last executing test programs: 35.229572978s ago: executing program 0 (id=5059): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_SET_IRQCHIP(r1, 0x4020aeb2, &(0x7f0000000740)={0x0, 0x0, @ioapic}) 34.851491227s ago: executing program 0 (id=5062): socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$kcm(0x2, 0x0, 0x0) socket$rds(0x15, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000001a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54", 0xe) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000001280)=[{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000002c0)="ad8ac8b523e5d88ca10794545b78231e11503874471ddbe79fed5c3f07b87cc28d002ef11c22a323ada79936307944052d74bf5641e35b195e2b2a8b2164f6ff9df6597390d54e06bbc6ff3d23273ed0f5d029b49baec087f1759539d1725c24a4787eec442054b0d3889ac3936d62fb5e0fbf65caa92994af99836746be27a53c832dcb502df8cf9df7f9ad68d2382bc6420756775a8411fab2781183723c99b19b3e53c7", 0xa5}], 0x1}], 0x1, 0x2004c000) recvmsg(r2, &(0x7f0000001400)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000080)=""/165, 0xa5}], 0x1}, 0x0) 34.547693906s ago: executing program 2 (id=5067): capset(&(0x7f0000000100)={0x19980330}, &(0x7f0000000000)) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000540)=@generic={&(0x7f0000000500)='./file0\x00'}, 0x18) 34.343856316s ago: executing program 2 (id=5070): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x0, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f0000001000/0x1000)=nil, &(0x7f0000c87000/0x2000)=nil, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f00000001c0)={0x48, 0x4}) 34.23487563s ago: executing program 0 (id=5071): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) syz_emit_ethernet(0xb6, &(0x7f00000004c0)={@broadcast, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xa8, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @dest_unreach={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x23, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @dev, @loopback, {[@rr={0x7, 0xf, 0x0, [@empty, @empty, @private]}, @timestamp_prespec={0x44, 0xc, 0x0, 0x3, 0x0, [{@loopback}]}, @ssrr={0x89, 0xf, 0x0, [@private, @broadcast, @broadcast]}, @timestamp_addr={0x44, 0x44, 0x0, 0x1, 0x0, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {@private}, {@local}, {@loopback}, {@private}, {@multicast2}, {@broadcast}, {}]}, @timestamp={0x44, 0x8, 0x0, 0x0, 0x0, [0x0]}]}}}}}}}, 0x0) 34.036436601s ago: executing program 0 (id=5073): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000c3c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f00000000c0)={0x50, 0x0, r1, {0x7, 0x1f}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000e400)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000141bdb7989c08b32000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000180000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f0ffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007ed10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000889049938edebcd600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r2, 0x0) munmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000) 33.381344476s ago: executing program 4 (id=5076): socket(0x10, 0x803, 0x0) socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) bind$inet(0xffffffffffffffff, 0x0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000140)={0x2, 0x4e20, @multicast2}, 0x10) connect$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x3c, 0x2, {{0x0, 0x4995}, [@TCA_NETEM_RATE64={0xc, 0x8, 0xf94c315f0a697f3b}, @TCA_NETEM_RATE={0x14, 0x6, {0x0, 0x0, 0x4}}]}}}]}, 0x6c}}, 0x0) 32.975670565s ago: executing program 0 (id=5078): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$UHID_INPUT(r1, &(0x7f0000001980)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f00000033c0)={0x53, 0x0, 0x6, 0x8, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000000)="1c3513000000", &(0x7f00000001c0)=""/4098, 0x0, 0x0, 0x0, 0x0}) 32.873926191s ago: executing program 2 (id=5079): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000800)='/sys/power/sync_on_suspend', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) write$sequencer(r0, 0x0, 0xfdef) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = signalfd4(r0, 0x0, 0x0, 0x0) read$FUSE(r1, 0x0, 0x0) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) setpriority(0x2, 0x0, 0x7) socket$netlink(0x10, 0x3, 0x10) bind$netlink(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) openat$dma_heap(0xffffffffffffff9c, 0x0, 0x0, 0x0) 32.443921932s ago: executing program 0 (id=5080): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000340)=ANY=[@ANYBLOB="01000000000000008204"]) 30.999992581s ago: executing program 2 (id=5087): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_io_uring_setup(0x110, &(0x7f0000000140), &(0x7f00000001c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}) io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x18, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[0xffffffffffffffff]}, 0x1) 30.830038199s ago: executing program 2 (id=5088): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000c3c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f00000000c0)={0x50, 0x0, r1, {0x7, 0x1f}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000e400)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000141bdb7989c08b32000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000180000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f0ffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007ed10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000889049938edebcd600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r2, 0x0) munmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000) 30.743148377s ago: executing program 4 (id=5089): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f0000001000/0x1000)=nil, &(0x7f0000c87000/0x2000)=nil, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f00000001c0)={0x48, 0x4}) 29.894544916s ago: executing program 2 (id=5092): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff}}}, 0x24}}, 0x0) 29.253417259s ago: executing program 4 (id=5093): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) 28.964234651s ago: executing program 1 (id=5094): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) syz_emit_ethernet(0xb6, &(0x7f00000004c0)={@broadcast, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xa8, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @dest_unreach={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x23, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @dev, @loopback, {[@rr={0x7, 0xf, 0x0, [@empty, @empty, @private]}, @timestamp_prespec={0x44, 0xc, 0x0, 0x3, 0x0, [{@loopback}]}, @ssrr={0x89, 0xf, 0x0, [@private, @broadcast, @broadcast]}, @timestamp_addr={0x44, 0x44, 0x0, 0x1, 0x0, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {}, {@local}, {@loopback}, {@private}, {@multicast2}, {@broadcast}, {}]}, @timestamp={0x44, 0x8, 0x0, 0x0, 0x0, [0x0]}]}}}}}}}, 0x0) 28.123533322s ago: executing program 1 (id=5095): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "d20bddda7d1db9342de76eec7967fe97751f13a23aeaacb0565c1c2251560ed1"}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) shmctl$SHM_STAT(0x0, 0xd, &(0x7f0000000000)=""/252) r2 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000940)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000008c0)=[0x0, 0x0], &(0x7f0000000900), 0x0, 0x2, 0x0, 0x0, r3}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r0, 0xc01064ab, &(0x7f0000000240)={0x0, r4, r5}) r6 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r6, &(0x7f0000000540)={&(0x7f0000000100)=@in={0x2, 0x0, @dev}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000140)='B', 0x1}], 0x1, &(0x7f0000000000)=[@init={0x18, 0x84, 0x0, {0x3e8, 0x0, 0x0, 0x4}}], 0x18}, 0x0) 26.847029994s ago: executing program 4 (id=5096): sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000100)) r4 = socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) r6 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r6) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {}, {0x7}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x2}, {0x4}}, @TCA_BPF_FLAGS={0x8}]}}]}, 0x44}}, 0x0) 26.803452682s ago: executing program 3 (id=5097): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_io_uring_setup(0x110, &(0x7f0000000140), &(0x7f00000001c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}) io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x18, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[0xffffffffffffffff]}, 0x1) 26.695724067s ago: executing program 3 (id=5098): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00'}) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socket(0x9, 0x5, 0xab) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) open(0x0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x2, 0x0, @dev}, 0x10) socket(0x10, 0x3, 0x0) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e1f0a"], 0x22) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_vhci(0x0, 0x0) readahead(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x0, &(0x7f0000007000/0x1000)=nil) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="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"/358], 0x7) setsockopt(0xffffffffffffffff, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000240), &(0x7f0000000300)=0x8) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f0000000180)={@multicast2, @loopback}, 0xc) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000040)={'lo\x00'}) socket$inet(0x2, 0x2, 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, &(0x7f0000000580)={0x0, 0xfffffffffffffc00, @status={[0x5, 0x6, 0x6, 0x5, 0x3, 0x4]}, [0x0, 0x3, 0x800, 0x4000000000000, 0xffffffffffffffff, 0x76, 0x9, 0x80, 0x7, 0x84c, 0x5, 0x0, 0x7, 0x7fffffff, 0x6, 0x33c, 0x7, 0x8000000000000001, 0x10000, 0x8, 0x1, 0x3, 0x1000, 0x20, 0x6, 0x3, 0xffffffff, 0xfffffffffffffffc, 0x12, 0x9, 0x0, 0xa140a99, 0x2, 0x8, 0x3, 0x5, 0x7fffffffffffffff, 0x0, 0xfffffffffffffdc9, 0x213, 0x6, 0x6, 0xc903, 0x9, 0x5, 0x4, 0x6, 0x4118, 0x783, 0x954, 0x1000, 0x74a7, 0xf1f7, 0x6, 0x7, 0x5, 0x2000000000, 0x1, 0xffff, 0x3, 0x3ff, 0x23, 0x8000000000000001, 0x1a76]}) 22.121935652s ago: executing program 3 (id=5099): socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="280000001800010000000000000000000200"], 0x28}}, 0x0) 22.121309219s ago: executing program 4 (id=5100): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_PUBL_GET(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x28, r1, 0x1, 0x0, 0x0, {0x4}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x28}}, 0x0) 22.042186389s ago: executing program 4 (id=5101): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x4020aeb2, &(0x7f0000000740)={0x0, 0x0, @ioapic}) 20.082308363s ago: executing program 3 (id=5102): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f0000001000/0x1000)=nil, &(0x7f0000c87000/0x2000)=nil, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f00000001c0)={0x48, 0x4}) 19.847717511s ago: executing program 1 (id=5103): r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f0000000280)={0x80000002}) epoll_pwait(r1, &(0x7f0000000400)=[{}], 0x1555555555555556, 0x80000001, 0x0, 0x0) close(r1) shutdown(0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000003b000701000000000000000002da"], 0x24}}, 0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, 0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x24040000) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000002c0)) epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40088a01, &(0x7f0000000000)=0x100000) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c460505fe24001000000000000002003e00010100009f0000000000000040000000000000003201000000000000ffff0000020038000100cc07018000000300000001000000e106000000000000040000000000000002000000000000000200000000000000ffffa4ffffffffff07000000000000000400000004000000ff7f00000000000007000000000000002d6c0000000000000500000000000000000000000000008005000000000000005f1982f596046049959cc177d828d894d386f4da8d6de8b8e1eafd54e4a1752ac30082564d964a"], 0xd3) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)=ANY=[@ANYBLOB]) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCDARP(r3, 0x8953, &(0x7f00000004c0)={{0x2, 0x0, @empty}, {0x0, @multicast}, 0x3e, {0x2, 0x0, @broadcast}, 'veth1_to_bond\x00'}) 13.062599469s ago: executing program 1 (id=5105): bind$alg(0xffffffffffffffff, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg$alg(r0, &(0x7f0000005080)=[{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="09dea4afb76288fa135537845f3188b4cb06", 0x12}, {&(0x7f0000000340)="d5bb69fd2ec3a88c5df48b69469a", 0xe}], 0x2}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000003a40)=[{{0x0, 0xffffffffffffff79, &(0x7f0000000580)=[{&(0x7f0000000980)=""/189, 0xbd}, {&(0x7f0000000040)=""/230}, {&(0x7f0000000140)=""/124}, {&(0x7f00000001c0)=""/192}, {&(0x7f0000000280)=""/57}, {&(0x7f0000000380)=""/88}]}}], 0x4000064, 0x0, 0x0) 13.061595947s ago: executing program 3 (id=5106): io_uring_setup(0x497c, &(0x7f00000001c0)) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x6, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 6.154698372s ago: executing program 3 (id=5108): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00'}) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socket(0x9, 0x5, 0xab) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) open(0x0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x2, 0x0, @dev}, 0x10) socket(0x10, 0x3, 0x0) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e1f0a"], 0x22) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_vhci(0x0, 0x0) readahead(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x0, &(0x7f0000007000/0x1000)=nil) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="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"/358], 0x7) setsockopt(0xffffffffffffffff, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000240), &(0x7f0000000300)=0x8) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f0000000180)={@multicast2, @loopback}, 0xc) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000040)={'lo\x00'}) socket$inet(0x2, 0x2, 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, &(0x7f0000000580)={0x0, 0xfffffffffffffc00, @status={[0x5, 0x6, 0x6, 0x5, 0x3, 0x4]}, [0x0, 0x3, 0x800, 0x4000000000000, 0xffffffffffffffff, 0x76, 0x9, 0x80, 0x7, 0x84c, 0x5, 0x0, 0x7, 0x7fffffff, 0x6, 0x33c, 0x7, 0x8000000000000001, 0x10000, 0x8, 0x1, 0x3, 0x1000, 0x20, 0x6, 0x3, 0xffffffff, 0xfffffffffffffffc, 0x12, 0x9, 0x0, 0xa140a99, 0x2, 0x8, 0x3, 0x5, 0x7fffffffffffffff, 0x0, 0xfffffffffffffdc9, 0x213, 0x6, 0x6, 0xc903, 0x9, 0x5, 0x4, 0x6, 0x4118, 0x783, 0x954, 0x1000, 0x74a7, 0xf1f7, 0x6, 0x7, 0x5, 0x2000000000, 0x1, 0xffff, 0x3, 0x3ff, 0x23, 0x8000000000000001, 0x1a76]}) 5.903890671s ago: executing program 1 (id=5109): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_mtu(r3, 0x29, 0x17, 0x0, 0x0) 0s ago: executing program 1 (id=5110): pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005fff000005000000000000000000", @ANYRES32=0x0, @ANYBLOB="0092000000000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) kernel console output (not intermixed with test programs): etooth: hci0: hardware error 0x00 [ 722.334428][T16783] dvb-usb: X3M TV SPC1400HD PCI successfully deinitialized and disconnected. [ 722.350072][ T2802] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 722.482000][ T5142] usb 1-1: Using ep0 maxpacket: 16 [ 722.495100][ T5142] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 722.521358][ T5142] usb 1-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 722.526926][T16554] Bluetooth: hci0: unexpected event for opcode 0x2016 [ 722.562140][ T5142] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 722.623090][ T5142] usb 1-1: config 0 descriptor?? [ 722.716942][ T2802] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 722.952262][ T2802] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 723.294213][T16554] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 723.306264][T16554] Bluetooth: hci3: Injecting HCI hardware error event [ 723.315849][ T5103] Bluetooth: hci3: hardware error 0x00 [ 723.412914][ T2802] bridge_slave_1: left allmulticast mode [ 723.418670][ T2802] bridge_slave_1: left promiscuous mode [ 723.462287][ T2802] bridge0: port 2(bridge_slave_1) entered disabled state [ 723.504221][T19370] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 723.540068][T19370] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 723.558401][T19370] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 723.562401][ T2802] bridge_slave_0: left promiscuous mode [ 723.582309][T19370] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 723.593307][T19370] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 723.605053][T19370] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 723.642903][ T2802] bridge0: port 1(bridge_slave_0) entered disabled state [ 723.658511][T19345] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4513'. [ 724.412253][ T5092] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 724.529739][T19345] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 724.568263][T19345] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 724.581788][T19345] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 724.602503][T19345] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 724.614165][ T5142] hid (null): unknown global tag 0xd [ 724.637588][ T5142] hid-generic 0003:0158:0100.001F: unknown main item tag 0x1 [ 724.648969][ T5142] hid-generic 0003:0158:0100.001F: unexpected long global item [ 724.668308][ T5142] hid-generic 0003:0158:0100.001F: probe with driver hid-generic failed with error -22 [ 724.836696][ T5142] usb 1-1: USB disconnect, device number 72 [ 724.945863][ T2802] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 724.960894][ T2802] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 724.974678][ T2802] bond0 (unregistering): Released all slaves [ 724.989168][ T2802] bond1 (unregistering): Released all slaves [ 725.003747][ T2802] bond2 (unregistering): Released all slaves [ 725.020232][ T2802] bond3 (unregistering): Released all slaves [ 725.047621][ T2802] bond4 (unregistering): Released all slaves [ 725.068135][ T2802] bond5 (unregistering): Released all slaves [ 725.452108][ T5103] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 725.694213][ T5103] Bluetooth: hci4: command tx timeout [ 725.914111][T19418] netlink: 'syz.3.4527': attribute type 1 has an invalid length. [ 726.458577][T19376] chnl_net:caif_netlink_parms(): no params data found [ 726.638755][ T2802] hsr_slave_0: left promiscuous mode [ 726.661904][ T25] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 726.697067][ T2802] hsr_slave_1: left promiscuous mode [ 726.724206][ T2802] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 726.742048][ T2802] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 726.754302][ T2802] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 726.792119][ T2802] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 726.883018][ T2802] veth1_macvtap: left promiscuous mode [ 726.892383][ T25] usb 2-1: Using ep0 maxpacket: 16 [ 726.912799][ T25] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 726.931986][ T2802] veth0_macvtap: left promiscuous mode [ 726.943263][ T2802] veth1_vlan: left promiscuous mode [ 726.948671][ T2802] veth0_vlan: left promiscuous mode [ 726.955859][ T25] usb 2-1: New USB device found, idVendor=1f4d, idProduct=3100, bcdDevice=90.a2 [ 726.979875][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 726.998416][ T25] usb 2-1: Product: syz [ 727.008539][ T25] usb 2-1: Manufacturer: syz [ 727.018662][ T25] usb 2-1: SerialNumber: syz [ 727.039697][ T25] usb 2-1: config 0 descriptor?? [ 727.062414][ T25] dvb-usb: found a 'X3M TV SPC1400HD PCI' in warm state. [ 727.081073][ T25] dw2102: su3000_power_ctrl: 1, initialized 0 [ 727.091535][ T25] dvb-usb: bulk message failed: -22 (2/0) [ 727.110683][ T25] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 727.136958][ T25] dvbdev: DVB: registering new adapter (X3M TV SPC1400HD PCI) [ 727.151935][ T25] usb 2-1: media controller created [ 727.171917][ T25] dvb-usb: bulk message failed: -22 (6/0) [ 727.187799][ T25] dw2102: i2c transfer failed. [ 727.201887][ T25] dvb-usb: bulk message failed: -22 (6/0) [ 727.207845][ T25] dw2102: i2c transfer failed. [ 727.228147][ T25] dvb-usb: bulk message failed: -22 (6/0) [ 727.241885][ T25] dw2102: i2c transfer failed. [ 727.275765][ T25] dvb-usb: bulk message failed: -22 (6/0) [ 727.292015][ T25] dw2102: i2c transfer failed. [ 727.296857][ T25] dvb-usb: bulk message failed: -22 (6/0) [ 727.317063][ T25] dw2102: i2c transfer failed. [ 727.331890][ T25] dvb-usb: bulk message failed: -22 (6/0) [ 727.337872][ T25] dw2102: i2c transfer failed. [ 727.353582][ T25] dvb-usb: MAC address: 02:02:02:02:02:02 [ 727.433424][ T25] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 727.523468][ T25] dvb-usb: bulk message failed: -22 (3/0) [ 727.551987][ T25] dw2102: command 0x0e transfer failed. [ 727.570031][ T25] dvb-usb: bulk message failed: -22 (3/0) [ 727.596551][ T25] dw2102: command 0x0e transfer failed. [ 727.782300][ T5103] Bluetooth: hci4: command tx timeout [ 727.942661][ T25] dvb-usb: bulk message failed: -22 (3/0) [ 727.948457][ T25] dw2102: command 0x0e transfer failed. [ 727.971882][ T25] dvb-usb: bulk message failed: -22 (3/0) [ 727.991872][ T25] dw2102: command 0x0e transfer failed. [ 728.022140][ T25] dvb-usb: bulk message failed: -22 (1/0) [ 728.027937][ T25] dw2102: command 0x51 transfer failed. [ 728.173434][ T25] DVB: Unable to find symbol ds3000_attach() [ 728.201962][ T25] dvb-usb: no frontend was attached by 'X3M TV SPC1400HD PCI' [ 728.341994][ T25] rc_core: IR keymap rc-su3000 not found [ 728.354260][ T25] Registered IR keymap rc-empty [ 728.373707][ T25] rc rc0: X3M TV SPC1400HD PCI as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 728.405628][ T25] input: X3M TV SPC1400HD PCI as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input43 [ 728.449168][ T25] dvb-usb: schedule remote query interval to 150 msecs. [ 728.471254][ T25] dw2102: su3000_power_ctrl: 0, initialized 1 [ 728.487546][ T25] dvb-usb: X3M TV SPC1400HD PCI successfully initialized and connected. [ 728.529747][ T25] usb 2-1: USB disconnect, device number 105 [ 728.639510][ T25] dvb-usb: X3M TV SPC1400HD PCI successfully deinitialized and disconnected. [ 729.030292][ T2802] team0 (unregistering): Port device team_slave_1 removed [ 729.105879][ T2802] team0 (unregistering): Port device team_slave_0 removed [ 729.416259][ T2802] bridge_slave_0 (unregistering): left allmulticast mode [ 729.653160][T19472] netlink: 'syz.4.4543': attribute type 72 has an invalid length. [ 729.661074][T19472] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4543'. [ 729.857167][ T5103] Bluetooth: hci4: command tx timeout [ 729.873019][T19456] netlink: 'syz.1.4537': attribute type 2 has an invalid length. [ 730.114364][T19376] bridge0: port 1(bridge_slave_0) entered blocking state [ 730.142067][T19376] bridge0: port 1(bridge_slave_0) entered disabled state [ 730.149347][T19376] bridge_slave_0: entered allmulticast mode [ 730.176245][T19376] bridge_slave_0: entered promiscuous mode [ 730.203221][T19376] bridge0: port 2(bridge_slave_1) entered blocking state [ 730.218894][T19376] bridge0: port 2(bridge_slave_1) entered disabled state [ 730.229261][T19376] bridge_slave_1: entered allmulticast mode [ 730.279175][T19376] bridge_slave_1: entered promiscuous mode [ 730.469846][T19376] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 730.521201][T19376] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 730.633625][ T5147] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 730.690393][T19376] team0: Port device team_slave_0 added [ 730.744290][T19376] team0: Port device team_slave_1 added [ 730.850992][ T5147] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 730.873001][ T5147] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 730.886854][ T5147] usb 2-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 730.903604][T19376] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 730.915991][T19376] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 730.949046][ T5147] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 730.963021][ T5147] usb 2-1: config 0 descriptor?? [ 730.979364][T19376] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 731.020943][T19376] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 731.036260][T19376] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 731.152358][T19376] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 731.404416][ T5147] logitech 0003:046D:C29C.0020: unknown main item tag 0x0 [ 731.427712][ T5147] logitech 0003:046D:C29C.0020: unknown main item tag 0x0 [ 731.450635][ T5147] logitech 0003:046D:C29C.0020: unknown main item tag 0x0 [ 731.469782][T19376] hsr_slave_0: entered promiscuous mode [ 731.491960][ T5147] logitech 0003:046D:C29C.0020: unknown main item tag 0x0 [ 731.502452][T19376] hsr_slave_1: entered promiscuous mode [ 731.503193][ T5147] logitech 0003:046D:C29C.0020: unknown main item tag 0x0 [ 731.551193][ T5147] logitech 0003:046D:C29C.0020: hidraw0: USB HID v0.00 Device [HID 046d:c29c] on usb-dummy_hcd.1-1/input0 [ 731.624566][ T5147] logitech 0003:046D:C29C.0020: no inputs found [ 731.662012][ T5147] usb 2-1: USB disconnect, device number 106 [ 731.931995][ T5103] Bluetooth: hci4: command tx timeout [ 733.024823][T19376] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 733.079772][T19376] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 733.125422][T19376] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 733.165672][T19376] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 733.173144][T19535] netlink: 'syz.4.4555': attribute type 72 has an invalid length. [ 733.181013][T19535] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4555'. [ 733.502960][T19376] 8021q: adding VLAN 0 to HW filter on device bond0 [ 733.561183][T19376] 8021q: adding VLAN 0 to HW filter on device team0 [ 733.588112][ T8261] bridge0: port 1(bridge_slave_0) entered blocking state [ 733.588233][ T8261] bridge0: port 1(bridge_slave_0) entered forwarding state [ 733.626650][ T8261] bridge0: port 2(bridge_slave_1) entered blocking state [ 733.626757][ T8261] bridge0: port 2(bridge_slave_1) entered forwarding state [ 733.851766][T19376] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 734.075167][T19376] veth0_vlan: entered promiscuous mode [ 734.125036][T19376] veth1_vlan: entered promiscuous mode [ 734.280475][T19376] veth0_macvtap: entered promiscuous mode [ 734.301532][T19376] veth1_macvtap: entered promiscuous mode [ 734.367629][T19562] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4563'. [ 734.405402][T19376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 734.445545][T19376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 734.473390][T19376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 734.490676][T19376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 734.524145][T19571] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4565'. [ 734.550622][T19376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 734.584244][T19376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 734.602122][T19376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 734.626406][T19376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 734.650483][T19376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 734.683055][T19376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 734.704065][T19376] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 734.765526][T19376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 734.785952][T19376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 734.806477][T19376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 734.847871][T19376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 734.883185][T19376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 734.914186][T19376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 734.954341][T19376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 734.989759][T19376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 735.021179][T19376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 735.061908][T19376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 735.100209][T19376] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 735.164128][T19376] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 735.202497][T19376] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 735.211270][T19376] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 735.273132][T19376] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 735.559842][ T2794] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 735.620365][ T2794] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 735.711369][ T2794] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 735.719332][ T2794] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 736.135054][T19610] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4575'. [ 736.405494][T19621] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4577'. [ 737.406260][T19654] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4587'. [ 737.571980][ T5143] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 737.777557][ T5143] usb 4-1: Using ep0 maxpacket: 32 [ 737.815674][T19668] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4590'. [ 737.818672][ T5143] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 737.876669][ T5143] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 737.907820][ T5143] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 737.922884][ T5143] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 737.958671][ T5143] usb 4-1: Product: syz [ 737.968799][ T5143] usb 4-1: Manufacturer: syz [ 737.981954][ T5143] usb 4-1: SerialNumber: syz [ 738.205853][ T5143] usb 4-1: Audio class v2/v3 interfaces need an interface association [ 738.291618][ T5143] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 738.332201][ T5143] usb 4-1: USB disconnect, device number 65 [ 738.614351][ T9752] udevd[9752]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 740.687520][T19744] xt_CT: You must specify a L4 protocol and not use inversions on it [ 741.960780][T19769] veth1_macvtap: left promiscuous mode [ 743.641755][T19809] program syz.3.4631 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 743.701474][ T29] audit: type=1326 audit(1719718822.112:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19808 comm="syz.3.4631" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f53e7975b99 code=0x0 [ 743.723281][ C1] vkms_vblank_simulate: vblank timer overrun [ 743.767880][ T929] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 743.812813][T19812] random: crng reseeded on system resumption [ 743.984087][ T929] usb 1-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 744.002018][ T929] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 744.033766][ T929] usb 1-1: config 0 descriptor?? [ 745.770421][T19851] program syz.3.4647 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 745.802429][ T29] audit: type=1326 audit(1719718824.222:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19850 comm="syz.3.4647" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f53e7975b99 code=0x0 [ 746.266579][ T929] pegasus 1-1:0.0: setup Pegasus II specific registers [ 746.880722][ T929] pegasus 1-1:0.0: can't locate MII phy, using default [ 746.909198][ T929] pegasus 1-1:0.0: eth1, ELECOM USB Ethernet LD-USB20, 7e:e9:0a:5d:ba:ff [ 746.924429][ T929] usb 