unknown main item tag 0x0 [ 302.660828][ T5275] magicmouse 0003:05AC:0265.0006: unknown main item tag 0x0 [ 302.786783][ T5237] Bluetooth: hci8: Opcode 0x0c03 failed: -110 [ 302.981261][ T5275] magicmouse 0003:05AC:0265.0006: hidraw0: USB HID v0.00 Device [HID 05ac:0265] on usb-dummy_hcd.3-1/input0 [ 303.010641][ T5275] magicmouse 0003:05AC:0265.0006: magicmouse input not registered [ 303.032702][ T5275] magicmouse 0003:05AC:0265.0006: probe with driver magicmouse failed with error -12 [ 303.050980][ T5275] usb 4-1: USB disconnect, device number 9 [ 303.182599][ T7128] team0: entered promiscuous mode [ 303.202967][ T7128] team_slave_0: entered promiscuous mode [ 303.227369][ T7128] team_slave_1: entered promiscuous mode [ 303.256912][ T7128] syz_tun: entered promiscuous mode [ 303.273926][ T7125] syz_tun: left promiscuous mode [ 303.288230][ T7125] team0: left promiscuous mode [ 303.293251][ T7125] team_slave_0: left promiscuous mode [ 303.314796][ T7125] team_slave_1: left promiscuous mode [ 303.426571][ T5273] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 303.726427][ T5273] usb 5-1: Using ep0 maxpacket: 8 [ 303.746970][ T5273] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 303.768422][ T5273] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.851759][ T5275] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 303.904843][ T5273] usb 5-1: Product: syz [ 304.007916][ T5275] usb 4-1: Using ep0 maxpacket: 16 [ 304.060027][ T5275] usb 4-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 304.104149][ T5273] usb 5-1: Manufacturer: syz [ 304.182296][ T5273] usb 5-1: SerialNumber: syz [ 304.207476][ T5275] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.318308][ T5273] usb 5-1: config 0 descriptor?? [ 304.337775][ T5275] usb 4-1: Product: syz [ 304.356108][ T5275] usb 4-1: Manufacturer: syz [ 304.371466][ T5275] usb 4-1: SerialNumber: syz [ 304.389321][ T5275] usb 4-1: config 0 descriptor?? [ 304.428554][ T5275] ssu100 4-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 304.467305][ T7148] syz.1.443[7148] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 304.467406][ T7148] syz.1.443[7148] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 304.497960][ T7148] syz.1.443[7148] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 304.551325][ T29] audit: type=1326 audit(1728182350.168:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7147 comm="syz.1.443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e5b77dff9 code=0x7ffc0000 [ 304.601126][ T5273] usb 5-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 304.610950][ T7151] syz_tun: entered promiscuous mode [ 304.633999][ T29] audit: type=1326 audit(1728182350.168:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7147 comm="syz.1.443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f4e5b77dff9 code=0x7ffc0000 [ 304.673268][ T7151] syz_tun: left promiscuous mode [ 304.674500][ T29] audit: type=1326 audit(1728182350.168:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7147 comm="syz.1.443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e5b77dff9 code=0x7ffc0000 [ 304.704254][ T29] audit: type=1326 audit(1728182350.168:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7147 comm="syz.1.443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e5b77dff9 code=0x7ffc0000 [ 304.757776][ T29] audit: type=1326 audit(1728182350.168:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7147 comm="syz.1.443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f4e5b77dff9 code=0x7ffc0000 [ 304.831558][ T29] audit: type=1326 audit(1728182350.168:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7147 comm="syz.1.443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e5b77dff9 code=0x7ffc0000 [ 304.884352][ T29] audit: type=1326 audit(1728182350.168:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7147 comm="syz.1.443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e5b77dff9 code=0x7ffc0000 [ 304.916359][ T29] audit: type=1326 audit(1728182350.168:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7147 comm="syz.1.443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=264 compat=0 ip=0x7f4e5b77dff9 code=0x7ffc0000 [ 304.938302][ T29] audit: type=1326 audit(1728182350.168:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7147 comm="syz.1.443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e5b77dff9 code=0x7ffc0000 [ 304.962229][ T29] audit: type=1326 audit(1728182350.168:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7147 comm="syz.1.443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e5b77dff9 code=0x7ffc0000 [ 305.437026][ T5275] ssu100 4-1:0.0: probe with driver ssu100 failed with error -110 [ 305.966877][ T5273] usb write operation failed. (-71) [ 305.979949][ T5273] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 305.991992][ T5273] dvbdev: DVB: registering new adapter (Terratec H7) [ 306.001825][ T5273] usb 5-1: media controller created [ 306.012048][ T5273] usb read operation failed. (-71) [ 306.021260][ T5273] usb write operation failed. (-71) [ 306.043696][ T5273] dvb_usb_az6007 5-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 306.095278][ T5273] usb 5-1: USB disconnect, device number 7 [ 306.167034][ T5303] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 306.318360][ T5303] usb 3-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 306.354738][ T5303] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.391775][ T5303] usb 3-1: config 0 descriptor?? [ 306.420731][ T5303] gspca_main: spca508-2.14.0 probing 8086:0110 [ 306.574680][ T5273] usb 4-1: USB disconnect, device number 10 [ 306.644325][ T5303] gspca_spca508: reg_read err -32 [ 306.656554][ T5303] gspca_spca508: reg_read err -32 [ 306.664075][ T5303] gspca_spca508: reg_read err -32 [ 306.691162][ T5303] gspca_spca508: reg_read err -32 [ 306.900854][ T5303] gspca_spca508: reg write: error -71 [ 306.906450][ T5303] spca508 3-1:0.0: probe with driver spca508 failed with error -71 [ 306.924982][ T5303] usb 3-1: USB disconnect, device number 5 [ 307.246740][ T5273] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 307.442374][ T9] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 307.443550][ T5273] usb 2-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 307.466306][ T5273] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.519525][ T5273] usb 2-1: config 0 descriptor?? [ 307.655936][ T5273] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 307.819446][ T7214] netlink: 'syz.0.466': attribute type 2 has an invalid length. [ 307.968156][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 308.003439][ T5273] cpia1 2-1:0.0: unexpected state after lo power cmd: 00 [ 308.010038][ T9] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 308.030678][ T9] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 308.044321][ T9] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 308.065448][ T9] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 308.085923][ T9] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 308.099807][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.139402][ T5220] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 308.308078][ T5220] usb 3-1: Using ep0 maxpacket: 8 [ 308.320283][ T9] usb 4-1: GET_CAPABILITIES returned 0 [ 308.330090][ T9] usbtmc 4-1:16.0: can't read capabilities [ 308.337489][ T5220] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 308.354461][ T5220] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 308.365927][ T5220] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 115, changing to 10 [ 308.411837][ T5273] gspca_cpia1: usb_control_msg 02, error -71 [ 308.436346][ T5220] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 18277, setting to 1024 [ 308.459570][ T5273] cpia1 2-1:0.0: only firmware version 1 is supported (got: 0) [ 308.496036][ T5220] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 308.518016][ T5273] usb 2-1: USB disconnect, device number 8 [ 308.546516][ T5275] usb 4-1: USB disconnect, device number 11 [ 308.564390][ T5220] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.601823][ T7234] netlink: 'syz.0.474': attribute type 11 has an invalid length. [ 308.610000][ T7216] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 308.629237][ T5220] hub 3-1:1.0: bad descriptor, ignoring hub [ 308.643365][ T5220] hub 3-1:1.0: probe with driver hub failed with error -5 [ 308.655618][ T5220] cdc_wdm 3-1:1.0: skipping garbage [ 308.668135][ T5220] cdc_wdm 3-1:1.0: skipping garbage [ 308.675964][ T5220] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 308.688794][ T5220] cdc_wdm 3-1:1.0: Unknown control protocol [ 308.829479][ T7239] bridge0: port 3(vlan3) entered blocking state [ 308.839934][ T7239] bridge0: port 3(vlan3) entered disabled state [ 308.849819][ T7239] vlan3: entered allmulticast mode [ 308.859101][ T7239] vlan3: left allmulticast mode [ 309.353577][ T7216] usb 3-1: reset high-speed USB device number 6 using dummy_hcd [ 309.574597][ T7240] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 309.615954][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 309.622861][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 