last executing test programs: 13m24.258033662s ago: executing program 4 (id=5): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cbd7000000000003900000008000300", @ANYRES32=r1], 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x800) 13m23.736719358s ago: executing program 4 (id=27): syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000000)="3b000300010000", 0x7) 13m23.152541079s ago: executing program 4 (id=30): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="05000000050000000100000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000140)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) getpid() bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x18, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df12c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 13m22.913063564s ago: executing program 4 (id=32): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0xffff060e}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) 13m7.130992883s ago: executing program 32 (id=32): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0xffff060e}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) 20.81178414s ago: executing program 1 (id=1374): ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r1, 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000000)={0x0, 0x80}, 0x1, 0x7}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0) sched_setattr(0x0, &(0x7f0000000340)={0x38, 0x5, 0x4, 0x0, 0x0, 0x4, 0x4, 0x8, 0x0, 0x400003}, 0x0) accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x80000) shutdown(0xffffffffffffffff, 0x2) getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x20, 0x0, &(0x7f0000001040)) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'virt_wifi0\x00', 0x0}) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f00000000c0)='veth0_to_batadv\x00', 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='blkio.bfq.io_merged\x00', 0x0, 0x0) preadv2(r6, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x2000, {0x0, 0x0, 0x74, r5, {0xfffd, 0x10}, {0x1, 0xfff1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x30004804}, 0x4840) r8 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) 15.145173866s ago: executing program 2 (id=1377): epoll_create1(0x0) prlimit64(0x0, 0xe, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000000c0)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0, 0x0, 0x6f2}, 0x18) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0x49f, &(0x7f0000000080)={0x0, 0xe7a8, 0x1, 0x7ffc, 0x8040024e}, &(0x7f0000000140), &(0x7f0000000100)) r2 = socket$packet(0x11, 0x3, 0x300) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r3, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000140)={0x1, 0x0, 0x0, &(0x7f0000000280)=""/164, &(0x7f0000000100)=""/47, 0xf000}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000340)) r4 = dup(r2) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000000000)={0x1, r4}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000001c0)) mount$cgroup(0x0, &(0x7f0000000000)='.\x00', &(0x7f00000000c0), 0x10012, &(0x7f0000000800)={[{@subsystem='perf_event'}]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) 15.099306204s ago: executing program 1 (id=1378): mkdir(0x0, 0x274) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x497, 0x0, &(0x7f0000000340)=0x0, &(0x7f0000000600)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, 0x0, 0x0, 0x4) socket$inet_mptcp(0x2, 0x1, 0x106) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, 0x6e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x0, 0x400}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_open_dev$ndb(0x0, 0x0, 0x200200) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_setup(0x22f, &(0x7f0000000080)={0x0, 0x5325, 0x10000, 0x1, 0x100002cf}, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000480)=@IORING_OP_ASYNC_CANCEL={0xe, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}) io_uring_enter(r4, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) 13.805340576s ago: executing program 2 (id=1379): openat(0xffffffffffffff9c, 0x0, 0x181942, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, 0x0, 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)={{}, 0x2c, {'rootmode', 0x3d, 0x1002}}) statx(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x100, 0x800, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(r2, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0xfffffff8) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000001200)={0x50, 0x0, r3}, 0x50) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) sendto$inet6(0xffffffffffffffff, &(0x7f0000000800)="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"/1453, 0x5ad, 0x0, &(0x7f0000000080)={0xa, 0x5e20, 0x2, @mcast2, 0x10000}, 0x1c) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 11.786995766s ago: executing program 2 (id=1380): socket$netlink(0x10, 0x3, 0x4) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') preadv(r4, &(0x7f0000000040)=[{&(0x7f0000001440)=""/4106, 0x100a}], 0x1, 0x300, 0x0) 11.395141924s ago: executing program 1 (id=1382): ioctl$BTRFS_IOC_INO_PATHS(0xffffffffffffffff, 0xc0389423, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x40800) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_init_net_socket$ax25(0x3, 0x2, 0xcf) openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f00000000c0)={0x0, 0xc000}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000006, 0x4c831, 0xffffffffffffffff, 0x66154000) 11.298489566s ago: executing program 0 (id=1383): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xfff7fffffffffff5}, 0x18) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$unix(0x1, 0x2, 0x0) bind$unix(r4, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 10.115047043s ago: executing program 0 (id=1384): ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r1, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000000)={0x0, 0x80}, 0x1, 0x7}, 0x0) sched_setattr(0x0, &(0x7f0000000340)={0x38, 0x5, 0x4, 0x0, 0x0, 0x4, 0x4, 0x8, 0x0, 0x400003}, 0x0) r3 = socket(0x2000000000000021, 0x2, 0x2) getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x80000) shutdown(r3, 0x2) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'virt_wifi0\x00', 0x0}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='blkio.bfq.io_merged\x00', 0x0, 0x0) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000000)={@remote, r5}, 0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x2000, {0x0, 0x0, 0x74, r5, {0xfffd, 0x10}, {0x1, 0xfff1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x30004804}, 0x4840) 9.912402927s ago: executing program 1 (id=1385): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x8040) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) syz_open_dev$dri(0x0, 0xd21, 0x4000) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_dev$usbmon(0x0, 0x0, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) r3 = epoll_create(0x3) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000080)={0x40000002}) syz_open_dev$vbi(0x0, 0x0, 0x2) r4 = openat$sequencer(0xffffff9c, &(0x7f0000001bc0), 0x88302, 0x0) ioctl$SNDCTL_SEQ_GETOUTCOUNT(r4, 0x4004510d, &(0x7f0000000000)) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) gettid() r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r7 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) timer_create(0x2, 0x0, 0x0) sendfile(r7, r6, &(0x7f0000002080)=0x64, 0x21c) 7.752921409s ago: executing program 2 (id=1386): ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r1, 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000000)={0x0, 0x80}, 0x1, 0x7}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0) sched_setattr(0x0, &(0x7f0000000340)={0x38, 0x5, 0x4, 0x0, 0x0, 0x4, 0x4, 0x8, 0x0, 0x400003}, 0x0) accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x80000) shutdown(0xffffffffffffffff, 0x2) getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x20, 0x0, &(0x7f0000001040)) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'virt_wifi0\x00', 0x0}) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f00000000c0)='veth0_to_batadv\x00', 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='blkio.bfq.io_merged\x00', 0x0, 0x0) preadv2(r6, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x2000, {0x0, 0x0, 0x74, r5, {0xfffd, 0x10}, {0x1, 0xfff1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x30004804}, 0x4840) r8 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) 3.174783021s ago: executing program 0 (id=1387): epoll_create1(0x0) prlimit64(0x0, 0xe, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000000c0)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0, 0x0, 0x6f2}, 0x18) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0x49f, &(0x7f0000000080)={0x0, 0xe7a8, 0x1, 0x7ffc, 0x8040024e}, &(0x7f0000000140), &(0x7f0000000100)) r2 = socket$packet(0x11, 0x3, 0x300) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r3, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000140)={0x1, 0x0, 0x0, &(0x7f0000000280)=""/164, &(0x7f0000000100)=""/47, 0xf000}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000340)) r4 = dup(r2) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000000000)={0x1, r4}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000001c0)) mount$cgroup(0x0, &(0x7f0000000000)='.\x00', &(0x7f00000000c0), 0x10012, &(0x7f0000000800)={[{@subsystem='perf_event'}]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) 3.145818212s ago: executing program 2 (id=1388): openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$tipc(r3, 0x0, 0x0) 3.054496949s ago: executing program 1 (id=1389): openat(0xffffffffffffff9c, 0x0, 0x181942, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, 0x0, 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)={{}, 0x2c, {'rootmode', 0x3d, 0x1002}}) statx(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x100, 0x800, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(r2, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0xfffffff8) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000001200)={0x50, 0x0, r3}, 0x50) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) sendto$inet6(0xffffffffffffffff, &(0x7f0000000800)="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"/1453, 0x5ad, 0x0, &(0x7f0000000080)={0xa, 0x5e20, 0x2, @mcast2, 0x10000}, 0x1c) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 2.053168702s ago: executing program 2 (id=1390): mkdir(0x0, 0x274) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x497, 0x0, &(0x7f0000000340)=0x0, &(0x7f0000000600)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, 0x0, 0x0, 0x4) socket$inet_mptcp(0x2, 0x1, 0x106) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, 0x6e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x0, 0x400}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_open_dev$ndb(0x0, 0x0, 0x200200) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_setup(0x22f, &(0x7f0000000080)={0x0, 0x5325, 0x10000, 0x1, 0x100002cf}, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000480)=@IORING_OP_ASYNC_CANCEL={0xe, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}) io_uring_enter(r4, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) 1.849571416s ago: executing program 1 (id=1391): openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000000000005e43bb387ffa6532000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050000000000000000000000000000000000000000022b0000000a000000fe8000000000000000000000000000aa0000000004"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) bind$inet(r2, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) connect$inet(r2, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r2, &(0x7f0000004d00), 0x7fffffffffffd33, 0x20000890) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000080000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000680)='sched_switch\x00'}, 0x10) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x40046208, 0x0) 1.751373645s ago: executing program 0 (id=1392): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x1, 0x3, 0x10004, 0x5}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa1", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r1}, 0x10) sync() 1.30138658s ago: executing program 0 (id=1393): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xfff7fffffffffff5}, 0x18) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$unix(0x1, 0x2, 0x0) bind$unix(r4, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 0s ago: executing program 0 (id=1394): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket$unix(0x1, 0x2, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r3, &(0x7f00000000c0)={0x1d, r4}, 0x10) sendmsg$can_bcm(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="3bf81bb9f9"], 0x20000600}, 0x1, 0x0, 0x0, 0x40000}, 0x0) kernel console output (not intermixed with test programs): 369.792267][ T5989] em28xx 1-1:0.0: Unknown AC97 audio processor detected! [ 369.997959][ T8201] netlink: 52 bytes leftover after parsing attributes in process `syz.2.602'. [ 370.240307][ T7937] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 370.240326][ T7937] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 370.240355][ T7937] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 370.283206][ T7937] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 370.283226][ T7937] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 370.283258][ T7937] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 370.404581][ T5989] em28xx 1-1:0.0: couldn't setup AC97 register 4 [ 370.405109][ T5989] em28xx 1-1:0.0: couldn't setup AC97 register 6 [ 370.405526][ T5989] em28xx 1-1:0.0: couldn't setup AC97 register 54 [ 370.405946][ T5989] em28xx 1-1:0.0: couldn't setup AC97 register 56 [ 370.458222][ T5989] usb 1-1: USB disconnect, device number 11 [ 371.020762][ T7748] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 371.361436][ T7937] hsr_slave_0: entered promiscuous mode [ 371.392704][ T7937] hsr_slave_1: entered promiscuous mode [ 371.393469][ T7937] debugfs: 'hsr0' already exists in 'hsr' [ 371.393486][ T7937] Cannot create hsr debugfs directory [ 371.432708][ T7748] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 371.660521][ T7748] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 371.922173][ T7748] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 372.061971][ T8221] netlink: 4 bytes leftover after parsing attributes in process `syz.0.606'. [ 372.410513][ T10] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 372.559426][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 372.561344][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 372.561367][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 372.561394][ T10] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 372.561410][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.722970][ T10] usb 1-1: config 0 descriptor?? [ 373.378645][ T10] usbhid 1-1:0.0: can't add hid device: -71 [ 373.378740][ T10] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 373.416428][ T10] usb 1-1: USB disconnect, device number 12 [ 375.936946][ T8249] netlink: 12 bytes leftover after parsing attributes in process `syz.0.611'. [ 375.980261][ T7748] 8021q: adding VLAN 0 to HW filter on device bond0 [ 376.027266][ T7748] 8021q: adding VLAN 0 to HW filter on device team0 [ 376.059080][ T3026] bridge0: port 1(bridge_slave_0) entered blocking state [ 376.059351][ T3026] bridge0: port 1(bridge_slave_0) entered forwarding state [ 376.360492][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 376.363296][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 376.465960][ T8249] netlink: 12 bytes leftover after parsing attributes in process `syz.0.611'. [ 377.330474][ T10] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 377.480411][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 377.480446][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 377.480486][ T10] usb 1-1: New USB device