1-1: USB disconnect, device number 73 [ 747.523732][T19908] program syz.1.4668 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 747.536203][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.536274][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.654181][ T29] audit: type=1326 audit(1719718826.072:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19907 comm="syz.1.4668" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd8fd375b99 code=0x0 [ 747.832261][ T8261] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 748.041673][ T8261] usb 4-1: config index 0 descriptor too short (expected 571, got 59) [ 748.061882][ T8261] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 748.082084][ T8261] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 6 [ 748.102582][ T8261] usb 4-1: New USB device found, idVendor=0525, idProduct=a47f, bcdDevice= 0.40 [ 748.111683][ T8261] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 748.141952][ T8261] usb 4-1: SerialNumber: syz [ 748.156722][ T8261] usb 4-1: config 0 descriptor?? [ 748.232070][ T25] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 748.401392][ T25] usb 5-1: device descriptor read/64, error -71 [ 748.691983][ T25] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 748.885363][ T25] usb 5-1: device descriptor read/64, error -71 [ 749.032268][ T25] usb usb5-port1: attempt power cycle [ 749.180147][T19954] program syz.1.4685 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 749.213791][ T29] audit: type=1326 audit(1719718827.632:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19953 comm="syz.1.4685" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd8fd375b99 code=0x0 [ 749.323325][T19958] netlink: 'syz.2.4687': attribute type 9 has an invalid length. [ 749.331393][T19958] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.4687'. [ 749.376071][T19958] netlink: 'syz.2.4687': attribute type 9 has an invalid length. [ 749.384277][T19958] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.4687'. [ 749.483878][ T25] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 749.532919][ T25] usb 5-1: device descriptor read/8, error -71 [ 749.841963][ T25] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 749.899312][ T25] usb 5-1: device descriptor read/8, error -71 [ 750.046001][ T25] usb usb5-port1: unable to enumerate USB device [ 750.172807][ T5147] usb 4-1: USB disconnect, device number 66 [ 750.244006][T16783] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 750.422956][T16783] usb 5-1: device descriptor read/64, error -71 [ 750.737261][T16783] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 750.911968][T16783] usb 5-1: device descriptor read/64, error -71 [ 751.062614][T16783] usb usb5-port1: attempt power cycle [ 751.292247][ T5103] Bluetooth: hci4: command 0x0406 tx timeout [ 751.325712][T19996] netlink: 'syz.4.4698': attribute type 9 has an invalid length. [ 751.407943][T19996] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.4698'. [ 751.533185][T19994] netlink: 'syz.4.4698': attribute type 9 has an invalid length. [ 751.550232][T19994] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.4698'. [ 751.890463][T20002] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4700'. [ 752.515691][T20018] fuse: Bad value for 'fd' [ 752.943425][T20026] netlink: 'syz.1.4711': attribute type 9 has an invalid length. [ 752.962061][T20026] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.4711'. [ 753.154791][T20032] netlink: 'syz.1.4711': attribute type 9 has an invalid length. [ 753.172248][T20036] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4712'. [ 753.181466][T20032] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.4711'. [ 753.371953][ T25] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 753.641193][ T25] usb 4-1: config index 0 descriptor too short (expected 571, got 59) [ 753.681945][ T25] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 753.746850][ T25] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 6 [ 753.800424][ T25] usb 4-1: New USB device found, idVendor=0525, idProduct=a47f, bcdDevice= 0.40 [ 753.858558][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 753.891667][ T25] usb 4-1: SerialNumber: syz [ 753.930979][ T25] usb 4-1: config 0 descriptor?? [ 754.966323][T20070] netlink: 'syz.0.4725': attribute type 9 has an invalid length. [ 754.986021][T20070] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.4725'. [ 755.033195][T20074] netlink: 'syz.0.4725': attribute type 9 has an invalid length. [ 755.048818][T20074] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.4725'. [ 755.984038][ T5147] usb 4-1: USB disconnect, device number 67 [ 756.082016][T20092] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4733'. [ 756.972020][T16783] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 757.182104][T16783] usb 1-1: Using ep0 maxpacket: 8 [ 757.204303][T16783] usb 1-1: New USB device found, idVendor=05dc, idProduct=0001, bcdDevice= 0.01 [ 757.223321][T16783] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 757.245309][T16783] usb 1-1: config 0 descriptor?? [ 757.268949][T16783] ums-jumpshot 1-1:0.0: USB Mass Storage device detected [ 757.315106][T16783] ums-jumpshot 1-1:0.0: Quirks match for vid 05dc pid 0001: 2 [ 759.032884][ T5142] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 759.093778][T20161] netlink: 'syz.2.4757': attribute type 9 has an invalid length. [ 759.108168][T20161] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.4757'. [ 759.202045][T20164] netlink: 'syz.2.4757': attribute type 9 has an invalid length. [ 759.220045][T20164] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.4757'. [ 759.236691][ T5142] usb 2-1: no configurations [ 759.246634][ T5142] usb 2-1: can't read configurations, error -22 [ 759.402045][ T5142] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 759.615309][ T5142] usb 2-1: no configurations [ 759.631335][ T5142] usb 2-1: can't read configurations, error -22 [ 759.652487][ T5142] usb usb2-port1: attempt power cycle [ 759.711028][ T5147] usb 1-1: USB disconnect, device number 74 [ 759.985262][T20185] fuse: Unknown parameter '0x0000000000000003' [ 760.079892][ T5142] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 760.134010][ T5142] usb 2-1: no configurations [ 760.141089][ T5142] usb 2-1: can't read configurations, error -22 [ 760.158864][T20189] netlink: 'syz.0.4769': attribute type 9 has an invalid length. [ 760.169863][T20189] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.4769'. [ 760.268981][T20193] netlink: 'syz.0.4769': attribute type 9 has an invalid length. [ 760.281308][T20193] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.4769'. [ 760.302007][ T5142] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 760.343493][ T5142] usb 2-1: no configurations [ 760.348406][ T5142] usb 2-1: can't read configurations, error -22 [ 760.361421][ T5142] usb usb2-port1: unable to enumerate USB device [ 761.208909][ T5103] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 761.220600][ T5103] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 761.232040][ T5103] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 761.243703][ T5103] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 761.258267][ T5103] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 761.266407][ T5103] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 761.508204][ T59] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 761.653696][ T59] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 761.754792][ T59] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 762.014355][T20231] netlink: 'syz.1.4783': attribute type 9 has an invalid length. [ 762.035020][ T59] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 762.067909][T20231] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.4783'. [ 762.273702][T20226] netlink: 'syz.1.4783': attribute type 9 has an invalid length. [ 762.324205][T20226] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.4783'. [ 762.684067][ T59] bridge_slave_1: left allmulticast mode [ 762.689794][ T59] bridge_slave_1: left promiscuous mode [ 762.738569][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 762.767445][ T59] bridge_slave_0: left allmulticast mode [ 762.793806][ T59] bridge_slave_0: left promiscuous mode [ 762.812427][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 763.292551][ T5092] Bluetooth: hci4: command tx timeout [ 764.042027][ T929] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 764.203330][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 764.234097][ T929] usb 5-1: no configurations [ 764.239803][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 764.240338][ T929] usb 5-1: can't read configurations, error -22 [ 764.273842][ T59] bond0 (unregistering): Released all slaves [ 764.381089][T20215] chnl_net:caif_netlink_parms(): no params data found [ 764.442626][ T929] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 764.642907][ T929] usb 5-1: no configurations [ 764.647726][ T929] usb 5-1: can't read configurations, error -22 [ 764.688685][ T929] usb usb5-port1: attempt power cycle [ 765.007987][T20215] bridge0: port 1(bridge_slave_0) entered blocking state [ 765.032009][T20215] bridge0: port 1(bridge_slave_0) entered disabled state [ 765.052133][T20215] bridge_slave_0: entered allmulticast mode [ 765.080172][T20215] bridge_slave_0: entered promiscuous mode [ 765.093406][T20215] bridge0: port 2(bridge_slave_1) entered blocking state [ 765.112173][ T929] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 765.121023][T20215] bridge0: port 2(bridge_slave_1) entered disabled state [ 765.141382][T20215] bridge_slave_1: entered allmulticast mode [ 765.153009][T20215] bridge_slave_1: entered promiscuous mode [ 765.164277][ T929] usb 5-1: no configurations [ 765.179301][ T929] usb 5-1: can't read configurations, error -22 [ 765.238331][ T59] hsr_slave_0: left promiscuous mode [ 765.254570][ T59] hsr_slave_1: left promiscuous mode [ 765.279316][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 765.297473][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 765.324723][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 765.352049][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 765.357963][ T929] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 765.373592][ T5092] Bluetooth: hci4: command tx timeout [ 765.419828][ T929] usb 5-1: no configurations [ 765.424109][ T59] veth1_macvtap: left promiscuous mode [ 765.430061][ T59] veth0_macvtap: left promiscuous mode [ 765.444293][ T929] usb 5-1: can't read configurations, error -22 [ 765.452135][ T59] veth1_vlan: left promiscuous mode [ 765.464571][ T59] veth0_vlan: left promiscuous mode [ 765.474733][ T929] usb usb5-port1: unable to enumerate USB device [ 766.065774][T20309] netlink: 'syz.3.4797': attribute type 9 has an invalid length. [ 766.102629][T20309] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.4797'. [ 767.212660][ T59] team0 (unregistering): Port device team_slave_1 removed [ 767.267788][ T59] team0 (unregistering): Port device team_slave_0 removed [ 767.453975][ T5092] Bluetooth: hci4: command tx timeout [ 767.992636][T20215] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 768.002681][T20304] netlink: 'syz.3.4797': attribute type 9 has an invalid length. [ 768.010478][T20304] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.4797'. [ 768.032059][T16783] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 768.050970][T20215] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 768.148220][T20215] team0: Port device team_slave_0 added [ 768.215372][T20215] team0: Port device team_slave_1 added [ 768.258429][T16783] usb 2-1: Using ep0 maxpacket: 32 [ 768.265976][T16783] usb 2-1: config index 0 descriptor too short (expected 2560, got 60) [ 768.288660][T16783] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 768.309421][T16783] usb 2-1: config 0 has no interfaces? [ 768.332972][T16783] usb 2-1: New USB device found, idVendor=0df6, idProduct=005b, bcdDevice=f3.b5 [ 768.362073][T16783] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 768.390116][T16783] usb 2-1: Product: syz [ 768.399354][ T29] audit: type=1400 audit(1719718846.812:70): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=20338 comm="syz.0.4809" [ 768.402780][T16783] usb 2-1: Manufacturer: syz [ 768.441201][T20215] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 768.481459][T16783] usb 2-1: SerialNumber: syz [ 768.481972][T20215] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 768.512006][ C0] vkms_vblank_simulate: vblank timer overrun [ 768.547039][T16783] usb 2-1: config 0 descriptor?? [ 768.552897][T20215] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 768.584589][T20215] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 768.631525][T20215] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 768.657674][ C0] vkms_vblank_simulate: vblank timer overrun [ 768.679167][T20215] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 768.789282][ T5147] usb 2-1: USB disconnect, device number 111 [ 768.942829][T20215] hsr_slave_0: entered promiscuous mode [ 768.963030][T20215] hsr_slave_1: entered promiscuous mode [ 769.021042][T20349] Cannot find add_set index 0 as target [ 769.191968][ T25] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 769.404278][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 93, changing to 7 [ 769.432071][ T25] usb 4-1: New USB device found, idVendor=28bd, idProduct=0909, bcdDevice= 0.00 [ 769.441181][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 769.500438][ T25] usb 4-1: config 0 descriptor?? [ 769.532990][ T5092] Bluetooth: hci4: command tx timeout [ 769.534234][ T25] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 769.733690][T20347] netlink: 1688 bytes leftover after parsing attributes in process `syz.3.4812'. [ 769.921201][ T5147] usb 4-1: USB disconnect, device number 68 [ 770.180418][T20215] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 770.212907][T20215] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 770.240096][T20215] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 770.254395][T20215] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 770.569665][T20215] 8021q: adding VLAN 0 to HW filter on device bond0 [ 770.696534][T20215] 8021q: adding VLAN 0 to HW filter on device team0 [ 770.755704][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 770.763078][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 770.793632][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 770.800882][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 770.906395][T20391] netlink: 'syz.3.4819': attribute type 9 has an invalid length. [ 770.948946][T20391] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.4819'. [ 771.080105][T20400] netlink: 'syz.3.4819': attribute type 9 has an invalid length. [ 771.107392][T20400] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.4819'. [ 771.127841][T20215] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 771.261983][T16783] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 771.342849][T20215] veth0_vlan: entered promiscuous mode [ 771.386085][T20215] veth1_vlan: entered promiscuous mode [ 771.445390][T20215] veth0_macvtap: entered promiscuous mode [ 771.462642][T16783] usb 2-1: Using ep0 maxpacket: 32 [ 771.468632][T20215] veth1_macvtap: entered promiscuous mode [ 771.488912][T16783] usb 2-1: config index 0 descriptor too short (expected 2560, got 60) [ 771.491334][T20215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 771.508639][T20215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 771.518732][T20215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 771.537710][T16783] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 771.544404][T20215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 