last executing test programs: 29.02704969s ago: executing program 5 (id=3482): bind$xdp(0xffffffffffffffff, 0x0, 0x0) io_setup(0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default user:syz 000040'], 0x2a, 0xfffffffffffffffc) r4 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f0000000040), &(0x7f0000000000), &(0x7f00000002c0)='s', 0x1, 0xfffffffffffffffe) keyctl$read(0xb, r4, &(0x7f0000000240)=""/112, 0x349b7f55) 28.09207539s ago: executing program 1 (id=3486): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x50, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x50}}, 0x0) 27.538386488s ago: executing program 1 (id=3490): sched_setscheduler(0x0, 0x1, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="02c90012000e00050014010a0002005ef81b9f5dce0e"], 0x17) 27.317033483s ago: executing program 1 (id=3492): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x98, 0xf4, 0xbf, 0x20, 0x2c42, 0x16f8, 0x7d12, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x58, 0x0, 0x0, 0x6f, 0xe4, 0x14}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f00000010c0)={0x84, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000100000005"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4c142, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xf8}], 0x1}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socket(0x18, 0x0, 0x0) 24.40318509s ago: executing program 2 (id=3499): close(0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x802) syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100003ca12a102c105161e64400000001090212000100000000090400000070cc4e00a101dc1cd50d2e31ca928ad348f26361c1cbbd8b35bcc36f0427376d79bf71c6977cf24fa73d2a50e3530c8bad06313ac951cc2e505d94a716369cdb8f435d5f39507c"], 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) unshare(0xc040400) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vcan0\x00'}) accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000) ioctl$F2FS_IOC_GARBAGE_COLLECT(r1, 0x40044591, 0x0) write$cgroup_subtree(r0, 0x0, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r3, 0x0) syz_extract_tcp_res(0x0, 0x7, 0x2eff) syz_emit_ethernet(0x62, &(0x7f0000000040)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x2c, 0x6, 0x1, @mcast2, @local, {[], {{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0xb, 0x2, 0x0, 0x0, 0x0, {[@mptcp=@add_addr={0x1e, 0xa, 0x5, 0xa, 0x0, @loopback}, @mptcp=@capable={0x1e, 0xc, 0x0, 0x7}]}}}}}}}}, 0x0) 24.311870978s ago: executing program 5 (id=3502): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x50, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x50}}, 0x0) 24.058792791s ago: executing program 1 (id=3504): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x0, 0x0, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) userfaultfd(0x80001) syz_open_dev$vim2m(0x0, 0x1f7ff6, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 22.981299482s ago: executing program 5 (id=3506): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) ptrace(0xffffffffffffffff, 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd02002800030030000000600000000104730081e949b93897bc3b0000000000007d01ff020000000000000000000000000001"], 0xfdef) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mknodat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r3, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) r4 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000040)={r3}) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f0000000380)) 22.746464478s ago: executing program 3 (id=3508): ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = dup(r2) sendmsg$netlink(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000540)=ANY=[], 0x1b8}, {0x0, 0x1f88}], 0x2}, 0x0) 20.390540084s ago: executing program 0 (id=3509): sched_setaffinity(0x0, 0x8, &(0x7f0000000040)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup3(r2, r1, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0xc, 0x0, &(0x7f0000000fc0)=[@free_buffer], 0x0, 0x0, 0x0}) 20.333978279s ago: executing program 2 (id=3510): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000004400000010000300", @ANYRES32=r2, @ANYBLOB="08002600851600000a00180000000000000000001c005a80"], 0x4c}}, 0x0) 19.987002736s ago: executing program 0 (id=3511): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)="2e00000010008188040f", 0xa}], 0x1}, 0x0) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000200), 0x4) r2 = socket$inet(0x2, 0x3, 0x8d) setsockopt$inet_msfilter(r2, 0x0, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="8e"], 0x1) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000200)={0x0, @local, @local}, &(0x7f0000000140)=0xc) socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3c}}, 0x0) r3 = socket(0xa, 0x1, 0x0) ioctl(r3, 0x8916, 0x0) ioctl(r3, 0x8936, &(0x7f0000000000)) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r4) r5 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, &(0x7f00000005c0)=@add_del={0x2, &(0x7f0000000580)}) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r5, 0x40045532, &(0x7f0000000040)) r6 = socket$kcm(0x11, 0x200000000000002, 0x300) sendmsg$kcm(r6, &(0x7f0000000640)={&(0x7f0000000300)=@hci={0x1f, 0xffffffffffffffff, 0x4}, 0x80, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="10404b3d"], 0x10}, 0x8000) r7 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r7, 0xc0884113, &(0x7f00000018c0)={0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000, 0x0, 0xfffffffc, 0x2}) 19.712914435s ago: executing program 3 (id=3512): socket$nl_netfilter(0x10, 0x3, 0xc) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) creat(&(0x7f0000000000)='./bus\x00', 0x0) fsopen(&(0x7f0000000040)='afs\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) socket(0x10, 0x3, 0x0) r0 = socket(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYRES8=r0, @ANYRES32=r0], 0x0) 19.564958808s ago: executing program 2 (id=3513): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = syz_io_uring_setup(0xd2, 0x0, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r2, 0x47ba, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = open(&(0x7f0000000000)='./bus\x00', 0x141b42, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r6, 0x0, 0xb) splice(r8, 0x0, r7, 0x0, 0x1000, 0x0) splice(r5, 0x0, r9, 0x0, 0x80, 0x0) write$binfmt_aout(r6, 0x0, 0x20) shutdown(r0, 0x1) 19.511513456s ago: executing program 0 (id=3514): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000001300), 0x8f) writev(r0, &(0x7f00000030c0)=[{&(0x7f0000000a40)="fb", 0x1}], 0x1) 19.264014726s ago: executing program 0 (id=3515): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x769}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ppoll(&(0x7f0000000180)=[{r0, 0x4047}], 0x1, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0xfffffffc) r2 = syz_io_uring_setup(0x5169, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f00000000c0), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x4f5a, &(0x7f00000002c0), &(0x7f0000000340)=0x0, &(0x7f0000000280)) syz_io_uring_submit(r4, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r5 = io_uring_setup(0x477, &(0x7f0000000180)={0x0, 0x0, 0x80, 0x0, 0xfffffffc}) io_uring_register$IORING_REGISTER_RING_FDS(r5, 0x14, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r6, &(0x7f00000005c0)=""/102384, 0x18ff0) io_uring_enter(r2, 0xb15, 0x0, 0x0, 0x0, 0x0) r7 = syz_open_dev$sndpcmp(&(0x7f0000000040), 0x4, 0x40) mmap$snddsp(&(0x7f0000b1d000/0x1000)=nil, 0x1000, 0x200000e, 0x20010, r7, 0xa000) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r8, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x20, &(0x7f0000000040)=[@in={0x2, 0x4e24, @multicast2}, @in={0x2, 0x4e24, @loopback}]}, &(0x7f0000000080)=0x10) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a0000000400000008e6ffff0200000000000000", @ANYRES32, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYRES64=r1, @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r10}, 0x18) r11 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r11, 0x8922, &(0x7f00000008c0)={'team0\x00', 0xe761}) 17.390602904s ago: executing program 1 (id=3516): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x98, 0xf4, 0xbf, 0x20, 0x2c42, 0x16f8, 0x7d12, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x58, 0x0, 0x0, 0x6f, 0xe4, 0x14}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f00000010c0)={0x84, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000100000005"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4c142, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xf8}], 0x1}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socket(0x18, 0x0, 0x0) 17.390248833s ago: executing program 2 (id=3517): sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000280)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r2, 0xc0182101, &(0x7f0000000180)={r3}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000400)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000080)={r4, 0x3, r0, 0x0, 0x80000}) 17.319021202s ago: executing program 5 (id=3519): socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000500)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="600000000206010100000000000000000000fffc05000100070000000900020073797a300000000014000780050015000000000008001240000000000c000300686173683a69700005000500"], 0x60}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x50, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x50}}, 0x0) lstat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)) setsockopt$sock_cred(r1, 0x1, 0x11, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x4100, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000140), 0x256f16877c9c3f29, 0x0) 17.044998436s ago: executing program 2 (id=3520): ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f00000001c0)) bpf$BPF_GET_PROG_INFO(0x21, &(0x7f0000000840)={0xffffffffffffffff, 0x300, 0x0}, 0x10) syz_open_dev$vim2m(0x0, 0x1, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000090000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x2, 0x0, 0x3, 0xd, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb}, @sadb_x_sa2={0x2, 0x9}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, @sadb_x_nat_t_type={0x1}]}, 0x68}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') r6 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x0) mmap(&(0x7f000001a000/0x3000)=nil, 0x3000, 0xf, 0x11012, r6, 0x0) pread64(r5, &(0x7f000001a240)=""/102400, 0x19000, 0x0) syz_clone(0x81088000, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000240), 0x20000000}, 0x20) 15.571352028s ago: executing program 3 (id=3522): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000ac0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x20}}, 0x0) 15.44544093s ago: executing program 0 (id=3523): r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f0000000380)) utimes(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r0, 0xf507, 0x0) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) pipe(0x0) r7 = socket(0x10, 0x803, 0x0) sendto(r7, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r7, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x41}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x188}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) getsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f0000000280)={{{@in=@multicast1, @in6=@initdev}}, {{@in=@empty}, 0x0, @in6=@remote}}, &(0x7f0000000380)=0xe8) r8 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r8, 0x0, 0x0) connect$unix(r3, 0x0, 0x0) r9 = socket$tipc(0x1e, 0x5, 0x0) recvmmsg(r9, &(0x7f0000004a00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=""/177, 0xb1}}, {{0x0, 0x0, &(0x7f0000004900)=[{&(0x7f00000034c0)=""/87, 0x57}, {0x0}], 0x2, &(0x7f0000004980)=""/119, 0x77}}], 0x2, 0x2, 0x0) fcntl$setstatus(r6, 0x4, 0x6000) 13.560517188s ago: executing program 3 (id=3524): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x10, 0x4e26, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0x1}}}}}}, 0x0) 13.345507632s ago: executing program 0 (id=3525): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_devices(r0, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef28856301"], 0xffdd) 13.223620455s ago: executing program 3 (id=3526): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x42}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB=' \x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000f0000000c00078008000200f700"], 0x20}}, 0x0) r5 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) dup3(r2, r5, 0x0) r6 = dup(0xffffffffffffffff) ioctl$VT_GETSTATE(r6, 0x5603, &(0x7f0000000000)={0x8, 0xa3d, 0x7f}) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r7}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004540)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000017c0)=[{0x0}], 0x1}}], 0x3, 0x240080e4) 13.202797142s ago: executing program 5 (id=3527): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000001300), 0x8f) writev(r0, &(0x7f00000030c0)=[{&(0x7f0000000a40)="fb", 0x1}], 0x1) 12.830993764s ago: executing program 2 (id=3528): add_key$keyring(&(0x7f0000000040), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413e850000000f00000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) prctl$PR_SET_MM(0x41555856, 0xf7354000, &(0x7f0000ffa000/0x3000)=nil) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001800)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000017c0)=[@cred={{0x1c}}], 0x20}}], 0x1, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)={0x18, 0x5a, 0x1, 0x0, 0x0, {0x16}, [@nested={0x4, 0x5}]}, 0x18}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x2}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, @any, 0xfffa}, 0xe) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="08001e0000a38000"], 0x30}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = socket(0x10, 0x3, 0x0) write(r5, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f0000000000000200020000", 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) 12.236994496s ago: executing program 5 (id=3529): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)="2e00000010008188040f", 0xa}], 0x1}, 0x0) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000200), 0x4) r2 = socket$inet(0x2, 0x3, 0x8d) setsockopt$inet_msfilter(r2, 0x0, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="8e"], 0x1) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000200)={0x0, @local, @local}, &(0x7f0000000140)=0xc) socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3c}}, 0x0) r3 = socket(0xa, 0x1, 0x0) ioctl(r3, 0x8916, 0x0) ioctl(r3, 0x8936, &(0x7f0000000000)) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r4) r5 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, &(0x7f00000005c0)=@add_del={0x2, &(0x7f0000000580)}) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r5, 0x40045532, &(0x7f0000000040)) r6 = socket$kcm(0x11, 0x200000000000002, 0x300) sendmsg$kcm(r6, &(0x7f0000000640)={&(0x7f0000000300)=@hci={0x1f, 0xffffffffffffffff, 0x4}, 0x80, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="10404b3d"], 0x10}, 0x8000) r7 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r7, 0xc0884113, &(0x7f00000018c0)={0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000, 0x0, 0xfffffffc, 0x2}) 12.021675904s ago: executing program 4 (id=3530): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = syz_io_uring_setup(0xd2, &(0x7f0000000480), 0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, r3, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r2, 0x47ba, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = open(&(0x7f0000000000)='./bus\x00', 0x141b42, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r5, 0x0, 0xb) splice(r7, 0x0, r6, 0x0, 0x1000, 0x0) splice(r4, 0x0, r8, 0x0, 0x80, 0x0) write$binfmt_aout(r5, 0x0, 0x20) shutdown(r0, 0x1) 12.001474955s ago: executing program 3 (id=3531): syz_open_dev$vim2m(&(0x7f0000000100), 0x7, 0x2) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0xa4600, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) close(0xffffffffffffffff) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x401) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001880)=[{&(0x7f000001aa80)=""/102393, 0x18ff9}], 0x200000000000000f, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000a80)=[{&(0x7f0000000140)=""/207, 0xcf}, {&(0x7f0000000440)=""/187, 0xbf}, {&(0x7f0000000500)=""/142, 0x8e}, {&(0x7f0000000300)=""/61, 0x3d}, {&(0x7f00000005c0)=""/231, 0xe7}, {&(0x7f0000000380)=""/72, 0x48}, {&(0x7f00000006c0)=""/217, 0xd9}, {&(0x7f00000007c0)=""/167, 0xa7}, {&(0x7f0000000940)=""/171, 0xab}, {&(0x7f0000000a00)=""/101, 0x65}], 0xa, 0x0, 0x7) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @host}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$sock(r2, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000004b00)=[{&(0x7f00000000c0)="0f", 0x1}], 0x1}}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000240)=""/177, 0xb1}], 0x1}}], 0xffffff1f, 0x0, 0x0) 9.920963384s ago: executing program 1 (id=3532): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/110, 0x6e}, {&(0x7f0000000280)=""/85, 0x55}, {0x0}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000000)=""/66, 0x42}, {&(0x7f0000000300)=""/83, 0x53}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f0000000100)=""/16, 0x10}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) 8.426978705s ago: executing program 4 (id=3533): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f0000000b80)=ANY=[], 0x78) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000003c0)=[@window, @sack_perm, @sack_perm, @mss, @mss, @timestamp, @window, @mss, @mss, @mss, @mss, @sack_perm, @sack_perm, @sack_perm, @mss, @mss], 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)="3ce2de4d8d957a8de4e490b6cd14b988d4edef164bd3377aa381b5f50b7ca414516489f78cd7208982e9bde22b2b7c1c7606d565477f3db9d2b077283644c0f27ab52a863a42863e06944e40a0b3c5d21c8cbe102e7f726263f28aef1bc12a069063d4c30e8f329fdb36859be727fbef4314161e5fb5f01ae00a2634d5cdecca2089c62e32f4c919886b2b88d237e287318739bec0364caf15889f38a312ef6621c0f21709a4bf2b16274cf933f6ad8fcc9c2024bc1b4713f650e860f93ae93b2361956b3e80c38c5fd29b5c1b5d7ce67edc856a8dc0ba54cee53de9a48c131389426bd06ec7c695add357934fc0321f0d3d7982e4fe5a0039decc491a663afd02facb08dd9695f854c7b031d9af8bd7350897996b5208b23030cc0feb84570730eaf24b9f2ac05d0feb3be07a29f887095f36f3c8f0e77e45509acd14a5be4a1572dd4cd1231087b830fa03e071571d4abd694710ef140469cf6df8a59839aafe046a5bffb97e5247be901789eafd726ba090337a2c49207e6b900c7e982472e6aac70e5d52ca2c1bab47b1f6d00f9601e2281686c21f770ae96e0ffec4b30496d012fa00958f794cdbd721bd155cae87", 0x109e8, 0x802, 0x0, 0x6) 7.684747191s ago: executing program 4 (id=3534): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000000)={0x3, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, 0x0, &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000440)={'fscrypt:', @desc1}, &(0x7f0000000480)={0x0, "6035ae1e0fe721441705322225930e6c1e3e2a51a92fd796bc34d7cf6e0236805b4377f7ab1a9b01c103a4c6a7ef54e6763fd7264c39ea00c508ba6062696138"}, 0x48, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x4, r5, 0x0, 0x0, 0x0) 4.757155207s ago: executing program 4 (id=3535): syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000086255608c605129283470102030109022400030000000009"], 0x0) 