last executing test programs: 7.39206489s ago: executing program 2 (id=188): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, &(0x7f0000000180)=0x2e45, 0x4) syz_io_uring_submit(0x0, 0x0, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xe) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) fsetxattr(0xffffffffffffffff, &(0x7f00000000c0)=@known='com.apple.FinderInfo\x00', 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mlock2(&(0x7f0000018000/0x2000)=nil, 0x2000, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-blowfish-asm\x00'}, 0x58) 7.021810796s ago: executing program 4 (id=189): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') lseek(r2, 0x17c0000000, 0x1) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000040)={0x0, 0x5}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000180)={r3, 0x6}, 0x8) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) rmdir(&(0x7f0000000040)='./control\x00') fsopen(0x0, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r6 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$RNDADDENTROPY(r6, 0x5207, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x66, &(0x7f00000001c0)={r3, 0xd95}, &(0x7f0000000240)=0x8) syz_open_dev$dri(&(0x7f0000000340), 0x5, 0x400180) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x66, &(0x7f0000000280)={r7, 0xffff}, &(0x7f00000002c0)=0x8) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=ANY=[@ANYBLOB="5400000010001ffffcffffff0000000000000000", @ANYRES32=r5, @ANYBLOB="92575043a94ee54146a8be557cb35681db7adcddfdd31fc7d6321fdae8f05825c6fa360ce29546e051c6ea7a89ae58d60c408f302933f0a83cd83b03e9ccf25e17f186b40dbddab830db9830a4f297ca6b12df2241c9d21a58ff8c65f77840f5a8e104dac96cb71dfe35eab0de4162a8639fb8db39ff3cb8620a09c89990b9cba6653d182bfdd6ae423be73388fe9cf0694823"], 0x54}}, 0x8080) 6.851949978s ago: executing program 4 (id=192): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0xf, 0x9, &(0x7f0000000e80)=ANY=[@ANYBLOB], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1d, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x34, @void, @value}, 0x94) 6.620163113s ago: executing program 4 (id=194): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) 5.500065181s ago: executing program 2 (id=197): openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000020c0)={0xffffffffffffffff, 0xe0, &(0x7f0000001fc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000d00)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001e40)=[0x0], 0x0, 0x0, 0x6d, &(0x7f0000001ec0)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000001f00), 0x0, 0x0, 0x62, 0x8, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x3, 0x3a0, 0xd, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x89f1, &(0x7f0000000900)={'ip6tnl0\x00', @random="0600002000"}) 5.393926264s ago: executing program 3 (id=198): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket(0xa, 0x5, 0x3ff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x2, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) write(r3, &(0x7f0000000000)="fa", 0xfffffdef) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) sched_setaffinity(r1, 0x0, 0x0) getrandom(&(0x7f0000000080)=""/240, 0xfffffffffffffe77, 0x0) 5.367774789s ago: executing program 2 (id=199): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000480)=ANY=[], 0x0) syz_usb_connect(0x5, 0x3f, &(0x7f0000000000)=ANY=[], &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0}) r1 = dup(r0) socket$alg(0x26, 0x5, 0x0) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) write$eventfd(r1, &(0x7f0000000200)=0xfffffffffffffff8, 0x8) 3.935609399s ago: executing program 0 (id=201): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="850000006100000054000000000000009500000000000000b4a8b1541206000000e9"], &(0x7f0000281ffc)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000200)={r0, 0x2000000, 0xd, 0x0, &(0x7f00000003c0)="13435cd378c66a90bd307e0add", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.76571317s ago: executing program 1 (id=202): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2004cb], 0x0, 0x200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.683914414s ago: executing program 0 (id=203): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x12, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000711217"], &(0x7f0000000240)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x204001, @void, @value}, 0x94) 3.475321769s ago: executing program 0 (id=204): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0xf, 0x9, &(0x7f0000000e80)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000500000084f70000ba00000085"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1d, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x34, @void, @value}, 0x94) 3.37486551s ago: executing program 1 (id=205): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000fd00000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r3, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) unshare(0x22020600) 3.310402678s ago: executing program 0 (id=206): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x5, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) close(r2) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0xb, 0x7, 0x10001, 0x8, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) close(r2) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x9, 0x2, 0x8, 0x3d, 0x42, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r4, &(0x7f0000000180), 0x40010) 3.142129973s ago: executing program 0 (id=207): r0 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0xc70, 0xf0bd, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 2.342454042s ago: executing program 3 (id=208): r0 = memfd_create(&(0x7f0000000040)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xcc\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\xa5\xba\xe51\xf5\x00\x00\x00\x00\x00\x00\x00\x05L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xaaw\xbe\xd0\xd0\xc8d\x96G\xcf\x066\x84\x82-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x14\x04\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0\x01\x06&y\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9aq\v#\xfb\xb2\x05\x02\x1b\x1d\xc3\x02\x03\xcf\x02F\xf0D\xbd\\\tj\x13\b\x87\x7f;\x80\x84\x140\x01\x8a\xa3TCG\x91_\xd5L\x00\x00\x00', 0x0) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) 2.216067845s ago: executing program 3 (id=209): r0 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) 2.192061463s ago: executing program 2 (id=210): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x8015}, 0x4) 1.904746475s ago: executing program 3 (id=211): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0x3, &(0x7f0000ffb000/0x2000)=nil) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x4000004) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc01cf509, &(0x7f0000000180)={r0, 0x7, 0x8, 0x7fff}) socket$pptp(0x18, 0x1, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(0x0, 0x3ff, 0x191000) openat$ptmx(0xffffffffffffff9c, 0x0, 0x20a000, 0x0) r5 = dup(0xffffffffffffffff) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) shmctl$SHM_INFO(0x0, 0xe, 0x0) syz_io_uring_setup(0x110d, &(0x7f00000003c0)={0x0, 0x80d5, 0x0, 0x0, 0x40000000}, 0x0, &(0x7f0000000280)) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r5, 0x84, 0x18, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x5c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4242}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1f}}, @IFLA_VLAN_ID={0x6, 0x1, 