771.559184][T20215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 771.569996][T20215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 771.581487][T20215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 771.581750][T16783] usb 2-1: config 0 has no interfaces? [ 771.605732][T20215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 771.608331][T16783] usb 2-1: New USB device found, idVendor=0df6, idProduct=005b, bcdDevice=f3.b5 [ 771.616911][T20215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 771.635191][T16783] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 771.652793][T16783] usb 2-1: Product: syz [ 771.657067][T20215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 771.659395][T20215] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 771.673851][T16783] usb 2-1: Manufacturer: syz [ 771.679150][T16783] usb 2-1: SerialNumber: syz [ 771.711078][T20215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 771.747036][T16783] usb 2-1: config 0 descriptor?? [ 771.756871][T20215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 771.792025][T20215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 771.821938][T20215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 771.843076][T20215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 771.866769][T20215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 771.879765][T20215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 771.898644][T20215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 771.909159][T20215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 771.924753][T20215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 771.947684][T20215] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 771.979461][T16783] usb 2-1: USB disconnect, device number 112 [ 772.014410][T20215] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 772.054868][T20215] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 772.069378][T20215] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 772.080751][T20215] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 772.310749][ T2848] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 772.339432][ T2848] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 772.445678][ T2802] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 772.473313][ T2802] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 774.149641][ T2848] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 774.412882][ T2848] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 774.613839][ T2848] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 774.818444][ T2848] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 775.165121][ T5103] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 775.176305][ T5103] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 775.191765][ T5103] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 775.201581][ T5103] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 775.222189][ T5103] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 775.232386][ T5103] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 775.285829][ T2848] bridge_slave_1: left allmulticast mode [ 775.329324][ T2848] bridge_slave_1: left promiscuous mode [ 775.346246][ T2848] bridge0: port 2(bridge_slave_1) entered disabled state [ 775.432924][ T2848] bridge_slave_0: left allmulticast mode [ 775.449060][ T2848] bridge_slave_0: left promiscuous mode [ 775.465355][ T2848] bridge0: port 1(bridge_slave_0) entered disabled state [ 776.382029][ T25] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 776.583958][ T25] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 776.601899][ T25] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 776.622072][ T25] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 776.651919][ T25] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 776.661073][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 776.691149][ T25] usb 3-1: invalid MIDI out EP 0 [ 776.766262][ T25] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 776.821996][ T8261] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 776.835479][ T2848] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 776.851447][T20373] udevd[20373]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 776.890832][ T2848] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 776.914076][ T2848] bond0 (unregistering): Released all slaves [ 776.919942][ T5147] usb 3-1: USB disconnect, device number 90 [ 776.932069][ T2848] bond1 (unregistering): Released all slaves [ 776.967921][ T2848] bond2 (unregistering): Released all slaves [ 776.991119][ T2848] bond3 (unregistering): Released all slaves [ 777.021918][ T8261] usb 1-1: Using ep0 maxpacket: 16 [ 777.029485][ T8261] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 777.047819][ T8261] usb 1-1: New USB device found, idVendor=1f4d, idProduct=3100, bcdDevice=90.a2 [ 777.072274][ T8261] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 777.100005][ T8261] usb 1-1: Product: syz [ 777.114917][ T8261] usb 1-1: Manufacturer: syz [ 777.132172][ T8261] usb 1-1: SerialNumber: syz [ 777.162951][ T8261] usb 1-1: config 0 descriptor?? [ 777.190181][ T8261] dvb-usb: found a 'X3M TV SPC1400HD PCI' in warm state. [ 777.214767][ T8261] dw2102: su3000_power_ctrl: 1, initialized 0 [ 777.220910][ T8261] dvb-usb: bulk message failed: -22 (2/0) [ 777.292344][ T5092] Bluetooth: hci2: command tx timeout [ 777.294314][ T8261] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 777.360931][ T8261] dvbdev: DVB: registering new adapter (X3M TV SPC1400HD PCI) [ 777.411611][ T8261] usb 1-1: media controller created [ 777.441149][ T8261] dvb-usb: bulk message failed: -22 (6/0) [ 777.470506][ T8261] dw2102: i2c transfer failed. [ 777.482053][ T8261] dvb-usb: bulk message failed: -22 (6/0) [ 777.521911][ T8261] dw2102: i2c transfer failed. [ 777.526816][ T8261] dvb-usb: bulk message failed: -22 (6/0) [ 777.560721][ T8261] dw2102: i2c transfer failed. [ 777.600778][ T8261] dvb-usb: bulk message failed: -22 (6/0) [ 777.631639][ T8261] dw2102: i2c transfer failed. [ 777.646496][ T8261] dvb-usb: bulk message failed: -22 (6/0) [ 777.662827][ T8261] dw2102: i2c transfer failed. [ 777.679859][ T8261] dvb-usb: bulk message failed: -22 (6/0) [ 777.692837][ T8261] dw2102: i2c transfer failed. [ 777.703469][ T8261] dvb-usb: MAC address: 02:02:02:02:02:02 [ 777.764500][ T8261] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 777.853199][ T8261] dvb-usb: bulk message failed: -22 (3/0) [ 777.859001][ T8261] dw2102: command 0x0e transfer failed. [ 777.892293][ T8261] dvb-usb: bulk message failed: -22 (3/0) [ 777.898140][ T8261] dw2102: command 0x0e transfer failed. [ 777.970929][ T2848] hsr_slave_0: left promiscuous mode [ 778.027376][ T2848] hsr_slave_1: left promiscuous mode [ 778.112798][ T2848] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 778.120301][ T2848] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 778.157766][ T2848] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 778.182614][ T2848] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 778.252427][ T8261] dvb-usb: bulk message failed: -22 (3/0) [ 778.258265][ T8261] dw2102: command 0x0e transfer failed. [ 778.274213][ T2848] veth0_macvtap: left promiscuous mode [ 778.293621][ T2848] veth1_vlan: left promiscuous mode [ 778.303284][ T8261] dvb-usb: bulk message failed: -22 (3/0) [ 778.319466][ T2848] veth0_vlan: left promiscuous mode [ 778.325781][ T8261] dw2102: command 0x0e transfer failed. [ 778.343453][ T8261] dvb-usb: bulk message failed: -22 (1/0) [ 778.358617][ T8261] dw2102: command 0x51 transfer failed. [ 778.530761][ T8261] DVB: Unable to find symbol ds3000_attach() [ 778.544139][ T8261] dvb-usb: no frontend was attached by 'X3M TV SPC1400HD PCI' [ 778.630236][ T5103] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 778.643137][ T5103] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 778.651416][ T5103] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 778.660837][ T5103] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 778.670707][ T5103] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 778.679330][ T5103] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 778.810295][ T8261] rc_core: IR keymap rc-su3000 not found [ 778.827937][ T8261] Registered IR keymap rc-empty [ 778.840057][ T8261] rc rc0: X3M TV SPC1400HD PCI as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 778.873374][ T8261] input: X3M TV SPC1400HD PCI as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input46 [ 778.914121][ T8261] dvb-usb: schedule remote query interval to 150 msecs. [ 778.921132][ T8261] dw2102: su3000_power_ctrl: 0, initialized 1 [ 778.948610][ T8261] dvb-usb: X3M TV SPC1400HD PCI successfully initialized and connected. [ 778.967350][ T8261] usb 1-1: USB disconnect, device number 75 [ 779.117880][ T8261] dvb-usb: X3M TV SPC1400HD PCI successfully deinitialized and disconnected. [ 779.373086][ T5103] Bluetooth: hci2: command tx timeout [ 779.394849][T20614] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4872'. [ 779.568405][ T2848] team0 (unregistering): Port device team_slave_1 removed [ 779.635117][ T2848] team0 (unregistering): Port device team_slave_0 removed [ 779.656156][ T8261] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 779.877788][ T8261] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 779.893371][ T8261] usb 5-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 779.915811][ T8261] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 779.928048][ T8261] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 779.968704][ T8261] usb 5-1: invalid MIDI out EP 0 [ 780.076496][ T8261] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 780.148347][T20373] udevd[20373]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 780.182527][ T5147] usb 5-1: USB disconnect, device number 80 [ 780.733707][ T5103] Bluetooth: hci5: command tx timeout [ 781.007202][T20540] chnl_net:caif_netlink_parms(): no params data found [ 781.022009][ T929] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 781.176449][T20608] chnl_net:caif_netlink_parms(): no params data found [ 781.212244][ T929] usb 1-1: Using ep0 maxpacket: 16 [ 781.248774][ T929] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 781.319480][ T929] usb 1-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 7.79 [ 781.332063][ T929] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 781.349636][ T929] usb 1-1: Product: syz [ 781.369663][ T929] usb 1-1: Manufacturer: syz [ 781.391966][ T929] usb 1-1: SerialNumber: syz [ 781.413604][ T929] usb 1-1: config 0 descriptor?? [ 781.453409][ T5092] Bluetooth: hci2: command tx timeout [ 781.595483][T20540] bridge0: port 1(bridge_slave_0) entered blocking state [ 781.619212][T20540] bridge0: port 1(bridge_slave_0) entered disabled state [ 781.635801][ T929] usb 1-1: Cannot retrieve CPort count: -32 [ 781.652295][T20540] bridge_slave_0: entered allmulticast mode [ 781.656638][ T929] usb 1-1: Cannot retrieve CPort count: -32 [ 781.674677][T20540] bridge_slave_0: entered promiscuous mode [ 781.684888][ T929] es2_ap_driver 1-1:0.0: probe with driver es2_ap_driver failed with error -32 [ 781.735567][ T929] usb 1-1: USB disconnect, device number 76 [ 781.823746][ T5092] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 781.836334][ T5092] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 781.847267][ T5092] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 781.847327][T20540] bridge0: port 2(bridge_slave_1) entered blocking state [ 781.865931][ T5092] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 781.873893][T20540] bridge0: port 2(bridge_slave_1) entered disabled state [ 781.882466][T20540] bridge_slave_1: entered allmulticast mode [ 781.888583][ T5092] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 781.896246][ T5092] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 781.896304][T20540] bridge_slave_1: entered promiscuous mode [ 781.975202][T20608] bridge0: port 1(bridge_slave_0) entered blocking state [ 781.982760][T20608] bridge0: port 1(bridge_slave_0) entered disabled state [ 781.991082][T20608] bridge_slave_0: entered allmulticast mode [ 782.000171][T20608] bridge_slave_0: entered promiscuous mode [ 782.050146][T20608] bridge0: port 2(bridge_slave_1) entered blocking state [ 782.057875][T20608] bridge0: port 2(bridge_slave_1) entered disabled state [ 782.071203][T20608] bridge_slave_1: entered allmulticast mode [ 782.078633][T20608] bridge_slave_1: entered promiscuous mode [ 782.095100][T20540] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 782.160547][T20540] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 782.256061][ T2848] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 782.287220][T20608] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 782.359598][T20608] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 782.396418][ T2848] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 782.455235][T20540] team0: Port device team_slave_0 added [ 782.516856][ T2848] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 782.531488][T20540] team0: Port device team_slave_1 added [ 782.558183][T20608] team0: Port device team_slave_0 added [ 782.597259][T20608] team0: Port device team_slave_1 added [ 782.634957][ T2848] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 782.654547][T20540] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 782.661545][T20540] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 782.690102][T20540] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 782.703696][T20540] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 782.711624][T20540] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 782.781882][T20540] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 782.812724][ T5092] Bluetooth: hci5: command tx timeout [ 782.973885][T20608] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 783.001687][T20608] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 783.036924][T20608] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 783.167708][T20540] hsr_slave_0: entered promiscuous mode [ 783.191591][T20540] hsr_slave_1: entered promiscuous mode [ 783.235639][T20540] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 783.252060][T20540] Cannot create hsr debugfs directory [ 783.263371][T20608] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 783.270366][T20608] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 783.320785][T20608] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 783.324336][ T5103] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 783.343347][ T5103] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 783.353141][ T5103] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 783.365389][ T5103] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 783.385781][ T5103] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 783.394976][ T5103] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 783.511998][ T8261] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 783.532242][ T5103] Bluetooth: hci2: command tx timeout [ 783.733124][ T8261] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 783.752126][ T8261] usb 1-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 783.767658][ T8261] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 783.777298][ T8261] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 783.784124][T20608] hsr_slave_0: entered promiscuous mode [ 783.798665][ T8261] usb 1-1: invalid MIDI out EP 0 [ 783.811335][T20608] hsr_slave_1: entered promiscuous mode [ 783.831036][T20608] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 783.841249][T20608] Cannot create hsr debugfs directory [ 783.894148][ T8261] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 783.933207][ T5103] Bluetooth: hci4: command tx timeout [ 783.984099][T20242] udevd[20242]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 