1.00082593s ago: executing program 4 (id=3540): sched_setaffinity(0x0, 0x8, &(0x7f0000000040)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) r5 = dup3(r4, r3, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0xc, 0x0, &(0x7f0000000fc0)=[@free_buffer], 0x0, 0x0, 0x0}) 0s ago: executing program 4 (id=3541): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r5}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000006800e978000000000000", @ANYRES32=r4], 0x20}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}]}, 0x24}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x20, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x192}}, 0x20}}, 0x0) kernel console output (not intermixed with test programs): 12 using dummy_hcd [ 1253.673440][ T5315] usb 5-1: Using ep0 maxpacket: 32 [ 1254.117460][ T5315] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1254.140384][ T5315] usb 5-1: config 253 has an invalid interface number: 202 but max is 0 [ 1254.159376][ T5315] usb 5-1: config 253 has an invalid descriptor of length 197, skipping remainder of the config [ 1254.170300][ T5315] usb 5-1: config 253 has no interface number 0 [ 1254.176841][ T5315] usb 5-1: config 253 interface 202 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1254.229977][ T5315] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 1254.301878][ T5315] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1254.307868][T18181] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2935'. [ 1254.373161][ T5315] usb 5-1: Product: syz [ 1254.377564][ T5315] usb 5-1: Manufacturer: syz [ 1254.402835][ T5315] usb 5-1: SerialNumber: syz [ 1254.783353][ T5315] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1254.786413][T12325] usb 5-1: Failed to submit usb control message: -71 [ 1254.834255][ T5315] usb 5-1: USB disconnect, device number 12 [ 1254.859686][T12325] usb 5-1: unable to send the bmi data to the device: -71 [ 1254.886008][T12325] usb 5-1: unable to get target info from device [ 1254.913315][T12325] usb 5-1: could not get target info (-71) [ 1254.919187][T12325] usb 5-1: could not probe fw (-71) [ 1255.049365][T18203] loop1: detected capacity change from 0 to 512 [ 1255.074364][T18203] EXT4-fs: Ignoring removed bh option [ 1255.103419][T18203] EXT4-fs: Ignoring removed mblk_io_submit option [ 1255.118557][T18203] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1255.139176][T18203] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 1255.148598][T18203] EXT4-fs (loop1): orphan cleanup on readonly fs [ 1255.160820][T18203] EXT4-fs error (device loop1): ext4_acquire_dquot:6879: comm syz.1.2942: Failed to acquire dquot type 1 [ 1255.193097][T18203] EXT4-fs (loop1): Remounting filesystem read-only [ 1255.199958][T18203] EXT4-fs (loop1): 1 orphan inode deleted [ 1255.231256][T18203] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1257.487085][ T29] kauditd_printk_skb: 30 callbacks suppressed [ 1257.487110][ T29] audit: type=1326 audit(1727170716.027:2225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18212 comm="syz.4.2947" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fac5b77def9 code=0x0 [ 1258.475133][T18218] netlink: 'syz.3.2948': attribute type 11 has an invalid length. [ 1258.724222][T17092] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1259.717454][T18253] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.2964'. [ 1259.821229][T18255] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2963'. [ 1259.849712][ T932] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 1259.958023][T18257] loop5: detected capacity change from 0 to 512 [ 1260.003091][ T932] usb 3-1: Using ep0 maxpacket: 32 [ 1260.010361][ T932] usb 3-1: config 0 has an invalid descriptor of length 71, skipping remainder of the config [ 1260.021001][ T932] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1260.044167][T18257] EXT4-fs: Ignoring removed bh option [ 1260.049700][T18257] EXT4-fs: Ignoring removed mblk_io_submit option [ 1260.085782][ T932] usb 3-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 1260.112990][ T932] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1260.121549][ T932] usb 3-1: Product: syz [ 1260.123381][ T5640] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 1260.126064][ T932] usb 3-1: Manufacturer: syz [ 1260.134089][T18257] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1260.138005][ T932] usb 3-1: SerialNumber: syz [ 1260.185948][ T932] usb 3-1: config 0 descriptor?? [ 1260.213794][T18257] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 1260.229083][T18260] netlink: 'syz.4.2966': attribute type 11 has an invalid length. [ 1260.258458][ T29] audit: type=1326 audit(1727170719.807:2226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18263 comm="syz.0.2968" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f34f7b7def9 code=0x0 [ 1260.268588][T18257] EXT4-fs (loop5): orphan cleanup on readonly fs [ 1260.351815][T18257] Quota error (device loop5): do_check_range: Getting dqdh_next_free 196613 out of range 0-5 [ 1260.376098][T18257] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 1260.393331][ T5640] usb 4-1: Using ep0 maxpacket: 16 [ 1260.405334][T18257] EXT4-fs error (device loop5): ext4_acquire_dquot:6879: comm syz.5.2965: Failed to acquire dquot type 1 [ 1260.418568][ T5640] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1260.429100][ T5640] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1260.439925][ T5640] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1260.500464][ T5640] usb 4-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=b4.5b [ 1260.528115][ T5640] usb 4-1: New USB device strings: Mfr=1, Product=130, SerialNumber=3 [ 1260.536575][ T5640] usb 4-1: Product: syz [ 1260.540773][ T5640] usb 4-1: Manufacturer: syz [ 1260.545456][ T5640] usb 4-1: SerialNumber: syz [ 1260.554128][ T5640] usb 4-1: config 0 descriptor?? [ 1260.561087][ T5640] usb 4-1: NFC: intf ffff888061616000 id ffffffff8f317ac0 [ 1260.567586][T18257] EXT4-fs (loop5): Remounting filesystem read-only [ 1260.619879][T18257] EXT4-fs (loop5): 1 orphan inode deleted [ 1260.694433][T18257] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1260.767753][ T5640] usb 4-1: USB disconnect, device number 9 [ 1261.241991][T15817] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1261.437967][ T932] usb 3-1: USB disconnect, device number 9 [ 1261.744375][T18293] qrtr: Invalid version 0 [ 1262.470661][T18315] openvswitch: netlink: Message has 245 unknown bytes. [ 1262.478779][T18315] openvswitch: netlink: Actions may not be safe on all matching packets [ 1262.503008][ T29] audit: type=1326 audit(1727170721.987:2227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18311 comm="syz.3.2987" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f43ddf7def9 code=0x0 [ 1263.502410][T18348] tipc: Started in network mode [ 1263.529921][T18348] tipc: Node identity f7, cluster identity 4711 [ 1263.558054][T18348] tipc: Node number set to 247 [ 1263.869433][T18364] bridge0: port 1(bridge_slave_0) entered disabled state [ 1264.088272][T18364] netlink: 209844 bytes leftover after parsing attributes in process `syz.5.3002'. [ 1264.383379][ T6287] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 1264.450031][T18381] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 1264.456811][T18381] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1264.469214][T18381] vhci_hcd vhci_hcd.0: Device attached [ 1264.480877][T18383] vhci_hcd: connection closed [ 1264.493034][ T29] audit: type=1326 audit(1727170724.037:2228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18382 comm="syz.2.3010" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2f4637def9 code=0x0 [ 1264.520525][T10200] vhci_hcd: stop threads [ 1264.529694][T10200] vhci_hcd: release socket [ 1264.543310][T10200] vhci_hcd: disconnect device [ 1264.595114][ T6287] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 5 [ 1264.604318][ T6287] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1264.629199][ T6287] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1264.638484][ T6287] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1264.652953][ T6287] usb 6-1: SerialNumber: syz [ 1264.788736][T18395] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3013'. [ 1264.800909][T18394] tipc: Started in network mode [ 1264.816984][T18394] tipc: Node identity f7, cluster identity 4711 [ 1264.826158][T18394] tipc: Node number set to 247 [ 1264.907664][ T6287] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -22 [ 1267.206386][ T5241] Bluetooth: hci3: command 0x0406 tx timeout [ 1268.654538][T18427] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1269.243291][T18429] netlink: 'syz.0.3026': attribute type 3 has an invalid length. [ 1269.251310][ T29] audit: type=1326 audit(1727170727.847:2229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18416 comm="syz.1.3023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5aa97def9 code=0x7ffc0000 [ 1269.464609][ T29] audit: type=1326 audit(1727170727.847:2230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18416 comm="syz.1.3023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5aa97def9 code=0x7ffc0000 [ 1269.488433][ T29] audit: type=1326 audit(1727170728.057:2231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18416 comm="syz.1.3023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff5aa97c890 code=0x7ffc0000 [ 1269.488482][ T29] audit: type=1326 audit(1727170728.057:2232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18416 comm="syz.1.3023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7ff5aa97f727 code=0x7ffc0000 [ 1269.488516][ T29] audit: type=1326 audit(1727170728.057:2233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18416 comm="syz.1.3023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff5aa97def9 code=0x7ffc0000 [ 1269.488550][ T29] audit: type=1326 audit(1727170728.057:2234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18416 comm="syz.1.3023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7ff5aa97f727 code=0x7ffc0000 [ 1269.488582][ T29] audit: type=1326 audit(1727170728.067:2235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18416 comm="syz.1.3023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7ff5aa97cb8a code=0x7ffc0000 [ 1269.488616][ T29] audit: type=1326 audit(1727170728.067:2236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18416 comm="syz.1.3023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5aa97def9 code=0x7ffc0000 [ 1269.488649][ T29] audit: type=1326 audit(1727170728.067:2237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18416 comm="syz.1.3023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5aa97def9 code=0x7ffc0000 [ 1269.488682][ T29] audit: type=1326 audit(1727170728.307:2238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18416 comm="syz.1.3023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff5aa97def9 code=0x7ffc0000 [ 1269.542745][T18427] batadv_slave_0: entered promiscuous mode [ 1270.001512][T18443] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3032'. [ 1270.228438][T18450] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.3035'. [ 1271.410902][T18470] netlink: 'syz.2.3042': attribute type 3 has an invalid length. [ 1271.694969][ T5315] usb 6-1: USB disconnect, device number 18 [ 1271.969493][T18498] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3051'. [ 1272.433156][ T5315] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 1272.553236][ T5640] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 1272.598343][ T5315] usb 6-1: Using ep0 maxpacket: 8 [ 1272.606839][T18521] netlink: 88 bytes leftover after parsing attributes in process `syz.2.3061'. [ 1272.608130][ T5315] usb 6-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1272.660714][ T5315] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1272.679736][ T5315] usb 6-1: config 0 descriptor?? [ 1272.723037][ T5640] usb 4-1: Using ep0 maxpacket: 32 [ 1272.731294][ T5640] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 1272.750982][ T5640] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1272.785469][ T5640] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1272.795465][ T5640] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1272.814935][ T5640] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1272.820922][T18527] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3065'. [ 1272.835215][ T5640] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1272.852771][T18528] loop1: detected capacity change from 0 to 512 [ 1272.860264][ T5640] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1272.877174][T18528] EXT4-fs: Ignoring removed bh option [ 1272.891034][ T5640] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1272.900126][T18528] EXT4-fs: Ignoring removed mblk_io_submit option [ 1272.915653][ T5315] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 1272.929706][ T5640] usb 4-1: config 0 descriptor?? [ 1272.936277][T18528] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1272.954371][ T5315] asix 6-1:0.0: probe with driver asix failed with error -32 [ 1272.970089][ T5315] usb 6-1: USB disconnect, device number 19 [ 1272.983240][T18528] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 1272.994416][T18528] EXT4-fs (loop1): orphan cleanup on readonly fs [ 1273.014632][T18528] EXT4-fs error (device loop1): ext4_acquire_dquot:6879: comm syz.1.3064: Failed to acquire dquot type 1 [ 1273.042265][T18528] EXT4-fs (loop1): Remounting filesystem read-only [ 1273.049243][T18528] EXT4-fs (loop1): 1 orphan inode deleted [ 1273.078868][T18528] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1273.170461][ T5640] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 10 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1273.185856][ T5241] Bluetooth: hci1: command 0x0406 tx timeout [ 1273.195424][ T5640] usb 4-1: USB disconnect, device number 10 [ 1273.203729][ T5640] usblp0: removed [ 1273.235823][T17092] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1275.048581][T18578] netlink: 'syz.0.3082': attribute type 3 has an invalid length. [ 1275.274660][ T5387] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 1275.553303][ T5387] usb 4-1: Using ep0 maxpacket: 8 [ 1275.604558][ T5387] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1275.664260][ T5387] usb 4-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 1275.702771][ T5387] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1275.747300][ T5387] usb 4-1: Product: syz [ 1275.813998][ T5387] usb 4-1: Manufacturer: syz [ 1275.826218][ T5387] usb 4-1: SerialNumber: syz [ 1275.912770][ T5387] usb 4-1: config 0 descriptor?? [ 1275.985167][ T5387] streamzap 4-1:0.0: streamzap_probe: Unexpected desc.bNumEndpoints (0) [ 1276.155436][T18607] openvswitch: netlink: Message has 237 unknown bytes. [ 1276.173225][T18607] openvswitch: netlink: Actions may not be safe on all matching packets [ 1276.199212][ T5387] usb 4-1: USB disconnect, device number 11 [ 1276.418804][T18614] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3098'. [ 1278.216510][T18628] netlink: 'syz.3.3101': attribute type 3 has an invalid length. [ 1278.251536][T18627] loop5: detected capacity change from 0 to 512 [ 1278.336413][T18627] EXT4-fs: Ignoring removed bh option [ 1278.342707][T18627] EXT4-fs: Ignoring removed mblk_io_submit option [ 1278.360758][T18627] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1278.402468][T18627] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 1278.409353][T18633] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1278.422400][T18627] EXT4-fs (loop5): orphan cleanup on readonly fs [ 1278.445515][T18627] __quota_error: 14 callbacks suppressed [ 1278.445535][T18627] Quota error (device loop5): do_check_range: Getting dqdh_next_free 196613 out of range 0-5 [ 1278.469223][T18627] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 1278.479804][T18627] EXT4-fs error (device loop5): ext4_acquire_dquot:6879: comm syz.5.3103: Failed to acquire dquot type 1 [ 1278.498745][T18627] EXT4-fs (loop5): Remounting filesystem read-only [ 1278.511567][T18627] EXT4-fs (loop5): 1 orphan inode deleted [ 1278.528743][T18627] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1278.610574][T18633] batadv_slave_0: entered promiscuous mode [ 1279.555862][T15817] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1280.031652][T18658] openvswitch: netlink: Message has 237 unknown bytes. [ 1280.093063][T18658] openvswitch: netlink: Actions may not be safe on all matching packets [ 1280.239752][T18664] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3111'. [ 1280.338866][T10661] Bluetooth: hci3: unexpected event for opcode 0x0000 [ 1280.954449][T18677] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3118'. [ 1281.250369][ T29] audit: type=1326 audit(1727170740.797:2251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18687 comm="syz.5.3124" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7ce0f7def9 code=0x0 [ 1281.612536][T18705] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3127'. [ 1284.386285][ T5241] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 1284.395346][ T5241] Bluetooth: hci3: Injecting HCI hardware error event [ 1284.405881][ T5241] Bluetooth: hci3: hardware error 0x00 [ 1284.639285][T18745] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3143'. [ 1284.813795][ T29] audit: type=1326 audit(1727170744.367:2252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18751 comm="syz.2.3144" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2f4637def9 code=0x0 [ 1287.000893][ T5241] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 1290.803912][T18800] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3159'. [ 1290.904809][ T5241] Bluetooth: hci2: unexpected event for opcode 0x0005 [ 1291.077983][T13440] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 1291.280745][T13440] usb 5-1: config 0 has no interfaces? [ 1291.295698][T13440] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1291.593702][T13440] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1291.693877][T13440] usb 5-1: config 0 descriptor?? [ 1291.805284][T18819] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3163'. [ 1292.177469][T18835] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1292.187865][T18835] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1292.828099][ T29] audit: type=1326 audit(1727170752.367:2253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18841 comm="syz.2.3170" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2f4637def9 code=0x0 [ 1292.852658][T13262] usb 5-1: USB disconnect, device number 13 [ 1292.875018][ T29] audit: type=1326 audit(1727170752.427:2254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18844 comm="syz.3.3168" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f43ddf7def9 code=0x0 [ 1294.857998][T10661] Bluetooth: hci1: unexpected event for opcode 0x0005 [ 1296.303104][T13262] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 1297.283062][T13262] usb 6-1: Using ep0 maxpacket: 8 [ 1297.290240][T13262] usb 6-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1297.300261][T13262] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1297.358117][T13262] usb 6-1: config 0 descriptor?? [ 1298.501247][T18828] coredump: 