0x1}, @IFLA_VLAN_EGRESS_QOS={0x4}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x5c}, 0x1, 0x0, 0x0, 0x600}, 0x0) 1.500936001s ago: executing program 1 (id=212): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) close(0x3) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000100)={0x1b, "5660359c3245d1c42317afad7d48ed51000000000000000100", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000240)={0x2, "340b8712cee1d1c6fbe4499c2b270a569987ffe93bbabd18cf501932de975a23", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r2, 0xc0303e03, &(0x7f00000000c0)={"3c2413b9d44aec57f2e2ad238a7b448ed886910284ed923c31d4b8affbf514fd", r3}) 1.347900859s ago: executing program 1 (id=213): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x50, 0x3, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'dvmrp0\x00'}, @NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_ID={0x8}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x98}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$l2tp(0x2, 0x2, 0x73) r3 = openat$sndseq(0xffffff9c, &(0x7f0000000500), 0x2200) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r3, 0xc08c5336, &(0x7f0000000540)={0x3, 0xffffffff, 0x1, 'queue1\x00', 0x7}) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e20, @remote}, 0x10) connect$inet(r2, &(0x7f0000000200)={0x2, 0xfffc, @empty}, 0x10) sendmmsg$inet(r2, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) openat$nullb(0xffffff9c, &(0x7f0000000180), 0x111801, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={0x48, 0x2, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x48}}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x38, 0x9, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x38, 0xb, 0x6, 0x801, 0x0, 0x0, {0x6, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x38}}, 0x4800) 1.031415571s ago: executing program 1 (id=214): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x12, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000711217"], &(0x7f0000000240)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x204001, @void, @value}, 0x94) 945.195945ms ago: executing program 1 (id=215): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0xee) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) unshare(0x28040600) r3 = getpid() r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) r5 = syz_pidfd_open(r3, 0x0) setns(r5, 0x8020000) open_tree(0xffffffffffffff9c, 0x0, 0x9801) gettid() ioctl$BTRFS_IOC_INO_PATHS(r2, 0xc0389423, &(0x7f0000000340)={0x4, 0x0, [0x7, 0x0, 0xfffffffffffffff8, 0x1], 0x0}) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000040)={0x80, 0xa0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10, 0x8, 0x20}, {}, {}, {}, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x2}) r6 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r6, r6, r6}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'poly1305-simd\x00'}}) 439.312046ms ago: executing program 2 (id=216): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0xf, 0x9, &(0x7f0000000e80)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000500000084f70000ba00000085"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1d, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x34, @void, @value}, 0x94) 434.667744ms ago: executing program 4 (id=217): r0 = syz_open_dev$sndctrl(&(0x7f0000001ac0), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0xc0505510, &(0x7f0000000080)={0x2e, 0x1, 0x6674, 0x21d7, &(0x7f0000000240)=[{}]}) 354.33966ms ago: executing program 2 (id=218): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x80000000000001, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x78) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) getsockname$packet(r1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x1000000000000, 0x0}) r2 = syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0x86e1, 0x1, 0x8}, &(0x7f0000010080), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000010300)=[{0x0}, {&(0x7f0000010380)=""/47, 0x2f}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r2, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 248.557625ms ago: executing program 4 (id=219): sched_setattr(0x0, &(0x7f0000000100)={0x70, 0x5, 0x20, 0x0, 0x0, 0x1fb, 0x0, 0x2000000000008002, 0x0, 0xd4}, 0x0) 188.215263ms ago: executing program 4 (id=220): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000dc0)=@updpolicy={0xfc, 0x19, 0x1, 0x4000000, 0x0, {{@in6=@empty, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@local, 0x0, 0x3c}, 0x0, @in6=@private1}]}]}, 0xfc}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r1, 0x1, 0x0, 0xfffffffd, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) 132.707498ms ago: executing program 3 (id=221): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x60}}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x4001}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000005e000102"], 0x1c}}, 0x0) 173.42µs ago: executing program 3 (id=222): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/59, 0x325000, 0x800}, 0x1c) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) 0s ago: executing program 0 (id=223): r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x446}}, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x10, 0x48, 0x7, 0x7, 0xc7, 0x7}}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.141' (ED25519) to the list of known hosts. [ 60.577520][ T5819] cgroup: Unknown subsys name 'net' [ 60.715280][ T5819] cgroup: Unknown subsys name 'cpuset' [ 60.723034][ T5819] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 61.997923][ T5819] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 64.287421][ T5840] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 64.291220][ T5837] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 64.303296][ T5840] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 64.305351][ T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 64.312407][ T5837] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 64.321058][ T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 64.325703][ T5837] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 64.332757][ T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 64.340124][ T5837] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 64.346499][ T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 64.365317][ T5843] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 64.373629][ T5843] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 64.380729][ T5845] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 64.381705][ T5837] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 64.391264][ T5845] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 64.395832][ T5837] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 64.403472][ T5845] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 64.416756][ T5146] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 64.424255][ T5146] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 64.461745][ T5840] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 64.478253][ T5146] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 64.491050][ T5839] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 64.500947][ T5146] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 64.509898][ T5146] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 64.514271][ T5839] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 64.526344][ T5839] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 