784.035918][T16783] usb 1-1: USB disconnect, device number 77 [ 784.169362][T20653] chnl_net:caif_netlink_parms(): no params data found [ 784.231740][ T2848] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 784.373819][ T2848] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 784.487303][ T2848] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 784.717445][ T2848] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 784.892253][ T5103] Bluetooth: hci5: command tx timeout [ 784.945742][T20653] bridge0: port 1(bridge_slave_0) entered blocking state [ 784.954030][T20653] bridge0: port 1(bridge_slave_0) entered disabled state [ 784.961380][T20653] bridge_slave_0: entered allmulticast mode [ 784.969295][T20653] bridge_slave_0: entered promiscuous mode [ 785.077721][T20653] bridge0: port 2(bridge_slave_1) entered blocking state [ 785.093514][T20653] bridge0: port 2(bridge_slave_1) entered disabled state [ 785.106110][T20653] bridge_slave_1: entered allmulticast mode [ 785.117402][T20653] bridge_slave_1: entered promiscuous mode [ 785.411132][T20653] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 785.428266][T20664] chnl_net:caif_netlink_parms(): no params data found [ 785.452345][ T5103] Bluetooth: hci3: command tx timeout [ 785.454871][T20653] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 785.472421][ T2848] bridge_slave_1: left allmulticast mode [ 785.478118][ T2848] bridge_slave_1: left promiscuous mode [ 785.502164][ T2848] bridge0: port 2(bridge_slave_1) entered disabled state [ 785.522346][ T2848] bridge_slave_0: left allmulticast mode [ 785.528490][ T2848] bridge_slave_0: left promiscuous mode [ 785.545864][ T2848] bridge0: port 1(bridge_slave_0) entered disabled state [ 785.573777][ T2848] bridge_slave_1: left allmulticast mode [ 785.579507][ T2848] bridge_slave_1: left promiscuous mode [ 785.587668][ T2848] bridge0: port 2(bridge_slave_1) entered disabled state [ 785.598047][ T2848] bridge_slave_0: left allmulticast mode [ 785.604276][ T2848] bridge_slave_0: left promiscuous mode [ 785.610066][ T2848] bridge0: port 1(bridge_slave_0) entered disabled state [ 786.012090][ T5103] Bluetooth: hci4: command tx timeout [ 786.352041][ T2848] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 786.371583][ T2848] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 786.392406][ T2848] bond0 (unregistering): Released all slaves [ 786.535969][ T2848] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 786.551114][ T2848] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 786.566610][ T2848] bond0 (unregistering): Released all slaves [ 786.806875][T20653] team0: Port device team_slave_0 added [ 786.816903][T20653] team0: Port device team_slave_1 added [ 786.955167][T20653] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 786.972003][ T5103] Bluetooth: hci5: command tx timeout [ 786.986970][T20653] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 787.024035][T20653] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 787.072927][T20664] bridge0: port 1(bridge_slave_0) entered blocking state [ 787.080377][T20664] bridge0: port 1(bridge_slave_0) entered disabled state [ 787.102122][T20664] bridge_slave_0: entered allmulticast mode [ 787.109254][T20664] bridge_slave_0: entered promiscuous mode [ 787.222034][T20653] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 787.231689][T20653] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 787.257656][ C0] vkms_vblank_simulate: vblank timer overrun [ 787.279796][T20653] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 787.315164][T20664] bridge0: port 2(bridge_slave_1) entered blocking state [ 787.324338][T20664] bridge0: port 2(bridge_slave_1) entered disabled state [ 787.331612][T20664] bridge_slave_1: entered allmulticast mode [ 787.340110][T20664] bridge_slave_1: entered promiscuous mode [ 787.433335][T20664] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 787.531125][T20664] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 787.540435][ T5103] Bluetooth: hci3: command tx timeout [ 787.589079][ T5092] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 787.612660][ T5092] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 787.623291][ T5092] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 787.632190][ T5092] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 787.640352][ T5092] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 787.651598][ T5092] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 787.782790][T20653] hsr_slave_0: entered promiscuous mode [ 787.789278][T20653] hsr_slave_1: entered promiscuous mode [ 787.795755][T20653] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 787.804125][T20653] Cannot create hsr debugfs directory [ 787.859399][T20664] team0: Port device team_slave_0 added [ 787.918580][T20664] team0: Port device team_slave_1 added [ 787.975423][ T2848] hsr_slave_0: left promiscuous mode [ 787.981564][ T2848] hsr_slave_1: left promiscuous mode [ 787.990369][ T2848] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 787.998279][ T2848] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 788.006529][ T2848] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 788.017012][ T2848] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 788.029804][ T2848] hsr_slave_0: left promiscuous mode [ 788.036607][ T2848] hsr_slave_1: left promiscuous mode [ 788.043157][ T2848] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 788.050582][ T2848] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 788.058843][ T2848] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 788.066999][ T2848] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 788.092288][ T5103] Bluetooth: hci4: command tx timeout [ 788.114409][ T2848] veth1_macvtap: left promiscuous mode [ 788.119961][ T2848] veth0_macvtap: left promiscuous mode [ 788.125775][ T2848] veth1_vlan: left promiscuous mode [ 788.131093][ T2848] veth0_vlan: left promiscuous mode [ 788.137827][ T2848] veth1_macvtap: left promiscuous mode [ 788.143526][ T2848] veth0_macvtap: left promiscuous mode [ 788.149218][ T2848] veth1_vlan: left promiscuous mode [ 788.154805][ T2848] veth0_vlan: left promiscuous mode [ 788.799615][ T2848] team0 (unregistering): Port device team_slave_1 removed [ 788.851182][ T2848] team0 (unregistering): Port device team_slave_0 removed [ 789.613990][ T5103] Bluetooth: hci3: command tx timeout [ 789.751244][ T2848] team0 (unregistering): Port device team_slave_1 removed [ 789.776558][ T5103] Bluetooth: hci1: command tx timeout [ 789.821426][ T2848] team0 (unregistering): Port device team_slave_0 removed [ 790.172899][ T5103] Bluetooth: hci4: command tx timeout [ 790.328602][T20664] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 790.348719][T20664] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 790.384720][T20664] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 790.398187][T20664] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 790.405416][T20664] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 790.431619][T20664] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 790.564328][T20608] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 790.582618][T20608] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 790.680012][T20608] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 790.705736][T20664] hsr_slave_0: entered promiscuous mode [ 790.713403][T20664] hsr_slave_1: entered promiscuous mode [ 790.818597][T20608] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 791.000112][T20540] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 791.057854][T20540] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 791.157163][T20540] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 791.180523][T20540] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 791.285355][T20704] chnl_net:caif_netlink_parms(): no params data found [ 791.682427][T20704] bridge0: port 1(bridge_slave_0) entered blocking state [ 791.689634][T20704] bridge0: port 1(bridge_slave_0) entered disabled state [ 791.702251][ T5103] Bluetooth: hci3: command tx timeout [ 791.728869][T20704] bridge_slave_0: entered allmulticast mode [ 791.743305][T20704] bridge_slave_0: entered promiscuous mode [ 791.762868][T20704] bridge0: port 2(bridge_slave_1) entered blocking state [ 791.770152][T20704] bridge0: port 2(bridge_slave_1) entered disabled state [ 791.779091][T20704] bridge_slave_1: entered allmulticast mode [ 791.787250][T20704] bridge_slave_1: entered promiscuous mode [ 791.852103][ T5103] Bluetooth: hci1: command tx timeout [ 791.901755][T20704] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 791.945146][T20704] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 792.026960][T20704] team0: Port device team_slave_0 added [ 792.039274][T20704] team0: Port device team_slave_1 added [ 792.056643][T20608] 8021q: adding VLAN 0 to HW filter on device bond0 [ 792.136153][ T2848] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 792.186711][T20704] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 792.194838][T20704] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 792.222730][T20704] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 792.257105][T20664] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 792.278791][T20653] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 792.329861][ T2848] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 792.346979][T20704] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 792.356927][T20704] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 792.389544][T20704] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 792.402485][T20653] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 792.422523][T20653] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 792.439131][T20653] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 792.469262][T20664] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 792.508494][ T2848] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 792.556913][T20664] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 792.589089][T20608] 8021q: adding VLAN 0 to HW filter on device team0 [ 792.655468][ T2848] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 792.721207][ T929] bridge0: port 1(bridge_slave_0) entered blocking state [ 792.728398][ T929] bridge0: port 1(bridge_slave_0) entered forwarding state [ 792.740614][ T929] bridge0: port 2(bridge_slave_1) entered blocking state [ 792.747772][ T929] bridge0: port 2(bridge_slave_1) entered forwarding state [ 792.782843][T20664] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 792.823360][T20540] 8021q: adding VLAN 0 to HW filter on device bond0 [ 792.863191][T20704] hsr_slave_0: entered promiscuous mode [ 792.870168][T20704] hsr_slave_1: entered promiscuous mode [ 792.877500][T20704] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 792.887245][T20704] Cannot create hsr debugfs directory [ 793.001741][T20540] 8021q: adding VLAN 0 to HW filter on device team0 [ 793.065564][T20727] bridge0: port 1(bridge_slave_0) entered blocking state [ 793.072893][T20727] bridge0: port 1(bridge_slave_0) entered forwarding state [ 793.174219][ T5143] bridge0: port 2(bridge_slave_1) entered blocking state [ 793.181434][ T5143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 793.365645][T20664] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 793.396813][T20664] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 793.494370][T20664] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 793.518895][ T2848] bridge_slave_1: left allmulticast mode [ 793.524716][ T2848] bridge_slave_1: left promiscuous mode [ 793.530490][ T2848] bridge0: port 2(bridge_slave_1) entered disabled state [ 793.553934][ T2848] bridge_slave_0: left allmulticast mode [ 793.559644][ T2848] bridge_slave_0: left promiscuous mode [ 793.565858][ T2848] bridge0: port 1(bridge_slave_0) entered disabled state [ 793.579041][ T2848] bridge_slave_1: left allmulticast mode [ 793.586018][ T2848] bridge_slave_1: left promiscuous mode [ 793.606065][ T2848] bridge0: port 2(bridge_slave_1) entered disabled state [ 793.634146][ T2848] bridge_slave_0: left allmulticast mode [ 793.642684][ T2848] bridge_slave_0: left promiscuous mode [ 793.648476][ T2848] bridge0: port 1(bridge_slave_0) entered disabled state [ 793.943752][ T5103] Bluetooth: hci1: command tx timeout [ 794.840605][ T2848] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 794.853527][ T2848] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 794.866506][ T2848] bond0 (unregistering): Released all slaves [ 794.918650][ T2848] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 794.935814][ T2848] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 794.957564][ T2848] bond0 (unregistering): Released all slaves [ 795.064755][T20664] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 795.115781][T20608] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 795.357744][T20653] 8021q: adding VLAN 0 to HW filter on device bond0 [ 795.701274][T20608] veth0_vlan: entered promiscuous mode [ 795.725652][T20653] 8021q: adding VLAN 0 to HW filter on device team0 [ 795.795680][T20540] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 795.863852][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 795.871051][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 795.921049][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 795.928243][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 796.012214][ T5103] Bluetooth: hci1: command tx timeout [ 796.033841][T20608] veth1_vlan: entered promiscuous mode [ 796.143771][ T2848] hsr_slave_0: left promiscuous mode [ 796.159979][ T2848] hsr_slave_1: left promiscuous mode [ 796.168066][ T2848] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 796.182825][ T2848] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 796.201245][ T2848] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 796.219469][ T2848] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 796.244955][ T2848] hsr_slave_0: left promiscuous mode [ 796.251288][ T2848] hsr_slave_1: left promiscuous mode [ 796.270543][ T2848] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 796.281302][ T2848] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 796.300305][ T2848] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 796.309465][ T2848] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 796.364724][ T2848] veth1_macvtap: left promiscuous mode [ 796.370341][ T2848] veth0_macvtap: left promiscuous mode [ 796.376496][ T2848] veth1_vlan: left promiscuous mode [ 796.382781][ T2848] veth0_vlan: left promiscuous mode [ 796.389603][ T2848] veth1_macvtap: left promiscuous mode [ 796.396863][ T2848] veth0_macvtap: left promiscuous mode [ 796.403035][ T2848] veth1_vlan: left promiscuous mode [ 796.408803][ T2848] veth0_vlan: left promiscuous mode [ 797.310523][ T2848] team0 (unregistering): Port device team_slave_1 removed [ 797.357792][ T2848] team0 (unregistering): Port device team_slave_0 removed [ 798.243949][ T2848] team0 (unregistering): Port device team_slave_1 removed [ 798.296002][ T2848] team0 (unregistering): Port device team_slave_0 removed [ 798.860509][T20664] 8021q: adding VLAN 0 to HW filter on device bond0 [ 798.976864][T20704] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 798.999069][T20653] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 799.026468][T20540] veth0_vlan: entered promiscuous mode [ 799.044345][T20704] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 799.098320][T20704] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 799.110519][T20704] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 799.130972][T20608] veth0_macvtap: entered promiscuous mode [ 799.150480][T20664] 8021q: adding VLAN 0 to HW filter on device team0 [ 799.178967][T20540] veth1_vlan: entered