309.630468][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 309.637110][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 309.643813][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 309.651012][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 309.657265][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 309.706605][ T5220] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 309.876794][ T5220] usb 4-1: Using ep0 maxpacket: 8 [ 309.888205][ T5220] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 309.904002][ T5220] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 309.921554][ T5220] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 309.933906][ T5220] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 309.947294][ T5275] usb 3-1: USB disconnect, device number 6 [ 309.957179][ T5220] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 309.974685][ T5220] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 309.984135][ T5220] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.185685][ T7283] syzkaller1: entered promiscuous mode [ 310.191600][ T7283] syzkaller1: entered allmulticast mode [ 310.212309][ T5220] usb 4-1: usb_control_msg returned -32 [ 310.218343][ T5220] usbtmc 4-1:16.0: can't read capabilities [ 310.553907][ T7290] team0: entered promiscuous mode [ 310.560578][ T7290] team_slave_0: entered promiscuous mode [ 310.579457][ T7290] team_slave_1: entered promiscuous mode [ 310.590736][ T7290] team_slave_1: left promiscuous mode [ 310.639780][ T7290] team0: Port device team_slave_1 removed [ 310.662925][ T7289] team0: left promiscuous mode [ 310.690505][ T7289] team_slave_0: left promiscuous mode [ 310.732626][ T7295] TCP: request_sock_subflow_v6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 310.899556][ T7302] netlink: 20 bytes leftover after parsing attributes in process `syz.2.498'. [ 310.998382][ T7305] usbtmc 4-1:16.0: usb_control_msg returned -32 [ 311.198024][ T9] usb 4-1: USB disconnect, device number 12 [ 311.295565][ T5220] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 311.446440][ T5220] usb 2-1: Using ep0 maxpacket: 32 [ 311.529390][ T5220] usb 2-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 311.625878][ T5220] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.741862][ T5220] usb 2-1: Product: syz [ 311.796693][ T5220] usb 2-1: Manufacturer: syz [ 311.891466][ T5220] usb 2-1: SerialNumber: syz [ 312.030505][ T5220] usb 2-1: config 0 descriptor?? [ 312.039583][ T5220] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 312.151851][ T55] Bluetooth: hci1: command 0x0405 tx timeout [ 312.566419][ T5273] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 312.678717][ T7333] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 312.692651][ T7333] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 312.706708][ T7333] bond0 (unregistering): Released all slaves [ 312.730679][ T5273] usb 5-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 312.743053][ T5273] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.751958][ T5273] usb 5-1: Product: syz [ 312.756756][ T5273] usb 5-1: Manufacturer: syz [ 312.761514][ T5273] usb 5-1: SerialNumber: syz [ 312.780064][ T5273] usb 5-1: config 0 descriptor?? [ 313.615116][ T5220] gspca_stk1135: reg_w 0xd err -71 [ 313.623244][ T5220] gspca_stk1135: serial bus timeout: status=0x00 [ 313.669203][ T5220] gspca_stk1135: Sensor write failed [ 313.811108][ T5220] gspca_stk1135: serial bus timeout: status=0x00 [ 313.818882][ T5220] gspca_stk1135: Sensor write failed [ 313.825305][ T5220] gspca_stk1135: serial bus timeout: status=0x00 [ 313.869503][ T5220] gspca_stk1135: Sensor read failed [ 313.895425][ T5220] gspca_stk1135: serial bus timeout: status=0x00 [ 313.942984][ T5220] gspca_stk1135: Sensor read failed [ 313.959633][ T5220] gspca_stk1135: Detected sensor type unknown (0x0) [ 313.993160][ T7352] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 314.200339][ T5220] gspca_stk1135: serial bus timeout: status=0x00 [ 314.206977][ T5220] gspca_stk1135: Sensor read failed [ 314.212370][ T5220] gspca_stk1135: serial bus timeout: status=0x00 [ 314.219523][ T5220] gspca_stk1135: Sensor read failed [ 314.224797][ T5220] gspca_stk1135: serial bus timeout: status=0x00 [ 314.231753][ T5220] gspca_stk1135: Sensor write failed [ 314.237770][ T5220] gspca_stk1135: serial bus timeout: status=0x00 [ 314.245008][ T5220] gspca_stk1135: Sensor write failed [ 314.251873][ T5220] stk1135 2-1:0.0: probe with driver stk1135 failed with error -71 [ 314.712348][ T5273] usb 5-1: f81604_read: reg: 100e failed: -EPROTO [ 314.903778][ T5220] usb 2-1: USB disconnect, device number 9 [ 314.915742][ T5273] usb 5-1: f81604_read: reg: 200f failed: -EPROTO [ 314.928928][ T5273] usb 5-1: USB disconnect, device number 8 [ 314.944608][ T5273] usb 5-1: f81604_read: reg: 100f failed: -ENODEV [ 314.973593][ T7366] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 315.090662][ T5273] usb 5-1: f81604_read: reg: 200f failed: -ENODEV [ 315.438232][ T5220] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 316.206288][ T5220] usb 2-1: Using ep0 maxpacket: 8 [ 316.253071][ T5220] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 316.282591][ T5220] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 316.326305][ T5220] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 316.338265][ T5220] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 316.370745][ T5220] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 316.426672][ T5220] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 316.434243][ T5220] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 316.445603][ T5220] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 316.457596][ T5220] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 316.468866][ T5220] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 316.506582][ T5220] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 316.514319][ T5220] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 316.547001][ T5220] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 316.559535][ T5220] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 316.570894][ T5220] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 316.693489][ T5220] usb 2-1: string descriptor 0 read error: -22 [ 316.705462][ T29] audit: type=1326 audit(1728182362.308:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7410 comm="syz.2.535" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f646737dff9 code=0x0 [ 316.729637][ T5220] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 316.739488][ T5220] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.762265][ T5220] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 317.263633][ T7436] trusted_key: syz.4.539 sent an empty control message without MSG_MORE. [ 317.328867][ T5220] usb 2-1: USB disconnect, device number 10 [ 317.366719][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.376377][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.939553][ T7448] netlink: 332 bytes leftover after parsing attributes in process `syz.3.541'. [ 317.948819][ T7448] netlink: 652 bytes leftover after parsing attributes in process `syz.3.541'. [ 319.458036][ T7478] Bluetooth: MGMT ver 1.23 [ 320.044223][ T7486] syz_tun: entered promiscuous mode [ 320.056465][ T7486] macvlan2: entered promiscuous mode [ 320.072231][ T7486] macvlan2: entered allmulticast mode [ 320.090147][ T7486] syz_tun: entered allmulticast mode [ 320.112437][ T7487] IPVS: Error joining to the multicast group [ 320.261266][ T7490] netlink: 'syz.4.555': attribute type 29 has an invalid length. [ 320.298327][ T7490] netlink: 'syz.4.555': attribute type 29 has an invalid length. [ 320.311725][ T7490] netlink: 'syz.4.555': attribute type 29 has an invalid length. [ 320.329735][ T7494] all: renamed from bridge_slave_0 (while UP) [ 320.339141][ T7490] netlink: 'syz.4.555': attribute type 29 has an invalid length. [ 320.369266][ T7490] netlink: 'syz.4.555': attribute type 29 has an invalid length. [ 320.391461][ T7490] netlink: 'syz.4.555': attribute type 29 has an invalid length. [ 322.216408][ T29] audit: type=1326 audit(1728182367.818:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7530 comm="syz.0.568" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f57edf7dff9 code=0x0 [ 322.253806][ T7532] vivid-001: disconnect [ 322.886281][ T5273] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 323.013728][ T7530] vivid-001: reconnect [ 323.046656][ T5273] usb 5-1: Using ep0 maxpacket: 8 [ 323.063618][ T5273] usb 5-1: unable to get BOS descriptor or descriptor too short [ 323.073705][ T5273] usb 5-1: config 1 interface 0 altsetting 16 bulk endpoint 0x1 has invalid maxpacket 32 [ 323.091999][ T5273] usb 5-1: config 1 interface 0 has no altsetting 0 [ 323.114742][ T5273] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 323.124478][ T5273] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.154733][ T5273] usb 5-1: Product: syz [ 323.159492][ T5273] usb 5-1: Manufacturer: syz [ 323.171733][ T5273] usb 5-1: SerialNumber: syz [ 323.204424][ T7534] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 323.266316][ T5220] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 323.430497][ T5220] usb 2-1: Using ep0 maxpacket: 32 [ 323.451018][ T5220] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 323.474900][ T5220] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 323.495393][ T5220] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 323.516311][ T5220] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 323.535268][ T5220] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 323.553901][ T5220] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 323.573301][ T5220] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 323.589297][ T5220] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.629808][ T5220] usb 2-1: config 0 descriptor?? [ 323.918925][ T5273] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 9 if 0 alt 16 proto 1 vid 0x0525 pid 0xA4A8 [ 323.982101][ T5220] usblp 2-1:0.0: usblp1: USB Bidirectional printer dev 11 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 324.224798][ T5220] usb 5-1: USB disconnect, device number 9 [ 324.243849][ T5220] usblp0: removed [ 324.256621][ T9] usb 2-1: USB disconnect, device number 11 [ 324.294232][ T9] usblp1: removed [ 324.846457][ T9] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 324.905457][ T7565] netlink: 4 bytes leftover after parsing attributes in process `syz.4.580'. [ 325.065232][ T7572] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 325.083114][ T9] usb 4-1: config 1 interface 0 has no altsetting 0 [ 325.095265][ T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 325.108676][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.117073][ T9] usb 4-1: Product: syz [ 325.121532][ T9] usb 4-1: Manufacturer: syz [ 325.126471][ T9] usb 4-1: SerialNumber: syz [ 325.276545][ T5225] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 325.463353][ T5225] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 325.493249][ T5225] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 325.522527][ T5225] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 325.531953][ T5225] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.545319][ T5225] usb 5-1: config 0 descriptor?? [ 325.765892][ T9] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 13 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 326.217215][ T5225] usb 5-1: string descriptor 0 read error: -22 [ 326.708088][ T5225] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.0007/input/input7 [ 326.952154][ T5225] uclogic 0003:256C:006D.0007: input,hidraw0: USB HID v0.00 Device [HID 256c:006d] on usb-dummy_hcd.4-1/input0 [ 326.986121][ T5225] usb 5-1: USB disconnect, device number 10 [ 327.644366][ T5225] usb 4-1: USB disconnect, device number 13 [ 327.680392][ T5225] usblp0: removed [ 334.090575][ T7685] netlink: 'syz.1.621': attribute type 12 has an invalid length. [ 335.680776][ T5237] block nbd1: Receive control failed (result -107) [ 335.741752][ T7706] nbd1: detected capacity change from 0 to 9007199254741008 [ 335.831960][ T5787] block nbd1: Dead connection, failed to find a fallback [ 335.865330][ T5787] block nbd1: shutting down sockets [ 335.901705][ T5787] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 335.922062][ T5787] Buffer I/O error on dev nbd1, logical block 0, async page read [ 335.935044][ T5787] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 335.966952][ T5787] Buffer I/O error on dev nbd1, logical block 0, async page read [ 335.977023][ T5787] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 336.009532][ T5787] Buffer I/O error on dev nbd1, logical block 0, async page read [ 336.043115][ T5787] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 336.060505][ T5787] Buffer I/O error on dev nbd1, logical block 0, async page read [ 336.085927][ T5787] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 336.096616][ T5787] Buffer I/O error on dev nbd1, logical block 0, async page read [ 336.124369][ T5787] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 336.146838][ T5787] Buffer I/O error on dev nbd1, logical block 0, async page read [ 336.175273][ T5787] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 336.186616][ T5787] Buffer I/O error on dev nbd1, logical block 0, async page read [ 336.196579][ T5787] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 336.205725][ T5787] Buffer I/O error on dev nbd1, logical block 0, async page read [ 336.214413][ T5787] ldm_validate_partition_table(): Disk read failed. [ 336.222313][ T5787] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 336.232559][ T5787] Buffer I/O error on dev nbd1, logical block 0, async page read [ 336.240645][ T5787] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 336.250335][ T5787] Buffer I/O error on dev nbd1, logical block 0, async page read [ 336.258842][ T5787] Dev nbd1: unable to read RDB block 0 [ 336.265047][ T5787] nbd1: unable to read partition table [ 336.288439][ T5787] ldm_validate_partition_table(): Disk read failed. [ 336.295963][ T5787] Dev nbd1: unable to read RDB block 0 [ 336.302189][ T5787] nbd1: unable to read partition table [ 339.908053][ T5235] Bluetooth: hci6: command 0x0406 tx timeout [ 339.908115][ T5229] Bluetooth: hci7: command 0x0406 tx timeout [ 343.661108][ T7843] usb usb5: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 343.737165][ T29] audit: type=1326 audit(1728182389.347:14): auid=4294967295 uid=16832 gid=0 ses=4294967295 subj=_ pid=7841 comm="syz.3.672" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa20337dff9 code=0x0 [ 346.086349][ T5225] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 346.236246][ T5225] usb 2-1: Using ep0 maxpacket: 32 [ 346.348852][ T5225] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 346.398412][ T5225] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 346.465073][ T5225] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 346.522231][ T5225] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.587441][ T5225] usb 2-1: config 0 descriptor?? [ 346.627028][ T5225] hub 2-1:0.0: USB hub found [ 346.836028][ T5225] hub 2-1:0.0: 1 port detected [ 347.998119][ T8] hub 2-1:0.0: activate --> -90 [ 348.147452][ T7943] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 348.209665][ T5225] hub 2-1:0.0: hub_ext_port_status failed (err = -71) [ 348.234936][ T5225] usb 2-1: USB disconnect, device number 12 [ 348.243852][ T8] usb 2-1: Failed to suspend device, error -19 [ 351.814600][ T8001] loop8: detected capacity change from 0 to 6 [ 351.846991][ T8001] Dev loop8: unable to read RDB block 6 [ 351.852959][ T8001] loop8: unable to read partition table [ 351.859247][ T8001] loop8: partition table beyond EOD, truncated [ 351.865450][ T8001] loop_reread_partitions: partition scan of loop8 (被xڬdƤݡ [ 351.865450][ T8001] ) failed (rc=-5) [ 352.532158][ T8017] netlink: 32 bytes leftover after parsing attributes in process `syz.1.730'. [ 352.587897][ T8018] netlink: 4 bytes leftover after parsing attributes in process `syz.1.730'. [ 354.326530][ C0] Unknown status report in ack skb [ 360.394245][ T5237] Bluetooth: hci1: command 0x0405 tx timeout [ 361.092260][ T8096] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 361.106709][ T8096] syzkaller0: linktype set to 65535 [ 361.220392][ T8114] input: syz1 as /devices/virtual/input/input8 [ 363.995094][ T8162] syzkaller0: entered promiscuous mode [ 364.026126][ T8166] input: syz0 as /devices/virtual/input/input9 [ 364.033014][ T8162] syzkaller0: entered allmulticast mode [ 364.636529][ T5220] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 365.747691][ T5220] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 365.767961][ T5220] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 365.778168][ T5220] usb 4-1: New USB device found, idVendor=056a, idProduct=00e5, bcdDevice= 0.00 [ 365.787866][ T5220] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 365.816598][ T5220] usb 4-1: config 0 descriptor?? [ 365.910269][ T5273] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 366.077015][ T5273] usb 5-1: Using ep0 maxpacket: 32 [ 366.094476][ T5273] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 366.103601][ T5273] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 366.112677][ T5273] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 366.121927][ T5273] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 366.131893][ T5273] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 366.142076][ T5273] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 366.155408][ T5273] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 366.164917][ T5273] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.180510][ T5273] usb 5-1: config 0 descriptor?? [ 366.253314][ T5220] wacom 0003:056A:00E5.0008: hidraw0: USB HID v0.00 Device [HID 056a:00e5] on usb-dummy_hcd.3-1/input0 [ 366.407428][ T5273] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 11 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 366.421879][ T5273] usb 5-1: USB disconnect, device number 11 [ 366.457380][ T5273] usblp0: removed [ 366.461069][ T5303] usb 4-1: USB disconnect, device number 14 [ 366.957954][ T5273] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 367.116472][ T5273] usb 5-1: Using ep0 maxpacket: 32 [ 367.123794][ T5273] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 367.135081][ T5273] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 367.154938][ T5273] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 367.164565][ T5273] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 367.174798][ T5273] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 367.184893][ T5273] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 367.198189][ T5273] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 367.207599][ T5273] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 367.226624][ T5273] usb 5-1: config 0 descriptor?? [ 367.447838][ T5273] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 12 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 367.692561][ T5273] usb 5-1: USB disconnect, device number 12 [ 367.731410][ T5273] usblp0: removed [ 368.616718][ T8192] netlink: 4 bytes leftover after parsing attributes in process `syz.4.781'. [ 368.707041][ T8192] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 368.716953][ T8192] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 368.725787][ T8192] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 368.735454][ T8192] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 368.787024][ T8192] vxlan0: entered promiscuous mode [ 370.031150][ T8206] vlan2: entered allmulticast mode [ 370.047897][ T8206] bridge0: entered allmulticast mode [ 370.087297][ T8206] bridge0: port 3(vlan2) entered blocking state [ 370.109358][ T8206] bridge0: port 3(vlan2) entered disabled state [ 370.145139][ T8206] bridge0: left allmulticast mode [ 370.231339][ T29] audit: type=1326 audit(1728182415.847:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8209 comm="syz.1.788" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4e5b77dff9 code=0x0 [ 370.282399][ T5237] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 370.293767][ T5237] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 370.306427][ T5237] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 370.326521][ T5237] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 370.342552][ T5237] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 370.353036][ T5237] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 371.313093][ T8213] chnl_net:caif_netlink_parms(): no params data found [ 371.527343][ T5237] Bluetooth: hci7: unexpected event for opcode 0x2003 [ 371.593377][ T8213] bridge0: port 1(bridge_slave_0) entered blocking state [ 371.601019][ T8213] bridge0: port 1(bridge_slave_0) entered disabled state [ 371.615201][ T8213] bridge_slave_0: entered allmulticast mode [ 371.627665][ T8213] bridge_slave_0: entered promiscuous mode [ 371.661539][ T8213] bridge0: port 2(bridge_slave_1) entered blocking state [ 371.666516][ T5220] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 371.684858][ T8213] bridge0: port 2(bridge_slave_1) entered disabled state [ 371.721619][ T8213] bridge_slave_1: entered allmulticast mode [ 371.737316][ T8213] bridge_slave_1: entered promiscuous mode [ 371.829275][ T8213] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 371.855484][ T8213] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 371.954234][ T8213] team0: Port device team_slave_0 added [ 371.963252][ T8213] team0: Port device team_slave_1 added [ 372.006406][ T5220] usb 4-1: Using ep0 maxpacket: 16 [ 372.020636][ T5220] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 372.186694][ T8213] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 372.226611][ T5220] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 372.257541][ T8213] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 372.310714][ T5220] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 372.414118][ T5220] usb 4-1: Product: syz [ 372.469622][ T5237] Bluetooth: hci2: command tx timeout [ 372.495773][ T5220] usb 4-1: Manufacturer: syz [ 372.512557][ T9] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 372.527325][ T5220] usb 4-1: SerialNumber: syz [ 372.529845][ T8213] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 372.548258][ T5220] usb 4-1: config 0 descriptor?? [ 372.565508][ T8213] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 372.616203][ T8213] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 372.658212][ T5220] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 372.671583][ T5220] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 372.684480][ T8213] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 372.698017][ T9] usb 5-1: config 0 has an invalid interface number: 72 but max is 0 [ 372.707346][ T9] usb 5-1: config 0 has no interface number 0 [ 372.713490][ T9] usb 5-1: config 0 interface 72 has no altsetting 0 [ 372.753595][ T9] usb 5-1: New USB device found, idVendor=2c7c, idProduct=0800, bcdDevice=40.21 [ 372.769215][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 372.786280][ T9] usb 5-1: Product: syz [ 372.810242][ T9] usb 5-1: Manufacturer: syz [ 372.835644][ T9] usb 5-1: SerialNumber: syz [ 372.864187][ T9] usb 5-1: config 0 descriptor?? [ 372.877710][ T8213] hsr_slave_0: entered promiscuous mode [ 372.889428][ T9] option 5-1:0.72: GSM modem (1-port) converter detected [ 372.905916][ T8213] hsr_slave_1: entered promiscuous mode [ 372.935815][ T8213] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 372.948073][ T8213] Cannot create hsr debugfs directory [ 373.220534][ T5220] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 373.282846][ T9] usb 5-1: USB disconnect, device number 13 [ 373.293187][ T9] option 5-1:0.72: device disconnected [ 373.427221][ T8213] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.556362][ T8213] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.694395][ T8213] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.864192][ T8213] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.901268][ T5220] em28xx 4-1:0.0: failed to get i2c transfer status from bridge register (error=-5) [ 373.939758][ T5220] em28xx 4-1:0.0: board has no eeprom [ 374.027050][ T5220] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 374.049968][ T5220] em28xx 4-1:0.0: dvb set to bulk mode. [ 374.056358][ T5275] em28xx 4-1:0.0: Binding DVB extension [ 374.090384][ T5220] usb 4-1: USB disconnect, device number 15 [ 374.104095][ T5220] em28xx 4-1:0.0: Disconnecting em28xx [ 374.233995][ T8213] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 374.253118][ T8213] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 374.257049][ T5275] em28xx 4-1:0.0: Registering input extension [ 374.276101][ T8213] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 374.277361][ T5220] em28xx 4-1:0.0: Closing input extension [ 374.313481][ T8213] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 374.395983][ T5220] em28xx 4-1:0.0: Freeing device [ 374.546857][ T5237] Bluetooth: hci2: command tx timeout [ 374.783740][ T8213] 8021q: adding VLAN 0 to HW filter on device bond0 [ 374.818875][ T8213] 8021q: adding VLAN 0 to HW filter on device team0 [ 374.842528][ T5426] bridge0: port 1(bridge_slave_0) entered blocking state [ 374.850061][ T5426] bridge0: port 1(bridge_slave_0) entered forwarding state [ 374.962534][ T5426] bridge0: port 2(bridge_slave_1) entered blocking state [ 374.970109][ T5426] bridge0: port 2(bridge_slave_1) entered forwarding state [ 375.632436][ T5237] Bluetooth: hci7: Controller not accepting commands anymore: ncmd = 0 [ 375.641529][ T5237] Bluetooth: hci7: Injecting HCI hardware error event [ 375.652115][ T5237] Bluetooth: hci7: hardware error 0x00 [ 376.265281][ T8213] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 376.315534][ T8213] veth0_vlan: entered promiscuous mode [ 376.333722][ T8213] veth1_vlan: entered promiscuous mode [ 376.369296][ T8213] veth0_macvtap: entered promiscuous mode [ 376.397112][ T8213] veth1_macvtap: entered promiscuous mode [ 376.422412][ T8213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 376.433507][ T8213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.444283][ T8213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 376.455011][ T8213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.466521][ T8213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 376.478315][ T8213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.489072][ T8213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 376.500619][ T8213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.514764][ T8213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 376.525611][ T8213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.538156][ T8213] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 376.552027][ T8213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 376.563113][ T8213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.573384][ T8213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 376.586039][ T8213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.598660][ T8213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 376.609521][ T8213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.620019][ T8213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 376.626540][ T55] Bluetooth: hci2: command tx timeout [ 376.631282][ T8213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.646316][ T5273] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 376.647547][ T8213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 376.666112][ T8213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.682711][ T8213] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 376.697611][ T8213] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.709133][ T8213] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.719238][ T8213] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.729113][ T8213] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.825777][ T5426] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 376.835983][ T5273] usb 4-1: Using ep0 maxpacket: 32 [ 376.848124][ T5426] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 376.864277][ T5273] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 376.874839][ T5273] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 376.886863][ T5273] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 151, changing to 11 [ 376.902020][ T5273] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 17729, setting to 1024 [ 376.914241][ T5273] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 376.955110][ T5273] usb 4-1: config 0 interface 0 has no altsetting 0 [ 376.976114][ T5273] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 376.992397][ T3117] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 377.002882][ T5273] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 377.977198][ T5237] Bluetooth: hci7: Opcode 0x0c03 failed: -110 [ 378.043848][ T5273] usb 4-1: Product: syz [ 378.055477][ T5273] usb 4-1: Manufacturer: syz [ 378.060555][ T5273] usb 4-1: SerialNumber: syz [ 378.976415][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.982765][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.987407][ T5273] usb 4-1: config 0 descriptor?? [ 381.006653][ T5237] Bluetooth: hci2: command tx timeout [ 383.016417][ T3117] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 387.016976][ T5273] usb 4-1: can't set config #0, error -110 [ 389.187735][ T5273] usb 4-1: USB disconnect, device number 16 [ 418.768479][ T5229] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 418.779898][ T5229] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 418.794132][ T5229] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 418.804543][ T5229] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 419.801009][ T5229] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 419.809698][ T5229] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 429.086410][ T5237] Bluetooth: hci2: command tx timeout [ 429.093428][ T5237] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 429.101484][ T55] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 430.078973][ T5229] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 430.088904][ T5229] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 430.097705][ T5229] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 430.105720][ T5229] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 431.141159][ T5237] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 432.148077][ T55] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 433.149710][ T55] Bluetooth: hci2: command tx timeout [ 433.196523][ T55] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 433.197181][ T5229] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 433.206266][ T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 433.220183][ T55] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 433.230298][ T55] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 433.241865][ T5229] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 435.225145][ T5229] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 435.235056][ T5229] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 435.239336][ T11] kworker/u8:0 (11) used greatest stack depth: 18552 bytes left [ 435.243592][ T5229] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 436.200924][ T5229] Bluetooth: hci2: command tx timeout [ 437.288484][ T5237] Bluetooth: hci0: command tx timeout [ 439.406366][ T5237] Bluetooth: hci2: command tx timeout [ 439.406422][ T5229] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 439.412851][ T5237] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 439.446833][ T55] Bluetooth: hci3: command tx timeout [ 440.367848][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.374579][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.375333][ T55] Bluetooth: hci0: command tx timeout [ 442.391638][ T5235] Bluetooth: hci3: command tx timeout [ 442.397610][ T5235] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 443.356356][ T5235] Bluetooth: hci0: command tx timeout [ 443.384073][ T8332] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 445.366978][ T5791] syz_tun (unregistering): left allmulticast mode [ 445.371009][ T8332] Bluetooth: hci3: command tx timeout [ 445.379494][ T5235] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 445.387991][ T5235] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 445.396242][ T5235] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 445.404341][ T5235] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 446.358285][ T5235] Bluetooth: hci0: command tx timeout [ 448.367826][ T5235] Bluetooth: hci3: command tx timeout [ 449.376241][ T5235] Bluetooth: hci4: command tx timeout [ 452.390194][ T8332] Bluetooth: hci4: command tx timeout [ 454.476314][ T5235] Bluetooth: hci4: command tx timeout [ 457.508698][ T5235] Bluetooth: hci4: command tx timeout [ 472.357659][ T8332] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 473.367752][ T8332] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 473.386483][ T8332] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 477.329100][ T55] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 477.349265][ T8332] Bluetooth: hci6: Opcode 0x0c03 failed: -110 [ 477.357436][ T55] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 477.365263][ T55] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 478.429285][ T5235] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 481.495699][ T8342] Bluetooth: hci6: Opcode 0x0c03 failed: -110 [ 484.586342][ T55] Bluetooth: hci5: command tx timeout [ 486.686285][ T55] Bluetooth: hci5: command tx timeout [ 486.702977][ T5403] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 488.706320][ T55] Bluetooth: hci5: command tx timeout [ 490.796327][ T5235] Bluetooth: hci5: command tx timeout [ 495.306879][ T55] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 495.326296][ T55] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 500.384602][ T5235] Bluetooth: hci2: Opcode 0x1001 failed: -110 [ 500.396642][ T55] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 501.383073][ T55] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 501.390805][ T55] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 501.399263][ T55] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 502.346789][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.353110][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.369789][ T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 502.383881][ T55] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 502.392038][ T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 507.363919][ T55] Bluetooth: hci2: command tx timeout [ 507.395524][ T8332] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 508.366101][ T8332] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 508.379830][ T8332] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 509.366728][ T8332] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 509.386522][ T8332] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 510.354831][ T5235] Bluetooth: hci2: command tx timeout [ 510.361514][ T8332] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 512.382204][ T5403] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 512.397755][ T8332] Bluetooth: hci2: command tx timeout [ 514.363802][ T8332] Bluetooth: hci4: command tx timeout [ 515.432055][ T8332] Bluetooth: hci2: command tx timeout [ 515.501054][ T55] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 516.466496][ T55] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 516.467114][ T5235] Bluetooth: hci4: command tx timeout [ 516.537620][ T5235] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 516.647616][ T5235] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 516.662684][ T5235] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 516.678177][ T5235] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 519.456578][ T5235] Bluetooth: hci4: command tx timeout [ 519.499565][ T5403] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 519.516708][ T5235] Bluetooth: hci6: command tx timeout [ 521.508679][ T5235] Bluetooth: hci4: command tx timeout [ 522.471798][ T5235] Bluetooth: hci6: command tx timeout [ 525.456597][ T5235] Bluetooth: hci6: command tx timeout [ 527.566405][ T8332] Bluetooth: hci6: command tx timeout [ 527.657684][ T5235] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 527.664602][ T5403] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 527.676569][ T5235] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 528.706278][ T5235] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 528.716672][ T5235] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 528.724337][ T5235] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 528.736670][ T5235] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 530.683170][ T8332] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 531.746628][ T8332] Bluetooth: hci7: command tx timeout [ 531.757844][ T8332] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 532.666496][ T8332] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 532.677429][ T8332] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 532.685070][ T8332] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 532.692871][ T8332] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 533.826290][ T5235] Bluetooth: hci7: command tx timeout [ 535.906966][ T8332] Bluetooth: hci8: command tx timeout [ 535.913248][ T8332] Bluetooth: hci7: command tx timeout [ 538.947524][ T8332] Bluetooth: hci8: command tx timeout [ 538.947533][ T5235] Bluetooth: hci7: command tx timeout [ 542.007037][ T5235] Bluetooth: hci8: command tx timeout [ 545.096372][ T5235] Bluetooth: hci8: command tx timeout [ 548.141945][ T5235] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 548.151766][ T5235] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 550.066716][ T5235] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 550.148067][ T5235] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 550.156437][ T5235] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 550.165212][ T5235] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 554.146335][ T5235] Bluetooth: hci9: command tx timeout [ 557.158107][ T5235] Bluetooth: hci9: command tx timeout [ 559.206277][ T55] Bluetooth: hci9: command tx timeout [ 560.229097][ T55] Bluetooth: hci0: command 0x0406 tx timeout [ 560.235272][ T55] Bluetooth: hci3: command 0x0406 tx timeout [ 561.266339][ T55] Bluetooth: hci9: command tx timeout [ 561.364243][ T55] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 562.318252][ T5235] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 562.328682][ T5235] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 562.353743][ T5235] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 563.275362][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.282985][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.289793][ T5235] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 563.298148][ T5235] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 565.286020][ T5403] bridge_slave_1: left allmulticast mode [ 565.292265][ T5403] bridge_slave_1: left promiscuous mode [ 565.298536][ T5403] bridge0: port 2(bridge_slave_1) entered disabled state [ 566.307739][ T5235] Bluetooth: hci10: command tx timeout [ 567.297667][ T5403] bridge_slave_0: left allmulticast mode [ 567.303364][ T5403] bridge_slave_0: left promiscuous mode [ 568.296451][ T5403] bridge0: port 1(bridge_slave_0) entered disabled state [ 568.311543][ T8332] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 569.276444][ T55] Bluetooth: hci10: command tx timeout [ 569.296489][ T8332] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 569.306459][ T8332] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 569.316040][ T8332] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 570.277805][ T8332] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 570.285205][ T8332] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 572.276736][ T8332] Bluetooth: hci10: command tx timeout [ 573.272655][ T8332] Bluetooth: hci11: command tx timeout [ 574.306522][ T8332] Bluetooth: hci10: command tx timeout [ 576.275269][ T8332] Bluetooth: hci11: command tx timeout [ 578.356294][ T8332] Bluetooth: hci11: command tx timeout [ 580.386360][ T8332] Bluetooth: hci11: command tx timeout [ 601.005009][ T5235] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 602.985265][ T5235] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 603.026344][ T8332] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 603.039149][ T8332] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 603.050299][ T8332] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 603.058109][ T8332] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 603.066767][ T8332] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 603.074459][ T8332] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 603.988083][ T8332] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 605.051601][ T5235] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 605.988853][ T5235] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 606.041816][ T5235] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 606.058264][ T5235] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 606.066034][ T5235] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 606.077735][ T5235] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 607.986699][ T5235] Bluetooth: hci5: command 0x0406 tx timeout [ 607.996415][ T55] Bluetooth: hci0: command tx timeout [ 612.066446][ T5229] Bluetooth: hci0: command tx timeout [ 612.066509][ T8332] Bluetooth: hci12: command tx timeout [ 615.026604][ T8332] Bluetooth: hci0: command tx timeout [ 615.032143][ T8332] Bluetooth: hci12: command tx timeout [ 615.093634][ T5229] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 616.073229][ T5229] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 616.083079][ T5229] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 616.091705][ T5229] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 616.100746][ T5229] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 616.111140][ T5229] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 618.066342][ T5229] Bluetooth: hci0: command tx timeout [ 618.076345][ T8332] Bluetooth: hci12: command tx timeout [ 619.126324][ T5229] Bluetooth: hci13: command tx timeout [ 620.146457][ T5229] Bluetooth: hci12: command tx timeout [ 621.712659][ T5229] Bluetooth: hci13: command tx timeout [ 622.759399][ T8332] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 622.791984][ T8332] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 624.707165][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.714297][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.720783][ T8332] Bluetooth: hci13: command tx timeout [ 624.727821][ T8332] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 624.741013][ T8332] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 624.749113][ T8332] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 624.756613][ T8332] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 626.725158][ T8332] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 626.737637][ T8332] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 626.746984][ T8332] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 626.755357][ T8332] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 627.717959][ T5235] Bluetooth: hci13: command tx timeout [ 627.723855][ T5235] Bluetooth: hci2: command 0x0406 tx timeout [ 627.734187][ T8407] Bluetooth: hci15: unexpected cc 0x0c25 length: 249 > 3 [ 627.741986][ T8407] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 628.716996][ T5229] Bluetooth: hci14: command tx timeout [ 631.718952][ T55] Bluetooth: hci15: command tx timeout [ 631.726023][ T8407] Bluetooth: hci14: command tx timeout [ 633.748018][ T8407] Bluetooth: hci14: command tx timeout [ 633.753595][ T8407] Bluetooth: hci15: command tx timeout [ 634.736765][ T5403] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 635.769984][ T5403] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 635.781127][ T5403] bond0 (unregistering): Released all slaves [ 636.746010][ T8407] Bluetooth: hci15: command tx timeout [ 636.746080][ T5229] Bluetooth: hci14: command tx timeout [ 637.747184][ T5229] Bluetooth: hci4: command 0x0406 tx timeout [ 638.936300][ T5229] Bluetooth: hci15: command tx timeout [ 642.027370][ T55] Bluetooth: hci6: command 0x0406 tx timeout [ 653.168560][ T55] Bluetooth: hci7: command 0x0406 tx timeout [ 657.348970][ T55] Bluetooth: hci8: command 0x0406 tx timeout [ 658.437738][ T55] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 660.454258][ T5237] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 660.464977][ T5237] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 662.408990][ T5237] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 662.428857][ T5237] Bluetooth: hci16: unexpected cc 0x0c25 length: 249 > 3 [ 663.398742][ T5237] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 666.476508][ T5229] Bluetooth: hci16: command tx timeout [ 669.216683][ T5229] Bluetooth: hci16: command tx timeout [ 672.217203][ T8407] Bluetooth: hci16: command tx timeout [ 675.308951][ T8407] Bluetooth: hci16: command tx timeout [ 676.422249][ T5237] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 676.434971][ T5237] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 676.443662][ T5237] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 679.408406][ T8407] Bluetooth: hci3: Opcode 0x1009 failed: -110 [ 679.415302][ T8407] Bluetooth: hci9: command 0x0406 tx timeout [ 679.436282][ T8407] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 681.426294][ T8431] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 686.416572][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.422917][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 695.479239][ T8407] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 695.490390][ T8407] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 696.473295][ T8407] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 697.443132][ T8407] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 697.451019][ T8407] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 697.466248][ T8407] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 699.504233][ T5229] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 699.523869][ T5229] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 699.533593][ T5229] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 700.491261][ T5229] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 700.500266][ T5229] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 700.508332][ T5229] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 701.476328][ T5237] Bluetooth: hci0: command tx timeout [ 703.576288][ T5229] Bluetooth: hci0: command tx timeout [ 703.587150][ T5229] Bluetooth: hci3: command tx timeout [ 705.646276][ T5229] Bluetooth: hci0: command tx timeout [ 705.666512][ T5229] Bluetooth: hci3: command tx timeout [ 708.626667][ T5229] Bluetooth: hci0: command tx timeout [ 708.646329][ T8407] Bluetooth: hci3: command tx timeout [ 709.637257][ T5229] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 709.668529][ T5229] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 710.706757][ T5237] Bluetooth: hci3: command tx timeout [ 712.635782][ T5229] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 712.649104][ T5229] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 712.656910][ T5229] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 712.665563][ T5229] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 715.666670][ T5229] Bluetooth: hci10: command tx timeout [ 719.726286][ T5229] Bluetooth: hci10: command tx timeout [ 721.746530][ T5229] Bluetooth: hci10: command tx timeout [ 723.907005][ T5229] Bluetooth: hci10: command tx timeout [ 729.120268][ T8407] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 730.061474][ T8407] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 730.116895][ T8407] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 730.141088][ T8407] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 731.125391][ T8407] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 731.142264][ T8407] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 733.110292][ T5229] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 733.123826][ T55] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 735.086336][ T55] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 735.097949][ T55] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 735.109972][ T55] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 735.117565][ T55] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 739.056480][ T5229] Bluetooth: hci5: command tx timeout [ 739.062778][ T5229] Bluetooth: hci11: command tx timeout [ 740.139366][ T55] Bluetooth: hci13: command 0x0406 tx timeout [ 741.251708][ T55] Bluetooth: hci11: command tx timeout [ 741.251733][ T5229] Bluetooth: hci5: command tx timeout [ 744.166255][ T5237] Bluetooth: hci11: command tx timeout [ 744.167612][ T5229] Bluetooth: hci5: command tx timeout [ 746.226453][ T5229] Bluetooth: hci11: command tx timeout [ 746.232015][ T5229] Bluetooth: hci5: command tx timeout [ 748.188113][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 748.200100][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 749.208981][ T8407] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 749.233718][ T55] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 750.193722][ T5235] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 750.204771][ T5235] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 750.215993][ T55] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 750.224701][ T5235] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 750.232998][ T55] Bluetooth: hci14: command 0x0406 tx timeout [ 751.196894][ T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 751.204871][ T55] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 751.215057][ T8332] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 752.225374][ T55] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 752.234225][ T55] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 753.196656][ T55] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 754.226931][ T8407] Bluetooth: hci2: command tx timeout [ 756.194830][ T8407] Bluetooth: hci4: command tx timeout [ 756.201114][ T8407] Bluetooth: hci15: command 0x0406 tx timeout [ 757.186396][ T5229] Bluetooth: hci2: command tx timeout [ 758.226669][ T5229] Bluetooth: hci4: command tx timeout [ 760.192891][ T5229] Bluetooth: hci2: command tx timeout [ 761.188882][ T5229] Bluetooth: hci4: command tx timeout [ 761.241691][ T5403] hsr_slave_0: left promiscuous mode [ 761.254080][ T5403] hsr_slave_1: left promiscuous mode [ 761.262093][ T5403] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 762.194636][ T8407] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 762.199482][ T5403] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 762.204409][ T8407] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 762.219028][ T8407] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 762.226584][ T8407] Bluetooth: hci2: command tx timeout [ 762.229309][ T55] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 765.193394][ T5229] Bluetooth: hci12: Opcode 0x0c23 failed: -110 [ 765.207004][ T55] Bluetooth: hci4: command tx timeout [ 765.228472][ T5403] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 765.243496][ T55] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 765.256076][ T5403] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 767.214554][ T55] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 767.222061][ T55] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 767.237226][ T55] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 767.247410][ T55] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 767.257850][ T55] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 767.272961][ T5403] veth1_macvtap: left promiscuous mode [ 772.306443][ T55] Bluetooth: hci12: command tx timeout [ 772.325218][ T5403] veth0_macvtap: left promiscuous mode [ 772.340884][ T5403] veth1_vlan: left promiscuous mode [ 772.350778][ T5403] veth0_vlan: left promiscuous mode [ 774.386632][ T55] Bluetooth: hci12: command tx timeout [ 777.397124][ T55] Bluetooth: hci12: command tx timeout [ 779.507782][ T55] Bluetooth: hci12: command tx timeout [ 786.735467][ T8407] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 786.782305][ T8407] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 786.792840][ T8407] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 786.813643][ T8407] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 786.813807][ T8470] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 787.828470][ T8407] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 787.866565][ T8407] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 788.847888][ T8407] Bluetooth: hci16: unexpected cc 0x0c25 length: 249 > 3 [ 788.858089][ T8407] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 788.867694][ T8470] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 790.866333][ T55] Bluetooth: hci16: Opcode 0x0c38 failed: -110 [ 790.875301][ T55] Bluetooth: hci17: unexpected cc 0x0c25 length: 249 > 3 [ 790.883971][ T55] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 790.893790][ T8470] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 790.906788][ T5229] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 792.896627][ T8470] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 792.915007][ T8470] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 792.926537][ T8470] Bluetooth: hci16: unexpected cc 0x0c25 length: 249 > 3 [ 793.906903][ T8470] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 795.896323][ T5229] Bluetooth: hci17: command tx timeout [ 796.946777][ T5229] Bluetooth: hci16: command tx timeout [ 797.906288][ T5229] Bluetooth: hci17: command tx timeout [ 799.027261][ T5229] Bluetooth: hci16: command tx timeout [ 800.030205][ T5229] Bluetooth: hci17: command tx timeout [ 801.106795][ T5229] Bluetooth: hci16: command tx timeout [ 803.038472][ T5229] Bluetooth: hci17: command tx timeout [ 803.071014][ T5229] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 804.032631][ T55] Bluetooth: hci16: command tx timeout [ 804.069115][ T5229] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 804.083165][ T5229] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 805.032424][ T5229] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 