450(syz.0.3165): written to core: VMAs: 34, size 97419264; core: 60015558 bytes, pos 97427456 [ 1298.531149][T13262] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 1298.577028][T13262] asix 6-1:0.0: probe with driver asix failed with error -32 [ 1298.653897][T13262] usb 6-1: USB disconnect, device number 20 [ 1298.869897][T18909] loop2: detected capacity change from 0 to 512 [ 1298.884232][T18909] EXT4-fs: Ignoring removed bh option [ 1298.893481][T18909] EXT4-fs: Ignoring removed mblk_io_submit option [ 1299.744721][T18909] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1299.773348][ T1260] ieee802154 phy0 wpan0: encryption failed: -22 [ 1299.779694][ T1260] ieee802154 phy1 wpan1: encryption failed: -22 [ 1299.903044][T18909] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 1299.912018][T18909] EXT4-fs (loop2): orphan cleanup on readonly fs [ 1299.961888][T18909] Quota error (device loop2): do_check_range: Getting dqdh_next_free 196613 out of range 0-5 [ 1299.972470][T18909] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 1300.204789][T18909] EXT4-fs error (device loop2): ext4_acquire_dquot:6879: comm syz.2.3191: Failed to acquire dquot type 1 [ 1300.952290][T18909] EXT4-fs (loop2): Remounting filesystem read-only [ 1300.981339][T18909] EXT4-fs (loop2): 1 orphan inode deleted [ 1301.044433][T18931] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3198'. [ 1301.158608][T18931] Bluetooth: MGMT ver 1.23 [ 1301.195692][T13440] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 1301.212179][T18909] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1301.603847][T13440] usb 6-1: Using ep0 maxpacket: 16 [ 1301.611570][T13440] usb 6-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1301.621118][T13440] usb 6-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1301.645990][T13440] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1301.692958][T13440] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1301.707645][T13440] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1301.724919][T17031] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1301.729415][T13440] usb 6-1: Product: syz [ 1301.768875][T13440] usb 6-1: Manufacturer: syz [ 1301.794305][T13440] usb 6-1: SerialNumber: syz [ 1302.802976][T10661] Bluetooth: hci4: unexpected event for opcode 0x0c22 [ 1303.923151][T13440] usb 6-1: 0:2 : does not exist [ 1303.988282][T13440] usb 6-1: USB disconnect, device number 21 [ 1304.570801][T15556] udevd[15556]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1306.641466][T18998] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3219'. [ 1307.352974][ T5640] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 1307.381733][T19001] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3218'. [ 1307.505421][ T5640] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 0, changing to 7 [ 1307.520788][ T5640] usb 2-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice= 9.99 [ 1307.562992][ T5640] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1307.605446][ T5640] usb 2-1: config 0 descriptor?? [ 1307.699578][ T5640] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1310.023757][ T5640] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 1310.034384][ T5640] usb 2-1: USB disconnect, device number 7 [ 1310.842018][T19046] lo speed is unknown, defaulting to 1000 [ 1310.856123][T19046] lo speed is unknown, defaulting to 1000 [ 1310.866352][T19046] lo speed is unknown, defaulting to 1000 [ 1311.466643][T19046] infiniband syz0: set active [ 1311.471588][T19046] infiniband syz0: added lo [ 1311.573817][T13262] lo speed is unknown, defaulting to 1000 [ 1312.117843][T19046] RDS/IB: syz0: added [ 1312.191987][T19046] smc: adding ib device syz0 with port count 1 [ 1312.293257][T19046] smc: ib device syz0 port 1 has pnetid [ 1312.333587][T19046] lo speed is unknown, defaulting to 1000 [ 1312.367020][T13262] lo speed is unknown, defaulting to 1000 [ 1313.153330][T13440] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 1313.837704][T19046] lo speed is unknown, defaulting to 1000 [ 1314.003541][T19085] netlink: 'syz.1.3243': attribute type 10 has an invalid length. [ 1314.105997][T19085] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1314.144656][T13440] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 1314.163533][T13440] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1314.191938][T13440] usb 3-1: Product: syz [ 1314.217378][T13440] usb 3-1: Manufacturer: syz [ 1314.241992][T13440] usb 3-1: SerialNumber: syz [ 1314.757018][T19085] team0: Port device batadv0 added [ 1314.795012][T13440] usb 3-1: config 0 descriptor?? [ 1315.862260][T13440] usb-storage 3-1:0.0: USB Mass Storage device detected [ 1316.309004][T19046] lo speed is unknown, defaulting to 1000 [ 1316.531699][T13440] usb 3-1: USB disconnect, device number 10 [ 1317.500739][T19046] lo speed is unknown, defaulting to 1000 [ 1317.627373][T19046] lo speed is unknown, defaulting to 1000 [ 1318.638281][T19046] lo speed is unknown, defaulting to 1000 [ 1318.853094][ T5315] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 1318.893084][T13440] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 1319.068948][T13440] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1319.110715][ T5315] usb 6-1: Using ep0 maxpacket: 32 [ 1319.186112][T13440] usb 4-1: config 0 has no interface number 0 [ 1319.273663][T13440] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1319.298959][ T5315] usb 6-1: config index 0 descriptor too short (expected 2210, got 1175) [ 1319.314579][ T9] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 1319.325372][ T5315] usb 6-1: config 0 has an invalid interface number: 241 but max is 2 [ 1319.334484][T13440] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1319.380457][ T5315] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1319.397734][T13440] usb 4-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18 [ 1319.407132][ T5315] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 1319.431510][T13440] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1319.442936][ T5315] usb 6-1: config 0 has no interface number 0 [ 1319.674657][T13440] usb 4-1: config 0 descriptor?? [ 1319.681676][ T5315] usb 6-1: config 0 interface 241 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 14 [ 1319.732739][T19046] lo speed is unknown, defaulting to 1000 [ 1319.733780][ T9] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1319.784429][ T5315] usb 6-1: config 0 interface 241 has no altsetting 0 [ 1319.794444][ T9] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1319.804791][ T9] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1319.815804][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1319.825626][ T5315] usb 6-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=e0.70 [ 1319.835030][ T5315] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1319.845209][ T5315] usb 6-1: Product: syz [ 1319.849778][ T5315] usb 6-1: Manufacturer: syz [ 1319.855048][ T5315] usb 6-1: SerialNumber: syz [ 1319.862808][T19131] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 1319.937075][ T9] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1320.099243][ T5315] usb 6-1: config 0 descriptor?? [ 1320.102176][ T5241] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1320.124346][ T5241] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1320.493893][ T5241] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1321.905076][T18747] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1321.912753][T18747] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 1321.920796][T18747] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1322.939217][T14716] Bluetooth: hci0: command 0x0406 tx timeout [ 1322.981463][T19146] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3263'. [ 1323.676908][T19158] program syz.1.3268 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1324.233577][ C0] raw-gadget.0 gadget.5: ignoring, device is not running [ 1324.243801][ C0] raw-gadget.0 gadget.5: ignoring, device is not running [ 1324.251313][ C0] raw-gadget.0 gadget.5: ignoring, device is not running [ 1324.258716][ C0] raw-gadget.0 gadget.5: ignoring, device is not running [ 1324.266118][ C0] raw-gadget.0 gadget.5: ignoring, device is not running [ 1324.275062][ C0] raw-gadget.0 gadget.5: ignoring, device is not running [ 1324.289628][ T5315] usbhid 6-1:0.241: couldn't find an input interrupt endpoint [ 1325.356575][ T5315] usb 6-1: USB disconnect, device number 22 [ 1325.425323][T13440] input: HID 04d9:a055 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.1/0003:04D9:A055.0005/input/input8 [ 1325.459615][ T9] usb 3-1: USB disconnect, device number 11 [ 1327.624850][ T5241] Bluetooth: hci6: command tx timeout [ 1329.653040][ T5241] Bluetooth: hci6: command tx timeout [ 1329.759925][T13440] holtek_kbd 0003:04D9:A055.0005: input,hidraw0: USB HID v0.00 Keyboard [HID 04d9:a055] on usb-dummy_hcd.3-1/input1 [ 1329.830429][T13440] usb 4-1: USB disconnect, device number 12 [ 1329.857089][T19136] lo speed is unknown, defaulting to 1000 [ 1330.396346][T19211] trusted_key: encrypted_key: insufficient parameters specified [ 1331.327984][T15578] udevd[15578]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1332.577003][ T5241] Bluetooth: hci6: command tx timeout [ 1332.931112][T10200] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1333.109612][T10200] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1333.132673][T19136] chnl_net:caif_netlink_parms(): no params data found [ 1333.229586][T10200] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1333.367538][T10200] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1333.387871][T19136] bridge0: port 1(bridge_slave_0) entered blocking state [ 1333.395756][T19136] bridge0: port 1(bridge_slave_0) entered disabled state [ 1333.407505][T19136] bridge_slave_0: entered allmulticast mode [ 1333.430985][T19245] fuse: Bad value for 'fd' [ 1333.450232][T19136] bridge_slave_0: entered promiscuous mode [ 1333.483489][T19136] bridge0: port 2(bridge_slave_1) entered blocking state [ 1333.500322][T19136] bridge0: port 2(bridge_slave_1) entered disabled state [ 1333.513185][T19136] bridge_slave_1: entered allmulticast mode [ 1333.535986][T19136] bridge_slave_1: entered promiscuous mode [ 1333.688373][T19136] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1333.747877][T19136] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1333.919908][T19136] team0: Port device team_slave_0 added [ 1334.000206][T19136] team0: Port device team_slave_1 added [ 1334.060774][T10200] bridge_slave_1: left allmulticast mode [ 1334.079097][T10200] bridge_slave_1: left promiscuous mode [ 1334.102105][T10200] bridge0: port 2(bridge_slave_1) entered disabled state [ 1334.125994][T10200] bridge_slave_0: left allmulticast mode [ 1334.147981][T10200] bridge_slave_0: left promiscuous mode [ 1334.169565][T10200] bridge0: port 1(bridge_slave_0) entered disabled state [ 1334.613157][ T5241] Bluetooth: hci6: command tx timeout [ 1336.212727][T19280] binder: 19276:19280 ioctl c0306201 0 returned -14 [ 1336.658466][T10200] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1336.760250][T10200] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1336.772037][T10200] bond0 (unregistering): Released all slaves [ 1338.265711][T19136] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1338.272800][T19136] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1338.508671][T19136] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1338.585432][T19264] bridge0: port 3(vlan2) entered blocking state [ 1338.591901][T19264] bridge0: port 3(vlan2) entered disabled state [ 1338.599555][T19264] vlan2: entered allmulticast mode [ 1338.699326][T19264] vlan2: left allmulticast mode [ 1338.955908][T10200] tipc: Left network mode [ 1339.001400][T19136] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1339.179380][T19136] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1339.428128][T19136] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1339.548780][T19136] hsr_slave_0: entered promiscuous mode [ 1339.564627][T19136] hsr_slave_1: entered promiscuous mode [ 1339.571503][T19136] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1339.609901][T19136] Cannot create hsr debugfs directory [ 1340.923205][T19323] fuse: Bad value for 'fd' [ 1342.388648][T19342] netlink: 108 bytes leftover after parsing attributes in process `syz.2.3317'. [ 1343.400242][T19365] bridge0: port 3(vlan4) entered blocking state [ 1343.421469][T19365] bridge0: port 3(vlan4) entered disabled state [ 1343.482437][T19365] vlan4: entered allmulticast mode [ 1343.593320][T19365] vlan4: left allmulticast mode [ 1345.261542][T10200] hsr_slave_0: left promiscuous mode [ 1345.310766][T10200] hsr_slave_1: left promiscuous mode [ 1345.397241][T10200] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1345.426020][T10200] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1345.463558][T10200] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1345.520601][T10200] veth1_macvtap: left promiscuous mode [ 1345.727859][T10200] veth0_macvtap: left promiscuous mode [ 1345.840985][T10200] veth1_vlan: left promiscuous mode [ 1345.928553][T10200] veth0_vlan: left promiscuous mode [ 1346.434464][T10200] infiniband syz0: set down [ 1346.486249][ T5387] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 1346.600670][T19426] fuse: Bad value for 'fd' [ 1346.665117][ T5387] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1346.675796][ T5387] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1346.712242][ T5387] usb 4-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=9e.7f [ 1346.723134][ T5387] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1346.751775][ T5387] usb 4-1: Product: syz [ 1346.756515][ T5387] usb 4-1: Manufacturer: syz [ 1346.761280][ T5387] usb 4-1: SerialNumber: syz [ 1346.782098][ T5387] usb 4-1: config 0 descriptor?? [ 1346.863291][T13440] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 1346.911045][T19425] cgroup: fork rejected by pids controller in /syz1 [ 1347.046441][ T5387] redrat3 4-1:0.0: Couldn't find all endpoints [ 1347.063325][ T5387] usb 4-1: USB disconnect, device number 13 [ 1347.071270][T13440] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1347.111945][T13440] usb 3-1: New USB device strings: Mfr=210, Product=154, SerialNumber=3 [ 1347.125676][T13440] usb 3-1: Product: syz [ 1347.130186][T13440] usb 3-1: Manufacturer: syz [ 1347.144768][T13440] usb 3-1: SerialNumber: syz [ 1347.161354][T13440] usb 3-1: config 0 descriptor?? [ 1347.334146][T10200] team0 (unregistering): Port device team_slave_1 removed [ 1347.469763][T10200] team0 (unregistering): Port device team_slave_0 removed [ 1347.512951][ T5387] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 1347.668303][ T5387] usb 4-1: Using ep0 maxpacket: 16 [ 1347.687729][ T5387] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1347.710236][ T5387] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1347.722995][ T5387] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1347.761956][ T5387] usb 4-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=b4.5b [ 1347.771449][ T5387] usb 4-1: New USB device strings: Mfr=1, Product=130, SerialNumber=3 [ 1347.788540][ T5387] usb 4-1: Product: syz [ 1347.796208][ T5387] usb 4-1: Manufacturer: syz [ 1347.800840][ T5387] usb 4-1: SerialNumber: syz [ 1347.820749][ T5387] usb 4-1: config 0 descriptor?? [ 1347.840382][ T5387] usb 4-1: NFC: intf ffff88803739c000 id ffffffff8f317ac0 [ 1348.015566][T13440] usb 3-1: Firmware: major: 101, minor: 121, hardware type: UNKNOWN (6) [ 1348.049502][ T5315] usb 4-1: USB disconnect, device number 14 [ 1348.185778][ T5567] smc: removing ib device syz0 [ 1348.219674][T13440] usb 3-1: failed to fetch extended address, random address set [ 1348.234294][T13440] usb 3-1: atusb_probe: initialization failed, error = -524 [ 1348.242427][T13440] atusb 3-1:0.0: probe with driver atusb failed with error -524 [ 1348.274894][ T932] lo speed is unknown, defaulting to 1000 [ 1348.322577][T13440] usb 3-1: USB disconnect, device number 12 [ 1351.941100][T19136] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1352.057337][T19516] cgroup: fork rejected by pids controller in /syz2 [ 1352.087916][T19136] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1352.123048][ T6287] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 1352.218495][T19136] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1352.284370][T19136] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1352.294907][ T6287] usb 2-1: config 0 has an invalid descriptor of length 75, skipping remainder of the config [ 1352.305842][ T6287] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1352.352190][ T6287] usb 2-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=9e.7f [ 1352.368320][ T6287] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1352.470738][ T6287] usb 2-1: Product: syz [ 1352.486598][ T6287] usb 2-1: Manufacturer: syz [ 1352.496992][ T6287] usb 2-1: SerialNumber: syz [ 1352.537580][ T6287] usb 2-1: config 0 descriptor?? [ 1352.738993][T19136] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1352.874237][ T6287] redrat3 2-1:0.0: Couldn't find all endpoints [ 1352.970004][T19136] 8021q: adding VLAN 0 to HW filter on device team0 [ 1353.106667][T12313] bridge0: port 1(bridge_slave_0) entered blocking state [ 1353.113891][T12313] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1353.124749][T12313] bridge0: port 2(bridge_slave_1) entered blocking state [ 1353.131917][T12313] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1353.143459][ T6287] usb 2-1: USB disconnect, device number 8 [ 1353.359306][T19136] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1353.400796][T19587] fuse: Bad value for 'fd' [ 1353.632968][ T6287] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 1353.703152][T13262] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 1353.803411][ T6287] usb 2-1: Using ep0 maxpacket: 16 [ 1353.812636][ T6287] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1353.824627][ T6287] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC5, changing to 0x85 [ 1353.842976][T13262] usb 6-1: device descriptor read/64, error -71 [ 1353.861429][T19136] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1353.935846][ T6287] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 31265, setting to 1024 [ 1353.951349][ T6287] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1353.977725][ T6287] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1354.028318][ T6287] usb 2-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=b4.5b [ 1354.041608][ T6287] usb 2-1: New USB device strings: Mfr=1, Product=130, SerialNumber=3 [ 1354.061498][ T6287] usb 2-1: Product: syz [ 1354.076714][ T6287] usb 2-1: Manufacturer: syz [ 1354.092957][T13262] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 1354.109234][ T6287] usb 2-1: SerialNumber: syz [ 1354.130748][ T6287] usb 2-1: config 0 descriptor?? [ 1354.157153][ T6287] usb 2-1: NFC: intf ffff888030719000 id ffffffff8f317ac0 [ 1354.233025][T13262] usb 6-1: device descriptor read/64, error -71 [ 1354.368637][T13262] usb usb6-port1: attempt power cycle [ 1354.371762][T13440] usb 2-1: USB disconnect, device number 