last executing test programs: 1m56.002253221s ago: executing program 1 (id=597): syz_usb_connect(0x0, 0x24, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bd160f4086801001adbf000000010902120001000000000904000000a0122400e99503ede06b6be8e308ff2ed5"], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12013f00000000407f04ffff0000000000010902240001000000000904000015030000000921400000", @ANYRES64], 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000001200)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f000049c000/0x18000)=nil, &(0x7f0000000400)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000640)=0x1) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m37.133270141s ago: executing program 1 (id=597): syz_usb_connect(0x0, 0x24, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bd160f4086801001adbf000000010902120001000000000904000000a0122400e99503ede06b6be8e308ff2ed5"], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12013f00000000407f04ffff0000000000010902240001000000000904000015030000000921400000", @ANYRES64], 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000001200)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f000049c000/0x18000)=nil, &(0x7f0000000400)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000640)=0x1) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m14.674262272s ago: executing program 1 (id=597): syz_usb_connect(0x0, 0x24, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bd160f4086801001adbf000000010902120001000000000904000000a0122400e99503ede06b6be8e308ff2ed5"], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12013f00000000407f04ffff0000000000010902240001000000000904000015030000000921400000", @ANYRES64], 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000001200)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f000049c000/0x18000)=nil, &(0x7f0000000400)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000640)=0x1) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 48.076335688s ago: executing program 1 (id=597): syz_usb_connect(0x0, 0x24, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bd160f4086801001adbf000000010902120001000000000904000000a0122400e99503ede06b6be8e308ff2ed5"], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12013f00000000407f04ffff0000000000010902240001000000000904000015030000000921400000", @ANYRES64], 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000001200)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f000049c000/0x18000)=nil, &(0x7f0000000400)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000640)=0x1) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 27.591281169s ago: executing program 1 (id=597): syz_usb_connect(0x0, 0x24, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bd160f4086801001adbf000000010902120001000000000904000000a0122400e99503ede06b6be8e308ff2ed5"], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12013f00000000407f04ffff0000000000010902240001000000000904000015030000000921400000", @ANYRES64], 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000001200)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f000049c000/0x18000)=nil, &(0x7f0000000400)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000640)=0x1) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10.350396702s ago: executing program 4 (id=1487): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0xe3, 0xdd, 0xef, 0x20, 0x1d50, 0x60a1, 0xa14f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x9d, 0x14, 0x4e}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000240)={0x1c, &(0x7f0000000140), 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000400)={0x34, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000009c0)={0x44, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000840)={0x44, &(0x7f0000000580), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 10.048484337s ago: executing program 3 (id=1488): r0 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x3) ftruncate(r0, 0xffff) fcntl$addseals(r0, 0x409, 0x7) fallocate(r0, 0x0, 0x0, 0x8) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x59}) 9.908980004s ago: executing program 0 (id=1490): socket$kcm(0x29, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) bpf$ITER_CREATE(0x21, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r3, 0x16, &(0x7f0000000000)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) r6 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x0, r6, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0}}) io_uring_enter(r3, 0x5b43, 0x0, 0x0, 0x0, 0x0) 9.850333642s ago: executing program 2 (id=1491): r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000840)={0x1c, r0, 0x329, 0x0, 0x0, {0x16}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) 9.724000884s ago: executing program 3 (id=1492): mount$tmpfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='gid']) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x0, 0x1) mount(&(0x7f0000000100)=@nullb, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000000)='ntfs3\x00', 0x0, &(0x7f0000000340)) 8.838568611s ago: executing program 0 (id=1493): mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f00000003c0)={0x42, 0x4, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, '\x00', 0x0, 0x6}) ioctl$KVM_RUN(r1, 0xae80, 0x0) r2 = epoll_create1(0x0) poll(&(0x7f0000000040)=[{r2, 0x583}], 0x1, 0xfffc) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f00000000c0)) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 8.792643099s ago: executing program 2 (id=1494): bind$alg(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffb000/0x2000)=nil, 0x2000, &(0x7f0000000000)='/dev/audio#\x00') sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) r2 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000040)={0x6, 0x1, 0x1}) 8.723293691s ago: executing program 3 (id=1495): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001080)=@newtaction={0x6c, 0x30, 0x9, 0x0, 0x0, {}, [{0x58, 0x1, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{}, 0x3}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x4000}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(0xffffffffffffffff, 