promiscuous mode [ 799.213820][T20608] veth1_macvtap: entered promiscuous mode [ 799.226962][T20653] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 799.265288][T20727] bridge0: port 1(bridge_slave_0) entered blocking state [ 799.272495][T20727] bridge0: port 1(bridge_slave_0) entered forwarding state [ 799.363548][T20540] veth0_macvtap: entered promiscuous mode [ 799.391110][T20727] bridge0: port 2(bridge_slave_1) entered blocking state [ 799.398286][T20727] bridge0: port 2(bridge_slave_1) entered forwarding state [ 799.425171][T20540] veth1_macvtap: entered promiscuous mode [ 799.460129][T20608] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 799.477062][T20608] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 799.493774][T20608] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 799.635534][T20540] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 799.647669][T20540] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 799.658702][T20540] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 799.670674][T20540] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 799.684168][T20540] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 799.718774][T20653] veth0_vlan: entered promiscuous mode [ 799.734512][T20608] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 799.757126][T20608] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 799.775409][T20608] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 799.826366][T20540] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 799.842969][T20540] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 799.858082][T20540] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 799.870225][T20540] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 799.884129][T20540] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 799.901152][T20608] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 799.921199][T20608] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 799.930437][T20608] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 799.948655][T20608] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 800.010065][T20540] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 800.020723][T20540] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 800.029986][T20540] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 800.040777][T20540] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 800.064645][T20653] veth1_vlan: entered promiscuous mode [ 800.232866][T20704] 8021q: adding VLAN 0 to HW filter on device bond0 [ 800.247934][T20653] veth0_macvtap: entered promiscuous mode [ 800.304444][T20653] veth1_macvtap: entered promiscuous mode [ 800.340719][T20704] 8021q: adding VLAN 0 to HW filter on device team0 [ 800.371075][T20653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 800.382934][T20653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 800.393360][T20653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 800.406414][T20653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 800.417100][T20653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 800.427999][T20653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 800.439393][T20653] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 800.463268][ T2794] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 800.471131][ T2794] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 800.490174][ T5144] bridge0: port 1(bridge_slave_0) entered blocking state [ 800.497520][ T5144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 800.531331][T20664] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 800.550571][ T2794] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 800.554964][T20653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 800.571219][ T2794] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 800.579717][T20653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 800.589874][T20653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 800.600655][T20653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 800.611726][T20653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 800.623701][T20653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 800.635623][T20653] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 800.645202][ T5143] bridge0: port 2(bridge_slave_1) entered blocking state [ 800.652426][ T5143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 800.698534][T20653] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 800.716963][T20653] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 800.726925][T20653] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 800.740530][T20653] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 800.803871][ T2794] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 800.834659][ T2794] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 800.870775][ T2802] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 800.898980][ T2802] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 800.966732][T20664] veth0_vlan: entered promiscuous mode [ 801.001049][T20704] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 801.042667][T20704] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 801.068004][ T2918] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 801.097587][T20835] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4847'. [ 801.107414][ T2918] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 801.189688][T20664] veth1_vlan: entered promiscuous mode [ 801.267526][ T2833] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 801.281523][T20704] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 801.299624][ T2833] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 801.393619][T20664] veth0_macvtap: entered promiscuous mode [ 801.441420][T20664] veth1_macvtap: entered promiscuous mode [ 801.513353][ T8261] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 801.578617][T20704] veth0_vlan: entered promiscuous mode [ 801.590465][T20664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 801.619670][T20664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 801.641877][T20664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 801.662242][T20664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 801.685778][T20664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 801.697284][T20664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 801.708261][T20664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 801.720658][T20664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 801.726819][ T8261] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 801.734776][T20664] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 801.784392][ T8261] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 801.793174][T20664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 801.818134][T20664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 801.819620][ T8261] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 801.842667][T20664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 801.842695][T20664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 801.842710][T20664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 801.879224][T20664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 801.889804][T20664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 801.901007][T20664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 801.914660][T20664] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 801.927936][ T8261] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 801.951882][ T8261] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 801.960255][ T8261] usb 4-1: Manufacturer: syz [ 801.967007][T20704] veth1_vlan: entered promiscuous mode [ 801.983572][ T8261] usb 4-1: config 0 descriptor?? [ 801.993993][T20664] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 802.005613][T20664] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 802.025051][T20664] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 802.027449][ T8261] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 802.035806][T20664] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 802.194286][T20704] veth0_macvtap: entered promiscuous mode [ 802.212772][T20704] veth1_macvtap: entered promiscuous mode [ 802.329836][T20704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 802.350948][T20704] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 802.360883][T20704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 802.372204][T20704] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 802.382113][T20704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 802.392975][T20704] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 802.405071][T20704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 802.416762][T20704] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 802.427179][T20704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 802.442117][T20704] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 802.458172][T20704] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 802.467012][T20860] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4901'. [ 802.527265][T20862] ɶƣ0GCTw: entered promiscuous mode [ 802.556626][T20704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 802.568819][T20704] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 802.591350][T20704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 802.603858][T20704] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 802.616197][T20704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 802.644712][T20704] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 802.658543][T20704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 802.669462][T20704] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 802.680588][T20704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 802.691264][T20704] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 802.708527][T20704] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 802.739194][T20704] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 802.754906][ T2918] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 802.767379][T20704] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 802.770991][ T2918] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 802.776285][T20704] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 802.776324][T20704] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 802.914424][ T2848] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 802.949839][ T2848] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 803.086490][ T2833] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 803.133900][ T2833] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 803.228540][ T2833] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 803.246282][ T2833] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 803.662166][T16783] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 803.729577][T20892] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4910'. [ 803.855003][T16783] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 803.866568][T16783] usb 1-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 803.883914][T16783] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 803.897341][T16783] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 803.923572][T16783] usb 1-1: invalid MIDI out EP 0 [ 803.998151][T16783] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 804.056785][T19806] udevd[19806]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 804.139162][T16783] usb 1-1: USB disconnect, device number 78 [ 804.238959][T20727] usb 4-1: USB disconnect, device number 69 [ 804.483323][T20915] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4921'. [ 805.842007][T20727] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 805.960121][ T2833] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 806.047421][T20727] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 806.061877][T20727] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 806.091882][T20727] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 806.101019][T20727] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 806.114614][ T2833] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 806.163282][T20727] usb 2-1: config 0 descriptor?? [ 806.178216][T20727] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 806.244452][ T2833] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 806.399122][ T2833] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 806.702341][ T2833] bridge_slave_1: left allmulticast mode [ 806.708090][ T2833] bridge_slave_1: left promiscuous mode [ 806.739334][ T2833] bridge0: port 2(bridge_slave_1) entered disabled state [ 806.811578][ T2833] bridge_slave_0: left allmulticast mode [ 806.833077][ T2833] bridge_slave_0: left promiscuous mode [ 806.838913][ T2833] bridge0: port 1(bridge_slave_0) entered disabled state [ 807.098934][ T5092] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 807.109402][ T5092] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 807.118566][ T5092] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 807.130212][ T5092] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 807.142508][ T5092] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 807.149947][ T5092] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 807.480126][ T25] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 807.685475][ T25] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 807.749422][ T25] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 807.772569][ T25] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 807.797744][ T25] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 807.828737][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 807.999657][ T25] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -12 [ 808.097253][T19806] udevd[19806]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 808.123187][ T25] usb 3-1: USB disconnect, device number 91 [ 808.207573][ T2833] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 808.227978][ T2833] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 808.255063][ T2833] bond0 (unregistering): Released all slaves [ 808.605650][ T25] usb 2-1: USB disconnect, device number 113 [ 808.977452][ T2833] hsr_slave_0: left promiscuous mode [ 808.992593][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.998954][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.043564][ T2833] hsr_slave_1: left promiscuous mode [ 809.050171][ T2833] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 809.060773][ T2833] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 809.087042][ T2833] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 809.107913][ T2833] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 809.154596][ T2833] veth1_macvtap: left promiscuous mode [ 809.170817][ T2833] veth0_macvtap: left promiscuous mode [ 809.183384][ T2833] veth1_vlan: left promiscuous mode [ 809.194529][ T2833] veth0_vlan: left promiscuous mode [ 809.213133][ T5103] Bluetooth: hci1: command tx timeout [ 810.275468][ T2833] team0 (unregistering): Port device team_slave_1 removed [ 810.337892][ T2833] team0 (unregistering): Port device team_slave_0 removed [ 810.582195][ T5144] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 810.801032][ T5144] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 810.812742][ T5144] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 810.822964][ T5144] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 810.833141][ T5144] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 810.844204][ T5144] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 810.889000][T21012] chnl_net:caif_netlink_parms(): no params data found [ 810.983466][ T5144] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -12 [ 