found, idVendor=0c70, idProduct=f011, bcdDevice= 0.00 [ 377.480510][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 377.546869][ T10] usb 1-1: config 0 descriptor?? [ 377.842837][ T7937] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 377.984215][ T10] usbhid 1-1:0.0: can't add hid device: -71 [ 377.984331][ T10] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 378.017707][ T7937] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 378.034482][ T10] usb 1-1: USB disconnect, device number 13 [ 378.088203][ T7937] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 378.179416][ T7937] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 378.993336][ T7937] 8021q: adding VLAN 0 to HW filter on device bond0 [ 379.070806][ T5855] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 379.089555][ T5855] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 379.090896][ T5855] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 379.093634][ T5855] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 379.094875][ T5855] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 379.302166][ T7937] 8021q: adding VLAN 0 to HW filter on device team0 [ 379.737373][ T3620] bridge0: port 1(bridge_slave_0) entered blocking state [ 379.737561][ T3620] bridge0: port 1(bridge_slave_0) entered forwarding state [ 379.805939][ T8281] lo speed is unknown, defaulting to 1000 [ 379.989944][ T3026] bridge0: port 2(bridge_slave_1) entered blocking state [ 379.990139][ T3026] bridge0: port 2(bridge_slave_1) entered forwarding state [ 380.314647][ T8307] netlink: 92 bytes leftover after parsing attributes in process `syz.1.621'. [ 381.179534][ T5855] Bluetooth: hci4: command tx timeout [ 382.452745][ T8330] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 382.452778][ T8330] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 382.452792][ T8330] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 383.334928][ T5855] Bluetooth: hci4: command tx timeout [ 384.047565][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 384.051894][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 385.399945][ T5855] Bluetooth: hci4: command tx timeout [ 385.733632][ C1] vkms_vblank_simulate: vblank timer overrun [ 386.053386][ C1] vkms_vblank_simulate: vblank timer overrun [ 386.840043][ T8281] chnl_net:caif_netlink_parms(): no params data found [ 386.941767][ T3587] bridge_slave_1: left allmulticast mode [ 386.941794][ T3587] bridge_slave_1: left promiscuous mode [ 386.942010][ T3587] bridge0: port 2(bridge_slave_1) entered disabled state [ 387.044928][ T3587] bridge_slave_0: left allmulticast mode [ 387.044964][ T3587] bridge_slave_0: left promiscuous mode [ 387.045228][ T3587] bridge0: port 1(bridge_slave_0) entered disabled state [ 387.477815][ T5855] Bluetooth: hci4: command tx timeout [ 388.166979][ C1] vkms_vblank_simulate: vblank timer overrun [ 388.943339][ C1] vkms_vblank_simulate: vblank timer overrun [ 389.578680][ C1] vkms_vblank_simulate: vblank timer overrun [ 389.779780][ C1] vkms_vblank_simulate: vblank timer overrun [ 390.354784][ C1] vkms_vblank_simulate: vblank timer overrun [ 390.622472][ C1] vkms_vblank_simulate: vblank timer overrun [ 390.673782][ C1] vkms_vblank_simulate: vblank timer overrun [ 390.743244][ C1] vkms_vblank_simulate: vblank timer overrun [ 390.911877][ T8381] hub 7-0:1.0: USB hub found [ 390.912281][ T8381] hub 7-0:1.0: 1 port detected [ 391.528127][ T3587] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 391.608288][ T3587] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 391.632658][ T3587] bond0 (unregistering): Released all slaves [ 392.618878][ T3587] hsr_slave_0: left promiscuous mode [ 392.657670][ T3587] hsr_slave_1: left promiscuous mode [ 392.662803][ T3587] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 392.703551][ T3587] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 393.617582][ T1246] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 393.776123][ T1246] usb 3-1: New USB device found, idVendor=044e, idProduct=120c, bcdDevice= 0.00 [ 393.776155][ T1246] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 394.757511][ T1246] usb 3-1: config 0 descriptor?? [ 395.860529][ T10] hid-generic 00A0:0008:0003.000A: unknown main item tag 0x7 [ 395.860612][ T10] hid-generic 00A0:0008:0003.000A: item fetching failed at offset 14/15 [ 395.863775][ T10] hid-generic 00A0:0008:0003.000A: probe with driver hid-generic failed with error -22 [ 396.998498][ T1246] usbhid 3-1:0.0: can't add hid device: -71 [ 396.998636][ T1246] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 397.040661][ T1246] usb 3-1: USB disconnect, device number 12 [ 397.286535][ T8408] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 398.794591][ T3587] team0 (unregistering): Port device team_slave_1 removed [ 399.028138][ T3587] team0 (unregistering): Port device team_slave_0 removed [ 400.282277][ T8407] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 401.406554][ T8435] devpts: Unknown parameter 'ui0xffffffffffffffff' [ 402.272299][ T5852] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 402.291234][ T5852] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 402.293822][ T5852] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 402.295760][ T5852] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 402.296816][ T5852] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 402.558577][ T8444] capability: warning: `syz.1.654' uses deprecated v2 capabilities in a way that may be insecure [ 404.048119][ T8281] bridge0: port 1(bridge_slave_0) entered blocking state [ 404.048287][ T8281] bridge0: port 1(bridge_slave_0) entered disabled state [ 404.048528][ T8281] bridge_slave_0: entered allmulticast mode [ 404.052242][ T8281] bridge_slave_0: entered promiscuous mode [ 404.091224][ T8281] bridge0: port 2(bridge_slave_1) entered blocking state [ 404.091440][ T8281] bridge0: port 2(bridge_slave_1) entered disabled state [ 404.091832][ T8281] bridge_slave_1: entered allmulticast mode [ 404.094722][ T8281] bridge_slave_1: entered promiscuous mode [ 404.394087][ T5852] Bluetooth: hci5: command tx timeout [ 405.728504][ T8470] devpts: Unknown parameter 'ui0xffffffffffffffff' [ 406.564006][ T5852] Bluetooth: hci5: command tx timeout [ 406.580560][ T8437] lo speed is unknown, defaulting to 1000 [ 408.714281][ T5852] Bluetooth: hci5: command tx timeout [ 410.034000][ T8281] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 410.131222][ T8281] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 410.635364][ T8281] team0: Port device team_slave_0 added [ 410.666838][ T8281] team0: Port device team_slave_1 added [ 410.905325][ T5852] Bluetooth: hci5: command tx timeout [ 411.069026][ T8505] devpts: Unknown parameter 'ui0xffffffffffffffff' [ 412.230855][ T10] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 414.748118][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 414.762904][ T10] usb 3-1: config 4 has an invalid interface number: 51 but max is 0 [ 414.762938][ T10] usb 3-1: config 4 has no interface number 0 [ 414.763007][ T10] usb 3-1: config 4 interface 51 altsetting 2 bulk endpoint 0x1 has invalid maxpacket 16 [ 414.763039][ T10] usb 3-1: config 4 interface 51 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 414.763068][ T10] usb 3-1: config 4 interface 51 has no altsetting 0 [ 414.780926][ T10] usb 3-1: New USB device found, idVendor=954f, idProduct=4199, bcdDevice= f.76 [ 414.780963][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 414.780995][ T10] usb 3-1: Product: syz [ 414.781012][ T10] usb 3-1: Manufacturer: syz [ 414.781030][ T10] usb 3-1: SerialNumber: syz [ 414.832136][ T8511] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 414.832467][ T8511] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 414.946694][ T8281] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 414.946714][ T8281] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 414.946746][ T8281] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 415.031259][ T8281] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 415.031276][ T8281] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 415.031303][ T8281] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 415.123203][ T10] cdc_eem 3-1:4.51: probe with driver cdc_eem failed with error -71 [ 415.235268][ T10] usb 3-1: USB disconnect, device number 13 [ 418.524418][ T8281] hsr_slave_0: entered promiscuous mode [ 418.526132][ T8281] hsr_slave_1: entered promiscuous mode [ 418.527070][ T8281] debugfs: 'hsr0' already exists in 'hsr' [ 418.527095][ T8281] Cannot create hsr debugfs directory [ 418.578215][ T5925] usb 3-1: new low-speed USB device number 14 using dummy_hcd [ 420.395344][ T5925] usb 3-1: unable to get BOS descriptor or descriptor too short [ 420.470322][ T5925] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 420.470365][ T5925] usb 3-1: can't read configurations, error -71 [ 423.080371][ T8437] chnl_net:caif_netlink_parms(): no params data found [ 426.852809][ T8612] netlink: 132 bytes leftover after parsing attributes in process `syz.1.696'. [ 432.194500][ T8437] bridge0: port 1(bridge_slave_0) entered blocking state [ 432.196495][ T8437] bridge0: port 1(bridge_slave_0) entered disabled state [ 432.196767][ T8437] bridge_slave_0: entered allmulticast mode [ 432.230576][ T8437] bridge_slave_0: entered promiscuous mode [ 432.318390][ T8437] bridge0: port 2(bridge_slave_1) entered blocking state [ 432.318737][ T8437] bridge0: port 2(bridge_slave_1) entered disabled state [ 432.319132][ T8437] bridge_slave_1: entered allmulticast mode [ 432.329425][ T8437] bridge_slave_1: entered promiscuous mode [ 432.455181][ T8657] netlink: 4 bytes leftover after parsing attributes in process `syz.0.706'. [ 435.830545][ T8437] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 436.272424][ T8437] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 436.842881][ T8437] team0: Port device team_slave_0 added [ 436.938148][ T8437] team0: Port device team_slave_1 added [ 436.938858][ T3587] bridge_slave_1: left allmulticast mode [ 436.938887][ T3587] bridge_slave_1: left promiscuous mode [ 436.939150][ T3587] bridge0: port 2(bridge_slave_1) entered disabled state [ 439.289562][ T3587] bridge_slave_0: left allmulticast mode [ 439.289598][ T3587] bridge_slave_0: left promiscuous mode [ 439.289899][ T3587] bridge0: port 1(bridge_slave_0) entered disabled state [ 442.214165][ T5855] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 442.234666][ T5855] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 442.237171][ T5855] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 442.244524][ T5855] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 442.245551][ T5855] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 442.817512][ T5925] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 442.983192][ T5925] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 442.983237][ T5925] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 442.983261][ T5925] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 10 [ 442.983280][ T5925] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 442.983295][ T5925] usb 1-1: config 0 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 9 [ 442.983326][ T5925] usb 1-1: New USB device found, idVendor=1784, idProduct=0001, bcdDevice=8c.04 [ 442.983343][ T5925] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 443.816302][ T5925] usb 1-1: config 0 descriptor?? [ 444.070151][ T5925] usb 1-1: string descriptor 0 read error: -71 [ 444.357505][ T5855] Bluetooth: hci0: command tx timeout [ 444.362104][ T5925] usb 1-1: USB disconnect, device number 14 [ 445.590109][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.590198][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 447.126235][ T5855] Bluetooth: hci0: command tx timeout [ 449.275988][ T5855] Bluetooth: hci0: command tx timeout [ 449.637618][ T8748] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 450.243157][ T8748] usb 3-1: config 0 has an invalid interface number: 176 but max is 2 [ 450.243188][ T8748] usb 3-1: config 0 has no interface number 1 [ 450.243268][ T8748] usb 3-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 450.243294][ T8748] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 450.360130][ T8748] usb 3-1: config 0 descriptor?? [ 450.573495][ T8748] qcserial 3-1:0.2: Qualcomm USB modem converter detected [ 450.768370][ T3587] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 450.798019][ T8748] usb 3-1: USB disconnect, device number 16 [ 450.828414][ T8748] qcserial 3-1:0.2: device disconnected [ 450.878540][ T3587] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 450.933953][ T3587] bond0 (unregistering): Released all slaves [ 451.141258][ T8713] netdevsim netdevsim1 : renamed from netdevsim0 (while UP) [ 451.317502][ T5855] Bluetooth: hci0: command tx timeout [ 451.608128][ T8774] netlink: 5 bytes leftover after parsing attributes in process `syz.2.736'. [ 452.883987][ T8771] hub 1-0:1.0: USB hub found [ 452.918821][ T8771] hub 1-0:1.0: 1 port detected [ 454.001996][ T8774] 0ªX¹¦D: renamed from macvtap0 (while UP) [ 455.310229][ T8774] 0ªX¹¦D: entered allmulticast mode [ 455.311390][ T8774] veth0_macvtap: entered allmulticast mode [ 455.312004][ T8774] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 455.364350][ T8437] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 455.364367][ T8437] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 455.364397][ T8437] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 455.411938][ T8437] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 455.411955][ T8437] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 455.411985][ T8437] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 456.138304][ T3587] hsr_slave_0: left promiscuous mode [ 457.881048][ T3587] hsr_slave_1: left promiscuous mode [ 457.882090][ T3587] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 458.006267][ T3587] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 464.360471][ T5852] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 464.388479][ T5852] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 464.392103][ T5852] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 464.394461][ T5852] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 464.395344][ T5852] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 464.913589][ T3587] team0 (unregistering): Port device team_slave_1 removed [ 465.389773][ T3587] team0 (unregistering): Port device team_slave_0 removed [ 466.441638][ T5855] Bluetooth: hci4: command tx timeout [ 467.857499][ T8834] netlink: 132 bytes leftover after parsing attributes in process `syz.0.752'. [ 468.494658][ T8856] o2cb: This node has not been configured. [ 468.494689][ T8856] o2cb: Cluster check failed. Fix errors before retrying. [ 468.494776][ T8856] (syz.0.756,8856,0):user_dlm_register:674 ERROR: status = -22 [ 468.494822][ T8856] (syz.0.756,8856,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "bus" [ 468.517963][ T5855] Bluetooth: hci4: command tx timeout [ 468.899674][ T8721] lo speed is unknown, defaulting to 1000 [ 468.959044][ T8835] lo speed is unknown, defaulting to 1000 [ 470.598593][ T5855] Bluetooth: hci4: command tx timeout [ 472.679944][ T5855] Bluetooth: hci4: command tx timeout [ 479.502241][ T8835] chnl_net:caif_netlink_parms(): no params data found [ 483.862823][ T8721] chnl_net:caif_netlink_parms(): no params data found [ 483.948358][ T3587] bridge_slave_1: left allmulticast mode [ 483.948384][ T3587] bridge_slave_1: left promiscuous mode [ 483.948571][ T3587] bridge0: port 2(bridge_slave_1) entered disabled state [ 484.052939][ T3587] bridge_slave_0: left allmulticast mode [ 484.052964][ T3587] bridge_slave_0: left promiscuous mode [ 484.053180][ T3587] bridge0: port 1(bridge_slave_0) entered disabled state [ 484.171234][ T3587] bridge_slave_1: left allmulticast mode [ 484.171260][ T3587] bridge_slave_1: left promiscuous mode [ 484.171436][ T3587] bridge0: port 2(bridge_slave_1) entered disabled state [ 484.489933][ T3587] bridge_slave_0: left allmulticast mode [ 484.489959][ T3587] bridge_slave_0: left promiscuous mode [ 484.490147][ T3587] bridge0: port 1(bridge_slave_0) entered disabled state [ 486.819085][ T3587] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 486.928419][ T3587] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 487.048122][ T3587] bond0 (unregistering): Released all slaves [ 488.811027][ T3587] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 489.046313][ T3587] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 489.202396][ T3587] bond0 (unregistering): Released all slaves [ 490.523433][ T8835] bridge0: port 1(bridge_slave_0) entered blocking state [ 490.523562][ T8835] bridge0: port 1(bridge_slave_0) entered disabled state [ 490.523737][ T8835] bridge_slave_0: entered allmulticast mode [ 490.526670][ T8835] bridge_slave_0: entered promiscuous mode [ 490.711653][ T8835] bridge0: port 2(bridge_slave_1) entered blocking state [ 490.711757][ T8835] bridge0: port 2(bridge_slave_1) entered disabled state [ 490.711948][ T8835] bridge_slave_1: entered allmulticast mode [ 490.772141][ T8835] bridge_slave_1: entered promiscuous mode [ 490.784974][ T3587] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 490.818741][ T3587] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 491.247670][ T3587] hsr_slave_0: left promiscuous mode [ 491.368133][ T3587] hsr_slave_1: left promiscuous mode [ 491.370645][ T3587] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 491.394605][ T3587] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 491.609777][ T3587] team0 (unregistering): Port device team_slave_1 removed [ 491.743886][ T3587] team0 (unregistering): Port device team_slave_0 removed [ 492.673926][ T9018] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 492.674121][ T9018] overlayfs: failed to set xattr on upper [ 492.674167][ T9018] overlayfs: ...falling back to redirect_dir=nofollow. [ 492.674202][ T9018] overlayfs: ...falling back to index=off. [ 492.674237][ T9018] overlayfs: ...falling back to uuid=null. [ 492.831448][ T9019] overlayfs: failed to resolve './file1/file0': -2 [ 494.705710][ C1] vkms_vblank_simulate: vblank timer overrun [ 495.331445][ C1] vkms_vblank_simulate: vblank timer overrun [ 495.442323][ C1] vkms_vblank_simulate: vblank timer overrun [ 495.772799][ T3587] team0 (unregistering): Port device team_slave_1 removed [ 495.806596][ C1] vkms_vblank_simulate: vblank timer overrun [ 495.908284][ T3587] team0 (unregistering): Port device team_slave_0 removed [ 496.053534][ C1] vkms_vblank_simulate: vblank timer overrun [ 496.332798][ C1] vkms_vblank_simulate: vblank timer overrun [ 496.522208][ C1] vkms_vblank_simulate: vblank timer overrun [ 497.729011][ C1] vkms_vblank_simulate: vblank timer overrun [ 498.308368][ C1] vkms_vblank_simulate: vblank timer overrun [ 498.354845][ T9045] Bluetooth: MGMT ver 1.23 [ 498.843990][ C1] vkms_vblank_simulate: vblank timer overrun [ 499.034870][ C1] vkms_vblank_simulate: vblank timer overrun [ 501.004679][ T8835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 501.090460][ T8835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 502.049753][ T8835] team0: Port device team_slave_0 added [ 502.053421][ T8835] team0: Port device team_slave_1 added [ 502.407539][ T5989] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 503.041250][ T5989] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 503.041287][ T5989] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 503.041312][ T5989] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 503.041359][ T5989] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 503.041384][ T5989] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 503.126955][ T5989] usb 1-1: config 0 descriptor?? [ 503.535830][ T5852] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 503.566230][ T5852] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 503.571976][ T5852] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 503.591621][ T5852] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 503.596844][ T5852] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 503.726664][ T5989] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 503.726712][ T5989] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 503.726740][ T5989] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 503.726765][ T5989] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 503.726792][ T5989] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 503.726818][ T5989] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 503.741584][ T5989] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 504.103544][ T8835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 504.103563][ T8835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 504.104765][ T8835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 504.172010][ T8835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 504.172024][ T8835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 504.172046][ T8835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 505.157601][ T8748] usb 1-1: reset high-speed USB device number 15 using dummy_hcd [ 505.307463][ T8748] usb 1-1: device descriptor read/64, error -32 [ 505.630244][ T8835] hsr_slave_0: entered promiscuous mode [ 505.643683][ T8835] hsr_slave_1: entered promiscuous mode [ 505.647510][ T8835] debugfs: 'hsr0' already exists in 'hsr' [ 505.647532][ T8835] Cannot create hsr debugfs directory [ 505.729181][ T5852] Bluetooth: hci0: command tx timeout [ 505.854154][ T9097] lo speed is unknown, defaulting to 1000 [ 506.159318][ T5990] kernel write not supported for file /vcsu (pid: 5990 comm: kworker/0:6) [ 506.189900][ T5925] usb 1-1: USB disconnect, device number 15 [ 506.924060][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 506.924143][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 507.827918][ T5852] Bluetooth: hci0: command tx timeout [ 508.141369][ T9129] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 508.141401][ T9129] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 508.474114][ T3587] bond0 (unregistering): Released all slaves [ 508.499673][ T9129] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 508.499697][ T9129] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 512.882985][ T9097] chnl_net:caif_netlink_parms(): no params data found [ 514.860783][ T9217] netlink: 4 bytes leftover after parsing attributes in process `syz.0.833'. [ 516.865676][ T9097] bridge0: port 1(bridge_slave_0) entered blocking state [ 516.865884][ T9097] bridge0: port 1(bridge_slave_0) entered disabled state [ 516.866128][ T9097] bridge_slave_0: entered allmulticast mode [ 516.918582][ T9097] bridge_slave_0: entered promiscuous mode [ 517.089930][ T9097] bridge0: port 2(bridge_slave_1) entered blocking state [ 517.090036][ T9097] bridge0: port 2(bridge_slave_1) entered disabled state [ 517.090219][ T9097] bridge_slave_1: entered allmulticast mode [ 517.093536][ T9097] bridge_slave_1: entered promiscuous mode [ 517.961754][ T9097] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 518.002747][ T9097] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 518.653056][ T9097] team0: Port device team_slave_0 added [ 518.681033][ T9097] team0: Port device team_slave_1 added [ 518.842663][ T8835] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 519.094054][ T8835] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 519.219858][ T9097] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 519.219876][ T9097] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 519.219914][ T9097] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 519.227435][ T8835] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 519.338603][ T9097] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 519.338629][ T9097] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 519.338660][ T9097] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 519.343134][ T8835] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 519.453822][ T9262] 9pnet_fd: Insufficient options for proto=fd [ 520.510122][ T9097] hsr_slave_0: entered promiscuous mode [ 520.513366][ T9097] hsr_slave_1: entered promiscuous mode [ 520.515606][ T9097] debugfs: 'hsr0' already exists in 'hsr' [ 520.518588][ T9097] Cannot create hsr debugfs directory [ 520.637503][ T5925] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 520.665790][ T9286] netlink: 4 bytes leftover after parsing attributes in process `syz.1.850'. [ 520.799419][ T5925] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 520.801928][ T5925] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 520.801949][ T5925] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 520.855775][ T5925] usb 1-1: config 0 descriptor?? [ 520.943553][ T5925] pwc: Askey VC010 type 2 USB webcam detected. [ 521.348478][ T5925] pwc: recv_control_msg error -32 req 02 val 2b00 [ 521.349718][ T5925] pwc: recv_control_msg error -32 req 02 val 2700 [ 521.350347][ T5925] pwc: recv_control_msg error -32 req 02 val 2c00 [ 521.351137][ T5925] pwc: recv_control_msg error -32 req 04 val 1000 [ 521.351773][ T5925] pwc: recv_control_msg error -32 req 04 val 1300 [ 521.352480][ T5925] pwc: recv_control_msg error -32 req 04 val 1400 [ 521.353311][ T5925] pwc: recv_control_msg error -32 req 02 val 2000 [ 521.353872][ T5925] pwc: recv_control_msg error -32 req 02 val 2100 [ 521.354507][ T5925] pwc: recv_control_msg error -32 req 04 val 1500 [ 521.355134][ T5925] pwc: recv_control_msg error -32 req 02 val 2500 [ 521.355697][ T5925] pwc: recv_control_msg error -32 req 02 val 2400 [ 521.356386][ T5925] pwc: recv_control_msg error -32 req 02 val 2600 [ 521.356936][ T5925] pwc: recv_control_msg error -32 req 02 val 2900 [ 521.360729][ T5925] pwc: recv_control_msg error -32 req 02 val 2800 [ 521.364245][ T5925] pwc: recv_control_msg error -32 req 04 val 1100 [ 521.506214][ T5925] pwc: Registered as video103. [ 521.518463][ T5925] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input9 [ 521.698504][ T5925] usb 1-1: USB disconnect, device number 16 [ 523.185641][ T8835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 524.184578][ T9097] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 525.481788][ T5855] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 525.505095][ T5855] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 525.507602][ T5855] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 525.540881][ T5855] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 525.541756][ T5855] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 525.566696][ T5852] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 525.615005][ T5852] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 525.615670][ T5852] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 525.633052][ T5852] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 525.633916][ T5852] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 525.875614][ T9097] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 525.958639][ T9097] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 527.734568][ T5852] Bluetooth: hci4: command tx timeout [ 527.747921][ T9097] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 529.527563][ T5925] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 529.682313][ T5925] usb 1-1: Using ep0 maxpacket: 16 [ 529.720175][ T5925] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 529.720201][ T5925] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 529.840192][ T5925] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 529.840225][ T5925] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 529.840245][ T5925] usb 1-1: Product: syz [ 529.840259][ T5925] usb 1-1: Manufacturer: syz [ 529.840274][ T5925] usb 1-1: SerialNumber: syz [ 529.843389][ T5852] Bluetooth: hci4: command tx timeout [ 529.879093][ T5925] usb 1-1: config 0 descriptor?? [ 529.899543][ T5925] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 529.899569][ T5925] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 530.632489][ T5925] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 530.634169][ T5925] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 530.634998][ T5925] em28xx 1-1:0.0: AC97 chip type couldn't be determined [ 530.635016][ T5925] em28xx 1-1:0.0: No AC97 audio processor [ 531.130209][ T9317] lo speed is unknown, defaulting to 1000 [ 531.879226][ T5852] Bluetooth: hci4: command tx timeout [ 533.267446][ T9407] overlayfs: failed to resolve './file1': -2 [ 533.489204][ T5820] usb 1-1: USB disconnect, device number 17 [ 533.491693][ T5820] em28xx 1-1:0.0: Disconnecting em28xx [ 533.525323][ T5820] em28xx 1-1:0.0: Freeing device [ 533.780926][ T9408] overlayfs: failed to resolve './file1/file0': -2 [ 534.383528][ T5852] Bluetooth: hci4: command tx timeout [ 535.735875][ T9412] @: renamed from vlan0 (while UP) [ 536.247022][ T9430] netlink: 4 bytes leftover after parsing attributes in process `syz.2.871'. [ 537.074391][ T169] bridge_slave_1: left allmulticast mode [ 537.074418][ T169] bridge_slave_1: left promiscuous mode [ 537.074611][ T169] bridge0: port 2(bridge_slave_1) entered disabled state [ 537.161505][ T169] bridge_slave_0: left allmulticast mode [ 537.161646][ T169] bridge_slave_0: left promiscuous mode [ 537.161863][ T169] bridge0: port 1(bridge_slave_0) entered disabled state [ 543.549303][ T169] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 543.648325][ T169] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 543.710095][ T169] bond0 (unregistering): Released all slaves [ 543.923416][ T9317] chnl_net:caif_netlink_parms(): no params data found [ 544.037095][ T9097] 8021q: adding VLAN 0 to HW filter on device bond0 [ 544.859607][ T9483] overlayfs: failed to resolve './bus': -2 [ 546.438842][ T9500] netlink: 4 bytes leftover after parsing attributes in process `syz.0.886'. [ 546.947808][ T169] hsr_slave_0: left promiscuous mode [ 547.953817][ T169] hsr_slave_1: left promiscuous mode [ 547.954960][ T169] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 548.029006][ T169] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 550.478591][ T169] team0 (unregistering): Port device team_slave_1 removed [ 550.728346][ T169] team0 (unregistering): Port device team_slave_0 removed [ 552.449069][ T9317] bridge0: port 1(bridge_slave_0) entered blocking state [ 552.449222][ T9317] bridge0: port 1(bridge_slave_0) entered disabled state [ 552.449466][ T9317] bridge_slave_0: entered allmulticast mode [ 552.457465][ T9317] bridge_slave_0: entered promiscuous mode [ 552.772983][ T9317] bridge0: port 2(bridge_slave_1) entered blocking state [ 552.791969][ T9317] bridge0: port 2(bridge_slave_1) entered disabled state [ 552.821556][ T9317] bridge_slave_1: entered allmulticast mode [ 553.079009][ T9317] bridge_slave_1: entered promiscuous mode [ 553.085414][ T9097] 8021q: adding VLAN 0 to HW filter on device team0 [ 553.768914][ T9317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 553.785986][ T9373] bridge0: port 1(bridge_slave_0) entered blocking state [ 553.787564][ T9373] bridge0: port 1(bridge_slave_0) entered forwarding state [ 553.800250][ T9317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 554.546659][ T9317] team0: Port device team_slave_0 added [ 554.870441][ T3587] bridge0: port 2(bridge_slave_1) entered blocking state [ 554.870570][ T3587] bridge0: port 2(bridge_slave_1) entered forwarding state [ 555.829151][ T9317] team0: Port device team_slave_1 added [ 557.533692][ T9317] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 557.533712][ T9317] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 557.533742][ T9317] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 557.564253][ T9317] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 557.564274][ T9317] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 