0x40089413, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305839, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1000}) openat$zero(0xffffffffffffff9c, &(0x7f0000000240), 0x303000, 0x0) socket$inet6(0xa, 0x1, 0x9) r3 = fsopen(&(0x7f0000000000)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000040)='fd', &(0x7f00000000c0)='3', 0x0) pwritev2(r1, &(0x7f0000000380)=[{&(0x7f00000000c0)="ff", 0x1}, {&(0x7f0000000180)="49d7896756bfa8cfdde4", 0xa}], 0x2, 0x0, 0x0, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$NFNL_MSG_COMPAT_GET(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, 0x0, 0xb, 0x101, 0x0, 0x0, {}, [@NFTA_COMPAT_REV={0x8}]}, 0x1c}}, 0x0) r5 = socket$inet6(0xa, 0x0, 0x100000000000088) bind$inet6(r5, &(0x7f0000000140)={0xa, 0x4e23}, 0x1c) r6 = socket$inet6(0xa, 0x802, 0x88) setsockopt$inet6_udp_int(r6, 0x11, 0x100000000a, &(0x7f00000003c0)=0x800000001, 0x4) sendto$inet6(r6, 0x0, 0x0, 0x6008800, &(0x7f0000000180)={0xa, 0x4e23, 0x0, @mcast1}, 0x1c) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x520, 0x340, 0x25, 0x148, 0x0, 0x60, 0x488, 0x2a8, 0x2a8, 0x488, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x0, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0xe8, 0x148, 0x0, {}, [@common=@set={{0x40}}, @common=@unspec=@statistic={{0x38}}]}, @common=@SET={0x60}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x580) 8.122501879s ago: executing program 3 (id=1496): socket(0x0, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, 0x0, &(0x7f0000000700)) bind$inet6(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000033a80)=""/102386, 0xffffffa8}], 0x1, 0x800, 0x0) socket(0x0, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000180)=0x3, 0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000ec0)=@raw={'raw\x00', 0x3c1, 0x3, 0x450, 0x0, 0x150, 0x150, 0x2b0, 0xf8010000, 0x380, 0x238, 0x238, 0x380, 0x238, 0x3, 0x0, {[{{@ipv6={@mcast1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [], [], 'team_slave_0\x00', 'hsr0\x00'}, 0x0, 0x248, 0x2b0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'batadv0\x00', {0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x4}}}, @common=@inet=@sctp={{0x148}, {[], [], [], 0x0, [], 0x10000}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}, {{@ipv6={@empty, @mcast1, [], [], 'batadv_slave_0\x00', 'gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b0) bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x54}, 0x9c) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r4, &(0x7f00000000c0)="8d", 0x1, 0x0, &(0x7f0000000180)={0xa, 0x4e23, 0x5, @local}, 0x1c) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0xc, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f0000000080)={r5}, 0x8) socket$nl_route(0x10, 0x3, 0x0) 7.991896541s ago: executing program 2 (id=1497): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x17, 0x3, &(0x7f0000000080)=@framed, 0x0}, 0x90) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000000)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000380)={0x0, 0x0}) setpgid(0x0, r1) r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket(0x0, 0x0, 0x0) r3 = socket(0x2b, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x6) newfstatat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) chdir(0x0) getcwd(&(0x7f0000000040)=""/129, 0x81) getgroups(0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@dev, @in6=@dev}}, {{@in=@multicast2}, 0x0, @in=@multicast1}}, &(0x7f0000000840)=0xe8) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0x9362, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x7f, 0x2) socket$nl_generic(0x10, 0x3, 0x10) 7.789350582s ago: executing program 0 (id=1498): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) read$alg(r1, &(0x7f00000002c0)=""/82, 0x52) 7.747416368s ago: executing program 4 (id=1499): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000108500000075000000250000002300000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) r2 = socket(0x25, 0x5, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r2, &(0x7f0000000400)={0x0, 0xfffffffffffffd40, 0x0}, 0x0) 6.436407604s ago: executing program 0 (id=1500): r0 = syz_open_dev$vim2m(&(0x7f0000000440), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x3, 0x2, 0x4}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405668, &(0x7f00000004c0)={0x0, 0x0, 0x2}) 6.381160116s ago: executing program 2 (id=1501): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) userfaultfd(0x0) ioperm(0x0, 0x0, 0x0) syz_pidfd_open(0x0, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x657, 0xfeffffff) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_io_uring_setup(0x0, &(0x7f0000000100), 0x0, 0x0) chdir(0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c1000003e0007012ebd700004101c000100000004000002041001"], 0x101c}}, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005340)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) 6.301991578s ago: executing program 4 (id=1502): r0 = syz_open_procfs(0x0, &(0x7f0000000300)='task\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x5, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, &(0x7f0000000080)={0x5b, 0x0, 0x2, @stepwise={0x716, 0x6, 0x1cc000, 0x1000, 0x0, 0x3}}) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/snmp\x00') read(r5, &(0x7f0000001a00)=""/177, 0xb1) syz_open_procfs(0x0, 0x0) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0x0) fchdir(r0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) syz_extract_tcp_res$synack(&(0x7f0000000040), 0x1, 0x0) 6.272599961s ago: executing program 0 (id=1503): syz_usb_connect$uac1(0x0, 0x94, &(0x7f0000003fc0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x82, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@input_terminal={0xc}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7}]}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x9}, @as_header={0x7, 0x24, 0x1, 0x0, 0x0, 0x1001}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) 5.427591531s ago: executing program 3 (id=1504): r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) close(r0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x1, 