811.154681][T19806] udevd[19806]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 811.171291][ T9] usb 4-1: USB disconnect, device number 70 [ 811.292011][ T5092] Bluetooth: hci1: command tx timeout [ 811.301362][T21012] bridge0: port 1(bridge_slave_0) entered blocking state [ 811.325795][T21012] bridge0: port 1(bridge_slave_0) entered disabled state [ 811.352209][T21012] bridge_slave_0: entered allmulticast mode [ 811.390645][T21012] bridge_slave_0: entered promiscuous mode [ 811.460705][T21012] bridge0: port 2(bridge_slave_1) entered blocking state [ 811.493333][T21012] bridge0: port 2(bridge_slave_1) entered disabled state [ 811.512804][T21012] bridge_slave_1: entered allmulticast mode [ 811.550915][T21012] bridge_slave_1: entered promiscuous mode [ 811.661025][T21012] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 811.708903][T21012] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 811.857937][T21012] team0: Port device team_slave_0 added [ 811.891021][T21012] team0: Port device team_slave_1 added [ 812.104216][T21012] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 812.143148][T21012] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 812.249579][T21012] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 812.305889][T21012] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 812.325726][T21012] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 812.401995][T21012] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 812.548006][T21012] hsr_slave_0: entered promiscuous mode [ 812.572396][T21012] hsr_slave_1: entered promiscuous mode [ 812.587741][T21012] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 812.602009][ T9] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 812.602019][T21012] Cannot create hsr debugfs directory [ 812.679588][T21150] program syz.4.4995 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 812.739006][ T29] audit: type=1326 audit(1719718891.152:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21149 comm="syz.4.4995" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efc3d175b99 code=0x0 [ 812.824353][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 812.848497][ T9] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 767 [ 812.877782][ T9] usb 2-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 812.911471][ T9] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 812.923036][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 812.931192][ T9] usb 2-1: Product: syz [ 812.942541][ T9] usb 2-1: Manufacturer: syz [ 812.947328][ T9] usb 2-1: SerialNumber: syz [ 812.967710][T21137] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 813.380223][ T5092] Bluetooth: hci1: command tx timeout [ 813.559879][ T929] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 813.603026][ T9] cdc_ncm 2-1:1.0: failed GET_NTB_PARAMETERS [ 813.627054][ T9] cdc_ncm 2-1:1.0: bind() failure [ 813.639148][ T9] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 813.646517][ T9] cdc_ncm 2-1:1.1: bind() failure [ 813.673004][ T9] usb 2-1: USB disconnect, device number 114 [ 813.825125][ T929] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 813.847931][ T929] usb 3-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 813.872691][ T929] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 813.890673][ T929] usb 3-1: config 0 descriptor?? [ 813.894744][T21012] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 813.928709][T21012] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 813.948526][T21012] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 813.960106][T21012] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 814.001901][ T5147] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 814.215338][ T5147] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 814.243859][T21012] 8021q: adding VLAN 0 to HW filter on device bond0 [ 814.246935][ T5147] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 814.261608][ T5092] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 814.271057][ T5092] Bluetooth: hci4: Injecting HCI hardware error event [ 814.330844][T21012] 8021q: adding VLAN 0 to HW filter on device team0 [ 814.331631][ T5147] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 814.410486][ T929] bridge0: port 1(bridge_slave_0) entered blocking state [ 814.417784][ T929] bridge0: port 1(bridge_slave_0) entered forwarding state [ 814.428356][ T5103] Bluetooth: hci4: hardware error 0x00 [ 814.432817][ T5147] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 814.511215][T21173] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 814.527867][ T929] bridge0: port 2(bridge_slave_1) entered blocking state [ 814.535188][ T929] bridge0: port 2(bridge_slave_1) entered forwarding state [ 814.763419][ T929] usb 5-1: USB disconnect, device number 81 [ 814.819368][T21012] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 814.924030][T21012] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 815.069123][T21012] veth0_vlan: entered promiscuous mode [ 815.125407][T21012] veth1_vlan: entered promiscuous mode [ 815.224724][T21012] veth0_macvtap: entered promiscuous mode [ 815.262880][T21012] veth1_macvtap: entered promiscuous mode [ 815.326996][T21012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 815.353009][T21012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 815.381011][T21012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 815.399484][T21012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 815.418878][T21012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 815.432906][T21217] program syz.4.5007 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 815.442499][T21012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 815.454673][ T5092] Bluetooth: hci1: command tx timeout [ 815.465547][T21012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 815.477866][T21012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 815.488428][T21012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 815.506379][T21012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 815.521332][T21012] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 815.535807][ T29] audit: type=1326 audit(1719718893.952:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21216 comm="syz.4.5007" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efc3d175b99 code=0x0 [ 815.581470][T21012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 815.603679][T21012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 815.632128][T21012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 815.656558][T21012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 815.672517][T21012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 815.683580][T21012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 815.705194][T21012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 815.718341][T21012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 815.743665][T21012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 815.768839][T21012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 815.779236][ T5092] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 815.789528][ T5092] Bluetooth: hci3: Injecting HCI hardware error event [ 815.796195][T21012] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 815.802093][T16554] Bluetooth: hci3: hardware error 0x00 [ 815.858308][T21012] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 815.889574][T21012] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 815.903703][T21012] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 815.929113][T21012] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 816.179564][ T5092] Bluetooth: hci3: unexpected event for opcode 0x1003 [ 816.234575][ T25] usb 3-1: USB disconnect, device number 92 [ 816.428196][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 816.452474][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 816.544081][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 816.565669][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 816.574507][ T5103] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 816.781501][T21260] program syz.4.5017 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 816.838992][ T29] audit: type=1326 audit(1719718895.252:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21259 comm="syz.4.5017" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efc3d175b99 code=0x0 [ 816.903368][ T5147] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 817.117825][ T5147] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 817.142508][ T5147] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 817.161903][ T5147] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 817.197133][ T5147] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 817.240895][T21254] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 817.471294][ T8] usb 2-1: USB disconnect, device number 115 [ 817.756678][T19370] Bluetooth: hci3: unexpected event for opcode 0x1003 [ 818.012881][T16554] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 818.252245][T16554] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 818.262469][T16554] Bluetooth: hci2: Injecting HCI hardware error event [ 818.271005][T16554] Bluetooth: hci2: hardware error 0x00 [ 818.972079][T19370] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 818.981125][T19370] Bluetooth: hci5: Injecting HCI hardware error event [ 818.990531][T19370] Bluetooth: hci5: hardware error 0x00 [ 819.142797][ T5103] Bluetooth: hci5: unexpected event for opcode 0x1003 [ 819.309351][T21349] program syz.3.5036 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 819.452113][T16783] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 819.502225][ T29] audit: type=1326 audit(1719718897.912:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21342 comm="syz.3.5036" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd81fb75b99 code=0x0 [ 819.716828][T16783] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 819.728040][T16783] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 819.781254][T16783] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 819.811894][T16783] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 819.862665][T21348] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 820.142160][T16794] usb 3-1: USB disconnect, device number 93 [ 820.502175][T16554] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 821.134638][T19370] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 821.783211][T16794] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 822.003995][T16794] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 93, changing to 7 [ 822.031566][T16794] usb 2-1: New USB device found, idVendor=28bd, idProduct=0909, bcdDevice= 0.00 [ 822.067375][T16794] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 822.094981][T16794] usb 2-1: config 0 descriptor?? [ 822.104402][T16794] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 822.142066][T16783] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 822.328780][ T5143] usb 2-1: USB disconnect, device number 116 [ 822.345228][T16783] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 822.380407][T16783] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 822.394988][T16783] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 822.418569][T16783] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 822.440989][T21424] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 822.681623][T16783] usb 3-1: USB disconnect, device number 94 [ 823.435825][T21467] program syz.4.5069 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 823.485411][ T57] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 823.547856][ T29] audit: type=1326 audit(1719718901.962:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21466 comm="syz.4.5069" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efc3d175b99 code=0x0 [ 823.693103][ T57] usb 2-1: Using ep0 maxpacket: 8 [ 823.716645][ T57] usb 2-1: New USB device found, idVendor=05dc, idProduct=0001, bcdDevice= 0.01 [ 823.735194][ T57] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 823.773008][ T57] usb 2-1: config 0 descriptor?? [ 823.785539][ T57] ums-jumpshot 2-1:0.0: USB Mass Storage device detected [ 823.816667][ T57] ums-jumpshot 2-1:0.0: Quirks match for vid 05dc pid 0001: 2 [ 824.389705][T21487] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5075'. [ 824.922971][ T5147] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 825.174118][ T5147] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 825.211346][ T5147] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 825.241982][ T5147] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 825.264494][ T5147] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 825.285965][T21494] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 825.494719][ T2802] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 825.562382][ T57] usb 4-1: USB disconnect, device number 71 [ 825.717209][ T2802] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 825.948218][ T2802] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 826.107004][ T2802] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 826.151013][ T5143] usb 2-1: USB disconnect, device number 117 [ 826.463687][T16554] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 826.474100][T16554] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 826.489745][T16554] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 826.502848][T16554] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 826.514069][T16554] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 826.522088][T16554] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 826.647353][ T2802] bridge_slave_1: left allmulticast mode [ 826.662021][ T2802] bridge_slave_1: left promiscuous mode [ 826.671338][ T2802] bridge0: port 2(bridge_slave_1) entered disabled state [ 826.691292][ T2802] bridge_slave_0: left allmulticast mode [ 826.702587][ T2802] bridge_slave_0: left promiscuous mode [ 826.714065][ T2802] bridge0: port 1(bridge_slave_0) entered disabled state [ 827.690563][ T2802] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 827.706916][ T2802] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 827.719926][ T2802] bond0 (unregistering): Released all slaves [ 827.751108][T21519] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5086'. [ 828.271751][ T5147] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 828.506576][ T5147] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 828.524756][ T5147] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 828.535237][ T5147] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 828.544647][ T5147] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 828.604554][T21541] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 828.741621][T19370] Bluetooth: hci1: command tx timeout [ 829.672384][ T57] usb 4-1: USB disconnect, device number 72 [ 830.981009][T19370] Bluetooth: hci1: command tx timeout [ 834.041926][T19370] Bluetooth: hci1: command tx timeout [ 835.778813][T21566] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5099'. [ 837.763950][T16554] Bluetooth: hci1: command tx timeout [ 840.074935][T21578] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5103'. [ 840.093229][T21512] chnl_net:caif_netlink_parms(): no params data found [ 851.670351][ T929] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 851.839465][T19370] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 851.908431][ T5103] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 851.917766][ T5103] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 851.942910][ T5103] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 851.950145][ T5103] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 851.968965][ T5103] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 852.001996][ T5103] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 