557.564307][ T9317] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 558.603467][ T9317] hsr_slave_0: entered promiscuous mode [ 558.658829][ T9317] hsr_slave_1: entered promiscuous mode [ 558.677107][ T9317] debugfs: 'hsr0' already exists in 'hsr' [ 558.677128][ T9317] Cannot create hsr debugfs directory [ 564.340028][ T5855] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 564.361668][ T5855] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 564.363251][ T5855] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 564.365723][ T5855] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 564.367001][ T5855] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 566.567057][ T5855] Bluetooth: hci0: command tx timeout [ 568.370734][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 568.370792][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 568.617253][ T5855] Bluetooth: hci0: command tx timeout [ 569.578862][ T9670] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.923'. [ 570.703740][ T5855] Bluetooth: hci0: command tx timeout [ 570.867695][ T9635] lo speed is unknown, defaulting to 1000 [ 572.633211][ T9317] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 572.710206][ T9317] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 572.760005][ T5855] Bluetooth: hci0: command tx timeout [ 572.822941][ T9317] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 573.086956][ T9317] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 573.270338][ T9635] chnl_net:caif_netlink_parms(): no params data found [ 574.413329][ T9373] bridge_slave_1: left allmulticast mode [ 574.413356][ T9373] bridge_slave_1: left promiscuous mode [ 574.413560][ T9373] bridge0: port 2(bridge_slave_1) entered disabled state [ 575.468961][ T9373] bridge_slave_0: left allmulticast mode [ 575.468997][ T9373] bridge_slave_0: left promiscuous mode [ 575.469339][ T9373] bridge0: port 1(bridge_slave_0) entered disabled state [ 578.132131][ T5925] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 578.294479][ T5925] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 578.294515][ T5925] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 578.294539][ T5925] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 578.294583][ T5925] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 578.294605][ T5925] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 578.383921][ T5925] usb 3-1: config 0 descriptor?? [ 578.800935][ T38] kauditd_printk_skb: 16 callbacks suppressed [ 578.800958][ T38] audit: type=1326 audit(2000000032.520:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9781 comm="syz.0.941" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f71335debe9 code=0x0 [ 578.870365][ T5925] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 578.870392][ T5925] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 578.870411][ T5925] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 578.870430][ T5925] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 578.870449][ T5925] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 578.870467][ T5925] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 578.972939][ T5925] plantronics 0003:047F:FFFF.000C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 580.264202][ T5924] usb 3-1: USB disconnect, device number 17 [ 581.332621][ C1] vkms_vblank_simulate: vblank timer overrun [ 586.447591][ T9373] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 586.604872][ T9373] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 586.722928][ T9373] bond0 (unregistering): Released all slaves [ 587.207401][ T5925] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 587.409913][ T5925] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 587.409950][ T5925] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 587.409974][ T5925] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 587.410018][ T5925] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 587.410042][ T5925] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 587.495196][ T5925] usb 3-1: config 0 descriptor?? [ 588.054741][ T5925] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 588.054767][ T5925] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 588.054786][ T5925] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 588.054805][ T5925] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 588.054824][ T5925] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 588.054842][ T5925] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 588.208833][ T5925] plantronics 0003:047F:FFFF.000D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 588.233711][ T5852] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 588.341255][ T5852] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 588.362211][ T9635] bridge0: port 1(bridge_slave_0) entered blocking state [ 588.362364][ T9635] bridge0: port 1(bridge_slave_0) entered disabled state [ 588.362620][ T9635] bridge_slave_0: entered allmulticast mode [ 588.363106][ T5852] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 588.365819][ T9635] bridge_slave_0: entered promiscuous mode [ 588.382575][ T5852] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 588.387746][ T5852] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 588.770915][ T9373] hsr_slave_0: left promiscuous mode [ 588.866221][ T9373] hsr_slave_1: left promiscuous mode [ 588.889446][ T9373] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 589.005151][ T9373] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 590.043706][ T5924] usb 3-1: USB disconnect, device number 18 [ 590.518138][ T5855] Bluetooth: hci5: command tx timeout [ 592.623756][ T5855] Bluetooth: hci5: command tx timeout [ 594.171642][ T9885] block device autoloading is deprecated and will be removed. [ 594.677396][ T5855] Bluetooth: hci5: command tx timeout [ 594.708259][ T9373] team0 (unregistering): Port device team_slave_1 removed [ 595.003298][ T9893] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 595.079070][ T9373] team0 (unregistering): Port device team_slave_0 removed [ 596.767387][ T5855] Bluetooth: hci5: command tx timeout [ 596.950408][ T9902] GUP no longer grows the stack in syz.2.963 (9902): 200000004000-20000000a000 (200000002000) [ 596.950529][ T9902] CPU: 0 UID: 0 PID: 9902 Comm: syz.2.963 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 596.950557][ T9902] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 596.950575][ T9902] Call Trace: [ 596.950584][ T9902] [ 596.950595][ T9902] dump_stack_lvl+0x189/0x250 [ 596.950636][ T9902] ? lockdep_hardirqs_on+0x9c/0x150 [ 596.950667][ T9902] ? __pfx_dump_stack_lvl+0x10/0x10 [ 596.950722][ T9902] __get_user_pages+0x237e/0x2b60 [ 596.950797][ T9902] get_user_pages_remote+0x2f1/0xad0 [ 596.950836][ T9902] ? __access_remote_vm+0x261/0x7d0 [ 596.950866][ T9902] ? __access_remote_vm+0x367/0x7d0 [ 596.950899][ T9902] ? __pfx_get_user_pages_remote+0x10/0x10 [ 596.950928][ T9902] ? kasan_check_range+0x18f/0x2c0 [ 596.950961][ T9902] ? __access_remote_vm+0x367/0x7d0 [ 596.951001][ T9902] __access_remote_vm+0x211/0x7d0 [ 596.951046][ T9902] ? __pfx___access_remote_vm+0x10/0x10 [ 596.951079][ T9902] ? set_page_refcounted+0xa0/0x1e0 [ 596.951110][ T9902] ? alloc_pages_noprof+0xe4/0x1e0 [ 596.951148][ T9902] proc_pid_cmdline_read+0x433/0x810 [ 596.951189][ T9902] ? lockdep_hardirqs_on+0x9c/0x150 [ 596.951226][ T9902] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 596.951257][ T9902] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 596.951303][ T9902] ? vfs_readv+0x586/0x850 [ 596.951347][ T9902] vfs_readv+0x5b3/0x850 [ 596.951380][ T9902] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 596.951419][ T9902] ? __pfx_vfs_readv+0x10/0x10 [ 596.951450][ T9902] ? irqentry_exit+0x74/0x90 [ 596.951505][ T9902] ? __fget_files+0x3a6/0x420 [ 596.951536][ T9902] ? __fget_files+0x2a/0x420 [ 596.951580][ T9902] __x64_sys_preadv+0x19a/0x2a0 [ 596.951614][ T9902] ? __pfx___x64_sys_preadv+0x10/0x10 [ 596.951641][ T9902] ? rcu_is_watching+0x15/0xb0 [ 596.951683][ T9902] ? do_syscall_64+0xbe/0x3b0 [ 596.951718][ T9902] do_syscall_64+0xfa/0x3b0 [ 596.951748][ T9902] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 596.951770][ T9902] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 596.951792][ T9902] ? clear_bhb_loop+0x60/0xb0 [ 596.951820][ T9902] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 596.951847][ T9902] RIP: 0033:0x7f34039eebe9 [ 596.951872][ T9902] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 596.951892][ T9902] RSP: 002b:00007f3401c0c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 596.951916][ T9902] RAX: ffffffffffffffda RBX: 00007f3403c16180 RCX: 00007f34039eebe9 [ 596.951934][ T9902] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 000000000000000a [ 596.951948][ T9902] RBP: 00007f3403a71e19 R08: 0000000000000000 R09: 0000000000000000 [ 596.951963][ T9902] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000000 [ 596.951976][ T9902] R13: 00007f3403c16218 R14: 00007f3403c16180 R15: 00007ffeff58cc78 [ 596.952013][ T9902] [ 598.212034][ T9635] bridge0: port 2(bridge_slave_1) entered blocking state [ 598.214201][ T9635] bridge0: port 2(bridge_slave_1) entered disabled state [ 598.214443][ T9635] bridge_slave_1: entered allmulticast mode [ 598.264160][ T9635] bridge_slave_1: entered promiscuous mode [ 600.066392][ T9635] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 600.116394][ T9635] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 602.674673][ T9927] syz.0.969 (9927): drop_caches: 2 [ 602.731858][ T9635] team0: Port device team_slave_0 added [ 602.736286][ T9635] team0: Port device team_slave_1 added [ 602.736645][ T9848] lo speed is unknown, defaulting to 1000 [ 603.497707][ T9635] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 603.497726][ T9635] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 603.497757][ T9635] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 603.528483][ T9635] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 603.528504][ T9635] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 603.528535][ T9635] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 604.377302][ T9635] hsr_slave_0: entered promiscuous mode [ 604.378830][ T9635] hsr_slave_1: entered promiscuous mode [ 604.379540][ T9635] debugfs: 'hsr0' already exists in 'hsr' [ 604.379565][ T9635] Cannot create hsr debugfs directory [ 605.297889][ T9951] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 606.631942][ T38] audit: type=1800 audit(2000000060.330:264): pid=9960 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.2.975" name="bus" dev="overlay" ino=1547 res=0 errno=0 [ 607.197431][ T8748] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 607.307391][ T44] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 607.417348][ T8748] usb 1-1: Using ep0 maxpacket: 16 [ 607.420360][ T8748] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 607.420380][ T8748] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 607.420410][ T8748] usb 1-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 607.420427][ T8748] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 607.424765][ T8748] usb 1-1: config 0 descriptor?? [ 607.497449][ T44] usb 3-1: Using ep0 maxpacket: 32 [ 607.509241][ T44] usb 3-1: unable to get BOS descriptor or descriptor too short [ 607.510548][ T44] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 607.510588][ T44] usb 3-1: can't read configurations, error -71 [ 607.916606][ T9970] lo speed is unknown, defaulting to 1000 [ 608.499201][ T5924] usb 1-1: USB disconnect, device number 18 [ 613.566606][ T9997] syz.0.982 (9997): drop_caches: 2 [ 613.614026][ T9995] syz.2.981 (9995): drop_caches: 2 [ 614.648346][ T38] audit: type=1800 audit(2000000068.370:265): pid=10007 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.0.986" name="bus" dev="overlay" ino=1688 res=0 errno=0 [ 614.823746][ T9848] chnl_net:caif_netlink_parms(): no params data found [ 614.878637][T10012] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 615.039717][T10018] netlink: 24 bytes leftover after parsing attributes in process `syz.2.988'. [ 617.037632][T10045] sctp: [Deprecated]: syz.1.993 (pid 10045) Use of struct sctp_assoc_value in delayed_ack socket option. [ 617.037632][T10045] Use struct sctp_sack_info instead [ 618.905936][T10050] lo speed is unknown, defaulting to 1000 [ 619.249860][ T9848] bridge0: port 1(bridge_slave_0) entered blocking state [ 619.250008][ T9848] bridge0: port 1(bridge_slave_0) entered disabled state [ 619.250230][ T9848] bridge_slave_0: entered allmulticast mode [ 619.253654][ T9848] bridge_slave_0: entered promiscuous mode [ 619.485838][ T9848] bridge0: port 2(bridge_slave_1) entered blocking state [ 619.486073][ T9848] bridge0: port 2(bridge_slave_1) entered disabled state [ 619.486339][ T9848] bridge_slave_1: entered allmulticast mode [ 619.556538][ T9848] bridge_slave_1: entered promiscuous mode [ 619.959520][ T9373] bridge_slave_1: left allmulticast mode [ 619.959555][ T9373] bridge_slave_1: left promiscuous mode [ 619.959755][ T9373] bridge0: port 2(bridge_slave_1) entered disabled state [ 620.029451][ T9373] bridge_slave_0: left allmulticast mode [ 620.029478][ T9373] bridge_slave_0: left promiscuous mode [ 620.029799][ T9373] bridge0: port 1(bridge_slave_0) entered disabled state [ 624.851860][ T9373] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 624.957986][T10083] sctp: [Deprecated]: syz.2.1003 (pid 10083) Use of struct sctp_assoc_value in delayed_ack socket option. [ 624.957986][T10083] Use struct sctp_sack_info instead [ 625.158760][ T9373] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 625.391393][ T9373] bond0 (unregistering): Released all slaves [ 625.548143][T10071] syz.0.998 (10071): drop_caches: 2 [ 625.887958][ T5852] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 625.907555][ T5852] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 625.911467][ T5852] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 625.913228][ T5852] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 625.914692][ T5852] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 626.767562][ T9848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 627.228677][ T5820] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 627.398568][ T5820] usb 1-1: Using ep0 maxpacket: 16 [ 627.401607][ T5820] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 627.401636][ T5820] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 627.401676][ T5820] usb 1-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 627.401701][ T5820] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 627.494712][ T5820] usb 1-1: config 0 descriptor?? [ 628.210715][ T9373] hsr_slave_0: left promiscuous mode [ 628.225778][ T5855] Bluetooth: hci4: command tx timeout [ 628.234791][ T9373] hsr_slave_1: left promiscuous mode [ 628.235628][ T9373] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 628.258240][ T9373] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 628.829163][ T9373] team0 (unregistering): Port device team_slave_1 removed [ 628.934611][ T9373] team0 (unregistering): Port device team_slave_0 removed [ 629.551601][T10103] lo speed is unknown, defaulting to 1000 [ 629.635406][ T9848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 629.806932][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 629.807003][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 630.227044][ T5989] usb 1-1: USB disconnect, device number 19 [ 630.287692][ T5855] Bluetooth: hci4: command tx timeout [ 630.405566][ T9848] team0: Port device team_slave_0 added [ 630.611959][ T9848] team0: Port device team_slave_1 added [ 631.044026][T10090] lo speed is unknown, defaulting to 1000 [ 631.545531][ T9848] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 631.545550][ T9848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 631.545580][ T9848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 