0x2}, 0x1c) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0xfffd) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r3, 0xc400941d, &(0x7f0000000340)={0x0, 0xf, 0x98}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="05000000000000007111b70000000000851000000200000085000000ae00000095000000000000009500a505000000005160b53d4aaf0ecda3e967683918fabfc90ec1e06c5f48cb9ce64e815b7b74d0c3e9365f188f6a00591b"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70) socket(0x22, 0x80000, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_subtree(r5, 0x0, 0x6a) 5.353104602s ago: executing program 4 (id=1505): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) io_setup(0xa4, &(0x7f0000000300)=0x0) io_submit(r3, 0x1, &(0x7f0000000040)=[0x0]) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x0, 0x4, 0x4, 0xc}, 0x48) r4 = syz_genetlink_get_family_id$netlbl_unlabel(0x0, 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000001d40)={0x0, 0x0, &(0x7f0000001d00)={&(0x7f0000001c40)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="0d0600000000000000000700000014000200fc02000000000000000000000000000014000300"/48], 0x3c}}, 0x0) r5 = landlock_create_ruleset(&(0x7f0000000080)={0x8000}, 0x10, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) landlock_restrict_self(r5, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x2, 0x8a) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)={0x3c, r8, 0x111, 0x2, 0x0, {0x2f}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}]}, 0x3c}}, 0x0) ioctl(r6, 0x5460, 0x0) 4.211530017s ago: executing program 4 (id=1506): bpf$ENABLE_STATS(0x20, 0x0, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) openat$ptp0(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(0xffffffffffffffff, 0x3305, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x1e, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x4) setresuid(0x0, 0x0, 0x0) syz_open_dev$video4linux(&(0x7f0000001380), 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)=@updsa={0x13c, 0x1a, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {@in=@multicast2, 0x0, 0x33}, @in6=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth_trunc={0x4c, 0x14, {{'hmac(sha1)\x00'}}}]}, 0x13c}}, 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) write$vga_arbiter(r3, &(0x7f0000000040)=ANY=[@ANYBLOB='trylock '], 0x14) syz_open_dev$sndctrl(&(0x7f0000000080), 0x80000, 0x204001) 2.898915441s ago: executing program 1 (id=597): syz_usb_connect(0x0, 0x24, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bd160f4086801001adbf000000010902120001000000000904000000a0122400e99503ede06b6be8e308ff2ed5"], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12013f00000000407f04ffff0000000000010902240001000000000904000015030000000921400000", @ANYRES64], 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000001200)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f000049c000/0x18000)=nil, &(0x7f0000000400)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000640)=0x1) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 216.235431ms ago: executing program 0 (id=1507): set_mempolicy(0x3, &(0x7f00000000c0)=0x5, 0x7) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)=@newtaction={0xbc, 0x30, 0x10b, 0x70bd27, 0x0, {}, [{0xa8, 0x1, [@m_ife={0xa4, 0x1, 0x0, 0x0, {{0x8}, {0x38, 0x2, 0x0, 0x1, [@TCA_IFE_SMAC={0xa, 0x4, @random="d8c4efb8a5ce"}, @TCA_IFE_DMAC={0xa, 0x3, @link_local}, @TCA_IFE_PARMS={0x1c, 0x1, {{}, 0x1}}]}, {0x46, 0x6, "c599d91aca538dbc8e61f38262becfbe8359316f0a4e5c2dfc9fda51b2e1b5e6021e584a49675550c6323b0956cfe5ae383d7550808bb0aa2bf8a3e5befe52a30d24"}, {0xc}, {0xc}}}]}]}, 0xbc}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRES8=r0], &(0x7f0000000200)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25, 0x0, 0x0, 0x0}, 0x1a) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0x14, &(0x7f0000000000), 0x4) sendmsg$kcm(r3, &(0x7f0000000340)={&(0x7f0000000280)=@phonet={0x23, 0x0, 0x0, 0x42}, 0x80, 0x0}, 0x0) ioctl$KDENABIO(r2, 0x4b36) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f00000000c0)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000040)={@host}) io_cancel(0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)="de", 0x1}, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'batadv_slave_1\x00'}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x4, &(0x7f0000000080)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x4, 0xa6, &(0x7f0000000340)=""/166}, 0x90) ioctl$KVM_CAP_SPLIT_IRQCHIP(r6, 0x4068aea3, &(0x7f0000000400)) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(0xffffffffffffffff, 0x4008ae93, &(0x7f0000000640)=0x1) ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(r4, 0x7cb, &(0x7f0000000980)={&(0x7f0000000540)={{@hyper}, {}, 0x400, "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"}, 0x418}) ioctl$FIONREAD(r2, 0x541b, &(0x7f00000001c0)) ioctl$IOCTL_VMCI_SET_NOTIFY(r4, 0x7cb, &(0x7f00000009c0)={0x9}) set_mempolicy(0x0, &(0x7f0000000240)=0x7fff, 0x3) 208.416734ms ago: executing program 2 (id=1508): ioperm(0x0, 0x5, 0x804) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0xcb, 0x0, &(0x7f0000000740)="e0b9547ed387dbe9abc89b6f5bec519ec65a581647c3fc27a2d7ec5b9e8657528d657cf9f30c4742fbc006b296ca3337f9cef0cb14b3980830b4c300d5e60bf0afc94014901d54abde6ca7b50ac39188b0b5bf450902723bc3d8b61011b3df9ea234a1c67d7905461dabc722445e6b7258e9bb972fc9ca74c3a52222ff579455ffae01fe4af22bc3dd670a7ec665229f8da7c60c792b4a76396764a31e97af2be273939103000000000000008903a51603d422fffca48075bb3ee66ef1a77fa188735bc5bb6222b5012426", 0x0, 0x4, 0x0, 0xfe75, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x50) 207.040574ms ago: executing program 3 (id=1509): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x0, 0x4, 0x8, 0x8}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) getpid() bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0}, 0x10) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="500000000202010400000000000000000a0000003c0002802c000180140003002001000000000000000000000000000014000400fe880000000000000000000000000001040002"], 0x50}}, 0x0) 199.08702ms ago: executing