64.534422][ T5146] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 64.543631][ T5146] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 64.553277][ T5839] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 64.562395][ T5839] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 64.932298][ T5838] chnl_net:caif_netlink_parms(): no params data found [ 64.994272][ T5842] chnl_net:caif_netlink_parms(): no params data found [ 65.035011][ T5830] chnl_net:caif_netlink_parms(): no params data found [ 65.062649][ T5829] chnl_net:caif_netlink_parms(): no params data found [ 65.101064][ T5846] chnl_net:caif_netlink_parms(): no params data found [ 65.226125][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.233567][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.241111][ T5838] bridge_slave_0: entered allmulticast mode [ 65.251474][ T5838] bridge_slave_0: entered promiscuous mode [ 65.289404][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.296715][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.305086][ T5838] bridge_slave_1: entered allmulticast mode [ 65.311662][ T5838] bridge_slave_1: entered promiscuous mode [ 65.333214][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.340327][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.347579][ T5830] bridge_slave_0: entered allmulticast mode [ 65.354155][ T5830] bridge_slave_0: entered promiscuous mode [ 65.371776][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.379337][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.386906][ T5829] bridge_slave_0: entered allmulticast mode [ 65.394336][ T5829] bridge_slave_0: entered promiscuous mode [ 65.419088][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.426299][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.433787][ T5842] bridge_slave_0: entered allmulticast mode [ 65.440336][ T5842] bridge_slave_0: entered promiscuous mode [ 65.450320][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.457673][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.465405][ T5830] bridge_slave_1: entered allmulticast mode [ 65.472091][ T5830] bridge_slave_1: entered promiscuous mode [ 65.479017][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.486264][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.493883][ T5829] bridge_slave_1: entered allmulticast mode [ 65.500493][ T5829] bridge_slave_1: entered promiscuous mode [ 65.518912][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.528304][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.536396][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.543702][ T5842] bridge_slave_1: entered allmulticast mode [ 65.550242][ T5842] bridge_slave_1: entered promiscuous mode [ 65.596957][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.608162][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.633367][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.640553][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.648106][ T5846] bridge_slave_0: entered allmulticast mode [ 65.655524][ T5846] bridge_slave_0: entered promiscuous mode [ 65.664045][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.671193][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.678570][ T5846] bridge_slave_1: entered allmulticast mode [ 65.685493][ T5846] bridge_slave_1: entered promiscuous mode [ 65.701026][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.728376][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.739863][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.767890][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.780142][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.801048][ T5838] team0: Port device team_slave_0 added [ 65.808532][ T5838] team0: Port device team_slave_1 added [ 65.824190][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.854534][ T5829] team0: Port device team_slave_0 added [ 65.883563][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.901617][ T5830] team0: Port device team_slave_0 added [ 65.917650][ T5829] team0: Port device team_slave_1 added [ 65.933556][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.940526][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.966995][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.980887][ T5842] team0: Port device team_slave_0 added [ 65.989391][ T5842] team0: Port device team_slave_1 added [ 66.005146][ T5846] team0: Port device team_slave_0 added [ 66.013368][ T5830] team0: Port device team_slave_1 added [ 66.031491][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.038560][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.065406][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.086391][ T5846] team0: Port device team_slave_1 added [ 66.118207][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.125346][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.151443][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.163531][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.170495][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.197370][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.229552][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.236788][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.263042][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.275480][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.282585][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.308666][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.329489][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.336560][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.362697][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.375352][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.382486][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.408582][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.420270][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.427726][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.453758][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.466461][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.473540][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.500016][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.500150][ T5839] Bluetooth: hci1: command tx timeout [ 66.517056][ T54] Bluetooth: hci0: command tx timeout [ 66.520473][ T5845] Bluetooth: hci2: command tx timeout [ 66.539445][ T5829] hsr_slave_0: entered promiscuous mode [ 66.548667][ T5829] hsr_slave_1: entered promiscuous mode [ 66.562099][ T5845] Bluetooth: hci3: command tx timeout [ 66.593090][ T5830] hsr_slave_0: entered promiscuous mode [ 66.599445][ T5830] hsr_slave_1: entered promiscuous mode [ 66.606197][ T5830] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.614577][ T5830] Cannot create hsr debugfs directory [ 66.641139][ T5838] hsr_slave_0: entered promiscuous mode [ 66.647213][ T5845] Bluetooth: hci4: command tx timeout [ 66.657539][ T5838] hsr_slave_1: entered promiscuous mode [ 66.664639][ T5838] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.673036][ T5838] Cannot create hsr debugfs directory [ 66.737762][ T5846] hsr_slave_0: entered promiscuous mode [ 66.744299][ T5846] hsr_slave_1: entered promiscuous mode [ 66.750256][ T5846] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.758280][ T5846] Cannot create hsr debugfs directory [ 66.818551][ T5842] hsr_slave_0: entered promiscuous mode [ 66.824837][ T5842] hsr_slave_1: entered promiscuous mode [ 66.830827][ T5842] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.838557][ T5842] Cannot create hsr debugfs directory [ 67.129853][ T5830] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 67.147237][ T5830] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 67.164975][ T5830] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 67.180621][ T5830] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 67.214057][ T5829] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 67.228162][ T5829] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 67.254828][ T5829] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 67.273413][ T5829] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 67.299617][ T5846] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 67.320490][ T5846] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 67.335014][ T5846] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 67.368244][ T5846] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 67.407928][ T5842] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 67.435138][ T5842] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 67.445083][ T5842] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 67.481101][ T5842] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 67.569766][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.579602][ T5838] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 67.598769][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.611351][ T5838] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 67.620830][ T5838] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 67.637598][ T5838] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 67.678515][ T5830] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.692614][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.700110][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.713912][ T5829] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.739285][ T3591] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.746553][ T3591] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.777864][ T3591] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.785145][ T3591] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.823967][ T3591] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.831085][ T3591] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.896871][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.949234][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.965829][ T5842] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.990796][ T3591] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.997941][ T3591] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.037282][ T5846] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.066722][ T1145] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.073888][ T1145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.149011][ T3591] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.156174][ T3591] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.169016][ T3591] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.176175][ T3591] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.215199][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.248744][ T5842] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 68.267274][ T5842] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 68.309227][ T5846] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 68.330922][ T5846] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 68.359440][ T5838] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.374003][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.422989][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.447039][ T1145] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.454199][ T1145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.523076][ T1145] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.530320][ T1145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.563477][ T5845] Bluetooth: hci1: command tx timeout [ 68.563510][ T54] Bluetooth: hci2: command tx timeout [ 68.575980][ T5839] Bluetooth: hci0: command tx timeout [ 68.636939][ T5829] veth0_vlan: entered promiscuous mode [ 68.645623][ T54] Bluetooth: hci3: command tx timeout [ 68.670423][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.689030][ T5829] veth1_vlan: entered promiscuous mode [ 68.722124][ T54] Bluetooth: hci4: command tx timeout [ 68.730129][ T5830] veth0_vlan: entered promiscuous mode [ 68.757515][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.807087][ T5830] veth1_vlan: entered promiscuous mode [ 68.831084][ T5829] veth0_macvtap: entered promiscuous mode [ 68.868069][ T5829] veth1_macvtap: entered promiscuous mode [ 68.895895][ T5842] veth0_vlan: entered promiscuous mode [ 68.928342][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.945259][ T5842] veth1_vlan: entered promiscuous mode [ 68.955257][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.974265][ T5829] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.983698][ T5829] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.992909][ T5829] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.001694][ T5829] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.051866][ T5830] veth0_macvtap: entered promiscuous mode [ 69.061414][ T5830] veth1_macvtap: entered promiscuous mode [ 69.125572][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.153015][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.165571][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.174940][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.206863][ T5842] veth0_macvtap: entered promiscuous mode [ 69.217804][ T5842] veth1_macvtap: entered promiscuous mode [ 69.230312][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.243909][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.255597][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.281119][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.296584][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.296958][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.307970][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.327358][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.338418][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.349608][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.387349][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.398919][ T1145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.399321][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.411018][ T1145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.418152][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.434610][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.446435][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.456697][ T5830] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.467458][ T5830] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.476651][ T5830] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.485496][ T5830] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.507387][ T5842] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.516221][ T5842] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.526820][ T5842] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.535667][ T5842] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.622550][ T5846] veth0_vlan: entered promiscuous mode [ 69.646476][ T5838] veth0_vlan: entered promiscuous mode [ 69.661404][ T5829] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 69.685235][ T5838] veth1_vlan: entered promiscuous mode [ 69.703926][ T5846] veth1_vlan: entered promiscuous mode [ 69.788570][ T3591] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.823080][ T3591] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.844592][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.860443][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.876050][ T5838] veth0_macvtap: entered promiscuous mode [ 69.906990][ T5846] veth0_macvtap: entered promiscuous mode [ 69.938243][ T5838] veth1_macvtap: entered promiscuous mode [ 69.967319][ T5846] veth1_macvtap: entered promiscuous mode [ 69.977457][ T66] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.012635][ T66] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.018676][ T5922] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6'. [ 70.035104][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.046109][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.056314][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.067099][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.076993][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.088520][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.099982][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.115169][ T1145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.117563][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.134039][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.143026][ T1145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.145659][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.163027][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.173187][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.183830][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.195482][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.221254][ T5838] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.240712][ T5838] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.251581][ T5838] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.275759][ T5838] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.304959][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.318599][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.329225][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.340830][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.350997][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.363266][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.373262][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.383907][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.394980][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.409033][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.423271][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.436866][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.476055][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.481685][ T5929] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 70.489563][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.509085][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.519558][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.530123][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.540787][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.627213][ T5846] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.642916][ T54] Bluetooth: hci1: command tx timeout [ 70.648363][ T54] Bluetooth: hci2: command tx timeout [ 70.654033][ T5839] Bluetooth: hci0: command tx timeout [ 70.663473][ T5846] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.672637][ T5846] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.681415][ T5932] netlink: 36 bytes leftover after parsing attributes in process `syz.0.8'. [ 70.681434][ T5846] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.722667][ T54] Bluetooth: hci3: command tx timeout [ 70.754500][ T5932] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8'. [ 70.763474][ T5932] netlink: 36 bytes leftover after parsing attributes in process `syz.0.8'. [ 70.772846][ T5932] netlink: 36 bytes leftover after parsing attributes in process `syz.0.8'. [ 70.803215][ T54] Bluetooth: hci4: command tx timeout [ 70.887679][ T5936] netlink: zone id is out of range [ 70.899311][ T5936] netlink: zone id is out of range [ 70.904697][ T5936] netlink: zone id is out of range [ 70.909941][ T5936] netlink: zone id is out of range [ 70.915342][ T5936] netlink: zone id is out of range [ 70.920582][ T5936] netlink: zone id is out of range [ 70.933681][ T5936] netlink: zone id is out of range [ 70.950138][ T66] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.981303][ T66] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.035628][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.082178][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.096916][ T3534] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.108962][ T3534] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.164814][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.173187][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.230404][ T5942] xt_hashlimit: max too large, truncated to 1048576 [ 71.264377][ T5942] Cannot find set identified by id 0 to match [ 71.766747][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.782951][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 73.268150][ T54] Bluetooth: hci2: command tx timeout [ 73.273678][ T54] Bluetooth: hci1: command tx timeout [ 73.279181][ T54] Bluetooth: hci0: command tx timeout [ 73.380268][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 73.528986][ T54] Bluetooth: hci3: command tx timeout [ 73.590559][ T54] Bluetooth: hci4: command tx timeout [ 74.002332][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 74.115307][ T5880] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 74.326590][ T5880] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 74.352318][ T5880] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 74.381754][ T5880] usb 2-1: New USB device found, idVendor=1532, idProduct=011d, bcdDevice= 0.00 [ 74.405068][ T5880] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.483653][ T5880] usb 2-1: config 0 descriptor?? [ 75.314267][ T5880] hid-rmi 0003:1532:011D.0001: unbalanced collection at end of report description [ 75.326622][ T5880] hid-rmi 0003:1532:011D.0001: parse failed [ 75.339632][ T5880] hid-rmi 0003:1532:011D.0001: probe with driver hid-rmi failed with error -22 [ 75.377960][ T5981] loop3: detected capacity change from 0 to 256 [ 75.479786][ T5981] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 75.658566][ T5880] usb 2-1: USB disconnect, device number 2 [ 75.870397][ T5988] bond_slave_1: entered promiscuous mode [ 75.882685][ T5988] bond_slave_1: entered allmulticast mode [ 76.022485][ T5991] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 77.609584][ T6013] Driver unsupported XDP return value 0 on prog (id 14) dev N/A, expect packet loss! [ 77.709617][ T6015] loop2: detected capacity change from 0 to 512 [ 77.769074][ T6015] EXT4-fs error (device loop2): ext4_orphan_get:1389: inode #15: comm syz.2.36: casefold flag without casefold feature [ 77.786859][ T6023] loop4: detected capacity change from 0 to 512 [ 77.929833][ T6023] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 77.942307][ T6015] EXT4-fs error (device loop2): ext4_orphan_get:1394: comm syz.2.36: couldn't read orphan inode 15 (err -117) [ 