631.709382][ T9848] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 631.709401][ T9848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 631.709433][ T9848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 632.357323][ T5855] Bluetooth: hci4: command tx timeout [ 633.423963][ T9848] hsr_slave_0: entered promiscuous mode [ 633.444811][ T9848] hsr_slave_1: entered promiscuous mode [ 633.462596][ T9848] debugfs: 'hsr0' already exists in 'hsr' [ 633.462617][ T9848] Cannot create hsr debugfs directory [ 633.722135][ C0] vkms_vblank_simulate: vblank timer overrun [ 634.447279][ T5855] Bluetooth: hci4: command tx timeout [ 637.041745][T10160] syz.0.1015 (10160): drop_caches: 2 [ 637.677688][T10090] chnl_net:caif_netlink_parms(): no params data found [ 642.780636][T10195] sctp: [Deprecated]: syz.2.1023 (pid 10195) Use of struct sctp_assoc_value in delayed_ack socket option. [ 642.780636][T10195] Use struct sctp_sack_info instead [ 644.129323][T10090] bridge0: port 1(bridge_slave_0) entered blocking state [ 644.129433][T10090] bridge0: port 1(bridge_slave_0) entered disabled state [ 644.129629][T10090] bridge_slave_0: entered allmulticast mode [ 644.136166][T10090] bridge_slave_0: entered promiscuous mode [ 644.241988][T10090] bridge0: port 2(bridge_slave_1) entered blocking state [ 644.242132][T10090] bridge0: port 2(bridge_slave_1) entered disabled state [ 644.242390][T10090] bridge_slave_1: entered allmulticast mode [ 644.290690][T10090] bridge_slave_1: entered promiscuous mode [ 645.002204][T10090] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 645.032041][T10090] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 645.876138][T10090] team0: Port device team_slave_0 added [ 645.923730][T10090] team0: Port device team_slave_1 added [ 646.493311][ T9373] bridge_slave_1: left allmulticast mode [ 646.493337][ T9373] bridge_slave_1: left promiscuous mode [ 646.493521][ T9373] bridge0: port 2(bridge_slave_1) entered disabled state [ 646.593158][ T9373] bridge_slave_0: left allmulticast mode [ 646.593194][ T9373] bridge_slave_0: left promiscuous mode [ 646.593444][ T9373] bridge0: port 1(bridge_slave_0) entered disabled state [ 648.838272][ T9373] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 648.958188][ T9373] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 649.060213][ T9373] bond0 (unregistering): Released all slaves [ 649.267419][T10225] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 649.267445][T10225] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 649.408956][T10090] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 649.408975][T10090] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 649.409006][T10090] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 649.627699][T10225] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 649.627717][T10225] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 649.665439][T10090] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 649.665460][T10090] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 649.665495][T10090] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 650.190977][ T5852] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 650.214449][ T5852] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 650.218286][ T5852] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 650.244223][ T5852] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 650.245171][ T5852] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 650.318357][ T5855] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 650.318792][ T5855] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 650.319196][ T5855] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 650.320504][ T5855] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 650.321351][ T5855] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 650.781322][T10090] hsr_slave_0: entered promiscuous mode [ 650.790271][T10090] hsr_slave_1: entered promiscuous mode [ 650.791433][T10090] debugfs: 'hsr0' already exists in 'hsr' [ 650.791461][T10090] Cannot create hsr debugfs directory [ 651.450793][T10230] lo speed is unknown, defaulting to 1000 [ 652.357641][ T5852] Bluetooth: hci0: command tx timeout [ 652.374773][T10255] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1038'. [ 652.511359][ T9373] hsr_slave_0: left promiscuous mode [ 652.580731][ T9373] hsr_slave_1: left promiscuous mode [ 652.581844][ T9373] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 652.648343][ T9373] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 653.412617][T10276] ======================================================= [ 653.412617][T10276] WARNING: The mand mount option has been deprecated and [ 653.412617][T10276] and is ignored by this kernel. Remove the mand [ 653.412617][T10276] option from the mount to silence this warning. [ 653.412617][T10276] ======================================================= [ 654.463891][ T5852] Bluetooth: hci0: command tx timeout [ 654.705775][ T9373] team0 (unregistering): Port device team_slave_1 removed [ 654.979315][ T9373] team0 (unregistering): Port device team_slave_0 removed [ 656.517325][ T5852] Bluetooth: hci0: command tx timeout [ 656.519463][T10289] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1044'. [ 658.609550][ T5852] Bluetooth: hci0: command tx timeout [ 663.144275][T10230] chnl_net:caif_netlink_parms(): no params data found [ 666.771508][T10375] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 666.771539][T10375] overlayfs: failed to set xattr on upper [ 666.771548][T10375] overlayfs: ...falling back to redirect_dir=nofollow. [ 666.771557][T10375] overlayfs: ...falling back to index=off. [ 666.771565][T10375] overlayfs: ...falling back to uuid=null. [ 666.833575][T10377] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 666.837795][T10230] bridge0: port 1(bridge_slave_0) entered blocking state [ 666.837957][T10230] bridge0: port 1(bridge_slave_0) entered disabled state [ 666.838176][T10230] bridge_slave_0: entered allmulticast mode [ 666.841161][T10230] bridge_slave_0: entered promiscuous mode [ 666.844410][T10230] bridge0: port 2(bridge_slave_1) entered blocking state [ 666.844553][T10230] bridge0: port 2(bridge_slave_1) entered disabled state [ 666.844748][T10230] bridge_slave_1: entered allmulticast mode [ 666.926408][T10230] bridge_slave_1: entered promiscuous mode [ 667.993429][T10230] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 668.137392][ T5990] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 668.243105][T10230] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 668.327318][ T5990] usb 1-1: Using ep0 maxpacket: 32 [ 668.330014][ T5990] usb 1-1: unable to get BOS descriptor or descriptor too short [ 668.344598][ T5990] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 668.353715][ T5990] usb 1-1: string descriptor 0 read error: -22 [ 668.354033][ T5990] usb 1-1: New USB device found, idVendor=0123, idProduct=0001, bcdDevice=4a.fe [ 668.354061][ T5990] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 668.483337][ T5990] usb 1-1: config 0 descriptor?? [ 668.706253][ T5990] usbtouchscreen 1-1:0.0: probe with driver usbtouchscreen failed with error -71 [ 668.753087][ T5990] usb 1-1: USB disconnect, device number 20 [ 670.499920][T10230] team0: Port device team_slave_0 added [ 670.553826][T10230] team0: Port device team_slave_1 added [ 670.561776][T10090] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 670.991726][T10090] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 671.321966][T10090] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 671.446720][T10230] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 671.446740][T10230] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 671.446769][T10230] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 671.807335][T10090] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 671.918427][T10230] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 671.918447][T10230] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 671.918477][T10230] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 673.066637][T10230] hsr_slave_0: entered promiscuous mode [ 673.110061][T10230] hsr_slave_1: entered promiscuous mode [ 673.114185][T10230] debugfs: 'hsr0' already exists in 'hsr' [ 673.114216][T10230] Cannot create hsr debugfs directory [ 673.134870][ T9373] bridge_slave_1: left allmulticast mode [ 673.134894][ T9373] bridge_slave_1: left promiscuous mode [ 673.135082][ T9373] bridge0: port 2(bridge_slave_1) entered disabled state [ 673.333122][ T9373] bridge_slave_0: left allmulticast mode [ 673.333157][ T9373] bridge_slave_0: left promiscuous mode [ 673.333439][ T9373] bridge0: port 1(bridge_slave_0) entered disabled state [ 674.568236][ T9373] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 674.767062][ T9373] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 674.984871][ T9373] bond0 (unregistering): Released all slaves [ 677.226890][T10458] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 679.366494][ T9373] hsr_slave_0: left promiscuous mode [ 679.420388][ T9373] hsr_slave_1: left promiscuous mode [ 679.421397][ T9373] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 679.819591][T10474] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1076'. [ 679.848620][ T9373] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 679.927279][ T1246] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 680.083494][ T1246] usb 1-1: device descriptor read/64, error -71 [ 680.337363][ T1246] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 680.477349][ T1246] usb 1-1: device descriptor read/64, error -71 [ 680.590245][ T1246] usb usb1-port1: attempt power cycle [ 680.998910][ T1246] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 681.019426][ T1246] usb 1-1: device descriptor read/8, error -71 [ 681.447314][ T1246] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 681.616607][ T1246] usb 1-1: device descriptor read/8, error -71 [ 681.732077][ T1246] usb usb1-port1: unable to enumerate USB device [ 682.349085][ T9373] team0 (unregistering): Port device team_slave_1 removed [ 682.608119][ T9373] team0 (unregistering): Port device team_slave_0 removed [ 686.096073][T10517] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 686.715028][ T5855] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 686.733388][ T5855] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 686.735239][ T5855] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 686.736514][ T5855] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 686.764480][ T5855] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 687.598199][T10516] lo speed is unknown, defaulting to 1000 [ 688.376641][T10516] chnl_net:caif_netlink_parms(): no params data found [ 688.837259][ T5855] Bluetooth: hci4: command tx timeout [ 690.355020][T10516] bridge0: port 1(bridge_slave_0) entered blocking state [ 690.365423][T10516] bridge0: port 1(bridge_slave_0) entered disabled state [ 690.365688][T10516] bridge_slave_0: entered allmulticast mode [ 690.411044][T10516] bridge_slave_0: entered promiscuous mode [ 690.436427][T10516] bridge0: port 2(bridge_slave_1) entered blocking state [ 690.436581][T10516] bridge0: port 2(bridge_slave_1) entered disabled state [ 690.436829][T10516] bridge_slave_1: entered allmulticast mode [ 690.441202][T10516] bridge_slave_1: entered promiscuous mode [ 690.965752][ T5855] Bluetooth: hci4: command tx timeout [ 691.394290][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 691.397898][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 692.214710][T10516] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 692.673619][T10516] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 693.018387][ T5855] Bluetooth: hci4: command tx timeout [ 693.434581][T10578] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 693.434604][T10578] overlayfs: failed to set xattr on upper [ 693.434610][T10578] overlayfs: ...falling back to redirect_dir=nofollow. [ 693.434616][T10578] overlayfs: ...falling back to index=off. [ 693.434622][T10578] overlayfs: ...falling back to uuid=null. [ 693.483695][T10579] overlayfs: failed to resolve './file1/file0': -2 [ 694.021995][T10584] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1094'. [ 695.077460][ T5855] Bluetooth: hci4: command tx timeout [ 695.861509][T10516] team0: Port device team_slave_0 added [ 696.071350][T10516] team0: Port device team_slave_1 added [ 697.099081][T10516] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 697.099109][T10516] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 697.099139][T10516] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 697.210506][T10516] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 697.210520][T10516] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 697.210540][T10516] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 697.324760][T10230] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 697.529742][T10230] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 697.889774][T10230] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 698.333549][T10230] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 699.711901][T10516] hsr_slave_0: entered promiscuous mode [ 699.724485][T10516] hsr_slave_1: entered promiscuous mode [ 699.725515][T10516] debugfs: 'hsr0' already exists in 'hsr' [ 699.725540][T10516] Cannot create hsr debugfs directory [ 700.987214][ T9373] bridge_slave_1: left allmulticast mode [ 700.987249][ T9373] bridge_slave_1: left promiscuous mode [ 700.987491][ T9373] bridge0: port 2(bridge_slave_1) entered disabled state [ 701.148975][ T9373] bridge_slave_0: left allmulticast mode [ 701.149010][ T9373] bridge_slave_0: left promiscuous mode [ 701.149288][ T9373] bridge0: port 1(bridge_slave_0) entered disabled state [ 704.179939][ T9373] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 704.418082][ T9373] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 704.517817][ T9373] bond0 (unregistering): Released all slaves [ 705.375174][ T9373] hsr_slave_0: left promiscuous mode [ 705.417412][ T9373] hsr_slave_1: left promiscuous mode [ 705.418400][ T9373] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 705.468318][ T9373] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 707.697895][ T9373] team0 (unregistering): Port device team_slave_1 removed [ 707.858000][ T9373] team0 (unregistering): Port device team_slave_0 removed [ 710.281918][ T5852] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 710.303908][ T5852] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 710.309534][ T5852] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 710.311601][ T5852] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 710.323224][ T5852] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 710.381401][T10699] overlayfs: failed to resolve './file1': -2 [ 710.988702][T10707] overlayfs: failed to clone upperpath [ 712.450959][ T5852] Bluetooth: hci5: command tx timeout [ 713.103486][T10701] lo speed is unknown, defaulting to 1000 [ 714.838930][ T5852] Bluetooth: hci5: command tx timeout [ 716.917402][ T5852] Bluetooth: hci5: command tx timeout [ 717.697988][T10701] chnl_net:caif_netlink_parms(): no params data found [ 718.719518][T10516] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 718.918889][T10516] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 718.997383][ T5852] Bluetooth: hci5: command tx timeout [ 720.123251][T10516] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 720.417715][T10516] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 720.790629][T10785] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1126'. [ 721.977630][T10701] bridge0: port 1(bridge_slave_0) entered blocking state [ 721.977734][T10701] bridge0: port 1(bridge_slave_0) entered disabled state [ 721.977898][T10701] bridge_slave_0: entered allmulticast mode [ 721.983210][T10701] bridge_slave_0: entered promiscuous mode [ 