program 4 (id=1510): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) prlimit64(0xffffffffffffffff, 0x13, &(0x7f0000000380)={0x9}, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x2d34075d}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@private=0xa010102, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x73}, {0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x81, 0x0, 0x0, 0x3}, {}, 0x4974, 0x6e6bb4, 0x1}, {{@in=@remote}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x7, 0xfffffffe}}, 0xe8) keyctl$chown(0x4, 0x0, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x9, &(0x7f00000002c0)={&(0x7f0000001c40)=@newtaction={0xf0, 0x30, 0x1, 0x0, 0x0, {}, [{0xdc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x6c, 0x2, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf0}}, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e1f1b"], 0x22) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) mkdir(0x0, 0x0) 0s ago: executing program 2 (id=1511): r0 = getpgrp(0x0) r1 = syz_pidfd_open(r0, 0x0) r2 = pidfd_getfd(r1, r1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000540)={'vlan0\x00', 0x0}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f00000004c0)={r5, 0x3, 0x6, @link_local}, 0x10) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f00000007c0)={r5, 0x3, 0x6, @random="cea0300a1672"}, 0x10) close_range(r3, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x5, 0x2, 0x1000}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) setns(r2, 0x14020000) kernel console output (not intermixed with test programs): e_slave_1) entered forwarding state [ 379.504414][ T8364] 8021q: adding VLAN 0 to HW filter on device bond0 [ 379.619408][ T8364] 8021q: adding VLAN 0 to HW filter on device team0 [ 379.638167][ T5267] bridge0: port 1(bridge_slave_0) entered blocking state [ 379.638233][ T5267] bridge0: port 1(bridge_slave_0) entered forwarding state [ 379.694796][ T5267] bridge0: port 2(bridge_slave_1) entered blocking state [ 379.694923][ T5267] bridge0: port 2(bridge_slave_1) entered forwarding state [ 379.762358][ T5266] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 379.763425][ T5266] plantronics 0003:047F:FFFF.0009: No inputs registered, leaving [ 379.792301][ T5266] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 380.133272][ T8305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 380.217729][ T5269] usb 4-1: USB disconnect, device number 9 [ 380.362270][ T8364] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 380.444416][ T8305] veth0_vlan: entered promiscuous mode [ 380.476463][ T8305] veth1_vlan: entered promiscuous mode [ 380.651388][ T8305] veth0_macvtap: entered promiscuous mode [ 380.702921][ T8305] veth1_macvtap: entered promiscuous mode [ 380.782580][ T8364] veth0_vlan: entered promiscuous mode [ 380.812175][ T8305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 380.863506][ T8305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.897634][ T8305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 380.908541][ T8305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.918448][ T8305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 380.929406][ T8305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.946382][ T8305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 380.959884][ T8305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.979578][ T8305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 381.002545][ T8305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 381.042440][ T8305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.063916][ T8305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 381.084942][ T8305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.098615][ T8305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 381.111316][ T8305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.121736][ T8305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 381.132372][ T8305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.153395][ T8305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 381.280657][ T8305] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.315304][ T8305] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.334444][ T8305] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.368179][ T8305] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.440104][ T8364] veth1_vlan: entered promiscuous mode [ 382.190674][ T8364] veth0_macvtap: entered promiscuous mode [ 382.285144][ T8364] veth1_macvtap: entered promiscuous mode [ 382.388710][ T8364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 382.413086][ T8364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.424205][ T8364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 382.443345][ T8364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.455221][ T8364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 382.465884][ T8364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.476719][ T8364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 382.498666][ T8364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.520807][ T8364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 382.539050][ T8364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.770326][ T8658] overlayfs: workdir and upperdir must reside under the same mount [ 383.179966][ T8364] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 383.499479][ T8364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 383.528155][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 383.536167][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 383.545969][ T8364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.568219][ T8364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 383.597638][ T8364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.609112][ T8364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 383.622171][ T29] audit: type=1326 audit(2000000785.672:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8649 comm="syz.4.1018" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd17eb779f9 code=0x0 [ 383.622398][ T8364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.672374][ T8663] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1020'. [ 383.681799][ T8364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 383.705619][ T8364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.727769][ T8364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 383.748596][ T8364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.765915][ T8364] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 383.867132][ T8364] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.878160][ T8364] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.886901][ T8364] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.907573][ T8364] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.939114][ T8291] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 383.987733][ T8291] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 384.027854][ T5266] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 384.232194][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 384.258538][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 384.277691][ T5266] usb 4-1: Using ep0 maxpacket: 16 [ 384.357199][ T5266] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 384.378706][ T5266] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 384.431208][ T5266] usb 4-1: config 0 has no interface number 0 [ 384.443024][ T5266] usb 4-1: config 0 interface 8 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 384.549697][ T5266] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 384.577649][ T5266] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 384.605616][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 384.627926][ T5266] usb 4-1: Product: syz [ 384.632509][ T5266] usb 4-1: SerialNumber: syz [ 384.644644][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 384.696840][ T5266] usb 4-1: config 0 descriptor?? [ 384.742923][ T5266] usbhid 4-1:0.8: couldn't find an input interrupt endpoint [ 385.739852][ T63] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.923877][ T63] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.081130][ T5224] Bluetooth: hci5: command 0x0406 tx timeout [ 386.135384][ T63] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.259952][ T63] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.413749][ T63] bridge_slave_1: left allmulticast mode [ 386.422044][ T63] bridge_slave_1: left promiscuous mode [ 386.436083][ T63] bridge0: port 2(bridge_slave_1) entered disabled state [ 386.448941][ T63] bridge_slave_0: left allmulticast mode [ 386.454696][ T63] bridge_slave_0: left promiscuous mode [ 386.469039][ T63] bridge0: port 1(bridge_slave_0) entered disabled state [ 386.513986][ T25] usb 4-1: USB disconnect, device number 10 [ 386.558335][ T5219] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 386.569009][ T5219] Bluetooth: hci5: Injecting HCI hardware error event [ 386.587245][ T5224] Bluetooth: hci5: hardware error 0x00 [ 387.042213][ T8697] tmpfs: Bad value for 'mpol' [ 387.316830][ T5222] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 387.334968][ T5222] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 387.344148][ T5222] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 387.353768][ T5222] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 387.361876][ T5222] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 387.373248][ T5222] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 388.226868][ T63] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 388.287715][ T63] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 388.344054][ T63] bond0 (unregistering): Released all slaves [ 388.727849][ T5224] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 388.812245][ T8693] netlink: 'syz.4.1029': attribute type 1 has an invalid length. [ 388.821260][ T8693] netlink: 'syz.4.1029': attribute type 4 has an invalid length. [ 388.829151][ T8693] netlink: 15334 bytes leftover after parsing attributes in process `syz.4.1029'. [ 388.946907][ T8713] Smack: duplicate mount options [ 389.171870][ T63] hsr_slave_0: left promiscuous mode [ 389.187699][ T63] hsr_slave_1: left promiscuous mode [ 389.195349][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 389.212325][ T63] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 389.235477][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 389.254946][ T63] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 389.283926][ T63] veth1_macvtap: left promiscuous mode [ 389.319476][ T63] veth0_macvtap: left promiscuous mode [ 389.325216][ T63] veth1_vlan: left promiscuous mode [ 389.333764][ T63] veth0_vlan: left promiscuous mode [ 389.441191][ T5224] Bluetooth: hci3: command tx timeout [ 391.517848][ T5224] Bluetooth: hci3: command tx timeout [ 392.844373][ T8751] fuse: Invalid rootmode [ 393.083474][ T63] team0 (unregistering): Port device team_slave_1 removed [ 393.143153][ T5266] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 393.154171][ T63] team0 (unregistering): Port device team_slave_0 removed [ 393.157183][ T29] audit: type=1326 audit(2000000795.202:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8756 comm="syz.4.1049" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd17eb779f9 code=0x0 [ 393.615457][ T5266] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 393.673586][ T5224] Bluetooth: hci3: command tx timeout [ 393.715051][ T5266] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 393.827431][ T5266] usb 1-1: Product: syz [ 393.914215][ T5266] usb 1-1: Manufacturer: syz [ 393.995351][ T5266] usb 1-1: SerialNumber: syz [ 394.222228][ T5266] usb 1-1: config 0 descriptor?? [ 394.657611][ T5266] usb 1-1: Firmware: major: 15, minor: 97, hardware type: UNKNOWN (127) [ 394.861374][ T5266] usb 1-1: Read permanent extended address 00:00:00:00:00:00:00:04 from device [ 394.873783][ T5266] usb 1-1: atusb_probe: initialization failed, error = -524 [ 394.908192][ T5266] atusb 1-1:0.0: probe with driver atusb failed with error -524 [ 395.249317][ T5269] usb 1-1: USB disconnect, device number 15 [ 395.760839][ T5224] Bluetooth: hci3: command tx timeout [ 402.534658][ T8805] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1062'. [ 402.637575][ T8702] chnl_net:caif_netlink_parms(): no params data found [ 403.006443][ T29] audit: type=1326 audit(2000000805.042:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8807 comm="syz.4.1064" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd17eb779f9 code=0x0 [ 404.110077][ T8702] bridge0: port 1(bridge_slave_0) entered blocking state [ 404.119539][ T8702] bridge0: port 1(bridge_slave_0) entered disabled state [ 404.129769][ T8702] bridge_slave_0: entered allmulticast mode [ 404.137148][ T8702] bridge_slave_0: entered promiscuous mode [ 404.190404][ T8702] bridge0: port 2(bridge_slave_1) entered blocking state [ 404.219635][ T8702] bridge0: port 2(bridge_slave_1) entered disabled state [ 404.236623][ T8702] bridge_slave_1: entered allmulticast mode [ 404.249098][ T8702] bridge_slave_1: entered promiscuous mode [ 404.326054][ T8702] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 404.365836][ T8702] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 404.493124][ T8702] team0: Port device team_slave_0 added [ 404.520236][ T8702] team0: Port device team_slave_1 added [ 404.594800][ T8702] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 404.610047][ T8702] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 404.678686][ T8702] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 404.703597][ T8702] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 404.725928][ T8702] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 404.795170][ T8702] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 405.570538][ T8702] hsr_slave_0: entered promiscuous mode [ 405.588687][ T8702] hsr_slave_1: entered promiscuous mode [ 405.663747][ T8848] syzkaller0: entered allmulticast mode [ 407.594880][ T8893] binder: 8892:8893 ioctl c018620c 20000000 returned -22 [ 407.797333][ T8702] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 407.849243][ T8702] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 407.873901][ T8702] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 407.919365][ T8702] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 408.431643][ T8702] 8021q: adding VLAN 0 to HW filter on device bond0 [ 408.501312][ T8702] 8021q: adding VLAN 0 to HW filter on device team0 [ 408.594064][ T8702] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 408.623592][ T8702] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 408.670105][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 408.677405][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 408.737019][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 408.744179][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 409.275956][ T8702] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 409.426020][ T8702] veth0_vlan: entered promiscuous mode [ 409.462299][ T8702] veth1_vlan: entered promiscuous mode [ 409.624391][ T8947] afs: Unknown parameter ']"D&9NӥpeFF&{9@' [ 410.167676][ T8943] ceph: No mds server is up or the cluster is laggy [ 410.175005][ T25] libceph: connect (1)[c::]:6789 error -101 [ 410.179664][ T8702] veth0_macvtap: entered promiscuous mode [ 410.183605][ T25] libceph: mon0 (1)[c::]:6789 connect error [ 410.228543][ T8702] veth1_macvtap: entered promiscuous mode [ 410.286753][ T8702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 410.312777][ T8702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 410.324441][ T8702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 410.345320][ T8702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 410.358486][ T8702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 410.379487][ T8702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 410.424691][ T8702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 410.449776][ T8702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 410.487724][ T8702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 410.517976][ T8702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 410.551785][ T8702] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 410.672820][ T8702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 410.721043][ T8702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 410.756430][ T8702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 410.778384][ T8702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 410.805592][ T8702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 410.839968][ T8702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 410.875190][ T8702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 410.897614][ T8702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 410.931978][ T8702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 410.977495][ T8702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 410.995174][ T8702] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 411.019077][ T8702] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.053403][ T8702] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.065433][ T8702] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.087612][ T8702] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.150830][ T8973] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 411.157411][ T8973] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 411.181160][ T8973] vhci_hcd vhci_hcd.0: Device attached [ 411.233021][ T8974] vhci_hcd: cannot find a urb of seqnum 3 max seqnum 0 [ 411.253837][ T7272] vhci_hcd: stop threads [ 411.258370][ T25] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 411.269753][ T7272] vhci_hcd: release socket [ 411.290463][ T7272] vhci_hcd: disconnect device [ 411.459007][ T7272] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 411.466891][ T7272] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 411.479682][ T25] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 411.498917][ T25] usb 4-1: config 0 has no interfaces? [ 411.508920][ T5360] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 411.538198][ T25] usb 4-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 411.569026][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 411.589551][ T25] usb 