9 [ 1355.022974][T13262] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 1355.096317][T13262] usb 6-1: device descriptor read/8, error -71 [ 1355.232792][T19136] veth0_vlan: entered promiscuous mode [ 1355.259535][T19136] veth1_vlan: entered promiscuous mode [ 1355.345081][T19136] veth0_macvtap: entered promiscuous mode [ 1355.357070][T19136] veth1_macvtap: entered promiscuous mode [ 1355.377979][T19136] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1355.397791][T19136] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1355.426768][T19136] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1355.446129][T19136] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1355.464588][T19136] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1355.476106][T13262] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 1355.491194][T19136] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1355.503627][T13262] usb 6-1: device descriptor read/8, error -71 [ 1355.511942][T19136] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1355.525422][T19136] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1355.542131][T19136] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1355.552646][T19136] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1355.569648][T19136] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1355.582172][T19136] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1355.611770][T19136] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1355.613626][T13262] usb usb6-port1: unable to enumerate USB device [ 1355.629624][T19136] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1355.645326][T19136] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1355.665991][T19136] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1355.820696][T12312] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1355.850426][T12312] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1355.889755][ T1101] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1355.911861][ T1101] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1356.122039][T19654] bridge0: port 3(vlan3) entered blocking state [ 1356.312470][T19654] bridge0: port 3(vlan3) entered disabled state [ 1356.319659][T19654] vlan3: entered allmulticast mode [ 1356.764141][T19654] vlan3: left allmulticast mode [ 1361.354156][ T1260] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.360921][ T1260] ieee802154 phy1 wpan1: encryption failed: -22 [ 1401.194413][ T5241] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 1401.918388][ T5241] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1403.973066][T19691] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 1404.179782][T10661] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1404.194167][T10661] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1405.873677][T10661] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1406.759393][T14716] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1406.771494][T14716] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1406.782881][T14716] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1406.896162][T14716] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1406.909111][T14716] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1406.919734][T14716] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1406.938166][T14716] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1406.950357][T14716] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 1406.959983][T14716] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1410.704589][T19699] Bluetooth: hci4: command tx timeout [ 1410.774443][T19699] Bluetooth: hci7: command tx timeout [ 1412.216129][T19699] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1412.563028][T19699] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1412.577210][T19699] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1412.589187][T19699] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1412.604113][T19699] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1412.616840][T19699] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1412.783049][T19699] Bluetooth: hci4: command tx timeout [ 1412.852919][T19699] Bluetooth: hci7: command tx timeout [ 1414.774358][T10661] Bluetooth: hci0: command tx timeout [ 1414.862992][T10661] Bluetooth: hci4: command tx timeout [ 1414.939851][T10661] Bluetooth: hci7: command tx timeout [ 1415.317722][T10661] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1415.343501][T10661] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1415.354762][T10661] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1415.369079][T10661] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1415.396304][T10661] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1415.403950][T10661] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1416.904753][T19699] Bluetooth: hci0: command tx timeout [ 1416.932982][T19699] Bluetooth: hci4: command tx timeout [ 1417.031914][T19699] Bluetooth: hci7: command tx timeout [ 1418.043195][T19699] Bluetooth: hci1: command tx timeout [ 1418.488861][T10661] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1418.510681][T10661] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1418.547685][T10661] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1418.610566][T10661] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1418.650894][T10661] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1418.652459][T12320] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1418.787815][T10661] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1418.933595][T10661] Bluetooth: hci0: command tx timeout [ 1420.054272][T19699] Bluetooth: hci1: command tx timeout [ 1420.192696][T12320] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1420.934382][T19699] Bluetooth: hci2: command tx timeout [ 1421.013028][T19699] Bluetooth: hci0: command tx timeout [ 1422.133041][T19699] Bluetooth: hci1: command tx timeout [ 1422.133203][T12320] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1422.627989][ T1260] ieee802154 phy0 wpan0: encryption failed: -22 [ 1422.652005][ T1260] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.012974][T19699] Bluetooth: hci2: command tx timeout [ 1424.213589][T19699] Bluetooth: hci1: command tx timeout [ 1424.438811][T12320] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1425.094193][T19699] Bluetooth: hci2: command tx timeout [ 1427.175645][T19699] Bluetooth: hci2: command tx timeout [ 1431.286453][T10661] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1431.341190][T10661] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1431.383017][T10661] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1431.528939][T10661] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1431.581374][T10661] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1431.622333][T10661] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1433.734385][T10661] Bluetooth: hci3: command tx timeout [ 1435.813092][T10661] Bluetooth: hci3: command tx timeout [ 1437.903069][T10661] Bluetooth: hci3: command tx timeout [ 1438.323128][T19699] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1438.342913][T19699] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1438.389034][T19699] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1438.512834][T19699] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1438.562853][T19699] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1438.583182][T19699] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1439.973123][T19699] Bluetooth: hci3: command tx timeout [ 1440.304636][T12320] bridge_slave_1: left allmulticast mode [ 1440.322959][T12320] bridge_slave_1: left promiscuous mode [ 1440.330120][T12320] bridge0: port 2(bridge_slave_1) entered disabled state [ 1440.383991][T12320] bridge_slave_0: left allmulticast mode [ 1440.389880][T12320] bridge_slave_0: left promiscuous mode [ 1440.404402][T12320] bridge0: port 1(bridge_slave_0) entered disabled state [ 1440.616607][T19699] Bluetooth: hci5: command tx timeout [ 1442.708378][T19699] Bluetooth: hci5: command tx timeout [ 1444.471877][T12320] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1444.487135][T12320] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1444.498572][T12320] bond0 (unregistering): Released all slaves [ 1444.680449][T19702] chnl_net:caif_netlink_parms(): no params data found [ 1444.773650][T10661] Bluetooth: hci5: command tx timeout [ 1444.788224][T10661] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1444.798535][T10661] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1444.816073][T10661] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1444.824531][T10661] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1444.835572][T10661] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 1444.843044][T10661] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1444.917268][T19697] chnl_net:caif_netlink_parms(): no params data found [ 1445.291603][T19697] bridge0: port 1(bridge_slave_0) entered blocking state [ 1445.300144][T19697] bridge0: port 1(bridge_slave_0) entered disabled state [ 1445.313016][T19697] bridge_slave_0: entered allmulticast mode [ 1445.320250][T19697] bridge_slave_0: entered promiscuous mode [ 1445.394036][T19702] bridge0: port 1(bridge_slave_0) entered blocking state [ 1445.401156][T19702] bridge0: port 1(bridge_slave_0) entered disabled state [ 1445.421049][T19702] bridge_slave_0: entered allmulticast mode [ 1445.434132][T19702] bridge_slave_0: entered promiscuous mode [ 1445.453793][T19714] chnl_net:caif_netlink_parms(): no params data found [ 1445.475346][T12320] hsr_slave_0: left promiscuous mode [ 1445.481601][T12320] hsr_slave_1: left promiscuous mode [ 1445.494553][T12320] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1445.502526][T12320] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1445.510128][T12320] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1445.537587][T12320] veth1_macvtap: left promiscuous mode [ 1445.543197][T12320] veth0_macvtap: left promiscuous mode [ 1445.548878][T12320] veth1_vlan: left promiscuous mode [ 1445.556303][T12320] veth0_vlan: left promiscuous mode [ 1445.994395][T12320] team0 (unregistering): Port device team_slave_1 removed [ 1446.034643][T12320] team0 (unregistering): Port device team_slave_0 removed [ 1446.380791][T19697] bridge0: port 2(bridge_slave_1) entered blocking state [ 1446.388085][T19697] bridge0: port 2(bridge_slave_1) entered disabled state [ 1446.395377][T19697] bridge_slave_1: entered allmulticast mode [ 1446.402126][T19697] bridge_slave_1: entered promiscuous mode [ 1446.440451][T19702] bridge0: port 2(bridge_slave_1) entered blocking state [ 1446.447891][T19702] bridge0: port 2(bridge_slave_1) entered disabled state [ 1446.456276][T19702] bridge_slave_1: entered allmulticast mode [ 1446.464041][T19702] bridge_slave_1: entered promiscuous mode [ 1446.598076][T19697] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1446.611052][T19697] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1446.688991][T19702] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1446.701323][T19702] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1446.742343][T19697] team0: Port device team_slave_0 added [ 1446.751327][T19731] chnl_net:caif_netlink_parms(): no params data found [ 1446.814720][T19697] team0: Port device team_slave_1 added [ 1446.853117][T19699] Bluetooth: hci5: command tx timeout [ 1446.881092][T19702] team0: Port device team_slave_0 added [ 1446.907899][T19697] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1446.915068][T19697] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1446.942367][T19697] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1446.952847][T19699] Bluetooth: hci6: command tx timeout [ 1447.038703][T19702] team0: Port device team_slave_1 added [ 1447.064748][T19697] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1447.071807][T19697] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1447.099467][T19697] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1447.132552][T19740] chnl_net:caif_netlink_parms(): no params data found [ 1447.171383][T19714] bridge0: port 1(bridge_slave_0) entered blocking state [ 1447.190524][T19714] bridge0: port 1(bridge_slave_0) entered disabled state [ 1447.198201][T19714] bridge_slave_0: entered allmulticast mode [ 1447.205562][T19714] bridge_slave_0: entered promiscuous mode [ 1447.236174][T19702] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1447.252832][T19702] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1447.279957][T19702] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1447.322752][T19697] hsr_slave_0: entered promiscuous mode [ 1447.329799][T19697] hsr_slave_1: entered promiscuous mode [ 1447.342854][T19697] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1447.350450][T19697] Cannot create hsr debugfs directory [ 1447.384709][T19714] bridge0: port 2(bridge_slave_1) entered blocking state [ 1447.391843][T19714] bridge0: port 2(bridge_slave_1) entered disabled state [ 1447.411974][T19714] bridge_slave_1: entered allmulticast mode [ 1447.428273][T19714] bridge_slave_1: entered promiscuous mode [ 1447.441841][T19702] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1447.450169][T19702] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1447.477786][T19702] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1447.509848][T19731] bridge0: port 1(bridge_slave_0) entered blocking state [ 1447.517626][T19731] bridge0: port 1(bridge_slave_0) entered disabled state [ 1447.525235][T19731] bridge_slave_0: entered allmulticast mode [ 1447.531996][T19731] bridge_slave_0: entered promiscuous mode [ 1447.540275][T19731] bridge0: port 2(bridge_slave_1) entered blocking state [ 1447.547605][T19731] bridge0: port 2(bridge_slave_1) entered disabled state [ 1447.555027][T19731] bridge_slave_1: entered allmulticast mode [ 1447.562152][T19731] bridge_slave_1: entered promiscuous mode [ 1447.669839][T19714] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1447.751852][T19731] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1447.765963][T19714] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1447.810072][T19702] hsr_slave_0: entered promiscuous mode [ 1447.818194][T19702] hsr_slave_1: entered promiscuous mode [ 1447.825031][T19702] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1447.832602][T19702] Cannot create hsr debugfs directory [ 1447.848342][T19740] bridge0: port 1(bridge_slave_0) entered blocking state [ 1447.855598][T19740] bridge0: port 1(bridge_slave_0) entered disabled state [ 1447.862960][T19740] bridge_slave_0: entered allmulticast mode [ 1447.870455][T19740] bridge_slave_0: entered promiscuous mode [ 1447.879735][T19731] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1447.923990][T19714] team0: Port device team_slave_0 added [ 1447.948594][T19740] bridge0: port 2(bridge_slave_1) entered blocking state [ 1447.958958][T19740] bridge0: port 2(bridge_slave_1) entered disabled state [ 1447.966875][T19740] bridge_slave_1: entered allmulticast mode [ 1447.974952][T19740] bridge_slave_1: entered promiscuous mode [ 1447.994709][T19714] team0: Port device team_slave_1 added [ 1448.028525][T19731] team0: Port device team_slave_0 added [ 1448.045128][T19731] team0: Port device team_slave_1 added [ 1448.153591][T19749] chnl_net:caif_netlink_parms(): no params data found [ 1448.297841][T19731] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1448.312921][T19731] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1448.374346][T19731] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1448.394221][T19714] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1448.402631][T19714] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1448.464397][T19714] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1448.485046][T19714] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1448.492054][T19714] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1448.518927][T19714] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1448.575323][T19740] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1448.589139][T19731] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1448.596255][T19731] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1448.638371][T19731] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1448.757425][T12320] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1448.799431][T19740] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1448.966138][T19697] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1449.015368][T19699] Bluetooth: hci6: command tx timeout [ 1449.043728][T12320] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1449.144765][T19740] team0: Port device team_slave_0 added [ 1449.169536][T19731] hsr_slave_0: entered promiscuous mode [ 1449.176930][T19731] hsr_slave_1: entered promiscuous mode [ 1449.183750][T19731] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1449.191330][T19731] Cannot create hsr debugfs directory [ 1449.246730][T19697] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1449.281488][T12320] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1449.325964][T19740] team0: Port device team_slave_1 added [ 1449.460700][T19697] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1449.486253][T19714] hsr_slave_0: entered promiscuous mode [ 1449.501276][T19714] hsr_slave_1: entered promiscuous mode [ 1449.518583][T19714] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1449.540312][T19714] Cannot create hsr debugfs directory [ 1449.662623][T12320] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1449.787399][T19697] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1449.818265][T19740] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1449.825387][T19740] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1449.860351][T19740] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1449.896664][T19749] bridge0: port 1(bridge_slave_0) entered blocking state [ 1449.904954][T19749] bridge0: port 1(bridge_slave_0) entered disabled state [ 1449.912271][T19749] bridge_slave_0: entered allmulticast mode [ 1449.920508][T19749] bridge_slave_0: entered promiscuous mode [ 1449.959122][T19740] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1449.967943][T19740] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1449.994599][T19740] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1450.042120][T19749] bridge0: port 2(bridge_slave_1) entered blocking state [ 1450.059532][T19749] bridge0: port 2(bridge_slave_1) entered disabled state [ 1450.067599][T19749] bridge_slave_1: entered allmulticast mode [ 1450.074617][T19749] bridge_slave_1: entered promiscuous mode [ 1450.235445][T19749] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1450.252185][T19749] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1450.265397][T19740] hsr_slave_0: entered promiscuous mode [ 1450.272024][T19740] hsr_slave_1: entered promiscuous mode [ 1450.278430][T19740] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1450.286326][T19740] Cannot create hsr debugfs directory [ 1450.446237][T19749] team0: Port device team_slave_0 added [ 1450.525236][T19749] team0: Port device team_slave_1 added [ 