722.059103][T10701] bridge0: port 2(bridge_slave_1) entered blocking state [ 722.059252][T10701] bridge0: port 2(bridge_slave_1) entered disabled state [ 722.059508][T10701] bridge_slave_1: entered allmulticast mode [ 722.087829][T10701] bridge_slave_1: entered promiscuous mode [ 723.484131][T10701] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 723.568481][T10701] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 724.078345][ T9373] bridge_slave_1: left allmulticast mode [ 724.078372][ T9373] bridge_slave_1: left promiscuous mode [ 724.078600][ T9373] bridge0: port 2(bridge_slave_1) entered disabled state [ 724.186696][ T9373] bridge_slave_0: left allmulticast mode [ 724.186728][ T9373] bridge_slave_0: left promiscuous mode [ 724.186944][ T9373] bridge0: port 1(bridge_slave_0) entered disabled state [ 725.571238][ T9373] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 725.688411][ T9373] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 725.758540][ T9373] bond0 (unregistering): Released all slaves [ 726.221562][T10701] team0: Port device team_slave_0 added [ 726.275063][T10701] team0: Port device team_slave_1 added [ 726.600906][ T9373] hsr_slave_0: left promiscuous mode [ 726.799468][ T9373] hsr_slave_1: left promiscuous mode [ 726.800470][ T9373] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 726.920855][ T9373] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 729.374570][T10837] syz.0.1136 (10837): drop_caches: 2 [ 731.232623][T10846] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1138'. [ 732.016717][ T9373] team0 (unregistering): Port device team_slave_1 removed [ 732.320341][ T9373] team0 (unregistering): Port device team_slave_0 removed [ 737.489609][T10701] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 737.489629][T10701] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 737.489659][T10701] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 737.639254][T10701] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 737.639273][T10701] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 737.639303][T10701] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 738.043304][T10887] syz.2.1149 (10887): drop_caches: 2 [ 738.068671][T10887] syz.2.1149 (10887): drop_caches: 2 [ 738.483125][T10701] hsr_slave_0: entered promiscuous mode [ 738.484279][T10701] hsr_slave_1: entered promiscuous mode [ 738.484906][T10701] debugfs: 'hsr0' already exists in 'hsr' [ 738.484933][T10701] Cannot create hsr debugfs directory [ 740.223692][T10516] 8021q: adding VLAN 0 to HW filter on device bond0 [ 742.222422][T10516] 8021q: adding VLAN 0 to HW filter on device team0 [ 742.279077][ T3026] bridge0: port 1(bridge_slave_0) entered blocking state [ 742.285630][ T3026] bridge0: port 1(bridge_slave_0) entered forwarding state [ 742.355350][ T9367] bridge0: port 2(bridge_slave_1) entered blocking state [ 742.355532][ T9367] bridge0: port 2(bridge_slave_1) entered forwarding state [ 743.212334][T10516] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 743.212354][T10516] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 743.779697][T10926] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 743.779729][T10926] overlayfs: failed to set xattr on upper [ 743.779738][T10926] overlayfs: ...falling back to redirect_dir=nofollow. [ 743.779748][T10926] overlayfs: ...falling back to index=off. [ 743.779757][T10926] overlayfs: ...falling back to uuid=null. [ 743.829178][T10927] overlayfs: failed to resolve './file1/file0': -2 [ 748.168157][T10981] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 748.168186][T10981] overlayfs: failed to set xattr on upper [ 748.168195][T10981] overlayfs: ...falling back to redirect_dir=nofollow. [ 748.168204][T10981] overlayfs: ...falling back to index=off. [ 748.168212][T10981] overlayfs: ...falling back to uuid=null. [ 748.218095][T10982] overlayfs: failed to resolve './file1/file0': -2 [ 748.673508][T10988] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 748.688018][T10988] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 748.691841][T10988] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 748.694142][T10988] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 748.696110][T10988] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 748.853280][T10986] lo speed is unknown, defaulting to 1000 [ 749.418403][ T5820] usb 1-1: new full-speed USB device number 25 using dummy_hcd [ 749.589844][ T5820] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 749.589915][ T5820] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 749.589948][ T5820] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 749.589973][ T5820] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 749.591769][ T5820] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 749.591789][ T5820] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 749.591804][ T5820] usb 1-1: Manufacturer: syz [ 749.794239][ T5820] usb 1-1: config 0 descriptor?? [ 750.257312][ T5820] rc_core: IR keymap rc-hauppauge not found [ 750.257336][ T5820] Registered IR keymap rc-empty [ 750.257835][ T5820] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 750.277434][ T5820] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 750.302448][ T5820] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 750.309777][ T5820] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input11 [ 750.333690][ T5820] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 750.347686][ T5820] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 750.369360][ T5820] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 750.389741][ T5820] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 750.407495][ T5820] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 750.427353][ T5820] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 750.447332][ T5820] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 750.467664][ T5820] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 750.487365][ T5820] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 750.507316][ T5820] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 750.527410][ T5820] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 750.573091][ T5820] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 750.573110][ T5820] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 750.715076][ T5820] usb 1-1: USB disconnect, device number 25 [ 750.777298][ T5852] Bluetooth: hci0: command tx timeout [ 751.438196][T10701] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 751.564062][T10701] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 751.797348][ T5820] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 751.969923][ T5820] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 751.969986][ T5820] usb 1-1: New USB device found, idVendor=046d, idProduct=c294, bcdDevice= 0.00 [ 751.970012][ T5820] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 751.977273][T10701] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 752.000245][ T5820] usb 1-1: config 0 descriptor?? [ 752.243989][T10701] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 752.684769][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 752.684852][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 752.837540][ T5852] Bluetooth: hci0: command tx timeout [ 755.133418][ T5852] Bluetooth: hci0: command tx timeout [ 755.427574][T11032] sctp: [Deprecated]: syz.2.1177 (pid 11032) Use of struct sctp_assoc_value in delayed_ack socket option. [ 755.427574][T11032] Use struct sctp_sack_info instead [ 755.947225][ C0] vkms_vblank_simulate: vblank timer overrun [ 756.053354][T11032] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1177'. [ 756.080825][ T8748] usb 1-1: USB disconnect, device number 26 [ 756.532417][T10986] chnl_net:caif_netlink_parms(): no params data found [ 756.838940][ C0] vkms_vblank_simulate: vblank timer overrun [ 757.087096][ C0] vkms_vblank_simulate: vblank timer overrun [ 757.808316][ C0] vkms_vblank_simulate: vblank timer overrun [ 757.817218][ T5852] Bluetooth: hci0: command tx timeout [ 758.441254][T10986] bridge0: port 1(bridge_slave_0) entered blocking state [ 758.441433][T10986] bridge0: port 1(bridge_slave_0) entered disabled state [ 758.441679][T10986] bridge_slave_0: entered allmulticast mode [ 758.445248][T10986] bridge_slave_0: entered promiscuous mode [ 758.625509][T10986] bridge0: port 2(bridge_slave_1) entered blocking state [ 758.625674][T10986] bridge0: port 2(bridge_slave_1) entered disabled state [ 758.625885][T10986] bridge_slave_1: entered allmulticast mode [ 758.658140][T10986] bridge_slave_1: entered promiscuous mode [ 759.241624][T10986] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 759.391854][T10986] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 759.586395][ T37] bridge_slave_1: left allmulticast mode [ 759.586430][ T37] bridge_slave_1: left promiscuous mode [ 759.586718][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 759.710790][ T37] bridge_slave_0: left allmulticast mode [ 759.710824][ T37] bridge_slave_0: left promiscuous mode [ 759.711103][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 759.905467][T11070] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1184'. [ 759.905516][T11070] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1184'. [ 760.208428][ C0] vkms_vblank_simulate: vblank timer overrun [ 760.263247][ C0] vkms_vblank_simulate: vblank timer overrun [ 760.355422][ C0] vkms_vblank_simulate: vblank timer overrun [ 760.425312][ C0] vkms_vblank_simulate: vblank timer overrun [ 760.505342][ C0] vkms_vblank_simulate: vblank timer overrun [ 760.557441][ C0] vkms_vblank_simulate: vblank timer overrun [ 760.655257][ C0] vkms_vblank_simulate: vblank timer overrun [ 761.009871][ C0] vkms_vblank_simulate: vblank timer overrun [ 761.032179][T11072] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1185'. [ 765.652246][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 765.724919][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 765.752316][ T37] bond0 (unregistering): Released all slaves [ 765.794703][T11072] veth2: entered promiscuous mode [ 766.085088][T10986] team0: Port device team_slave_0 added [ 766.106314][T10986] team0: Port device team_slave_1 added [ 766.358917][ T37] hsr_slave_0: left promiscuous mode [ 766.417245][ T37] hsr_slave_1: left promiscuous mode [ 766.418424][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 766.470314][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 766.792775][T11102] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1194'. [ 766.928237][T11104] overlayfs: failed to clone upperpath [ 769.678216][ T37] team0 (unregistering): Port device team_slave_1 removed [ 769.858277][ T37] team0 (unregistering): Port device team_slave_0 removed [ 770.834014][T10988] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 770.855847][T10988] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 770.890147][T10988] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 770.896729][T10988] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 770.929926][T10988] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 772.047480][ T10] usb 1-1: new full-speed USB device number 27 using dummy_hcd [ 772.208925][ T10] usb 1-1: config 8 has an invalid interface number: 79 but max is 0 [ 772.208955][ T10] usb 1-1: config 8 has no interface number 0 [ 772.209007][ T10] usb 1-1: config 8 interface 79 altsetting 9 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 772.209036][ T10] usb 1-1: config 8 interface 79 has no altsetting 0 [ 772.212131][ T10] usb 1-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=bc.04 [ 772.212162][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 772.212183][ T10] usb 1-1: Product: syz [ 772.212198][ T10] usb 1-1: Manufacturer: syz [ 772.212213][ T10] usb 1-1: SerialNumber: syz [ 772.293953][T11127] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 772.574368][ T10] radio-si470x 1-1:8.79: could not find interrupt in endpoint [ 772.574460][ T10] radio-si470x 1-1:8.79: probe with driver radio-si470x failed with error -5 [ 772.617316][ T10] radio-raremono 1-1:8.79: this is not Thanko's Raremono. [ 772.617979][ T10] usbhid 1-1:8.79: couldn't find an input interrupt endpoint [ 772.647600][ T10] usb 1-1: USB disconnect, device number 27 [ 772.677368][ T5820] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 772.737031][T10986] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 772.737236][T10986] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 772.737265][T10986] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 772.749269][T10986] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 772.749289][T10986] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 772.749322][T10986] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 772.833328][ T5820] usb 3-1: Using ep0 maxpacket: 32 [ 772.841710][ T5820] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 772.841743][ T5820] usb 3-1: config 0 has no interface number 0 [ 772.841797][ T5820] usb 3-1: config 0 interface 85 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 772.841831][ T5820] usb 3-1: config 0 interface 85 has no altsetting 0 [ 772.872241][ T5820] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 772.872277][ T5820] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 772.872300][ T5820] usb 3-1: Product: syz [ 772.872318][ T5820] usb 3-1: Manufacturer: syz [ 772.872344][ T5820] usb 3-1: SerialNumber: syz [ 772.919987][ T5820] usb 3-1: config 0 descriptor?? [ 772.997396][T10988] Bluetooth: hci4: command tx timeout [ 773.003689][ T5820] appletouch 3-1:0.85: Could not find int-in endpoint [ 773.003728][ T5820] appletouch 3-1:0.85: probe with driver appletouch failed with error -5 [ 773.007586][ T5820] usbhid 3-1:0.85: couldn't find an input interrupt endpoint [ 773.441031][T10986] hsr_slave_0: entered promiscuous mode [ 773.459825][T10986] hsr_slave_1: entered promiscuous mode [ 773.475243][T10986] debugfs: 'hsr0' already exists in 'hsr' [ 773.475264][T10986] Cannot create hsr debugfs directory [ 773.537319][T11119] lo speed is unknown, defaulting to 1000 [ 775.077362][T10988] Bluetooth: hci4: command tx timeout [ 775.474345][ T44] usb 3-1: USB disconnect, device number 21 [ 777.182452][T10988] Bluetooth: hci4: command tx timeout [ 777.872485][T11181] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 777.925770][ T5924] lo speed is unknown, defaulting to 1000 [ 778.336670][ C1] vkms_vblank_simulate: vblank timer overrun [ 778.720960][ C1] vkms_vblank_simulate: vblank timer overrun [ 779.269299][ C1] vkms_vblank_simulate: vblank timer overrun [ 779.317338][T10988] Bluetooth: hci4: command tx timeout [ 779.676311][ C1] vkms_vblank_simulate: vblank timer overrun [ 779.830638][ C1] vkms_vblank_simulate: vblank timer overrun [ 780.592781][T11222] capability: warning: `syz.1.1222' uses 32-bit capabilities (legacy support in use) [ 781.166505][ C1] vkms_vblank_simulate: vblank timer overrun [ 781.361434][ C1] vkms_vblank_simulate: vblank timer overrun [ 781.878755][ C1] vkms_vblank_simulate: vblank timer overrun [ 782.636331][ C1] vkms_vblank_simulate: vblank timer overrun [ 783.585216][T11241] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1225'. [ 783.585260][T11241] netlink: 'syz.1.1225': attribute type 7 has an invalid length. [ 783.585276][T11241] netlink: 'syz.1.1225': attribute type 8 has an invalid length. [ 783.585291][T11241] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1225'. [ 783.895748][T11241] erspan0: entered promiscuous mode [ 783.935545][T11241] gretap0: entered promiscuous mode [ 786.183793][T11119] chnl_net:caif_netlink_parms(): no params data found [ 787.489110][T11269] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 789.327553][T11119] bridge0: port 1(bridge_slave_0) entered blocking state [ 789.327702][T11119] bridge0: port 1(bridge_slave_0) entered disabled state [ 789.327934][T11119] bridge_slave_0: entered