852.022284][ T5103] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 852.039873][ T5103] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 852.061885][ T5103] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 852.069053][ T5103] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 852.078079][ T5103] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 854.558795][ T5092] Bluetooth: hci6: command tx timeout [ 854.583852][ T5092] Bluetooth: hci4: command tx timeout [ 857.579769][T16554] Bluetooth: hci4: command tx timeout [ 857.586382][T16554] Bluetooth: hci6: command tx timeout [ 860.982849][ T5092] Bluetooth: hci6: command tx timeout [ 860.988379][ T5092] Bluetooth: hci4: command tx timeout [ 861.020490][ T2802] hsr_slave_0: left promiscuous mode [ 864.534202][T16554] Bluetooth: hci4: command tx timeout [ 864.539693][T16554] Bluetooth: hci6: command tx timeout [ 864.557986][ T2802] hsr_slave_1: left promiscuous mode [ 864.573923][ T2802] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 864.581388][ T2802] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 867.408890][ T2802] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 867.451003][ T2802] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 867.490118][ T2802] veth1_macvtap: left promiscuous mode [ 867.502238][ T2802] veth0_macvtap: left promiscuous mode [ 869.932707][ T2802] veth1_vlan: left promiscuous mode [ 869.938125][ T2802] veth0_vlan: left promiscuous mode [ 872.622356][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 872.628707][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 873.032607][T16554] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 873.063461][ T5103] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 873.075629][T19370] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 873.084775][T19370] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 873.093230][T19370] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 873.105353][T19370] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 873.114170][T19370] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 873.151135][T19370] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 873.165291][T19370] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 873.173835][T19370] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 873.181659][T19370] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 873.189917][T19370] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 875.750603][T19370] Bluetooth: hci3: command tx timeout [ 875.755616][T16554] Bluetooth: hci7: command tx timeout [ 878.808680][ T5103] Bluetooth: hci7: command tx timeout [ 878.814217][ T5103] Bluetooth: hci3: command tx timeout [ 881.765392][T16554] Bluetooth: hci3: command tx timeout [ 881.770979][T16554] Bluetooth: hci7: command tx timeout [ 884.719589][ T5103] Bluetooth: hci7: command tx timeout [ 884.725127][ T5103] Bluetooth: hci3: command tx timeout [ 888.099753][ T5103] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 888.110524][ T5103] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 888.119456][ T5103] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 888.137373][ T5103] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 888.145564][ T5103] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 888.153380][ T5103] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 891.260149][ T5103] Bluetooth: hci8: command tx timeout [ 894.793379][ T5103] Bluetooth: hci8: command tx timeout [ 898.506549][ T5103] Bluetooth: hci8: command tx timeout [ 901.655411][ T5103] Bluetooth: hci8: command tx timeout [ 912.846919][ T5103] Bluetooth: hci9: Opcode 0x0c03 failed: -110 [ 912.858874][T16554] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 913.013779][T16554] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 913.023328][T16554] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 913.031395][T16554] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 913.051553][T19370] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 913.061418][T16554] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 913.071120][T19370] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 913.080049][T19370] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 913.096225][T16554] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 913.103903][T16554] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 913.150345][T19370] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 913.168412][T16554] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 913.176015][T16554] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 915.750424][T16554] Bluetooth: hci10: command tx timeout [ 915.750483][ T5103] Bluetooth: hci9: command tx timeout [ 918.476113][ T5103] Bluetooth: hci10: command tx timeout [ 918.481701][ T5103] Bluetooth: hci9: command tx timeout [ 920.983180][T16554] Bluetooth: hci9: command tx timeout [ 920.983238][ T5103] Bluetooth: hci10: command tx timeout [ 921.033947][ T2802] team0 (unregistering): Port device team_slave_1 removed [ 923.686989][ T5103] Bluetooth: hci9: command tx timeout [ 923.693357][ T5103] Bluetooth: hci10: command tx timeout [ 926.376569][ T2802] team0 (unregistering): Port device team_slave_0 removed [ 929.029598][T16554] Bluetooth: hci11: Opcode 0x0c03 failed: -110 [ 929.046476][ T5103] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 931.493658][T21635] Bluetooth: hci11: Opcode 0x0c03 failed: -110 [ 934.093432][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 934.099818][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 943.648432][T16554] Bluetooth: hci11: Opcode 0x0c03 failed: -110 [ 946.149524][T21639] Bluetooth: hci11: Opcode 0x0c03 failed: -110 [ 946.245102][T19370] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 946.460739][ T5103] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 946.470617][ T5103] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 946.479520][ T5103] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 946.487781][ T5103] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 946.495634][ T5103] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 949.080067][ T5103] Bluetooth: hci12: command tx timeout [ 951.851900][T16554] Bluetooth: hci12: command tx timeout [ 952.544857][T16554] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 952.563498][ T53] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 952.578236][ T53] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 952.599530][ T53] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 952.606830][ T53] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 952.616514][ T53] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 952.626074][ T53] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 952.642818][ T53] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 952.651376][ T53] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 952.659759][ T53] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 952.669651][ T53] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 952.679934][ T53] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 955.362822][ T5092] Bluetooth: hci12: command tx timeout [ 955.368409][ T5092] Bluetooth: hci1: command 0x0406 tx timeout [ 955.419511][T16554] Bluetooth: hci13: Opcode 0x0c39 failed: -110 [ 955.426332][T19370] Bluetooth: hci11: Opcode 0x0c16 failed: -110 [ 955.505189][T19370] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 955.512977][T19370] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 958.910386][T19370] Bluetooth: hci12: command tx timeout [ 958.951855][ T5092] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 958.959141][ T5092] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 962.581191][T21644] Bluetooth: hci11: Opcode 0x1001 failed: -110 [ 962.587702][T21646] Bluetooth: hci13: Opcode 0x1001 failed: -110 [ 973.192607][ T53] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 973.383286][T19370] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 973.752408][T21659] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 973.765573][T21659] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 973.773860][T21659] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 973.786320][T21659] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 973.794707][T21659] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 973.809271][T21661] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 973.816874][T21661] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 973.825378][T21659] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 973.835592][T21659] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 973.843123][T21659] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 973.850939][T21659] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 973.860359][T21659] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 973.870804][T21659] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 973.879058][T21659] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 973.887153][T21659] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 973.895712][T21659] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 976.755422][T19370] Bluetooth: hci4: command 0x0406 tx timeout [ 976.761929][T19370] Bluetooth: hci6: command 0x0406 tx timeout [ 976.770069][T19370] Bluetooth: hci13: command tx timeout [ 976.772499][ T5103] Bluetooth: hci14: command tx timeout [ 976.776481][T19370] Bluetooth: hci11: command tx timeout [ 981.010356][ T5092] Bluetooth: hci11: command tx timeout [ 981.016188][ T5092] Bluetooth: hci14: command tx timeout [ 981.022002][ T5092] Bluetooth: hci13: command tx timeout [ 981.030785][ T5092] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 981.043383][T19370] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 981.066321][T19370] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 985.022079][T19370] Bluetooth: hci13: command tx timeout [ 985.029142][T19370] Bluetooth: hci14: command tx timeout [ 985.034817][T19370] Bluetooth: hci11: command tx timeout [ 988.630855][T19370] Bluetooth: hci11: command tx timeout [ 988.636419][T19370] Bluetooth: hci14: command tx timeout [ 988.641953][T19370] Bluetooth: hci13: command tx timeout [ 988.666820][T16554] Bluetooth: hci15: Opcode 0x1005 failed: -110 [ 988.696358][ T5092] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 991.918090][T21653] Bluetooth: hci15: Opcode 0x0c03 failed: -110 [ 994.970001][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 994.980013][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 997.723991][ T5103] Bluetooth: hci3: command 0x0406 tx timeout [ 997.730196][T19370] Bluetooth: hci7: command 0x0406 tx timeout [ 1003.442091][T19370] Bluetooth: hci15: Opcode 0x0c03 failed: -110 [ 1003.484359][ T5092] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 1006.234865][T19370] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 1006.270264][T16554] Bluetooth: hci16: Opcode 0x0c03 failed: -110 [ 1006.277912][ T5092] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 1006.303591][T21512] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wg0": -EINTR [ 1006.305821][T19370] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 1006.372908][T19370] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 1006.458964][T19370] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 1008.925711][ T5092] Bluetooth: hci16: command 0x1003 tx timeout [ 1009.013651][T19370] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 1009.032209][T21670] Bluetooth: hci16: Opcode 0x1003 failed: -110 [ 1009.042812][T21608] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5110'. [ 1009.717433][T16554] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 1012.385496][T19370] Bluetooth: hci8: command 0x0406 tx timeout [ 1012.453627][ T5103] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 1012.518340][T19370] Bluetooth: hci15: unexpected cc 0x0c25 length: 249 > 3 [ 1019.471934][T19370] Bluetooth: hci16: command 0x1003 tx timeout [ 1019.482648][T21669] Bluetooth: hci15: Opcode 0x0c38 failed: -110 [ 1019.513322][T16554] Bluetooth: hci16: Opcode 0x1003 failed: -110 [ 1022.864574][ T5103] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 1023.184875][T21662] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 1026.492500][T21681] Bluetooth: hci16: Opcode 0x1003 failed: -110 [ 1026.499446][T21662] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 1036.493900][ T5103] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1036.535302][ T53] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1036.682963][ T5103] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1036.791955][ T53] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1036.954533][ T5103] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1037.014774][ T53] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1037.133957][T21659] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1037.305606][T21659] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1037.372805][T21661] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 1037.471868][T21659] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1037.479046][T21659] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1037.532338][T21661] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 1037.540876][T21661] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1040.359706][ T30] INFO: task kworker/0:2:929 blocked for more than 152 seconds. [ 1040.367419][ T30] Not tainted 6.10.0-rc5-syzkaller-00282-g8282d5af7be8 #0 [ 1040.375097][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1040.375741][ T5103] Bluetooth: hci5: Opcode 0x1009 failed: -110 [ 1040.383764][ T30] task:kworker/0:2 state:D stack:19600 pid:929 tgid:929 ppid:2 flags:0x00004000 [ 1040.383812][ T30] Workqueue: events linkwatch_event [ 1040.390232][ T5092] Bluetooth: hci1: Opcode 0x0c14 failed: -110 [ 1040.394886][T21659] Bluetooth: hci16: Opcode 0x0c03 failed: -110 [ 1040.395732][T16554] Bluetooth: hci2: Opcode 0x0c14 failed: -110 [ 1044.171970][ T53] Bluetooth: hci15: Opcode 0x1001 failed: -110 [ 1044.176835][ T30] [ 1044.176859][ T30] Call Trace: [ 1044.176870][ T30] SYZFAIL: failed to recv rpc fd=3 want=4 sent=0 n=0 (errno 9: Bad file descriptor) [ 1044.176903][ T30] __schedule+0x17e8/0x4a20 [ 1044.208722][ T30] ? __pfx___schedule+0x10/0x10 [ 1044.213620][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1044.219643][ T30] ? __pfx_lock_release+0x10/0x10 [ 1044.224711][ T30] ? kick_pool+0x1bd/0x620 [ 1044.229169][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 1044.234406][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 1044.239964][ T30] ? schedule+0x90/0x320 [ 1044.244278][ T30] schedule+0x14b/0x320 [ 1044.248475][ T30] schedule_preempt_disabled+0x13/0x30 [ 1047.962859][ T30] __mutex_lock+0x6a4/0xd70 [ 1047.967457][ T30] ? __mutex_lock+0x527/0xd70 [ 1047.972269][ T30] ? linkwatch_event+0xe/0x60 [ 1047.976984][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1047.982074][ T30] ? process_scheduled_works+0x945/0x1830 [ 1047.987831][ T30] linkwatch_event+0xe/0x60 [ 1047.992368][ T30] process_scheduled_works+0xa2c/0x1830 [ 1047.997991][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 1048.004017][ T30] ? assign_work+0x364/0x3d0 [ 1048.008648][ T30] worker_thread+0x86d/0xd50 [ 1048.013286][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1048.019220][ T30] ? __kthread_parkme+0x169/0x1d0 [ 1048.024285][ T30] ? __pfx_worker_thread+0x10/0x10 [ 1048.029430][ T30] kthread+0x2f0/0x390 [ 1048.033543][ T30] ? __pfx_worker_thread+0x10/0x10 [ 1048.038685][ T30] ? __pfx_kthread+0x10/0x10 [ 1048.040311][T21661] Bluetooth: hci9: command 0x0406 tx timeout [ 1048.043291][ T30] ret_from_fork+0x4b/0x80 [ 1048.043328][ T30] ? __pfx_kthread+0x10/0x10 [ 1048.051799][T21661] Bluetooth: hci10: command 0x0406 tx ti