1450.625804][T12320] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1450.818990][T12320] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1450.838679][T19749] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1450.847798][T19749] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1450.875744][T19749] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1450.899768][T19749] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1450.919798][T19749] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1450.946517][T19749] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1450.965203][T19697] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1450.995641][T12320] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1451.028961][T19697] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1451.054941][T19697] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1451.067007][T19697] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1451.097502][T12320] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1451.103400][T19699] Bluetooth: hci6: command tx timeout [ 1451.158668][T19749] hsr_slave_0: entered promiscuous mode [ 1451.167076][T19749] hsr_slave_1: entered promiscuous mode [ 1451.176531][T19749] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1451.185300][T19749] Cannot create hsr debugfs directory [ 1451.421857][T12320] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1451.512550][T12320] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1451.594455][T12320] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1451.658080][T12320] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1451.686884][T19697] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1451.732371][T19697] 8021q: adding VLAN 0 to HW filter on device team0 [ 1451.772397][T12316] bridge0: port 1(bridge_slave_0) entered blocking state [ 1451.779608][T12316] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1451.810191][T12316] bridge0: port 2(bridge_slave_1) entered blocking state [ 1451.817399][T12316] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1451.990065][T12320] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1452.151901][T12320] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1452.309519][T12320] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1452.337841][T19697] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1452.381083][T19697] veth0_vlan: entered promiscuous mode [ 1452.397696][T19697] veth1_vlan: entered promiscuous mode [ 1452.446160][T12320] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1452.484160][T19697] veth0_macvtap: entered promiscuous mode [ 1452.504386][T19697] veth1_macvtap: entered promiscuous mode [ 1452.528080][T19697] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1452.540930][T19697] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1452.552591][T19697] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1452.574110][T19697] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1452.595302][T19697] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1452.614954][T19697] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1452.638816][T19697] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1452.653042][T19697] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1452.673813][T19697] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1452.685707][T19697] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1452.699685][T19697] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1452.710138][T19697] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1452.721268][T19697] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1452.733563][T19697] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1452.747513][T19697] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1452.761606][T19697] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1452.771950][T19697] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1452.781703][T19697] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1452.926216][T12320] bridge_slave_1: left allmulticast mode [ 1452.931945][T12320] bridge_slave_1: left promiscuous mode [ 1452.959327][T12320] bridge0: port 2(bridge_slave_1) entered disabled state [ 1452.978892][T12320] bridge_slave_0: left allmulticast mode [ 1452.997163][T12320] bridge_slave_0: left promiscuous mode [ 1453.005199][T12320] bridge0: port 1(bridge_slave_0) entered disabled state [ 1453.027495][T12320] bridge_slave_1: left allmulticast mode [ 1453.042916][T12320] bridge_slave_1: left promiscuous mode [ 1453.048707][T12320] bridge0: port 2(bridge_slave_1) entered disabled state [ 1453.074395][T12320] bridge_slave_0: left allmulticast mode [ 1453.080110][T12320] bridge_slave_0: left promiscuous mode [ 1453.086562][T12320] bridge0: port 1(bridge_slave_0) entered disabled state [ 1453.097906][T12320] bridge_slave_1: left allmulticast mode [ 1453.104012][T12320] bridge_slave_1: left promiscuous mode [ 1453.111269][T12320] bridge0: port 2(bridge_slave_1) entered disabled state [ 1453.121570][T12320] bridge_slave_0: left allmulticast mode [ 1453.127531][T12320] bridge_slave_0: left promiscuous mode [ 1453.135568][T12320] bridge0: port 1(bridge_slave_0) entered disabled state [ 1453.146598][T12320] bridge_slave_1: left allmulticast mode [ 1453.152363][T12320] bridge_slave_1: left promiscuous mode [ 1453.171163][T12320] bridge0: port 2(bridge_slave_1) entered disabled state [ 1453.183472][T19699] Bluetooth: hci6: command tx timeout [ 1453.194723][T12320] bridge_slave_0: left allmulticast mode [ 1453.202981][T12320] bridge_slave_0: left promiscuous mode [ 1453.209342][T12320] bridge0: port 1(bridge_slave_0) entered disabled state [ 1454.419090][T12320] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1454.431305][T12320] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1454.447526][T12320] bond0 (unregistering): Released all slaves [ 1454.553466][T12320] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1454.570143][T12320] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1454.581172][T12320] bond0 (unregistering): Released all slaves [ 1454.722089][T12320] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1454.735142][T12320] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1454.747505][T12320] bond0 (unregistering): Released all slaves [ 1454.930155][T12320] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1454.950331][T12320] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1454.961434][T12320] bond0 (unregistering): Released all slaves [ 1455.173597][T12320] tipc: Left network mode [ 1455.212393][ T5567] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1455.227399][ T5567] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1455.348146][T19726] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1455.365548][T19726] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1455.639865][T19731] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1455.656657][T19731] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1455.712461][T19731] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1455.726113][T19731] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1455.773191][ T6287] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 1455.949166][ T6287] usb 2-1: Using ep0 maxpacket: 32 [ 1455.958735][ T6287] usb 2-1: config 0 has an invalid interface number: 88 but max is 0 [ 1455.983727][ T6287] usb 2-1: config 0 has no interface number 0 [ 1456.016525][ T6287] usb 2-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice=7d.12 [ 1456.035315][ T6287] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1456.062468][ T6287] usb 2-1: Product: syz [ 1456.070625][ T6287] usb 2-1: Manufacturer: syz [ 1456.098643][ T6287] usb 2-1: SerialNumber: syz [ 1456.119552][ T6287] usb 2-1: config 0 descriptor?? [ 1456.138112][T19731] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1456.302459][T19714] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1456.405832][T19714] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1456.437397][T19731] 8021q: adding VLAN 0 to HW filter on device team0 [ 1456.525189][T19714] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1456.574502][T19885] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1456.596402][T19885] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1456.704178][T19714] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1456.834009][T12320] hsr_slave_0: left promiscuous mode [ 1456.840800][T12320] hsr_slave_1: left promiscuous mode [ 1456.852158][T12320] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1456.873156][T12320] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1456.901743][T12320] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1456.912936][T12320] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1456.926136][T12320] hsr_slave_0: left promiscuous mode [ 1456.937853][T12320] hsr_slave_1: left promiscuous mode [ 1456.950221][T12320] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1456.965027][T12320] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1456.972445][T12320] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1457.008367][T12320] hsr_slave_0: left promiscuous mode [ 1457.023604][T12320] hsr_slave_1: left promiscuous mode [ 1457.029712][T12320] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1457.043839][T12320] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1457.062928][T12320] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1457.086294][T12320] hsr_slave_0: left promiscuous mode [ 1457.103834][T12320] hsr_slave_1: left promiscuous mode [ 1457.110031][T12320] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1457.119081][T12320] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1457.126796][T12320] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1457.209462][T12320] veth1_macvtap: left promiscuous mode [ 1457.219916][ T9] usb 2-1: USB disconnect, device number 10 [ 1457.231014][ T9] f81534a_ctrl 2-1:0.88: failed to set register 0x116: -19 [ 1457.238973][ T9] f81534a_ctrl 2-1:0.88: failed to enable ports: -19 [ 1457.245936][T12320] veth0_macvtap: left promiscuous mode [ 1457.254199][T12320] veth1_vlan: left promiscuous mode [ 1457.261042][T12320] veth0_vlan: left promiscuous mode [ 1457.272409][T12320] veth1_macvtap: left promiscuous mode [ 1457.278534][T12320] veth0_macvtap: left promiscuous mode [ 1457.284310][T12320] veth1_vlan: left promiscuous mode [ 1457.289691][T12320] veth0_vlan: left promiscuous mode [ 1457.297008][T12320] veth1_macvtap: left promiscuous mode [ 1457.302585][T12320] veth0_macvtap: left promiscuous mode [ 1457.308872][T12320] veth1_vlan: left promiscuous mode [ 1457.315325][T12320] veth0_vlan: left promiscuous mode [ 1457.321720][T12320] veth1_macvtap: left promiscuous mode [ 1457.328239][T12320] veth0_macvtap: left promiscuous mode [ 1457.334126][T12320] veth1_vlan: left promiscuous mode [ 1457.339468][T12320] veth0_vlan: left promiscuous mode [ 1458.205980][T12320] team0 (unregistering): Port device team_slave_1 removed [ 1458.248913][T12320] team0 (unregistering): Port device team_slave_0 removed [ 1459.018215][T12320] team0 (unregistering): Port device team_slave_1 removed [ 1459.065239][T12320] team0 (unregistering): Port device team_slave_0 removed [ 1459.815472][T12320] team0 (unregistering): Port device team_slave_1 removed [ 1459.869713][T12320] team0 (unregistering): Port device team_slave_0 removed [ 1460.671212][T12320] team0 (unregistering): Port device team_slave_1 removed [ 1460.715056][T12320] team0 (unregistering): Port device team_slave_0 removed [ 1461.148182][T12313] bridge0: port 1(bridge_slave_0) entered blocking state [ 1461.155407][T12313] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1461.164707][T12313] bridge0: port 2(bridge_slave_1) entered blocking state [ 1461.171782][T12313] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1461.705565][T19714] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1461.822008][T19714] 8021q: adding VLAN 0 to HW filter on device team0 [ 1461.861920][T19740] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1461.869186][ T5387] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 1461.948859][T19726] bridge0: port 1(bridge_slave_0) entered blocking state [ 1461.956050][T19726] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1461.989745][T19740] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1462.019167][T19731] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1462.050621][T19740] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1462.053180][ T5387] usb 2-1: device descriptor read/64, error -71 [ 1462.104127][ T1101] bridge0: port 2(bridge_slave_1) entered blocking state [ 1462.111336][ T1101] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1462.138106][T19740] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1462.304226][ T5387] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 1462.398808][T19731] veth0_vlan: entered promiscuous mode [ 1462.443182][ T5387] usb 2-1: device descriptor read/64, error -71 [ 1462.475283][T19731] veth1_vlan: entered promiscuous mode [ 1462.555028][ T5387] usb usb2-port1: attempt power cycle [ 1462.685481][T19731] veth0_macvtap: entered promiscuous mode [ 1462.708289][T19731] veth1_macvtap: entered promiscuous mode [ 1462.764799][T19740] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1462.812216][T19731] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1462.837293][T19731] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1462.849679][T19731] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1462.861529][T19702] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1462.873897][T19702] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1462.886361][T19702] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1462.898415][T19702] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1462.918583][T19731] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1462.932440][ T5387] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 1462.942196][T19731] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1462.965104][T19731] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1462.975829][T19731] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1462.987793][T19731] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1463.002646][ T5387] usb 2-1: device descriptor read/8, error -71 [ 1463.047149][T19731] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1463.056998][T19731] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1463.066587][T19731] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1463.076004][T19731] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1463.129169][T19740] 8021q: adding VLAN 0 to HW filter on device team0 [ 1463.149346][T19714] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1463.205323][T19675] bridge0: port 1(bridge_slave_0) entered blocking state [ 1463.212481][T19675] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1463.262743][T19749] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1463.263278][ T5387] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 1463.282531][T19749] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1463.295891][ T5387] usb 2-1: device descriptor read/8, error -71 [ 1463.315032][T19749] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1463.332434][T19749] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1463.349002][T19675] bridge0: port 2(bridge_slave_1) entered blocking state [ 1463.356150][T19675] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1463.424288][ T5387] usb usb2-port1: unable to enumerate USB device [ 1463.452572][T12316] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1463.496865][T12316] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1463.559769][T19740] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1463.570443][T19740] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1463.639424][T12313] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1463.663039][T12313] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1463.926842][T19714] veth0_vlan: entered promiscuous mode [ 1464.079610][T19714] veth1_vlan: entered promiscuous mode [ 1464.181717][T19714] veth0_macvtap: entered promiscuous mode [ 1464.291790][T19714] veth1_macvtap: entered promiscuous mode [ 1464.337540][T19749] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1464.412706][T10661] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1464.430309][T10661] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1464.438970][T10661] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1464.447378][T10661] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1464.457659][T10661] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1464.465582][T10661] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1464.478816][T19740] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1464.531090][T19749] 8021q: adding VLAN 0 to HW filter on device team0 [ 1464.539626][T19714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1464.551288][T19714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1464.562533][T19714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1464.574581][T19714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1464.594771][T19714] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1464.654770][T19675] bridge0: port 1(bridge_slave_0) entered blocking state [ 1464.661917][T19675] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1464.703820][T19714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1464.731732][T19714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1464.743288][T19714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1464.758928][T19714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1464.769851][T19714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1464.788634][T19714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1464.800667][T19714] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1464.810076][T19675] bridge0: port 2(bridge_slave_1) entered blocking state [ 1464.817257][T19675] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1464.860234][T19714] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1464.869325][T19714] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1464.945663][T19714] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1464.965366][T19714] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1465.073759][T19705] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 1465.381555][T19705] usb 2-1: device descriptor read/64, error -71 [ 1466.171345][T19749] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1466.201276][T19740] veth0_vlan: entered promiscuous mode [ 1466.354402][T12316] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1466.386220][T12316] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1466.496259][T19740] veth1_vlan: entered promiscuous mode [ 1466.513226][T19705] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 1466.542164][T19699] Bluetooth: hci1: command tx timeout [ 1466.644369][ T1101] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1466.655225][T19705] usb 2-1: device descriptor read/64, error -71 [ 1466.662660][T19740] veth0_macvtap: entered promiscuous mode [ 1466.689145][ T1101] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1466.729130][T19740] veth1_macvtap: entered promiscuous mode [ 1466.784083][T19705] usb