allmulticast mode [ 789.353925][T11119] bridge_slave_0: entered promiscuous mode [ 789.507509][T11119] bridge0: port 2(bridge_slave_1) entered blocking state [ 789.507635][T11119] bridge0: port 2(bridge_slave_1) entered disabled state [ 789.507876][T11119] bridge_slave_1: entered allmulticast mode [ 789.547493][T11119] bridge_slave_1: entered promiscuous mode [ 790.680007][T11119] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 790.720817][T11119] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 791.120652][ T37] bridge_slave_1: left allmulticast mode [ 791.120689][ T37] bridge_slave_1: left promiscuous mode [ 791.120969][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 792.220041][ T37] bridge_slave_0: left allmulticast mode [ 792.220076][ T37] bridge_slave_0: left promiscuous mode [ 792.220364][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 793.988154][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 794.171241][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 794.263287][ T37] bond0 (unregistering): Released all slaves [ 794.790247][T11119] team0: Port device team_slave_0 added [ 794.824255][T11119] team0: Port device team_slave_1 added [ 795.045495][ T37] hsr_slave_0: left promiscuous mode [ 795.327234][ T37] hsr_slave_1: left promiscuous mode [ 795.328300][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 795.853304][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 797.498595][T11329] syz.2.1249 (11329): drop_caches: 2 [ 798.715855][T11329] syz.2.1249 (11329): drop_caches: 2 [ 798.781732][ T37] team0 (unregistering): Port device team_slave_1 removed [ 798.948119][ T37] team0 (unregistering): Port device team_slave_0 removed [ 800.221704][T10986] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 800.687295][T10986] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 800.852935][T11119] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 800.852956][T11119] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 800.852986][T11119] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 800.856677][T10986] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 801.086566][T11119] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 801.086717][T11119] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 801.086751][T11119] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 801.171963][T10986] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 802.821042][T11119] hsr_slave_0: entered promiscuous mode [ 802.822024][T11119] hsr_slave_1: entered promiscuous mode [ 802.822661][T11119] debugfs: 'hsr0' already exists in 'hsr' [ 802.822680][T11119] Cannot create hsr debugfs directory [ 809.008918][ T5852] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 809.021169][ T5852] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 809.022850][ T5852] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 809.024913][ T5852] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 809.028368][ T5852] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 809.817235][ T44] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 809.976934][T11434] lo speed is unknown, defaulting to 1000 [ 809.996649][ T44] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 809.996679][ T44] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 809.996705][ T44] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 809.996728][ T44] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 810.007412][ T44] usb 3-1: New USB device found, idVendor=0451, idProduct=3410, bcdDevice=ef.1e [ 810.007448][ T44] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 810.007472][ T44] usb 3-1: Product: syz [ 810.007487][ T44] usb 3-1: Manufacturer: syz [ 810.007505][ T44] usb 3-1: SerialNumber: syz [ 810.132378][ T44] usb 3-1: config 0 descriptor?? [ 810.267838][ T44] ti_usb_3410_5052 3-1:0.0: TI USB 3410 1 port adapter converter detected [ 810.288808][ T44] usb 3-1: TI USB 3410 1 port adapter converter now attached to ttyUSB0 [ 810.475428][T11444] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 810.475826][T11444] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 810.711039][T11444] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 810.734892][T11444] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 810.746301][ T5917] usb 3-1: USB disconnect, device number 22 [ 810.838649][ T5917] ti_usb_3410_5052_1 ttyUSB0: TI USB 3410 1 port adapter converter now disconnected from ttyUSB0 [ 810.844550][ T5917] ti_usb_3410_5052 3-1:0.0: device disconnected [ 811.157315][T10988] Bluetooth: hci5: command tx timeout [ 811.528898][T11460] netlink: 'syz.1.1268': attribute type 10 has an invalid length. [ 811.528915][T11460] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1268'. [ 811.636395][T11460] dummy0: entered promiscuous mode [ 811.637911][T11460] bridge0: port 3(dummy0) entered blocking state [ 811.638026][T11460] bridge0: port 3(dummy0) entered disabled state [ 811.638168][T11460] dummy0: entered allmulticast mode [ 811.642282][T11460] bridge0: port 3(dummy0) entered blocking state [ 811.642889][T11460] bridge0: port 3(dummy0) entered forwarding state [ 813.250715][T10988] Bluetooth: hci5: command tx timeout [ 813.597212][T11119] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 813.674346][T11119] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 813.766673][T11119] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 814.128144][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 814.128228][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 814.224150][T11119] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 814.282499][T11472] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 814.777692][T11468] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 815.367248][T10988] Bluetooth: hci5: command tx timeout [ 816.377465][ T6903] bridge_slave_1: left allmulticast mode [ 816.377502][ T6903] bridge_slave_1: left promiscuous mode [ 816.377774][ T6903] bridge0: port 2(bridge_slave_1) entered disabled state [ 816.588690][ T6903] bridge_slave_0: left allmulticast mode [ 816.588726][ T6903] bridge_slave_0: left promiscuous mode [ 816.589066][ T6903] bridge0: port 1(bridge_slave_0) entered disabled state [ 817.397244][T10988] Bluetooth: hci5: command tx timeout [ 823.086102][ C0] vkms_vblank_simulate: vblank timer overrun [ 823.343631][ C0] vkms_vblank_simulate: vblank timer overrun [ 823.699907][ T6903] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 823.957545][ T6903] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 824.069738][ T6903] bond0 (unregistering): Released all slaves [ 824.197342][ T10] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 824.296086][T11434] chnl_net:caif_netlink_parms(): no params data found [ 824.371364][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 824.371396][ T10] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 824.371422][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 824.371444][ T10] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 824.374608][ T10] usb 3-1: New USB device found, idVendor=0451, idProduct=3410, bcdDevice=ef.1e [ 824.374638][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 824.374660][ T10] usb 3-1: Product: syz [ 824.374675][ T10] usb 3-1: Manufacturer: syz [ 824.374690][ T10] usb 3-1: SerialNumber: syz [ 824.479626][ T10] usb 3-1: config 0 descriptor?? [ 824.499788][ T10] ti_usb_3410_5052 3-1:0.0: TI USB 3410 1 port adapter converter detected [ 824.619007][ T10] usb 3-1: TI USB 3410 1 port adapter converter now attached to ttyUSB0 [ 824.714542][T11535] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 824.770746][T11535] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 825.007347][T11535] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 825.008041][T11535] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 825.023436][ T1246] usb 3-1: USB disconnect, device number 23 [ 825.078779][ T1246] ti_usb_3410_5052_1 ttyUSB0: TI USB 3410 1 port adapter converter now disconnected from ttyUSB0 [ 825.079667][ T1246] ti_usb_3410_5052 3-1:0.0: device disconnected [ 825.473246][ C0] vkms_vblank_simulate: vblank timer overrun [ 826.086099][ C0] vkms_vblank_simulate: vblank timer overrun [ 826.395334][ C0] vkms_vblank_simulate: vblank timer overrun [ 826.523195][ T6903] hsr_slave_0: left promiscuous mode [ 826.618551][ T6903] hsr_slave_1: left promiscuous mode [ 826.619518][ T6903] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 826.686104][ T6903] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 831.421156][T11579] sctp: [Deprecated]: syz.1.1293 (pid 11579) Use of struct sctp_assoc_value in delayed_ack socket option. [ 831.421156][T11579] Use struct sctp_sack_info instead [ 831.445367][T11579] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1293'. [ 831.653606][T11582] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 831.653638][T11582] overlayfs: failed to set xattr on upper [ 831.653647][T11582] overlayfs: ...falling back to redirect_dir=nofollow. [ 831.653657][T11582] overlayfs: ...falling back to index=off. [ 831.653665][T11582] overlayfs: ...falling back to uuid=null. [ 831.711781][T11583] overlayfs: failed to resolve './file1/file0': -2 [ 832.226557][ T6903] team0 (unregistering): Port device team_slave_1 removed [ 832.608658][ T6903] team0 (unregistering): Port device team_slave_0 removed [ 834.938596][ T5852] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 834.956067][ T5852] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 834.970480][ T5852] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 834.997932][ T5852] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 835.017450][ T5852] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 835.930887][T11434] bridge0: port 1(bridge_slave_0) entered blocking state [ 835.931090][T11434] bridge0: port 1(bridge_slave_0) entered disabled state [ 835.931334][T11434] bridge_slave_0: entered allmulticast mode [ 835.934370][T11434] bridge_slave_0: entered promiscuous mode [ 835.981854][T11434] bridge0: port 2(bridge_slave_1) entered blocking state [ 835.996179][T11434] bridge0: port 2(bridge_slave_1) entered disabled state [ 835.996433][T11434] bridge_slave_1: entered allmulticast mode [ 836.014897][T11434] bridge_slave_1: entered promiscuous mode [ 836.604809][T11434] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 836.630339][T11594] lo speed is unknown, defaulting to 1000 [ 836.640841][T11434] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 837.157455][T10988] Bluetooth: hci0: command tx timeout [ 837.841598][T11434] team0: Port device team_slave_0 added [ 837.919674][T11434] team0: Port device team_slave_1 added [ 838.905109][T11434] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 838.905130][T11434] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 838.905162][T11434] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 839.106942][T11434] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 839.106961][T11434] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 839.141034][T11434] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 839.231042][T11619] syz.0.1300 (11619): drop_caches: 2 [ 839.247146][T10988] Bluetooth: hci0: command tx timeout [ 839.945512][T11434] hsr_slave_0: entered promiscuous mode [ 839.967778][T11434] hsr_slave_1: entered promiscuous mode [ 839.968800][T11434] debugfs: 'hsr0' already exists in 'hsr' [ 839.968826][T11434] Cannot create hsr debugfs directory [ 841.328148][T10988] Bluetooth: hci0: command tx timeout [ 841.572598][T11634] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 841.572629][T11634] overlayfs: failed to set xattr on upper [ 841.572638][T11634] overlayfs: ...falling back to redirect_dir=nofollow. [ 841.572647][T11634] overlayfs: ...falling back to index=off. [ 841.572656][T11634] overlayfs: ...falling back to uuid=null. [ 841.633710][T11637] overlayfs: failed to resolve './file1/file0': -2 [ 843.397132][T10988] Bluetooth: hci0: command tx timeout [ 844.533394][T11594] chnl_net:caif_netlink_parms(): no params data found [ 846.950287][T11659] sctp: [Deprecated]: syz.0.1310 (pid 11659) Use of struct sctp_assoc_value in delayed_ack socket option. [ 846.950287][T11659] Use struct sctp_sack_info instead [ 847.529510][T11659] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1310'. [ 848.238343][ T6903] bridge_slave_1: left allmulticast mode [ 848.238380][ T6903] bridge_slave_1: left promiscuous mode [ 848.238692][ T6903] bridge0: port 2(bridge_slave_1) entered disabled state [ 848.413977][ T6903] bridge_slave_0: left allmulticast mode [ 848.414013][ T6903] bridge_slave_0: left promiscuous mode [ 848.414274][ T6903] bridge0: port 1(bridge_slave_0) entered disabled state [ 849.255352][ C1] vkms_vblank_simulate: vblank timer overrun [ 850.084985][T11678] syz.2.1314 (11678): drop_caches: 2 [ 850.089433][T11678] syz.2.1314 (11678): drop_caches: 2 [ 850.348512][ T6903] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 850.800606][ T6903] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 850.971697][ T6903] bond0 (unregistering): Released all slaves [ 854.349338][T11594] bridge0: port 1(bridge_slave_0) entered blocking state [ 854.349484][T11594] bridge0: port 1(bridge_slave_0) entered disabled state [ 854.349932][T11594] bridge_slave_0: entered allmulticast mode [ 854.411853][T11594] bridge_slave_0: entered promiscuous mode [ 854.438141][T11594] bridge0: port 2(bridge_slave_1) entered blocking state [ 854.438353][T11594] bridge0: port 2(bridge_slave_1) entered disabled state [ 854.438598][T11594] bridge_slave_1: entered allmulticast mode [ 854.449029][T11594] bridge_slave_1: entered promiscuous mode [ 855.867168][ T6903] hsr_slave_0: left promiscuous mode [ 855.937224][ T6903] hsr_slave_1: left promiscuous mode [ 855.938105][ T6903] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 855.997868][ T6903] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 858.057970][ T6903] team0 (unregistering): Port device team_slave_1 removed [ 858.440564][ T6903] team0 (unregistering): Port device team_slave_0 removed [ 859.654334][T11721] syz.0.1323 (11721): drop_caches: 2 [ 861.268731][T11594] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 861.274926][T11594] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 862.383190][ T8748] usb 3-1: new low-speed USB device number 24 using dummy_hcd [ 862.874639][T11743] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 862.874673][T11743] overlayfs: failed to set xattr on upper [ 862.874682][T11743] overlayfs: ...falling back to redirect_dir=nofollow. [ 862.874691][T11743] overlayfs: ...falling back to index=off. [ 862.874699][T11743] overlayfs: ...falling back to uuid=null. [ 862.956631][T11745] overlayfs: failed to resolve './file1/file0': -2 [ 863.057126][ T5989] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 863.128393][T11594] team0: Port device team_slave_0 added [ 863.220326][ T5989] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 863.220358][ T5989] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 863.220385][ T5989] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 863.220409][ T5989] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 863.236069][ T5989] usb 1-1: New USB device found, idVendor=0451, idProduct=3410, bcdDevice=ef.1e [ 863.236102][ T5989] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 863.236126][ T5989] usb 1-1: Product: syz [ 863.236142][ T5989] usb 1-1: Manufacturer: syz [ 863.236159][ T5989] usb 1-1: SerialNumber: syz [ 863.255639][ T5989] usb 1-1: config 0 descriptor?? [ 863.285985][ T5989] ti_usb_3410_5052 1-1:0.0: TI USB 3410 1 port adapter converter detected [ 863.339376][ T5989] usb 1-1: TI USB 3410 1 port adapter converter now attached to ttyUSB0 [ 863.379684][T11594] team0: Port device team_slave_1 added [ 863.536370][T11741] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 863.539549][T11741] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 