77.962126][ T6023] ext4 filesystem being mounted at /9/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 77.966509][ T6015] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.121859][ T6029] EXT4-fs error (device loop2): ext4_empty_dir:3094: inode #2: comm syz.2.36: invalid size [ 79.276418][ T5838] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.316401][ T5846] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 79.958972][ T6041] vlan0: entered promiscuous mode [ 80.081596][ T6051] loop2: detected capacity change from 0 to 256 [ 80.093654][ T6051] ======================================================= [ 80.093654][ T6051] WARNING: The mand mount option has been deprecated and [ 80.093654][ T6051] and is ignored by this kernel. Remove the mand [ 80.093654][ T6051] option from the mount to silence this warning. [ 80.093654][ T6051] ======================================================= [ 80.131131][ T6051] exfat: Deprecated parameter 'utf8' [ 80.133320][ T6052] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 80.137290][ T6051] exfat: Unknown parameter 'eraors' [ 82.068930][ T837] cfg80211: failed to load regulatory.db [ 85.688218][ T6098] loop4: detected capacity change from 0 to 256 [ 85.695411][ T6098] exfat: Deprecated parameter 'utf8' [ 85.700766][ T6098] exfat: Unknown parameter 'eraors' [ 85.970608][ T6104] loop1: detected capacity change from 0 to 1024 [ 86.022353][ T6104] EXT4-fs (loop1): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 86.861371][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 87.002031][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 87.123375][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 87.131989][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 87.135661][ T6104] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 87.207619][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 87.209424][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 87.251816][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 87.308543][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 88.483242][ T29] audit: type=1804 audit(1736461648.937:2): pid=6104 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.64" name="/newroot/12/file1/bus" dev="loop1" ino=18 res=1 errno=0 [ 88.508753][ T29] audit: type=1804 audit(1736461648.957:3): pid=6104 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.64" name="/newroot/12/file1/bus" dev="loop1" ino=18 res=1 errno=0 [ 88.802927][ T5830] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.437068][ T6132] netlink: 24 bytes leftover after parsing attributes in process `syz.0.73'. [ 91.330311][ T6148] netlink: 12 bytes leftover after parsing attributes in process `syz.3.78'. [ 91.608195][ T6159] syz.4.81 uses obsolete (PF_INET,SOCK_PACKET) [ 91.792094][ T5880] usb 3-1: new low-speed USB device number 2 using dummy_hcd [ 91.946846][ T6146] loop1: detected capacity change from 0 to 40427 [ 91.987699][ T5880] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 92.017341][ T5880] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 92.049439][ T6146] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 92.064694][ T5880] usb 3-1: New USB device found, idVendor=0c70, idProduct=f0bd, bcdDevice= 0.00 [ 92.085895][ T6146] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 92.135010][ T5880] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.153997][ T6146] F2FS-fs (loop1): invalid crc value [ 92.155085][ T5880] usb 3-1: config 0 descriptor?? [ 92.184701][ T6146] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 39874397669) [ 92.259847][ T6173] loop3: detected capacity change from 0 to 256 [ 92.299766][ T6173] loop3: detected capacity change from 0 to 256 [ 92.341681][ T25] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 92.448707][ T6173] FAT-fs (loop3): Directory bread(block 64) failed [ 92.455870][ T6173] FAT-fs (loop3): Directory bread(block 65) failed [ 92.462986][ T6173] FAT-fs (loop3): Directory bread(block 66) failed [ 92.469699][ T6173] FAT-fs (loop3): Directory bread(block 67) failed [ 92.476768][ T6173] FAT-fs (loop3): Directory bread(block 68) failed [ 92.485726][ T6173] FAT-fs (loop3): Directory bread(block 69) failed [ 92.493090][ T6173] FAT-fs (loop3): Directory bread(block 70) failed [ 92.499769][ T6173] FAT-fs (loop3): Directory bread(block 71) failed [ 92.506928][ T6173] FAT-fs (loop3): Directory bread(block 72) failed [ 92.513723][ T6173] FAT-fs (loop3): Directory bread(block 73) failed [ 93.182384][ T25] usb 5-1: Using ep0 maxpacket: 32 [ 93.190357][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 93.232938][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 93.249482][ T5880] aquacomputer_d5next 0003:0C70:F0BD.0002: unknown main item tag 0xe [ 93.262721][ T5880] aquacomputer_d5next 0003:0C70:F0BD.0002: hidraw0: USB HID v0.00 Device [HID 0c70:f0bd] on usb-dummy_hcd.2-1/input0 [ 93.303196][ T25] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 93.320559][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.336294][ T6146] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 93.351415][ T6146] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 93.435108][ T29] audit: type=1804 audit(1736461653.877:4): pid=6146 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.77" name="/newroot/14/bus/bus" dev="loop1" ino=10 res=1 errno=0 [ 94.251843][ T5880] usb 3-1: USB disconnect, device number 2 [ 94.283688][ T25] usb 5-1: config 0 descriptor?? [ 94.308171][ T25] hub 5-1:0.0: USB hub found [ 94.518391][ T25] hub 5-1:0.0: config failed, can't read hub descriptor (err -90) [ 94.755193][ T25] usbhid 5-1:0.0: can't add hid device: -71 [ 94.761205][ T25] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 94.845016][ T25] usb 5-1: USB disconnect, device number 2 [ 95.432146][ T25] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 95.592132][ T25] usb 4-1: Using ep0 maxpacket: 8 [ 95.605758][ T25] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 95.622543][ T25] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 95.641982][ T25] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 95.656372][ T25] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 95.670520][ T25] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 95.679829][ T837] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 95.692461][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.702572][ T51] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 95.832082][ T837] usb 5-1: Using ep0 maxpacket: 16 [ 95.847715][ T837] usb 5-1: New USB device found, idVendor=046d, idProduct=08b2, bcdDevice=80.59 [ 95.862204][ T837] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.870541][ T837] usb 5-1: Product: syz [ 95.875012][ T51] usb 2-1: Using ep0 maxpacket: 16 [ 95.883003][ T837] usb 5-1: Manufacturer: syz [ 95.887852][ T51] usb 2-1: config 0 has no interfaces? [ 95.902862][ T837] usb 5-1: SerialNumber: syz [ 95.908265][ T51] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 95.922732][ T837] usb 5-1: config 0 descriptor?? [ 95.959705][ T25] usb 4-1: GET_CAPABILITIES returned 0 [ 95.970178][ T51] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 95.984254][ T837] pwc: Logitech QuickCam 4000 Pro USB webcam detected. [ 95.993882][ T25] usbtmc 4-1:16.0: can't read capabilities [ 96.000350][ T51] usb 2-1: Manufacturer: syz [ 96.057402][ T51] usb 2-1: config 0 descriptor?? [ 96.157044][ C1] usbtmc 4-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 96.187771][ T6190] usbtmc 4-1:16.0: Unable to send data, error -71 [ 96.207825][ T875] usb 4-1: USB disconnect, device number 2 [ 96.542627][ T837] pwc: send_video_command error -71 [ 96.550807][ T837] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 96.573320][ T837] Philips webcam 5-1:0.0: probe with driver Philips webcam failed with error -71 [ 96.608609][ T837] usb 5-1: USB disconnect, device number 3 [ 98.584027][ T5880] usb 2-1: USB disconnect, device number 3 [ 99.778073][ T5880] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 99.808202][ T6249] loop4: detected capacity change from 0 to 256 [ 99.827248][ T6249] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 99.962333][ T5880] usb 2-1: Using ep0 maxpacket: 32 [ 100.029071][ T5880] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 100.040763][ T5880] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 100.763206][ T5880] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 100.772566][ T5880] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.816147][ T5880] usb 2-1: config 0 descriptor?? [ 100.887328][ T5880] hub 2-1:0.0: USB hub found [ 101.095349][ T5880] hub 2-1:0.0: 1 port detected [ 101.329795][ T5880] hub 2-1:0.0: hub_hub_status failed (err = -71) [ 101.340432][ T5880] hub 2-1:0.0: config failed, can't get hub status (err -71) [ 101.942170][ T837] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 102.036997][ T5880] usbhid 2-1:0.0: can't add hid device: -71 [ 102.044748][ T5880] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 102.073679][ T5880] usb 2-1: USB disconnect, device number 4 [ 102.103405][ T837] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 102.128584][ T837] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 102.168594][ T837] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 102.185188][ T837] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.213957][ T6268] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 102.226939][ T837] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 102.570755][ T837] usb 4-1: USB disconnect, device number 3 [ 103.467293][ T5880] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 103.623687][ T5984] udevd[5984]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 103.650015][ T5880] usb 3-1: Using ep0 maxpacket: 8 [ 103.681736][ T5880] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 103.700435][ T5880] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 103.770526][ T5880] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 103.787216][ T5880] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 103.797889][ T5880] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 104.310617][ T5880] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 104.319873][ T5880] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.424352][ T6314] tipc: Started in network mode [ 104.429669][ T6314] tipc: Node identity 7, cluster identity 4711 [ 104.442026][ T6314] tipc: Node number set to 7 [ 104.541797][ T5880] usb 3-1: usb_control_msg returned -32 [ 104.550801][ T5880] usbtmc 3-1:16.0: can't read capabilities [ 104.596966][ T6318] capability: warning: `syz.4.138' uses deprecated v2 capabilities in a way that may be insecure [ 106.210276][ T51] usb 3-1: USB disconnect, device number 3 [ 108.544075][ T6378] loop2: detected capacity change from 0 to 256 [ 108.551095][ T6378] exfat: Deprecated parameter 'utf8' [ 108.556571][ T6378] exfat: Unknown parameter 'eraors' [ 111.232007][ T51] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 111.267239][ T6407] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 111.328627][ T6407] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 111.376631][ T6407] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 111.391979][ T51] usb 4-1: Using ep0 maxpacket: 32 [ 111.395587][ T6407] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 111.414963][ T51] usb 4-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 111.424154][ T51] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.424834][ T6407] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 111.432433][ T51] usb 4-1: Product: syz [ 111.432473][ T51] usb 4-1: Manufacturer: syz [ 111.432488][ T51] usb 4-1: SerialNumber: syz [ 111.435927][ T51] usb 4-1: config 0 descriptor?? [ 111.471587][ T6407] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 111.480423][ T6407] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 111.486791][ T6407] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 111.494550][ T6407] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 111.502342][ T6407] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 111.508346][ T6407] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 111.516651][ T6407] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 111.529367][ T6407] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 111.540919][ T6407] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 111.549670][ T6407] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 111.774406][ T6438] netlink: 'syz.4.178': attribute type 1 has an invalid length. [ 111.863196][ T6438] netlink: 8 bytes leftover after parsing attributes in process `syz.4.178'. [ 111.939574][ T6438] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 111.950908][ T6438] bond1: (slave batadv1): Enslaving as a backup interface with an up link [ 112.085611][ T51] peak_usb 4-1:0.0: PEAK-System PCAN-USB Pro hwrev 0 serial 00000000.00000000 (2 channels) [ 112.096876][ T51] peak_usb 4-1:0.0 can0: sending command failure: -22 [ 112.118759][ T51] peak_usb 4-1:0.0 can0: sending command failure: -22 [ 112.262763][ T51] peak_usb 4-1:0.0: probe with driver peak_usb failed with error -22 [ 112.304110][ T51] usb 4-1: USB disconnect, device number 4 [ 112.536709][ T6456] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 112.583502][ T6456] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 112.626756][ T6456] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 112.675896][ T6456] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 112.706748][ T6456] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 112.884339][ T6470] Zero length message leads to an empty skb [ 113.112024][ T51] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 113.342023][ T51] usb 2-1: Using ep0 maxpacket: 32 [ 113.348800][ T51] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 113.362744][ T51] usb 2-1: config 0 has no interface number 0 [ 113.379641][ T51] usb 2-1: config 0 interface 184 has no altsetting 0 [ 114.105960][ T51] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 114.121917][ T51] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.140170][ T51] usb 2-1: Product: syz [ 114.150611][ T51] usb 2-1: Manufacturer: syz [ 114.160373][ T51] usb 2-1: SerialNumber: syz [ 114.175781][ T51] usb 2-1: config 0 descriptor?? [ 114.224465][ T51] smsc75xx v1.0.0 [ 114.411330][ T54] Bluetooth: hci0: command 0x0c1a tx timeout [ 114.652128][ T5839] Bluetooth: hci2: command 0x0c1a tx timeout [ 114.656542][ T5845] Bluetooth: hci1: command 0x0c1a tx timeout [ 114.722354][ T5845] Bluetooth: hci4: command 0x0405 tx timeout [ 114.726875][ T54] Bluetooth: hci3: command 0x0c1a tx timeout [ 114.901144][ T51] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 114.922121][ T51] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 115.363047][ T51] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71 [ 115.415640][ T51] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71 [ 