usb2-port1: attempt power cycle [ 1466.802703][T19740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1466.832590][T19740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1466.862182][T19740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1466.883280][T19740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1466.901035][T19740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1466.914600][T19740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1466.925153][T19999] netlink: 'syz.5.3389': attribute type 3 has an invalid length. [ 1466.936250][T19740] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1466.944306][T19999] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3389'. [ 1466.958662][T19740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1466.977212][T19740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1466.987803][T19740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1466.998823][T19740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1467.009289][T19740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1467.020518][T19740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1467.031156][T19740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1467.043183][T19740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1467.055215][T19740] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1467.062722][T19965] chnl_net:caif_netlink_parms(): no params data found [ 1467.124737][T19740] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1467.140039][T19740] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1467.153108][T19705] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 1467.159259][T19740] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1467.176895][T19705] usb 2-1: device descriptor read/8, error -71 [ 1467.182877][T19740] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1467.429892][T19675] bridge_slave_1: left allmulticast mode [ 1467.443309][T19705] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 1467.453019][T19675] bridge_slave_1: left promiscuous mode [ 1467.458814][T19675] bridge0: port 2(bridge_slave_1) entered disabled state [ 1467.474024][T19705] usb 2-1: device descriptor read/8, error -71 [ 1467.494819][T19675] bridge_slave_0: left allmulticast mode [ 1467.500636][T19675] bridge_slave_0: left promiscuous mode [ 1467.531387][T19675] bridge0: port 1(bridge_slave_0) entered disabled state [ 1467.585577][T19705] usb usb2-port1: unable to enumerate USB device [ 1467.711097][ T9] libceph: connect (1)[c::]:6789 error -101 [ 1467.719621][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 1467.745619][ T9] libceph: connect (1)[c::]:6789 error -101 [ 1467.752353][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 1467.765143][T20021] ceph: No mds server is up or the cluster is laggy [ 1468.131591][T19675] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1468.145381][T19675] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1468.161005][T19675] bond0 (unregistering): Released all slaves [ 1468.183131][T19705] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 1468.195854][T19749] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1468.235929][T20017] bridge0: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 1468.274516][T20017] bridge0: port 2(bridge_slave_1) entered disabled state [ 1468.282083][T20017] bridge0: port 1(bridge_slave_0) entered disabled state [ 1468.310567][T20017] bridge0: entered allmulticast mode [ 1468.376858][T19705] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 1468.395662][T19705] usb 2-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice= 9.99 [ 1468.460484][T19705] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1468.491431][T19705] usb 2-1: config 0 descriptor?? [ 1468.498635][T19965] bridge0: port 1(bridge_slave_0) entered blocking state [ 1468.520465][T19705] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1468.545444][T19965] bridge0: port 1(bridge_slave_0) entered disabled state [ 1468.555628][T19965] bridge_slave_0: entered allmulticast mode [ 1468.564160][T19965] bridge_slave_0: entered promiscuous mode [ 1468.613948][T19675] hsr_slave_0: left promiscuous mode [ 1468.613989][T19699] Bluetooth: hci1: command tx timeout [ 1468.639004][T19675] hsr_slave_1: left promiscuous mode [ 1468.654730][T19675] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1468.663212][T19675] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1468.757673][T19705] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 1468.763381][ T5315] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 1468.804298][T19705] usb 2-1: USB disconnect, device number 19 [ 1468.912944][ T5315] usb 6-1: device descriptor read/64, error -71 [ 1469.118653][T19675] team0 (unregistering): Port device team_slave_1 removed [ 1469.163227][ T5315] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 1469.177367][T19675] team0 (unregistering): Port device team_slave_0 removed [ 1469.333662][ T5315] usb 6-1: device descriptor read/64, error -71 [ 1469.446007][ T5315] usb usb6-port1: attempt power cycle [ 1469.558250][T19965] bridge0: port 2(bridge_slave_1) entered blocking state [ 1469.578131][T19965] bridge0: port 2(bridge_slave_1) entered disabled state [ 1469.609330][T19965] bridge_slave_1: entered allmulticast mode [ 1469.628557][T19965] bridge_slave_1: entered promiscuous mode [ 1469.727512][T12320] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1469.751488][T12320] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1469.802885][ T5315] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 1469.821783][T19965] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1469.853914][ T5315] usb 6-1: device descriptor read/8, error -71 [ 1469.870480][T19965] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1470.066978][T19965] team0: Port device team_slave_0 added [ 1470.107334][ T1101] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1470.123844][ T5315] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 1470.126553][ T1101] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1470.139625][T19965] team0: Port device team_slave_1 added [ 1470.158328][ T5315] usb 6-1: device descriptor read/8, error -71 [ 1470.297203][ T5315] usb usb6-port1: unable to enumerate USB device [ 1470.431486][T19965] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1470.469716][T19965] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1470.508072][T19965] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1470.548793][T19965] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1470.566219][T19965] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1470.633507][T19965] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1470.693186][T19699] Bluetooth: hci1: command tx timeout [ 1470.708221][T19749] veth0_vlan: entered promiscuous mode [ 1470.810915][T19965] hsr_slave_0: entered promiscuous mode [ 1470.842720][T19965] hsr_slave_1: entered promiscuous mode [ 1470.888963][T19749] veth1_vlan: entered promiscuous mode [ 1471.233156][ T5290] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 1471.263169][T20127] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 1471.269712][T20127] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1471.298306][T19749] veth0_macvtap: entered promiscuous mode [ 1471.329763][T20127] vhci_hcd vhci_hcd.0: Device attached [ 1471.403475][ T5290] usb 4-1: device descriptor read/64, error -71 [ 1471.763164][ T5290] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 1471.834950][T20132] netlink: 'syz.1.3412': attribute type 9 has an invalid length. [ 1471.868242][T20132] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.3412'. [ 1471.891770][T20128] vhci_hcd: connection closed [ 1471.894985][ T1101] vhci_hcd: stop threads [ 1471.904134][ T5640] usb 9-1: new high-speed USB device number 2 using vhci_hcd [ 1471.915775][T19749] veth1_macvtap: entered promiscuous mode [ 1471.928255][ T5290] usb 4-1: device descriptor read/64, error -71 [ 1471.939929][ T1101] vhci_hcd: release socket [ 1471.948451][ T1101] vhci_hcd: disconnect device [ 1472.023696][T20138] netlink: 'syz.1.3412': attribute type 9 has an invalid length. [ 1472.039138][T19749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1472.056635][T20138] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.3412'. [ 1472.068612][T19749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1472.082918][T19749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1472.085719][ T5290] usb usb4-port1: attempt power cycle [ 1472.095105][T19749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1472.109312][T19749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1472.120991][T19749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1472.131424][T19749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1472.142540][T19749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1472.158358][T19749] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1472.214429][T19749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1472.228098][T19749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1472.242516][T19749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1472.256753][T19749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1472.267056][T19749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1472.278230][T19749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1472.288479][T19749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1472.292993][ T6287] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 1472.300292][T19749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1472.326518][T19749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1472.349287][T19749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1472.371678][T19749] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1472.453067][ T5290] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 1472.461489][T19749] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1472.492896][ T6287] usb 6-1: Using ep0 maxpacket: 32 [ 1472.493734][T19749] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1472.507429][ T6287] usb 6-1: config 0 has an invalid interface number: 88 but max is 0 [ 1472.522883][T19749] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1472.539090][ T5290] usb 4-1: device descriptor read/8, error -71 [ 1472.542865][T19749] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1472.567984][ T6287] usb 6-1: config 0 has no interface number 0 [ 1472.590602][ T6287] usb 6-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice=7d.12 [ 1472.630859][ T6287] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1472.656618][ T6287] usb 6-1: Product: syz [ 1472.660861][ T6287] usb 6-1: Manufacturer: syz [ 1472.698568][ T6287] usb 6-1: SerialNumber: syz [ 1472.733774][ T6287] usb 6-1: config 0 descriptor?? [ 1472.775934][T19699] Bluetooth: hci1: command tx timeout [ 1472.823149][ T5290] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 1472.873567][ T5290] usb 4-1: device descriptor read/8, error -71 [ 1473.030216][ T5290] usb usb4-port1: unable to enumerate USB device [ 1473.607280][T20141] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1473.697414][T12325] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1473.798003][T12325] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1473.853839][T20141] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1474.003807][ T1101] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1474.011681][ T1101] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1474.216921][T19965] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1474.336498][T19965] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1474.362690][T19965] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1474.411561][T19965] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1474.810667][T19699] Bluetooth: hci7: Controller not accepting commands anymore: ncmd = 0 [ 1474.821922][T19699] Bluetooth: hci7: Injecting HCI hardware error event [ 1474.836073][T19699] Bluetooth: hci7: hardware error 0x00 [ 1475.480247][T19965] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1475.704382][T19965] 8021q: adding VLAN 0 to HW filter on device team0 [ 1475.779816][T19705] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 1476.141789][ T8] usb 6-1: USB disconnect, device number 31 [ 1476.174044][T12325] bridge0: port 1(bridge_slave_0) entered blocking state [ 1476.181219][T12325] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1476.206704][ T8] f81534a_ctrl 6-1:0.88: failed to set register 0x116: -19 [ 1476.244343][ T8] f81534a_ctrl 6-1:0.88: failed to enable ports: -19 [ 1476.324979][T19705] usb 5-1: device descriptor read/64, error -71 [ 1476.346583][ T1101] bridge0: port 2(bridge_slave_1) entered blocking state [ 1476.353807][ T1101] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1476.572910][T19705] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 1476.716771][T19705] usb 5-1: device descriptor read/64, error -71 [ 1476.843640][T19705] usb usb5-port1: attempt power cycle [ 1477.245972][T19965] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1477.276440][ T5640] vhci_hcd: vhci_device speed not set [ 1477.414060][T19699] Bluetooth: hci7: Opcode 0x0c03 failed: -110 [ 1477.575209][T19705] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 1477.595496][T19965] veth0_vlan: entered promiscuous mode [ 1477.612393][T19705] usb 5-1: device descriptor read/8, error -71 [ 1477.664443][T19965] veth1_vlan: entered promiscuous mode [ 1477.758422][T19965] veth0_macvtap: entered promiscuous mode [ 1477.771913][T19965] veth1_macvtap: entered promiscuous mode [ 1477.819432][T19965] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1477.833112][ T8] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 1477.845201][T19965] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1477.862181][T19965] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1477.873070][T19705] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 1477.887559][T19965] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1477.905642][T19705] usb 5-1: device descriptor read/8, error -71 [ 1477.911881][T19965] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1477.927295][T19965] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1477.942668][T19965] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1477.984620][ T8] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 1477.991400][T19965] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1477.995831][ T8] usb 6-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice= 9.99 [ 1478.013173][T19965] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1478.024258][T19965] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1478.036643][T19965] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1478.046800][T19965] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1478.057511][T19965] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1478.067458][T19965] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1478.078386][T19965] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1478.088563][T19965] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1478.089735][ T8] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1478.099951][T19965] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1478.118713][T19965] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1478.129316][T19965] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1478.139463][T19965] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1478.150181][T19965] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1478.160168][T19965] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1478.170715][T19965] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1478.183723][T19965] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1478.195981][T19965] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1478.202364][ T8] usb 6-1: config 0 descriptor?? [ 1478.204786][T19965] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1478.218710][T19965] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1478.227480][T19965] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1478.240342][ T8] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1478.263002][T19705] usb usb5-port1: unable to enumerate USB device [ 1478.547686][ T8] snd-usb-audio 6-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 1478.624855][T19917] udevd[19917]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1478.658771][ T8] usb 6-1: USB disconnect, device number 32 [ 1478.787400][T12313] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1478.864077][T12313] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1479.050097][T19675] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1479.103966][T19675] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1479.214989][ T5640] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 1479.519083][ T5640] usb 2-1: Using ep0 maxpacket: 32 [ 1479.547597][T20291] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1479.562915][ T5640] usb 2-1: config 0 has an invalid interface number: 88 but max is 0 [ 1479.576331][ T5640] usb 2-1: config 0 has no interface number 0 [ 1479.632347][ T5640] usb 2-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice=7d.12 [ 1479.683705][T20291] batadv_slave_0: entered promiscuous mode [ 1479.709774][ T5640] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1479.759219][ T5640] usb 2-1: Product: syz [ 1479.766797][ T5640] usb 2-1: Manufacturer: syz [ 1479.771436][ T5640] usb 2-1: SerialNumber: syz [ 1480.519844][ T5640] usb 2-1: config 0 descriptor?? [ 1481.156341][T20274] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1481.404181][T20274] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1482.807106][ T5640] usb 2-1: USB disconnect, device number 20 [ 1482.807577][ T5640] f81534a_ctrl 2-1:0.88: failed to set register 0x116: -19 [ 1482.807605][ T5640] f81534a_ctrl 2-1:0.88: failed to enable ports: -19 [ 1484.057877][ T1260] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.068991][ T1260] ieee802154 phy1 wpan1: encryption failed: -22 [ 1485.473189][ T5387] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 1485.702895][ T5387] usb 5-1: Using ep0 maxpacket: 32 [ 1485.958888][ T5387] usb 5-1: config 0 has an invalid interface number: 88 but max is 0 [ 1486.019329][ T5387] usb 5-1: config 0 has no interface number 0 [ 1487.178937][ T5387] usb 5-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice=7d.12 [ 1487.221362][ T5387] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1487.406242][ T5387] usb 5-1: config 0 descriptor?? [ 1487.443932][ T5387] usb 5-1: can't set config #0, error -71 [ 1487.474879][ T5387] usb 5-1: USB disconnect, device number 18 [ 1488.612636][ T5315] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 1489.066051][ T5315] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 1489.085792][ T5315] usb 4-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice= 9.99 [ 1489.109786][ T5315] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1489.207210][ T5315] usb 4-1: config 0 descriptor?? [ 1489.243580][ T5315] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1489.574742][ T5307] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 