863.772753][ T5925] usb 1-1: USB disconnect, device number 28 [ 863.885317][ T5925] ti_usb_3410_5052_1 ttyUSB0: TI USB 3410 1 port adapter converter now disconnected from ttyUSB0 [ 863.899326][ T5925] ti_usb_3410_5052 1-1:0.0: device disconnected [ 864.079443][T11594] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 864.079462][T11594] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 864.079492][T11594] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 864.131597][T11594] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 864.131614][T11594] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 864.131644][T11594] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 864.498407][ T8748] usb 3-1: unable to get BOS descriptor or descriptor too short [ 864.499706][ T8748] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 864.499746][ T8748] usb 3-1: can't read configurations, error -71 [ 864.630336][T11434] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 864.811830][T11434] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 864.882283][T11594] hsr_slave_0: entered promiscuous mode [ 864.893404][T11594] hsr_slave_1: entered promiscuous mode [ 864.897236][ T5989] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 864.902713][T11594] debugfs: 'hsr0' already exists in 'hsr' [ 864.902745][T11594] Cannot create hsr debugfs directory [ 864.922159][T11434] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 864.985489][T11434] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 865.053775][ T5989] usb 1-1: Using ep0 maxpacket: 32 [ 865.064179][ T5989] usb 1-1: config 0 has an invalid interface number: 85 but max is 0 [ 865.064207][ T5989] usb 1-1: config 0 has no interface number 0 [ 865.064255][ T5989] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 865.064285][ T5989] usb 1-1: config 0 interface 85 has no altsetting 0 [ 865.066885][ T5989] usb 1-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 865.066914][ T5989] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 865.066935][ T5989] usb 1-1: Product: syz [ 865.066950][ T5989] usb 1-1: Manufacturer: syz [ 865.066966][ T5989] usb 1-1: SerialNumber: syz [ 865.101796][ T5989] usb 1-1: config 0 descriptor?? [ 865.568097][ T5989] appletouch 1-1:0.85: Failed to read mode from device. [ 865.568533][ T5989] appletouch 1-1:0.85: probe with driver appletouch failed with error -5 [ 865.837232][ T5989] usb 1-1: USB disconnect, device number 29 [ 867.557596][T11775] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1333'. [ 868.261583][T11780] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1334'. [ 870.528564][ T5852] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 870.557258][ T5852] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 870.562306][ T5852] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 870.566170][ T5852] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 870.578990][ T5852] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 871.289411][T11790] lo speed is unknown, defaulting to 1000 [ 872.683873][T10988] Bluetooth: hci4: command tx timeout [ 873.368203][T11594] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 873.747344][T11594] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 874.227824][T11594] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 874.327110][T11594] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 874.758265][T10988] Bluetooth: hci4: command tx timeout [ 874.805436][T11810] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 874.805456][T11810] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 874.944497][T11810] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 874.944526][T11810] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 875.500510][ T179] bridge_slave_1: left allmulticast mode [ 875.500555][ T179] bridge_slave_1: left promiscuous mode [ 875.500838][ T179] bridge0: port 2(bridge_slave_1) entered disabled state [ 875.561816][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 875.561875][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 875.638459][ T179] bridge_slave_0: left allmulticast mode [ 875.638485][ T179] bridge_slave_0: left promiscuous mode [ 875.638679][ T179] bridge0: port 1(bridge_slave_0) entered disabled state [ 875.997266][ T5989] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 876.066117][T11830] syz.0.1341 (11830): drop_caches: 2 [ 876.166541][T11830] syz.0.1341 (11830): drop_caches: 2 [ 876.197305][ T5989] usb 3-1: Using ep0 maxpacket: 32 [ 876.238227][ T5989] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 876.238259][ T5989] usb 3-1: config 0 has no interface number 0 [ 876.238314][ T5989] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 876.238362][ T5989] usb 3-1: config 0 interface 85 has no altsetting 0 [ 876.244402][ T5989] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 876.244444][ T5989] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 876.244468][ T5989] usb 3-1: Product: syz [ 876.244485][ T5989] usb 3-1: Manufacturer: syz [ 876.244503][ T5989] usb 3-1: SerialNumber: syz [ 876.280742][ T5989] usb 3-1: config 0 descriptor?? [ 876.516319][ T5989] appletouch 3-1:0.85: Failed to read mode from device. [ 876.516473][ T5989] appletouch 3-1:0.85: probe with driver appletouch failed with error -5 [ 876.781663][ T5989] usb 3-1: USB disconnect, device number 26 [ 876.983334][ T179] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 877.108144][ T179] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 877.187721][T11839] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1345'. [ 877.215409][ T179] bond0 (unregistering): Released all slaves [ 877.505229][T11790] chnl_net:caif_netlink_parms(): no params data found [ 877.908237][T11847] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1346'. [ 878.427232][ T179] hsr_slave_0: left promiscuous mode [ 878.478346][ T179] hsr_slave_1: left promiscuous mode [ 878.487899][ T179] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 878.528778][ T179] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 881.664665][ T179] team0 (unregistering): Port device team_slave_1 removed [ 882.207996][ T179] team0 (unregistering): Port device team_slave_0 removed [ 885.557465][T11790] bridge0: port 1(bridge_slave_0) entered blocking state [ 885.557639][T11790] bridge0: port 1(bridge_slave_0) entered disabled state [ 885.557887][T11790] bridge_slave_0: entered allmulticast mode [ 885.584131][T11790] bridge_slave_0: entered promiscuous mode [ 885.625666][T11790] bridge0: port 2(bridge_slave_1) entered blocking state [ 885.625820][T11790] bridge0: port 2(bridge_slave_1) entered disabled state [ 885.626060][T11790] bridge_slave_1: entered allmulticast mode [ 885.654475][T11790] bridge_slave_1: entered promiscuous mode [ 885.790465][T11883] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 885.790496][T11883] overlayfs: failed to set xattr on upper [ 885.790505][T11883] overlayfs: ...falling back to redirect_dir=nofollow. [ 885.790513][T11883] overlayfs: ...falling back to index=off. [ 885.790521][T11883] overlayfs: ...falling back to uuid=null. [ 885.872763][T11884] overlayfs: failed to resolve './file1/file0': -2 [ 886.232768][T11790] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 886.242745][T11790] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 886.878906][T11790] team0: Port device team_slave_0 added [ 886.951412][T11790] team0: Port device team_slave_1 added [ 887.489916][T11790] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 887.489936][T11790] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 887.489956][T11790] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 887.552825][T11790] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 887.552844][T11790] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 887.552874][T11790] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 887.862111][T11897] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1357'. [ 888.314177][T11790] hsr_slave_0: entered promiscuous mode [ 888.336278][T11790] hsr_slave_1: entered promiscuous mode [ 888.339068][T11790] debugfs: 'hsr0' already exists in 'hsr' [ 888.339100][T11790] Cannot create hsr debugfs directory [ 888.737790][T11594] 8021q: adding VLAN 0 to HW filter on device bond0 [ 889.142884][T11905] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1358'. [ 889.638850][T11594] 8021q: adding VLAN 0 to HW filter on device team0 [ 889.871972][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 889.872653][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 890.626576][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 890.627233][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 894.168840][T11790] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 894.351162][T11790] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 894.448703][T11790] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 894.539850][T11790] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 896.966415][ T5852] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 897.015599][ T5852] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 897.017179][ T5852] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 897.028645][ T5852] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 897.036893][ T5852] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 897.194149][T10988] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 897.199737][T10988] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 897.200333][T10988] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 897.203885][T10988] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 897.206028][T10988] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 898.407132][T11961] lo speed is unknown, defaulting to 1000 [ 899.397268][T10988] Bluetooth: hci0: command tx timeout [ 900.830413][T11790] 8021q: adding VLAN 0 to HW filter on device bond0 [ 901.477721][T10988] Bluetooth: hci0: command tx timeout [ 902.595740][T11790] 8021q: adding VLAN 0 to HW filter on device team0 [ 902.740765][T12007] syz.2.1372 (12007): drop_caches: 2 [ 902.897617][ T179] bridge0: port 1(bridge_slave_0) entered blocking state [ 902.897728][ T179] bridge0: port 1(bridge_slave_0) entered forwarding state [ 902.923490][T12025] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1373'. [ 902.987308][ T179] bridge0: port 2(bridge_slave_1) entered blocking state [ 902.987461][ T179] bridge0: port 2(bridge_slave_1) entered forwarding state [ 902.990704][T11961] chnl_net:caif_netlink_parms(): no params data found [ 903.080233][T12029] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1374'. [ 903.216500][ T153] bridge_slave_1: left allmulticast mode [ 903.216537][ T153] bridge_slave_1: left promiscuous mode [ 903.216819][ T153] bridge0: port 2(bridge_slave_1) entered disabled state [ 903.557292][T10988] Bluetooth: hci0: command tx timeout [ 903.563392][ T153] bridge_slave_0: left allmulticast mode [ 903.563419][ T153] bridge_slave_0: left promiscuous mode [ 903.563653][ T153] bridge0: port 1(bridge_slave_0) entered disabled state [ 905.638562][T10988] Bluetooth: hci0: command tx timeout [ 909.737817][ T153] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 909.821995][ T153] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 909.851711][ T153] bond0 (unregistering): Released all slaves [ 910.850350][ T153] hsr_slave_0: left promiscuous mode [ 910.876512][ T153] hsr_slave_1: left promiscuous mode [ 910.878300][ T153] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 910.932340][ T153] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 913.861396][T12091] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1384'. [ 915.201810][ T153] team0 (unregistering): Port device team_slave_1 removed [ 915.719476][ T153] team0 (unregistering): Port device team_slave_0 removed [ 915.787353][T12101] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1386'. [ 920.267898][T11961] bridge0: port 1(bridge_slave_0) entered blocking state [ 920.268078][T11961] bridge0: port 1(bridge_slave_0) entered disabled state [ 920.268322][T11961] bridge_slave_0: entered allmulticast mode [ 920.307198][T11961] bridge_slave_0: entered promiscuous mode [ 920.632246][T11961] bridge0: port 2(bridge_slave_1) entered blocking state [ 920.632349][T11961] bridge0: port 2(bridge_slave_1) entered disabled state [ 920.632546][T11961] bridge_slave_1: entered allmulticast mode [ 920.953171][T11961] bridge_slave_1: entered promiscuous mode [ 921.689028][T11961] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 921.734658][T11961] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 923.565372][T11961] team0: Port device team_slave_0 added [ 935.989016][T11961] team0: Port device team_slave_1 added [ 937.599034][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 937.599118][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 966.596929][ C1] sched: DL replenish lagged too much [ 998.444829][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 998.444921][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 1021.568375][ T5852] Bluetooth: hci0: command 0x0406 tx timeout [ 1076.227910][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 1076.227996][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.836997][ T39] INFO: task kworker/u8:5:153 blocked for more than 150 seconds. [ 1116.837027][ T39] Not tainted syzkaller #0 [ 1116.837039][ T39] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1116.837050][ T39] task:kworker/u8:5 state:D stack:20408 pid:153 tgid:153 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 1116.837113][ T39] Workqueue: netns cleanup_net [ 1116.837147][ T39] Call Trace: [ 1116.837154][ T39] [ 1116.837171][ T39] __schedule+0x16f3/0x4c20 [ 1116.837230][ T39] ? __pfx___schedule+0x10/0x10 [ 1116.837279][ T39] ? _raw_spin_unlock_irq+0x23/0x50 [ 1116.837310][ T39] rt_mutex_schedule+0x77/0xf0 [ 1116.837333][ T39] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 1116.837356][ T39] ? task_blocks_on_rt_mutex+0x78c/0x1380 [ 1116.837413][ T39] rt_mutex_slowlock+0x2b1/0x6e0 [ 1116.837439][ T39] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 1116.837462][ T39] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 1116.837497][ T39] ? lockdep_hardirqs_on+0x9c/0x150 [ 1116.837530][ T39] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1116.837562][ T39] ? __pfx___might_resched+0x10/0x10 [ 1116.837593][ T39] ? fib6_rules_net_exit_batch+0x20/0xc0 [ 1116.837614][ T39] mutex_lock_nested+0x16a/0x1d0 [ 1116.837635][ T39] ? fib6_rules_net_exit_batch+0x20/0xc0 [ 1116.837662][ T39] fib6_rules_net_exit_batch+0x20/0xc0 [ 1116.837685][ T39] ? __pfx_fib6_rules_net_exit_batch+0x10/0x10 [ 1116.837706][ T39] ops_undo_list+0x522/0x990 [ 1116.837758][ T39] ? __pfx_ops_undo_list+0x10/0x10 [ 1116.837798][ T39] cleanup_net+0x4cb/0x800 [ 1116.837830][ T39] ? __pfx_cleanup_net+0x10/0x10 [ 1116.837861][ T39] ? _raw_spin_unlock_irq+0x23/0x50 [ 1116.837889][ T39] ? process_scheduled_works+0x9ef/0x17b0 [ 1116.837916][ T39] ? process_scheduled_works+0x9ef/0x17b0 [ 1116.837946][ T39] process_scheduled_works+0xade/0x17b0 [ 1116.838008][ T39] ? __pfx_process_scheduled_works+0x10/0x10 [ 1116.838056][ T39] worker_thread+0x8a0/0xda0 [ 1116.838115][ T39] kthread+0x711/0x8a0 [ 1116.838153][ T39] ? __pfx_worker_thread+0x10/0x10 [ 1116.838181][ T39] ? __pfx_kthread+0x10/0x10 [ 1116.838221][ T39] ? __pfx_kthread+0x10/0x10 [ 1116.838255][ T39] ret_from_fork+0x3fc/0x770 [ 1116.838288][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 1116.838324][ T39] ? __switch_to_asm+0x39/0x70 [ 1116.838345][ T39] ? __switch_to_asm+0x33/0x70 [ 1116.838365][ T39] ? __pfx_kthread+0x10/0x10 [ 1116.838399][ T39] ret_from_fork_asm+0x1a/0x30 [ 1116.838439][ T39] [ 1116.838576][ T39] [ 1116.838576][ T39] Showing all locks held in the system: [ 1116.838587][ T39] 2 locks held by kthreadd/2: [ 1116.838599][ T39] #0: ffffffff8dac5368 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60