805.056922][ T5229] Bluetooth: hci18: unexpected cc 0x0c25 length: 249 > 3 [ 805.065250][ T5229] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 807.051722][ T8470] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1 [ 807.066939][ T8470] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9 [ 808.056336][ T8470] Bluetooth: hci18: command tx timeout [ 808.056336][ T55] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9 [ 809.034707][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.046436][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.053325][ T55] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4 [ 809.061271][ T55] Bluetooth: hci19: unexpected cc 0x0c25 length: 249 > 3 [ 809.068764][ T55] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2 [ 811.036763][ T55] Bluetooth: hci18: command tx timeout [ 812.076595][ T55] Bluetooth: hci19: command tx timeout [ 814.055252][ T55] Bluetooth: hci18: command tx timeout [ 815.046450][ T55] Bluetooth: hci19: command tx timeout [ 816.066618][ T55] Bluetooth: hci18: command tx timeout [ 817.106584][ T55] Bluetooth: hci19: command tx timeout [ 818.098911][ T5229] Bluetooth: hci20: unexpected cc 0x0c03 length: 249 > 1 [ 818.111377][ T5229] Bluetooth: hci20: unexpected cc 0x1003 length: 249 > 9 [ 819.059271][ T8470] Bluetooth: hci20: unexpected cc 0x1001 length: 249 > 9 [ 819.068704][ T8470] Bluetooth: hci20: unexpected cc 0x0c23 length: 249 > 4 [ 819.076401][ T8470] Bluetooth: hci20: unexpected cc 0x0c25 length: 249 > 3 [ 819.084827][ T8470] Bluetooth: hci20: unexpected cc 0x0c38 length: 249 > 2 [ 821.077434][ T8470] Bluetooth: hci19: command tx timeout [ 823.061248][ T8470] Bluetooth: hci0: command 0x0406 tx timeout [ 823.067489][ T8470] Bluetooth: hci20: command tx timeout [ 826.103356][ T55] Bluetooth: hci20: command tx timeout [ 828.146503][ T5229] Bluetooth: hci3: command 0x0406 tx timeout [ 828.146843][ T55] Bluetooth: hci20: command tx timeout [ 831.107852][ T8470] Bluetooth: hci20: command tx timeout [ 838.250192][ T55] Bluetooth: hci10: command 0x0406 tx timeout [ 844.398334][ T5403] team0 (unregistering): Port device team_slave_1 removed [ 856.631478][ T55] Bluetooth: hci21: unexpected cc 0x0c03 length: 249 > 1 [ 857.617388][ T8470] Bluetooth: hci21: Opcode 0x0c03 failed: -110 [ 857.659625][ T55] Bluetooth: hci21: unexpected cc 0x0c03 length: 249 > 1 [ 857.671616][ T5403] team0 (unregistering): Port device team_slave_0 removed [ 857.684998][ T55] Bluetooth: hci21: unexpected cc 0x1003 length: 249 > 9 [ 858.679496][ T55] Bluetooth: hci21: unexpected cc 0x1001 length: 249 > 9 [ 858.689999][ T55] Bluetooth: hci21: unexpected cc 0x0c23 length: 249 > 4 [ 858.698326][ T55] Bluetooth: hci21: unexpected cc 0x0c25 length: 249 > 3 [ 858.707999][ T55] Bluetooth: hci21: unexpected cc 0x0c38 length: 249 > 2 [ 861.747610][ T5229] Bluetooth: hci21: command tx timeout [ 862.723640][ T5229] Bluetooth: hci5: command 0x0406 tx timeout [ 862.729721][ T8407] Bluetooth: hci11: command 0x0406 tx timeout [ 862.754788][ T8407] Bluetooth: hci22: unexpected cc 0x0c03 length: 249 > 1 [ 862.765926][ T8407] Bluetooth: hci22: unexpected cc 0x1003 length: 249 > 9 [ 862.775648][ T8407] Bluetooth: hci22: unexpected cc 0x1001 length: 249 > 9 [ 863.737043][ T8407] Bluetooth: hci22: unexpected cc 0x0c23 length: 249 > 4 [ 863.748140][ T8407] Bluetooth: hci22: unexpected cc 0x0c25 length: 249 > 3 [ 863.756852][ T8407] Bluetooth: hci22: unexpected cc 0x0c38 length: 249 > 2 [ 864.726613][ T8407] Bluetooth: hci21: command tx timeout [ 866.766331][ T8407] Bluetooth: hci22: command tx timeout [ 866.796272][ T8407] Bluetooth: hci21: command tx timeout [ 868.866309][ T8407] Bluetooth: hci22: command tx timeout [ 868.866330][ T55] Bluetooth: hci21: command tx timeout [ 869.784191][ T8407] Bluetooth: hci23: unexpected cc 0x0c03 length: 249 > 1 [ 870.717383][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.723716][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.756979][ T8407] Bluetooth: hci23: unexpected cc 0x1003 length: 249 > 9 [ 870.765588][ T8407] Bluetooth: hci23: unexpected cc 0x1001 length: 249 > 9 [ 871.725068][ T8470] Bluetooth: hci22: command tx timeout [ 871.735772][ T8407] Bluetooth: hci23: unexpected cc 0x0c23 length: 249 > 4 [ 871.743628][ T8407] Bluetooth: hci23: unexpected cc 0x0c25 length: 249 > 3 [ 871.751153][ T8407] Bluetooth: hci23: unexpected cc 0x0c38 length: 249 > 2 [ 873.746638][ T55] Bluetooth: hci22: command tx timeout [ 874.765452][ T8407] Bluetooth: hci24: unexpected cc 0x0c03 length: 249 > 1 [ 875.730041][ T8407] Bluetooth: hci23: command tx timeout [ 875.737199][ T5237] Bluetooth: hci24: unexpected cc 0x1003 length: 249 > 9 [ 875.746628][ T5237] Bluetooth: hci24: unexpected cc 0x1001 length: 249 > 9 [ 875.776521][ T5237] Bluetooth: hci24: unexpected cc 0x0c23 length: 249 > 4 [ 876.747131][ T5237] Bluetooth: hci24: unexpected cc 0x0c25 length: 249 > 3 [ 876.754645][ T5237] Bluetooth: hci24: unexpected cc 0x0c38 length: 249 > 2 [ 877.747521][ T5237] Bluetooth: hci4: command 0x0406 tx timeout [ 877.753623][ T5237] Bluetooth: hci2: command 0x0406 tx timeout [ 877.764293][ T55] Bluetooth: hci23: command tx timeout [ 880.741779][ T8470] Bluetooth: hci23: command tx timeout [ 880.747500][ T8470] Bluetooth: hci24: command tx timeout [ 881.763114][ T8470] Bluetooth: hci25: unexpected cc 0x0c03 length: 249 > 1 [ 881.773288][ T8470] Bluetooth: hci25: unexpected cc 0x1003 length: 249 > 9 [ 881.782785][ T8470] Bluetooth: hci25: unexpected cc 0x1001 length: 249 > 9 [ 881.792192][ T8470] Bluetooth: hci25: unexpected cc 0x0c23 length: 249 > 4 [ 881.800985][ T8470] Bluetooth: hci25: unexpected cc 0x0c25 length: 249 > 3 [ 882.759761][ T8470] Bluetooth: hci25: unexpected cc 0x0c38 length: 249 > 2 [ 883.751371][ T8470] Bluetooth: hci24: command tx timeout [ 883.757216][ T8332] Bluetooth: hci23: command tx timeout [ 885.748585][ T8470] Bluetooth: hci25: command tx timeout [ 885.836731][ T8470] Bluetooth: hci24: command tx timeout [ 888.814743][ T55] Bluetooth: hci24: command tx timeout [ 888.826579][ T8470] Bluetooth: hci25: command tx timeout [ 891.364571][ T8470] Bluetooth: hci25: command tx timeout [ 893.428638][ T8470] Bluetooth: hci25: command tx timeout [ 893.434188][ T8470] Bluetooth: hci12: command 0x0406 tx timeout [ 910.157337][ T8470] Bluetooth: hci26: unexpected cc 0x0c03 length: 249 > 1 [ 911.258307][ T8470] Bluetooth: hci26: unexpected cc 0x1003 length: 249 > 9 [ 911.268823][ T8470] Bluetooth: hci26: unexpected cc 0x1001 length: 249 > 9 [ 911.277089][ T8470] Bluetooth: hci26: unexpected cc 0x0c23 length: 249 > 4 [ 911.287205][ T8470] Bluetooth: hci26: unexpected cc 0x0c25 length: 249 > 3 [ 911.295719][ T8470] Bluetooth: hci26: unexpected cc 0x0c38 length: 249 > 2 [ 915.260805][ T55] Bluetooth: hci26: command tx timeout [ 915.313412][ T8470] Bluetooth: hci27: unexpected cc 0x0c03 length: 249 > 1 [ 916.299869][ T8470] Bluetooth: hci27: unexpected cc 0x1003 length: 249 > 9 [ 916.311578][ T8470] Bluetooth: hci27: unexpected cc 0x1001 length: 249 > 9 [ 916.320055][ T8470] Bluetooth: hci27: unexpected cc 0x0c23 length: 249 > 4 [ 916.328577][ T8470] Bluetooth: hci27: unexpected cc 0x0c25 length: 249 > 3 [ 916.337924][ T8470] Bluetooth: hci27: unexpected cc 0x0c38 length: 249 > 2 [ 917.353390][ T55] Bluetooth: hci26: command tx timeout [ 919.346541][ T8470] Bluetooth: hci27: command tx timeout [ 919.352484][ T55] Bluetooth: hci16: command 0x0406 tx timeout [ 919.356374][ T5229] Bluetooth: hci17: command 0x0406 tx timeout [ 920.316385][ T30] INFO: task dhcpcd:4887 blocked for more than 146 seconds. [ 920.323733][ T30] Not tainted 6.12.0-rc1-syzkaller-00330-gfc20a3e57247 #0 [ 920.332137][ T5229] Bluetooth: hci26: command tx timeout SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 921.336339][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 921.345066][ T30] task:dhcpcd state:D stack:23256 pid:4887 tgid:4887 ppid:1 flags:0x00000002 [ 922.357083][ T5229] Bluetooth: hci27: command tx timeout [ 922.396221][ T5229] Bluetooth: hci26: command tx timeout [ 922.396302][ T30] Call Trace: [ 923.517007][ T30] [ 925.386530][ T5229] Bluetooth: hci27: command tx timeout [ 925.443271][ T30] __schedule+0x1843/0x4ae0 [ 925.449003][ T30] ? __pfx___schedule+0x10/0x10 [ 925.453948][ T30] ? __pfx_lock_release+0x10/0x10 [ 926.496186][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 926.501767][ T30] ? schedule+0x90/0x320 [ 926.506038][ T30] schedule+0x14b/0x320 [ 927.508627][ T5229] Bluetooth: hci27: command tx timeout [ 928.509258][ T30] schedule_preempt_disabled+0x13/0x30 [ 928.514799][ T30] __mutex_lock+0x6a7/0xd70 [ 928.523463][ T30] ? __mutex_lock+0x52a/0xd70 [ 928.528317][ T30] ? vlan_ioctl_handler+0x112/0x9d0 [ 928.534222][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 928.546643][ T30] ? __might_fault+0xc6/0x120 [ 928.551381][ T30] vlan_ioctl_handler+0x112/0x9d0 [ 929.516185][ T30] ? sock_ioctl+0x661/0x8e0 [ 929.531524][ T30] ? __pfx_vlan_ioctl_handler+0x10/0x10 [ 929.537202][ T30] ? __asan_memset+0x23/0x50 [ 929.541828][ T30] ? smack_file_ioctl+0x29e/0x3a0 [ 929.546971][ T30] ? __pfx_vlan_ioctl_handler+0x10/0x10 [ 929.554187][ T30] sock_ioctl+0x680/0x8e0