1490.609358][T19925] udevd[19925]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1490.651232][ T5307] usb 2-1: Using ep0 maxpacket: 32 [ 1490.837203][ T5307] usb 2-1: config 0 has an invalid interface number: 88 but max is 0 [ 1490.861647][ T5307] usb 2-1: config 0 has no interface number 0 [ 1490.908066][ T5307] usb 2-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice=7d.12 [ 1490.925079][ T5315] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 1490.934484][ T5307] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1490.968459][ T5307] usb 2-1: Product: syz [ 1491.001314][ T5307] usb 2-1: Manufacturer: syz [ 1491.024632][ T5307] usb 2-1: SerialNumber: syz [ 1491.939370][ T5315] usb 4-1: USB disconnect, device number 19 [ 1491.948115][ T5307] usb 2-1: config 0 descriptor?? [ 1493.302950][ T6287] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 1493.623079][ T6287] usb 3-1: Using ep0 maxpacket: 16 [ 1493.646616][ T6287] usb 3-1: New USB device found, idVendor=102c, idProduct=6151, bcdDevice=44.e6 [ 1493.679002][ T6287] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1494.950306][ T5307] f81534a_ctrl 2-1:0.88: failed to set register 0x116: -5 [ 1495.291640][ T5307] f81534a_ctrl 2-1:0.88: failed to enable ports: -5 [ 1495.612822][ T5307] f81534a_ctrl 2-1:0.88: probe with driver f81534a_ctrl failed with error -5 [ 1495.733387][ T5307] usb 2-1: USB disconnect, device number 21 [ 1495.749544][ T6287] usb 3-1: config 0 descriptor?? [ 1495.778058][ T6287] usb 3-1: can't set config #0, error -71 [ 1495.788287][ T6287] usb 3-1: USB disconnect, device number 13 [ 1496.513394][T20534] netlink: 'syz.2.3510': attribute type 3 has an invalid length. [ 1498.883301][ T5307] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 1499.309487][ T5307] usb 4-1: device descriptor read/64, error -71 [ 1499.582991][ T5307] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 1500.114668][ T5290] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 1500.358586][ T5290] usb 2-1: Using ep0 maxpacket: 32 [ 1500.439951][ T5290] usb 2-1: config 0 has an invalid interface number: 88 but max is 0 [ 1500.551493][ T5290] usb 2-1: config 0 has no interface number 0 [ 1500.660596][ T5290] usb 2-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice=7d.12 [ 1500.743981][ T5290] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1500.819334][ T5290] usb 2-1: Product: syz [ 1500.836479][ T5290] usb 2-1: Manufacturer: syz [ 1500.842829][ T5290] usb 2-1: SerialNumber: syz [ 1500.884869][ T5290] usb 2-1: config 0 descriptor?? [ 1502.323667][T20560] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1503.241148][T20560] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1504.372266][ T5290] usb 2-1: USB disconnect, device number 22 [ 1504.420330][ T5290] f81534a_ctrl 2-1:0.88: failed to set register 0x116: -19 [ 1506.371010][ T5290] f81534a_ctrl 2-1:0.88: failed to enable ports: -19 [ 1512.602895][ T5387] usb 5-1: new full-speed USB device number 19 using dummy_hcd [ 1513.722221][ T5387] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1513.772851][ T5387] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 3 [ 1514.147232][ T5387] usb 5-1: New USB device found, idVendor=05c6, idProduct=9212, bcdDevice=47.83 [ 1514.207768][ T5387] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1514.243658][ T5387] usb 5-1: Product: syz [ 1514.247844][ T5387] usb 5-1: Manufacturer: syz [ 1514.325627][ T5387] usb 5-1: SerialNumber: syz [ 1514.377034][ T5387] usb 5-1: config 0 descriptor?? [ 1514.650128][ T5387] usb 5-1: USB disconnect, device number 19 [ 1516.617993][T10661] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1516.631096][T10661] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1516.639820][T10661] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1516.647960][T10661] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1516.664821][T10661] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1516.672957][T10661] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1516.880170][T19699] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1516.906722][T19699] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1516.923513][T19699] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1516.932259][T19699] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1516.949564][T19699] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1516.960152][T19699] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1517.508805][T10661] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1517.520868][T10661] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1517.529540][T10661] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1517.540928][T10661] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1517.554626][T10661] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 1517.592127][T10661] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1517.798639][T10661] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1517.807695][T10661] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1517.824093][T10661] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1517.845326][T10661] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1517.863270][T10661] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 1517.872435][T10661] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1518.773059][T19699] Bluetooth: hci0: command tx timeout [ 1519.012954][T19699] Bluetooth: hci4: command tx timeout [ 1519.653013][T19699] Bluetooth: hci8: command tx timeout [ 1519.973605][T19699] Bluetooth: hci9: command tx timeout [ 1520.852895][T19699] Bluetooth: hci0: command tx timeout [ 1521.092900][T19699] Bluetooth: hci4: command tx timeout [ 1521.732865][T19699] Bluetooth: hci8: command tx timeout [ 1522.052887][T19699] Bluetooth: hci9: command tx timeout [ 1522.932854][T19699] Bluetooth: hci0: command tx timeout [ 1523.172935][T19699] Bluetooth: hci4: command tx timeout [ 1523.812930][T19699] Bluetooth: hci8: command tx timeout [ 1524.132901][T19699] Bluetooth: hci9: command tx timeout [ 1528.442878][T19699] Bluetooth: hci0: command tx timeout [ 1528.448354][T19699] Bluetooth: hci4: command tx timeout [ 1528.453832][T10661] Bluetooth: hci8: command tx timeout [ 1528.459245][T10661] Bluetooth: hci9: command tx timeout [ 1531.604070][T19699] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 1531.614835][T19699] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 1531.624283][T19699] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 1531.633656][T19699] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 1531.641295][T19699] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 1531.650282][T19699] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 1533.733687][ T5241] Bluetooth: hci10: command tx timeout [ 1534.810225][T19699] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 1534.821323][T19699] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 1534.831008][T19699] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 1534.845830][T19699] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 1534.853607][T19699] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 1534.861099][T19699] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 1535.813050][T19699] Bluetooth: hci10: command tx timeout [ 1536.933012][T19699] Bluetooth: hci11: command tx timeout [ 1537.903184][T19699] Bluetooth: hci10: command tx timeout [ 1539.012871][T19699] Bluetooth: hci11: command tx timeout [ 1539.973258][T19699] Bluetooth: hci10: command tx timeout [ 1541.094271][T19699] Bluetooth: hci11: command tx timeout [ 1542.462915][T19699] Bluetooth: hci2: command 0x0406 tx timeout [ 1543.172951][ T5241] Bluetooth: hci11: command tx timeout [ 1545.494840][ T1260] ieee802154 phy0 wpan0: encryption failed: -22 [ 1545.503690][ T1260] ieee802154 phy1 wpan1: encryption failed: -22 [ 1548.478370][T20629] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3541'. [ 1548.691610][T20634] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1548.834648][T20634] batadv_slave_0: entered promiscuous mode [ 1576.606206][T19699] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1576.621919][T19699] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1576.630484][T19699] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1576.639514][T19699] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1576.647493][T19699] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1576.655127][T19699] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1576.710112][T19699] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1576.732949][T19699] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1576.743920][T19699] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1576.751855][T19699] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1576.763310][T19699] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1576.770597][T19699] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1576.875396][ T5241] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1576.888878][ T5241] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1576.897305][ T5241] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1576.912136][ T5241] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1576.920446][ T5241] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1576.927824][ T5241] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1576.989815][T19699] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1577.002642][T19699] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1577.024353][T19699] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1577.033588][T19699] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1577.041896][T19699] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1577.049501][T19699] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1577.770605][ T5241] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1577.785487][ T5241] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1577.794937][ T5241] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1577.804743][ T5241] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1577.812553][ T5241] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 1577.820525][ T5241] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1578.692903][ T5241] Bluetooth: hci1: command tx timeout [ 1578.870727][ T5241] Bluetooth: hci2: command tx timeout [ 1579.013010][ T5241] Bluetooth: hci3: command tx timeout [ 1579.094866][ T5241] Bluetooth: hci5: command tx timeout [ 1579.892980][ T5241] Bluetooth: hci6: command tx timeout [ 1580.774353][ T5241] Bluetooth: hci1: command tx timeout [ 1580.934768][ T5241] Bluetooth: hci2: command tx timeout [ 1581.093027][ T5241] Bluetooth: hci3: command tx timeout [ 1581.172916][ T5241] Bluetooth: hci5: command tx timeout [ 1581.973149][ T5241] Bluetooth: hci6: command tx timeout [ 1582.852860][ T5241] Bluetooth: hci1: command tx timeout [ 1583.012934][ T5241] Bluetooth: hci2: command tx timeout [ 1583.173046][ T5241] Bluetooth: hci3: command tx timeout [ 1583.253165][ T5241] Bluetooth: hci5: command tx timeout [ 1584.054024][ T5241] Bluetooth: hci6: command tx timeout [ 1584.933005][ T5241] Bluetooth: hci1: command tx timeout [ 1585.092941][ T5241] Bluetooth: hci2: command tx timeout [ 1585.253037][ T5241] Bluetooth: hci3: command tx timeout [ 1585.332954][ T5241] Bluetooth: hci5: command tx timeout [ 1586.133000][ T5241] Bluetooth: hci6: command tx timeout [ 1593.193440][T19699] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1593.209479][T19699] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1593.223192][T19699] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1593.231960][T19699] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1593.239966][T19699] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 1593.247574][T19699] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1595.333026][ T5241] Bluetooth: hci7: command tx timeout [ 1597.412991][ T5241] Bluetooth: hci7: command tx timeout [ 1599.494349][ T5241] Bluetooth: hci7: command tx timeout [ 1601.572923][ T5241] Bluetooth: hci7: command tx timeout [ 1606.941445][ T1260] ieee802154 phy0 wpan0: encryption failed: -22 [ 1606.952868][ T1260] ieee802154 phy1 wpan1: encryption failed: -22 [ 1636.343867][T19699] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 1636.362910][T19699] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 1636.374529][T19699] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 1636.386476][T19699] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 1636.395115][T19699] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 1636.405126][T19699] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 1636.651661][T19699] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 1636.661328][T19699] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 1636.675867][T19699] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 1636.684233][T19699] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 1636.691899][T19699] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 1636.699540][T19699] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 1637.079578][T19699] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 1637.088472][T19699] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 1637.096439][T19699] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 1637.109995][T19699] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 1637.119910][T19699] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 1637.127358][T19699] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 1637.203752][ T5241] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 1637.216711][ T5241] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 1637.233516][ T5241] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 1637.241507][ T5241] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 1637.255573][ T5241] Bluetooth: hci15: unexpected cc 0x0c25 length: 249 > 3 [ 1637.263448][ T5241] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 1637.803304][T20696] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 1637.823337][T20696] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 1637.832984][T20696] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 1637.843685][T20696] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 1637.851419][T20696] Bluetooth: hci16: unexpected cc 0x0c25 length: 249 > 3 [ 1637.860028][T20696] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 1638.452984][T20696] Bluetooth: hci12: command tx timeout [ 1638.773073][T20696] Bluetooth: hci13: command tx timeout [ 1639.173345][T20696] Bluetooth: hci14: command tx timeout [ 1639.332894][T20696] Bluetooth: hci15: command tx timeout [ 1639.764139][T14716] Bluetooth: hci0: command 0x0406 tx timeout [ 1639.770209][T14716] Bluetooth: hci4: command 0x0406 tx timeout [ 1639.776534][T20696] Bluetooth: hci8: command 0x0406 tx timeout [ 1639.892991][ T5241] Bluetooth: hci16: command tx timeout [ 1640.532875][T10661] Bluetooth: hci12: command tx timeout [ 1640.853183][T10661] Bluetooth: hci13: command tx timeout [ 1641.252912][T10661] Bluetooth: hci14: command tx timeout [ 1641.412913][T10661] Bluetooth: hci15: command tx timeout [ 1641.972804][T10661] Bluetooth: hci16: command tx timeout [ 1642.612903][T10661] Bluetooth: hci12: command tx timeout [ 1642.933070][T10661] Bluetooth: hci13: command tx timeout [ 1643.333063][T10661] Bluetooth: hci14: command tx timeout [ 1643.495728][T10661] Bluetooth: hci15: command tx timeout [ 1644.052857][T10661] Bluetooth: hci16: command tx timeout [ 1644.693103][T10661] Bluetooth: hci12: command tx timeout [ 1644.862756][T10661] Bluetooth: hci9: command 0x0406 tx timeout [ 1645.013162][ T5241] Bluetooth: hci13: command tx timeout [ 1645.413489][ T5241] Bluetooth: hci14: command tx timeout [ 1645.572964][ T5241] Bluetooth: hci15: command tx timeout [ 1646.132890][ T5241] Bluetooth: hci16: command tx timeout [ 1654.239712][T20698] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 1654.249306][T20698] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 1654.257180][T20698] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 1654.269773][T20698] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 1654.281145][T20698] Bluetooth: hci17: unexpected cc 0x0c25 length: 249 > 3 [ 1654.288599][T20698] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 1655.099048][T20698] Bluetooth: hci10: command 0x0406 tx timeout [ 1656.373108][T10661] Bluetooth: hci17: command tx timeout [ 1658.456077][T10661] Bluetooth: hci17: command tx timeout [ 1660.212907][T10661] Bluetooth: hci11: command 0x0406 tx timeout [ 1660.532928][T20698] Bluetooth: hci17: command tx timeout [ 1662.612872][T20698] Bluetooth: hci17: command tx timeout [ 1668.375447][ T1260] ieee802154 phy0 wpan0: encryption failed: -22 [ 1668.381941][ T1260] ieee802154 phy1 wpan1: encryption failed: -22 [ 1685.652918][ T30] INFO: task kworker/0:0:8 blocked for more than 143 seconds. [ 1685.661712][ T30] Not tainted 6.11.0-syzkaller-09959-gabf2050f51fd #0 [ 1685.710280][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1685.762817][ T30] task:kworker/0:0 state:D stack:22912 pid:8 tgid:8 ppid:2 flags:0x00004000 [ 1685.802748][ T30] Workqueue: events_power_efficient reg_check_chans_work [ 1685.809828][ T30] Call Trace: [ 1685.912908][ T30] [ 1685.915914][ T30] __schedule+0x1895/0x4b30 [ 1685.920484][ T30] ? __pfx___schedule+0x10/0x10 [ 1686.025987][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1686.032048][ T30] ? __pfx_lock_release+0x10/0x10 [ 1686.086927][ T30] ? kick_pool+0x45c/0x620 [ 1686.091416][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 1686.133028][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1686.138723][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 1686.187015][ T30] ? schedule+0x90/0x320 [ 1686.191313][ T30] schedule+0x14b/0x320 [ 1686.238816][ T30] schedule_preempt_disabled+0x13/0x30 [ 1686.272770][ T30] __mutex_lock+0x6a7/0xd70 [ 1686.277331][ T30] ? __mutex_lock+0x52a/0xd70 [ 1686.282050][ T30] ? reg_check_chans_work+0x99/0xfd0 [ 1686.344034][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1686.349169][ T30] ? process_scheduled_works+0x976/0x1850 [ 1686.392904][ T30] reg_check_chans_work+0x99/0xfd0 [ 1686.402818][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1686.408504][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 1686.442141][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1686.472905][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1686.480310][ T30] ? __pfx_reg_check_chans_work+0x10/0x10 [ 1686.532757][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1686.539478][ T30] ? process_scheduled_works+0x976/0x1850 [ 1686.602769][ T30] process_scheduled_works+0xa65/0x1850 [ 1686.608427][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 1686.647230][ T30] ? assign_work+0x364/0x3d0 [ 1686.651932][ T30] worker_thread+0x870/0xd30 [ 1686.699286][ T30] ? __kthread_parkme+0x169/0x1d0 [ 1686.712949][ T30] ? __pfx_worker_thread+0x10/0x10 [ 1686.718147][ T30] kthread+0x2f2/0x390 [ 1686.722248][ T30] ? __pfx_worker_thread+0x10/0x10 [ 1686.787848][ T30] ? __pfx_kthread+0x10/0x10 [ 1686.792533][ T30] ret_from_fork+0x4d/0x80 [ 1686.827912][ T30] ? __pfx_kthread+0x10/0x10 [ 1686.832589][ T30] ret_from_fork_asm+0x1a/0x30 [ 1686.860668][ T30] [ 1686.869158][ T30] [ 1686.869158][ T30] Showing all locks held in the system: [ 1686.902771][ T30] 3 locks held by kworker/0:0/8: [ 1686.907775][ T30] #0: ffff88801ac79948 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 1686.951884][ T30] #1: ffffc900000d7d00 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 1686.982880][ T30] #2: ffffffff8fccdc48 (rtnl_mutex){+.