115.506883][ T51] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 115.566284][ T51] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71 [ 115.705229][ T51] usb 2-1: USB disconnect, device number 5 [ 116.072697][ T5880] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 116.484177][ T54] Bluetooth: hci0: command 0x0c1a tx timeout [ 116.725508][ T54] Bluetooth: hci2: command 0x0c1a tx timeout [ 116.725523][ T5845] Bluetooth: hci1: command 0x0c1a tx timeout [ 116.802087][ T54] Bluetooth: hci4: command 0x0405 tx timeout [ 116.802115][ T5845] Bluetooth: hci3: command 0x0c1a tx timeout [ 117.482946][ T6516] process 'syz.3.208' launched '/dev/fd/3' with NULL argv: empty string added [ 118.567633][ T5845] Bluetooth: hci0: command 0x0c1a tx timeout [ 118.802135][ T5845] Bluetooth: hci2: command 0x0c1a tx timeout [ 118.809396][ T54] Bluetooth: hci1: command 0x0c1a tx timeout [ 118.882048][ T5845] Bluetooth: hci3: command 0x0c1a tx timeout [ 118.888182][ T5845] Bluetooth: hci4: command 0x0405 tx timeout [ 119.316324][ T6522] vlan2: entered allmulticast mode [ 119.330369][ T6522] bond0: entered allmulticast mode [ 119.443955][ T6522] bond_slave_0: entered allmulticast mode [ 119.464939][ T6522] bond_slave_1: entered allmulticast mode [ 119.510496][ T6522] bond0: left allmulticast mode [ 119.517579][ T6522] bond_slave_0: left allmulticast mode [ 119.533012][ T6522] bond_slave_1: left allmulticast mode [ 119.854999][ T6546] tipc: Started in network mode [ 119.885804][ T6546] tipc: Node identity ac14140f, cluster identity 4711 [ 119.906931][ T6546] tipc: New replicast peer: 255.255.255.255 [ 119.913791][ T6548] [ 119.916113][ T6548] ============================================ [ 119.922244][ T6548] WARNING: possible recursive locking detected [ 119.928373][ T6548] 6.13.0-rc6-next-20250107-syzkaller #0 Not tainted [ 119.934934][ T6548] -------------------------------------------- [ 119.941062][ T6548] syz.3.222/6548 is trying to acquire lock: [ 119.946932][ T6548] ffff88802f417988 (vm_lock){++++}-{0:0}, at: move_pages+0x26b/0x1680 [ 119.955113][ T6548] [ 119.955113][ T6548] but task is already holding lock: [ 119.962461][ T6548] ffff888032fa85c8 (vm_lock){++++}-{0:0}, at: uffd_lock_vma+0x20/0x2c0 [ 119.970805][ T6548] [ 119.970805][ T6548] other info that might help us debug this: [ 119.978849][ T6548] Possible unsafe locking scenario: [ 119.978849][ T6548] [ 119.986309][ T6548] CPU0 [ 119.989703][ T6548] ---- [ 119.993232][ T6548] lock(vm_lock); [ 119.996979][ T6548] lock(vm_lock); [ 120.000695][ T6548] [ 120.000695][ T6548] *** DEADLOCK *** [ 120.000695][ T6548] [ 120.008821][ T6548] May be due to missing lock nesting notation [ 120.008821][ T6548] [ 120.017157][ T6548] 2 locks held by syz.3.222/6548: [ 120.022167][ T6548] #0: ffff888032fa85c8 (vm_lock){++++}-{0:0}, at: uffd_lock_vma+0x20/0x2c0 [ 120.030877][ T6548] #1: ffffffff8e937ee0 (rcu_read_lock){....}-{1:3}, at: lock_vma_under_rcu+0x1dd/0x9a0 [ 120.040624][ T6548] [ 120.040624][ T6548] stack backtrace: [ 120.046510][ T6548] CPU: 0 UID: 0 PID: 6548 Comm: syz.3.222 Not tainted 6.13.0-rc6-next-20250107-syzkaller #0 [ 120.046526][ T6548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 120.046535][ T6548] Call Trace: [ 120.046541][ T6548] [ 120.046547][ T6548] dump_stack_lvl+0x241/0x360 [ 120.046562][ T6548] ? __pfx_dump_stack_lvl+0x10/0x10 [ 120.046571][ T6548] ? __pfx__printk+0x10/0x10 [ 120.046585][ T6548] ? lockdep_unlock+0x16a/0x300 [ 120.046597][ T6548] print_deadlock_bug+0x483/0x620 [ 120.046612][ T6548] ? validate_chain+0x11e/0x5920 [ 120.046625][ T6548] validate_chain+0x15e2/0x5920 [ 120.046643][ T6548] ? __pfx_validate_chain+0x10/0x10 [ 120.046657][ T6548] ? __pfx_validate_chain+0x10/0x10 [ 120.046670][ T6548] ? mark_lock+0x9a/0x360 [ 120.046682][ T6548] ? __lock_acquire+0x1397/0x2100 [ 120.046695][ T6548] ? validate_chain+0x11e/0x5920 [ 120.046708][ T6548] ? reacquire_held_locks+0x3eb/0x690 [ 120.046721][ T6548] ? mark_lock+0x9a/0x360 [ 120.046732][ T6548] __lock_acquire+0x1397/0x2100 [ 120.046746][ T6548] lock_acquire+0x1ed/0x550 [ 120.046757][ T6548] ? move_pages+0x26b/0x1680 [ 120.046767][ T6548] ? __pfx_lock_acquire+0x10/0x10 [ 120.046781][ T6548] ? mas_walk+0x1f3/0x280 [ 120.046795][ T6548] lock_vma_under_rcu+0x35f/0x9a0 [ 120.046805][ T6548] ? move_pages+0x26b/0x1680 [ 120.046813][ T6548] ? lock_vma_under_rcu+0x1dd/0x9a0 [ 120.046823][ T6548] ? move_pages+0x26b/0x1680 [ 120.046831][ T6548] ? __pfx_lock_vma_under_rcu+0x10/0x10 [ 120.046845][ T6548] ? uffd_lock_vma+0x91/0x2c0 [ 120.046854][ T6548] move_pages+0x26b/0x1680 [ 120.046863][ T6548] ? __pfx___might_resched+0x10/0x10 [ 120.046873][ T6548] ? __might_fault+0xaa/0x120 [ 120.046883][ T6548] ? preempt_count_add+0x93/0x190 [ 120.046898][ T6548] ? __pfx_move_pages+0x10/0x10 [ 120.046906][ T6548] ? __might_fault+0xc6/0x120 [ 120.046917][ T6548] userfaultfd_ioctl+0x5221/0x6840 [ 120.046932][ T6548] ? __pfx_userfaultfd_ioctl+0x10/0x10 [ 120.046942][ T6548] ? stack_trace_save+0x118/0x1d0 [ 120.046953][ T6548] ? __pfx_stack_trace_save+0x10/0x10 [ 120.046962][ T6548] ? stack_depot_save_flags+0x37/0x940 [ 120.046972][ T6548] ? kasan_save_track+0x51/0x80 [ 120.046984][ T6548] ? kasan_save_track+0x3f/0x80 [ 120.046994][ T6548] ? kasan_save_free_info+0x40/0x50 [ 120.047003][ T6548] ? __kasan_slab_free+0x59/0x70 [ 120.047014][ T6548] ? kfree+0x196/0x430 [ 120.047021][ T6548] ? tomoyo_path_number_perm+0x679/0x860 [ 120.047031][ T6548] ? security_file_ioctl+0xc6/0x2a0 [ 120.047040][ T6548] ? __se_sys_ioctl+0x46/0x170 [ 120.047051][ T6548] ? do_syscall_64+0xf3/0x230 [ 120.047060][ T6548] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.047072][ T6548] ? do_vfs_ioctl+0xf07/0x2e40 [ 120.047084][ T6548] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 120.047096][ T6548] ? mark_lock+0x9a/0x360 [ 120.047110][ T6548] ? tomoyo_path_number_perm+0x206/0x860 [ 120.047119][ T6548] ? __pfx_lock_release+0x10/0x10 [ 120.047131][ T6548] ? tomoyo_path_number_perm+0x679/0x860 [ 120.047140][ T6548] ? tomoyo_path_number_perm+0x679/0x860 [ 120.047150][ T6548] ? tomoyo_path_number_perm+0x6f9/0x860 [ 120.047159][ T6548] ? __lock_acquire+0x1397/0x2100 [ 120.047170][ T6548] ? tomoyo_path_number_perm+0x206/0x860 [ 120.047179][ T6548] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 120.047195][ T6548] ? __fget_files+0x2a/0x410 [ 120.047205][ T6548] ? __fget_files+0x2a/0x410 [ 120.047214][ T6548] ? __pfx_userfaultfd_ioctl+0x10/0x10 [ 120.047224][ T6548] __se_sys_ioctl+0xf5/0x170 [ 120.047236][ T6548] do_syscall_64+0xf3/0x230 [ 120.047246][ T6548] ? clear_bhb_loop+0x35/0x90 [ 120.047258][ T6548] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.047274][ T6548] RIP: 0033:0x7f5c62185d29 [ 120.047287][ T6548] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 120.047295][ T6548] RSP: 002b:00007f5c6302d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 120.047306][ T6548] RAX: ffffffffffffffda RBX: 00007f5c62375fa0 RCX: 00007f5c62185d29 [ 120.047313][ T6548] RDX: 0000000020000040 RSI: 00000000c028aa05 RDI: 0000000000000003 [ 120.047319][ T6548] RBP: 00007f5c62201b08 R08: 0000000000000000 R09: 0000000000000000 [ 120.047325][ T6548] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 120.047330][ T6548] R13: 0000000000000000 R14: 00007f5c62375fa0 R15: 00007ffeed104ea8 [ 120.047340][ T6548] [ 120.475298][ T6546] tipc: Enabled bearer , priority 10 [ 120.961967][ T54] Bluetooth: hci4: command 0x0405 tx timeout [ 121.591997][ T5880] tipc: Node number set to 2886997007