+.}-{3:3}, at: reg_check_chans_work+0x99/0xfd0 [ 1687.016168][ T30] 1 lock held by khungtaskd/30: [ 1687.021071][ T30] #0: ffffffff8e937ee0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 1687.056928][ T30] 3 locks held by kworker/u8:6/1101: [ 1687.062251][ T30] #0: ffff88801ac81148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 1687.102996][ T30] #1: ffffc90003c97d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 1687.142742][ T30] #2: ffffffff8fccdc48 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 1687.151850][ T30] 2 locks held by klogd/4665: [ 1687.181064][ T30] 2 locks held by getty/4980: [ 1687.201913][ T30] #0: ffff88802e3b20a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1687.231198][ T30] #1: ffffc900031332f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a6/0x1e00 [ 1687.255858][ T30] 6 locks held by kworker/0:5/5307: [ 1687.261085][ T30] 4 locks held by kworker/0:6/5315: [ 1687.288317][ T30] 3 locks held by kworker/u8:0/19675: [ 1687.307684][ T30] #0: ffff88802daf9148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 1687.342261][ T30] #1: ffffc90008ae7d00 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 1687.380547][ T30] #2: ffffffff8fccdc48 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_verify_work+0x19/0x30 [ 1687.409169][ T30] 1 lock held by syz.0.3525/20584: [ 1687.432771][ T30] #0: ffffffff8fccdc48 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3b/0x1b0 [ 1687.441836][ T30] 1 lock held by syz.2.3528/20596: [ 1687.491605][ T30] #0: ffffffff8fccdc48 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3b/0x1b0 [ 1687.519662][ T30] 1 lock held by syz.5.3529/20594: [ 1687.542632][ T30] #0: ffffffff8fccdc48 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3b/0x1b0 [ 1687.572944][ T30] 2 locks held by syz.3.3531/20605: [ 1687.578173][ T30] #0: ffffffff8fccdc48 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3b/0x1b0 [ 1687.613998][ T30] #1: ffffffff8e7d1dd0 (cpu_hotplug_lock){++++}-{0:0}, at: unregister_netdevice_many_notify+0x5ea/0x1da0 [ 1687.659674][ T30] 1 lock held by syz.1.3532/20604: [ 1687.672822][ T30] #0: ffffffff8fccdc48 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3b/0x1b0 [ 1687.681899][ T30] 1 lock held by syz-executor/20626: [ 1687.713842][ T30] #0: ffffffff8fccdc48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 1687.750345][ T30] 1 lock held by syz.4.3541/20634: [ 1687.770887][ T30] #0: ffffffff8fccdc48 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3b/0x1b0 [ 1687.792868][ T30] 2 locks held by syz-executor/20631: [ 1687.798273][ T30] #0: ffffffff8fcc1150 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 1687.843373][ T30] #1: ffffffff8fccdc48 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 1687.872753][ T30] 2 locks held by syz-executor/20635: [ 1687.878151][ T30] #0: ffffffff8fcc1150 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 1687.921359][ T30] #1: ffffffff8fccdc48 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 1687.946683][ T30] 2 locks held by syz-executor/20637: [ 1687.952165][ T30] #0: ffffffff8fcc1150 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 1688.000917][ T30] #1: ffffffff8fccdc48 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 1688.044880][ T30] 2 locks held by syz-executor/20639: [ 1688.050298][ T30] #0: ffffffff8fcc1150 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 1688.112249][ T30] #1: ffffffff8fccdc48 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 1688.152916][ T30] 2 locks held by syz-executor/20644: [ 1688.158338][ T30] #0: ffffffff8fcc1150 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 1688.180230][ T30] #1: ffffffff8fccdc48 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 1688.200695][ T30] 1 lock held by syz-executor/20655: [ 1688.206403][ T30] #0: ffffffff8fccdc48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 1688.222764][ T30] 1 lock held by syz-executor/20656: [ 1688.228073][ T30] #0: ffffffff8fccdc48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 1688.260505][ T30] 1 lock held by syz-executor/20662: [ 1688.266238][ T30] #0: ffffffff8fccdc48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 1688.283400][ T30] 1 lock held by syz-executor/20664: [ 1688.288711][ T30] #0: ffffffff8fccdc48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 1688.310400][ T30] 1 lock held by syz-executor/20667: [ 1688.320643][ T30] #0: ffffffff8fccdc48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 1688.337594][ T30] 1 lock held by syz-executor/20670: [ 1688.345736][ T30] #0: ffffffff8fccdc48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 1688.360622][ T30] 1 lock held by syz-executor/20683: [ 1688.371030][ T30] #0: ffffffff8fccdc48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 1688.391508][ T30] 1 lock held by syz-executor/20687: [ 1688.397538][ T30] #0: ffffffff8fccdc48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 1688.412756][ T30] 1 lock held by syz-executor/20690: [ 1688.418062][ T30] #0: ffffffff8fccdc48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 1688.440601][ T30] 1 lock held by syz-executor/20692: [ 1688.448421][ T30] #0: ffffffff8fccdc48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 1688.469214][ T30] 1 lock held by syz-executor/20695: [ 1688.478353][ T30] #0: ffffffff8fccdc48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 1688.492950][ T30] 1 lock held by syz-executor/20701: [ 1688.498257][ T30] #0: ffffffff8fccdc48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 1688.518961][ T30] [ 1688.521307][ T30] ============================================= [ 1688.521307][ T30] [ 1688.540988][ T30] NMI backtrace for cpu 1 [ 1688.545338][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-syzkaller-09959-gabf2050f51fd #0 [ 1688.555510][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1688.565583][ T30] Call Trace: [ 1688.568876][ T30] [ 1688.571821][ T30] dump_stack_lvl+0x241/0x360 [ 1688.576628][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1688.581865][ T30] ? __pfx__printk+0x10/0x10 [ 1688.586499][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 1688.591474][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1688.596961][ T30] ? _printk+0xd5/0x120 [ 1688.601151][ T30] ? __pfx__printk+0x10/0x10 [ 1688.605777][ T30] ? __wake_up_klogd+0xcc/0x110 [ 1688.610662][ T30] ? __pfx__printk+0x10/0x10 [ 1688.615285][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1688.620940][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 1688.626009][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1688.632022][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 1688.638043][ T30] watchdog+0xff4/0x1040 [ 1688.642326][ T30] ? watchdog+0x1ea/0x1040 [ 1688.646784][ T30] ? __pfx_watchdog+0x10/0x10 [ 1688.651492][ T30] kthread+0x2f2/0x390 [ 1688.655584][ T30] ? __pfx_watchdog+0x10/0x10 [ 1688.660290][ T30] ? __pfx_kthread+0x10/0x10 [ 1688.664905][ T30] ret_from_fork+0x4d/0x80 [ 1688.669354][ T30] ? __pfx_kthread+0x10/0x10 [ 1688.674022][ T30] ret_from_fork_asm+0x1a/0x30 [ 1688.678838][ T30] [ 1688.683035][ T30] Sending NMI from CPU 1 to CPUs 0: [ 1688.688283][ C0] NMI backtrace for cpu 0 [ 1688.688298][ C0] CPU: 0 UID: 0 PID: 5315 Comm: kworker/0:6 Not tainted 6.11.0-syzkaller-09959-gabf2050f51fd #0 [ 1688.688325][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1688.688346][ C0] Workqueue: events nsim_dev_trap_report_work [ 1688.688383][ C0] RIP: 0010:__asan_memset+0x25/0x50 [ 1688.688421][ C0] Code: 90 90 90 90 90 f3 0f 1e fa 55 41 56 53 48 89 d3 41 89 f6 48 89 fd 48 8b 4c 24 18 48 89 d6 ba 01 00 00 00 e8 fd e5 ff ff 84 c0 <74> 12 48 89 ef 44 89 f6 48 89 da 5b 41 5e 5d e9 27 22 c5 09 31 c0 [ 1688.688441][ C0] RSP: 0018:ffffc900000066b0 EFLAGS: 00000202 [ 1688.688461][ C0] RAX: ffffc90000007901 RBX: 0000000000000010 RCX: ffffffff8141332b [ 1688.688479][ C0] RDX: 0000000000000001 RSI: 0000000000000010 RDI: ffffc900000067f0 [ 1688.688496][ C0] RBP: ffffc900000067f0 R08: ffffc900000067ff R09: 1ffff92000000cff [ 1688.688513][ C0] R10: dffffc0000000000 R11: fffff52000000d00 R12: ffffc90000008000 [ 1688.688532][ C0] R13: ffffc900000067a0 R14: 0000000000000000 R15: ffffc900000067f0 [ 1688.688552][ C0] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 1688.688572][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1688.688589][ C0] CR2: 000000110c2c6925 CR3: 000000000e734000 CR4: 0000000000350ef0 [ 1688.688608][ C0] Call Trace: [ 1688.688617][ C0] [ 1688.688626][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 1688.688654][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 1688.688691][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1688.688718][ C0] ? nmi_handle+0x2a/0x5a0 [ 1688.688752][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 1688.688783][ C0] ? nmi_handle+0x151/0x5a0 [ 1688.688806][ C0] ? nmi_handle+0x2a/0x5a0 [ 1688.688831][ C0] ? __asan_memset+0x25/0x50 [ 1688.688864][ C0] ? default_do_nmi+0x63/0x160 [ 1688.688892][ C0] ? exc_nmi+0x123/0x1f0 [ 1688.688918][ C0] ? end_repeat_nmi+0xf/0x53 [ 1688.688958][ C0] ? unwind_next_frame+0xcfb/0x22d0 [ 1688.688994][ C0] ? __asan_memset+0x25/0x50 [ 1688.689028][ C0] ? __asan_memset+0x25/0x50 [ 1688.689085][ C0] ? __asan_memset+0x25/0x50 [ 1688.689119][ C0] [ 1688.689128][ C0] [ 1688.689137][ C0] ? __netif_receive_skb+0x2bf/0x650 [ 1688.689165][ C0] unwind_next_frame+0xcfb/0x22d0 [ 1688.689206][ C0] ? NF_HOOK+0x3a6/0x450 [ 1688.689234][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1688.689264][ C0] arch_stack_walk+0x11c/0x150 [ 1688.689291][ C0] ? __netif_receive_skb+0x2bf/0x650 [ 1688.689323][ C0] stack_trace_save+0x118/0x1d0 [ 1688.689352][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1688.689375][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 1688.689408][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 1688.689433][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1688.689466][ C0] ? ktime_get_with_offset+0x83/0x150 [ 1688.689493][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1688.689522][ C0] kasan_save_track+0x3f/0x80 [ 1688.689543][ C0] ? kasan_save_track+0x3f/0x80 [ 1688.689564][ C0] ? __kasan_slab_alloc+0x66/0x80 [ 1688.689587][ C0] ? kmem_cache_alloc_noprof+0x135/0x2a0 [ 1688.689616][ C0] ? dst_alloc+0x12b/0x190 [ 1688.689648][ C0] ? ip_route_output_key_hash_rcu+0x13cc/0x2390 [ 1688.689681][ C0] ? ip_route_output_key_hash+0x193/0x2b0 [ 1688.689713][ C0] ? ip_route_output_flow+0x29/0x140 [ 1688.689741][ C0] ? ip_route_me_harder+0x80d/0x1300 [ 1688.689769][ C0] ? synproxy_send_tcp+0x356/0x6c0 [ 1688.689798][ C0] ? synproxy_send_client_synack+0x8b8/0xf30 [ 1688.689827][ C0] ? nft_synproxy_eval_v4+0x3ca/0x610 [ 1688.689860][ C0] ? nft_synproxy_do_eval+0x362/0xa60 [ 1688.689892][ C0] ? nft_do_chain+0x4af/0x1da0 [ 1688.689923][ C0] ? nft_do_chain_inet+0x418/0x6b0 [ 1688.689955][ C0] ? nf_hook_slow+0xc5/0x220 [ 1688.689983][ C0] ? NF_HOOK+0x29e/0x450 [ 1688.690005][ C0] ? NF_HOOK+0x3a6/0x450 [ 1688.690053][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1688.690077][ C0] __kasan_slab_alloc+0x66/0x80 [ 1688.690101][ C0] ? dst_alloc+0x12b/0x190 [ 1688.690134][ C0] kmem_cache_alloc_noprof+0x135/0x2a0 [ 1688.690167][ C0] dst_alloc+0x12b/0x190 [ 1688.690204][ C0] ip_route_output_key_hash_rcu+0x13cc/0x2390 [ 1688.690247][ C0] ip_route_output_key_hash+0x193/0x2b0 [ 1688.690280][ C0] ? ip_route_output_key_hash+0xdf/0x2b0 [ 1688.690313][ C0] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 1688.690354][ C0] ? __pfx_lock_release+0x10/0x10 [ 1688.690387][ C0] ? kthread+0x2f2/0x390 [ 1688.690416][ C0] ip_route_output_flow+0x29/0x140 [ 1688.690447][ C0] ip_route_me_harder+0x80d/0x1300 [ 1688.690483][ C0] ? __pfx_ip_route_me_harder+0x10/0x10 [ 1688.690514][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1688.690537][ C0] ? __kmalloc_node_track_caller_noprof+0x242/0x440 [ 1688.690584][ C0] synproxy_send_tcp+0x356/0x6c0 [ 1688.690619][ C0] synproxy_send_client_synack+0x8b8/0xf30 [ 1688.690660][ C0] ? __pfx_synproxy_send_client_synack+0x10/0x10 [ 1688.690691][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1688.690716][ C0] ? synproxy_pernet+0x45/0x270 [ 1688.690748][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1688.690773][ C0] nft_synproxy_eval_v4+0x3ca/0x610 [ 1688.690810][ C0] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 1688.690846][ C0] ? nf_ip_checksum+0x13a/0x500 [ 1688.690883][ C0] nft_synproxy_do_eval+0x362/0xa60 [ 1688.690920][ C0] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 1688.690958][ C0] ? __pfx_validate_chain+0x10/0x10 [ 1688.690986][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1688.691013][ C0] nft_do_chain+0x4af/0x1da0 [ 1688.691056][ C0] ? __pfx_nft_do_chain+0x10/0x10 [ 1688.691089][ C0] ? __local_bh_enable_ip+0x168/0x200 [ 1688.691125][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1688.691160][ C0] ? __pfx_nf_nat_inet_fn+0x10/0x10 [ 1688.691201][ C0] nft_do_chain_inet+0x418/0x6b0 [ 1688.691236][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 1688.691268][ C0] ? ipt_do_table+0x312/0x1860 [ 1688.691312][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 1688.691348][ C0] nf_hook_slow+0xc5/0x220 [ 1688.691378][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 1688.691403][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 1688.691430][ C0] NF_HOOK+0x29e/0x450 [ 1688.691452][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1688.691478][ C0] ? NF_HOOK+0x9a/0x450 [ 1688.691501][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 1688.691527][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 1688.691557][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1688.691579][ C0] ? ip_rcv_finish+0x406/0x560 [ 1688.691606][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 1688.691631][ C0] NF_HOOK+0x3a6/0x450 [ 1688.691653][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1688.691675][ C0] ? __lock_acquire+0x1384/0x2050 [ 1688.691711][ C0] ? NF_HOOK+0x9a/0x450 [ 1688.691734][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 1688.691757][ C0] ? ip_rcv_core+0x801/0xd10 [ 1688.691783][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 1688.691813][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 1688.691838][ C0] __netif_receive_skb+0x2bf/0x650 [ 1688.691868][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 1688.691902][ C0] ? __pfx___netif_receive_skb+0x10/0x10 [ 1688.691928][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1688.691963][ C0] ? __pfx_lock_release+0x10/0x10 [ 1688.691998][ C0] ? _raw_spin_lock_irq+0xdf/0x120 [ 1688.692036][ C0] process_backlog+0x662/0x15b0 [ 1688.692070][ C0] ? process_backlog+0x33b/0x15b0 [ 1688.692105][ C0] ? __pfx_process_backlog+0x10/0x10 [ 1688.692134][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1688.692171][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1688.692208][ C0] __napi_poll+0xcd/0x490 [ 1688.692238][ C0] net_rx_action+0x89b/0x1240 [ 1688.692282][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 1688.692312][ C0] ? __pfx_tmigr_handle_remote+0x10/0x10 [ 1688.692372][ C0] handle_softirqs+0x2c7/0x980 [ 1688.692407][ C0] ? do_softirq+0x11b/0x1e0 [ 1688.692439][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 1688.692475][ C0] do_softirq+0x11b/0x1e0 [ 1688.692504][ C0] [ 1688.692512][ C0] [ 1688.692522][ C0] ? __pfx_do_softirq+0x10/0x10 [ 1688.692552][ C0] ? __pfx_lockdep_softirqs_on+0x10/0x10 [ 1688.692587][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1688.692611][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1688.692633][ C0] ? rcu_is_watching+0x15/0xb0 [ 1688.692665][ C0] __local_bh_enable_ip+0x1bb/0x200 [ 1688.692700][ C0] ? nsim_dev_trap_report_work+0x75d/0xaa0 [ 1688.692735][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 1688.692767][ C0] ? do_raw_spin_unlock+0x13c/0x8b0 [ 1688.692799][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1688.692822][ C0] ? nsim_dev_trap_report_work+0x6a7/0xaa0 [ 1688.692862][ C0] nsim_dev_trap_report_work+0x75d/0xaa0 [ 1688.692908][ C0] ? process_scheduled_works+0x976/0x1850 [ 1688.692945][ C0] process_scheduled_works+0xa65/0x1850 [ 1688.692999][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 1688.693040][ C0] ? assign_work+0x364/0x3d0 [ 1688.693077][ C0] worker_thread+0x870/0xd30 [ 1688.693115][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1688.693142][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1688.693166][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1688.693204][ C0] ? __kthread_parkme+0x169/0x1d0 [ 1688.693244][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1688.693279][ C0] kthread+0x2f2/0x390 [ 1688.693302][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1688.693335][ C0] ? __pfx_kthread+0x10/0x10 [ 1688.693365][ C0] ret_from_fork+0x4d/0x80 [ 1688.693398][ C0] ? __pfx_kthread+0x10/0x10 [ 1688.693420][ C0] ret_from_fork_asm+0x1a/0x30 [ 1688.693464][ C0] [ 1689.675607][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 1689.682523][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-syzkaller-09959-gabf2050f51fd #0 [ 1689.692708][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1689.702954][ T30] Call Trace: [ 1689.706336][ T30] [ 1689.709285][ T30] dump_stack_lvl+0x241/0x360 [ 1689.714015][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1689.719259][ T30] ? __pfx__printk+0x10/0x10 [ 1689.723884][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1689.729916][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1689.735573][ T30] ? vscnprintf+0x5d/0x90 [ 1689.739933][ T30] panic+0x349/0x880 [ 1689.743867][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1689.749531][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 1689.755718][ T30] ? __pfx_panic+0x10/0x10 [ 1689.760169][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 1689.765571][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1689.771227][ T30] ? __irq_work_queue_local+0x137/0x410 [ 1689.776811][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1689.782469][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 1689.787871][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 1689.794054][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 1689.800239][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1689.805894][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 1689.812087][ T30] watchdog+0x1033/0x1040 [ 1689.816455][ T30] ? watchdog+0x1ea/0x1040 [ 1689.820912][ T30] ? __pfx_watchdog+0x10/0x10 [ 1689.825621][ T30] kthread+0x2f2/0x390 [ 1689.829712][ T30] ? __pfx_watchdog+0x10/0x10 [ 1689.834417][ T30] ? __pfx_kthread+0x10/0x10 [ 1689.839030][ T30] ret_from_fork+0x4d/0x80 [ 1689.843480][ T30] ? __pfx_kthread+0x10/0x10 [ 1689.848091][ T30] ret_from_fork_asm+0x1a/0x30 [ 1689.852905][ T30] [ 1689.856193][ T30] Kernel Offset: disabled [ 1689.860515][ T30] Rebooting in 86400 seconds..