4-1: config 0 descriptor?? [ 411.589686][ T7272] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 411.635840][ T7272] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 411.741456][ T5360] usb 1-1: config 0 interface 0 altsetting 44 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 411.760413][ T5360] usb 1-1: config 0 interface 0 altsetting 44 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 411.793289][ T5360] usb 1-1: config 0 interface 0 altsetting 44 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 411.825291][ T5360] usb 1-1: config 0 interface 0 has no altsetting 0 [ 411.844624][ T5360] usb 1-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 411.858860][ T5360] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 411.878444][ T8969] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 411.887027][ T5360] usb 1-1: Product: syz [ 411.892346][ T5360] usb 1-1: Manufacturer: syz [ 411.900345][ T5360] usb 1-1: SerialNumber: syz [ 411.908974][ T8969] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 411.934385][ T5360] usb 1-1: config 0 descriptor?? [ 412.698252][ T8977] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 412.709870][ T5360] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input20 [ 412.723830][ T8994] can: request_module (can-proto-0) failed. [ 412.793468][ T8969] trusted_key: encrypted_key: master key parameter 'g9*pms-H8E$v×' is invalid [ 412.808026][ C0] usbtouchscreen 1-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -1 [ 412.860957][ T8969] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1116'. [ 412.895370][ T5360] usb 4-1: USB disconnect, device number 11 [ 412.918005][ T9000] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1121'. [ 413.336260][ T9005] 9pnet_fd: Insufficient options for proto=fd [ 414.553679][ T5559] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.644995][ T9019] sch_tbf: burst 0 is lower than device lo mtu (14) ! [ 415.088927][ T5360] usb 1-1: USB disconnect, device number 16 [ 415.236605][ T5559] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.334660][ T5559] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.534248][ T5559] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.709054][ T4628] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 415.783982][ T5559] bridge_slave_1: left allmulticast mode [ 415.799666][ T5559] bridge_slave_1: left promiscuous mode [ 415.815691][ T5559] bridge0: port 2(bridge_slave_1) entered disabled state [ 415.866960][ T5559] bridge_slave_0: left allmulticast mode [ 415.886376][ T5559] bridge_slave_0: left promiscuous mode [ 415.899816][ T5222] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 415.910680][ T5222] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 415.923141][ T5559] bridge0: port 1(bridge_slave_0) entered disabled state [ 415.923217][ T5222] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 415.937675][ T4628] usb 5-1: Using ep0 maxpacket: 16 [ 415.945731][ T4628] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 415.961613][ T5222] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 415.969635][ T5222] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 415.977130][ T4628] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 415.990519][ T4628] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 416.002511][ T5222] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 416.020638][ T4628] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 416.034579][ T4628] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 416.044177][ T4628] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 416.052421][ T4628] usb 5-1: Product: syz [ 416.056694][ T4628] usb 5-1: Manufacturer: syz [ 416.061470][ T4628] usb 5-1: SerialNumber: syz [ 416.367640][ T5266] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 417.417049][ T5266] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 417.429994][ T5266] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 417.466977][ T5266] usb 4-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 417.486689][ T5266] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 417.545585][ T5266] usb 4-1: config 0 descriptor?? [ 418.015787][ T5266] hid-thrustmaster 0003:044F:B65D.000A: item fetching failed at offset 5/7 [ 418.054608][ T5266] hid-thrustmaster 0003:044F:B65D.000A: parse failed with error -22 [ 418.082146][ T5222] Bluetooth: hci3: command tx timeout [ 418.084368][ T5266] hid-thrustmaster 0003:044F:B65D.000A: probe with driver hid-thrustmaster failed with error -22 [ 418.241511][ T47] usb 4-1: USB disconnect, device number 12 [ 418.283029][ T5559] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 418.314832][ T5559] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 418.334177][ T5559] bond0 (unregistering): Released all slaves [ 418.675963][ T4628] usb 5-1: USB disconnect, device number 19 [ 419.163614][ T9082] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 419.171147][ T9082] overlayfs: failed to set xattr on upper [ 419.176885][ T9082] overlayfs: ...falling back to redirect_dir=nofollow. [ 419.183834][ T9082] overlayfs: ...falling back to index=off. [ 419.189760][ T9082] overlayfs: ...falling back to uuid=null. [ 419.261336][ T9080] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1144'. [ 419.453088][ T5559] hsr_slave_0: left promiscuous mode [ 419.465516][ T5559] hsr_slave_1: left promiscuous mode [ 419.527100][ T5559] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 419.536040][ T5559] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 419.545560][ T5559] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 419.553236][ T5559] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 419.589399][ T5559] veth1_macvtap: left promiscuous mode [ 419.595006][ T5559] veth0_macvtap: left promiscuous mode [ 419.600952][ T5559] veth1_vlan: left promiscuous mode [ 419.606652][ T5559] veth0_vlan: left promiscuous mode [ 420.012444][ T5268] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 420.206812][ T5222] Bluetooth: hci3: command tx timeout [ 420.772804][ T5268] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 420.819059][ T5268] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 420.858887][ T5268] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 420.896751][ T5268] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 420.913071][ T5268] usb 1-1: SerialNumber: syz [ 421.150595][ T5268] usb 1-1: 0:2 : does not exist [ 421.227595][ T25] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 421.405217][ T5559] team0 (unregistering): Port device team_slave_1 removed [ 421.421546][ T25] usb 5-1: Using ep0 maxpacket: 8 [ 421.459827][ T25] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 421.476028][ T25] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 421.490630][ T25] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 421.527217][ T25] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 421.540253][ T5559] team0 (unregistering): Port device team_slave_0 removed [ 421.547706][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 421.556060][ T25] usb 5-1: Product: syz [ 421.574111][ T25] usb 5-1: Manufacturer: syz [ 421.578874][ T25] usb 5-1: SerialNumber: syz [ 421.605750][ T5268] usb 1-1: USB disconnect, device number 17 [ 422.017386][ T25] usb 5-1: 0:2 : does not exist [ 422.237651][ T5222] Bluetooth: hci3: command tx timeout [ 422.272903][ T25] usb 5-1: USB disconnect, device number 20 [ 422.878257][ T9038] chnl_net:caif_netlink_parms(): no params data found [ 423.345034][ T9038] bridge0: port 1(bridge_slave_0) entered blocking state [ 423.378382][ T9038] bridge0: port 1(bridge_slave_0) entered disabled state [ 423.417658][ T5268] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 423.432713][ T9038] bridge_slave_0: entered allmulticast mode [ 423.441586][ T9038] bridge_slave_0: entered promiscuous mode [ 423.451724][ T9038] bridge0: port 2(bridge_slave_1) entered blocking state [ 423.462286][ T9038] bridge0: port 2(bridge_slave_1) entered disabled state [ 423.470705][ T9038] bridge_slave_1: entered allmulticast mode [ 423.479207][ T9038] bridge_slave_1: entered promiscuous mode [ 423.654052][ T29] audit: type=1326 audit(2000000825.592:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9114 comm="syz.3.1157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97f31779f9 code=0x7ffc0000 [ 424.092472][ T29] audit: type=1326 audit(2000000825.592:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9114 comm="syz.3.1157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97f31779f9 code=0x7ffc0000 [ 424.233759][ T9038] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 424.239538][ T29] audit: type=1326 audit(2000000825.602:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9114 comm="syz.3.1157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f97f31779f9 code=0x7ffc0000 [ 424.277694][ T29] audit: type=1326 audit(2000000825.602:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9114 comm="syz.3.1157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97f31779f9 code=0x7ffc0000 [ 424.299910][ T5268] usb 3-1: Using ep0 maxpacket: 16 [ 424.320450][ T5222] Bluetooth: hci3: command tx timeout [ 424.325110][ T9038] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 424.335627][ T5268] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 424.358921][ T5268] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 424.387560][ T29] audit: type=1326 audit(2000000825.602:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9114 comm="syz.3.1157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97f31779f9 code=0x7ffc0000 [ 424.425255][ T5268] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 424.466471][ T9038] team0: Port device team_slave_0 added [ 424.467518][ T5268] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 424.487541][ T29] audit: type=1326 audit(2000000825.602:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9114 comm="syz.3.1157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f97f31779f9 code=0x7ffc0000 [ 424.515251][ T9038] team0: Port device team_slave_1 added [ 424.537020][ T5268] usb 3-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 424.555341][ T5268] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 424.566350][ T5268] usb 3-1: Product: syz [ 424.576396][ T5268] usb 3-1: Manufacturer: syz [ 424.583889][ T5268] usb 3-1: SerialNumber: syz [ 424.616626][ T5268] usb 3-1: config 0 descriptor?? [ 424.640666][ T9038] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 424.665290][ T9038] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 424.740648][ T9038] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 424.762576][ T9038] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 424.762984][ T5268] mcba_usb 3-1:0.0 can0: couldn't setup read URBs [ 424.797836][ T9038] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 424.807537][ T5268] mcba_usb 3-1:0.0 can0: couldn't start device: -90 [ 424.856267][ T9138] Trying to write to read-only block-device nullb0 [ 424.859538][ T9038] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 424.998856][ T5268] mcba_usb 3-1:0.0: probe with driver mcba_usb failed with error -90 [ 425.073636][ T5268] usb 3-1: USB disconnect, device number 14 [ 425.107429][ T9038] hsr_slave_0: entered promiscuous mode [ 425.171599][ T9038] hsr_slave_1: entered promiscuous mode [ 426.719459][ T9150] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1175'. [ 427.067357][ T9038] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 427.093126][ T9038] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 427.129258][ T9038] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 427.135849][ T9161] kvm: kvm [9160]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0xfe00000000 [ 427.149871][ T9038] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 427.194135][ T9161] kvm: kvm [9160]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0xde00000500 [ 427.242261][ T9161] kvm: kvm [9160]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x27d00000500 [ 427.387585][ T5268] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 427.434102][ T9038] 8021q: adding VLAN 0 to HW filter on device bond0 [ 427.486423][ T9038] 8021q: adding VLAN 0 to HW filter on device team0 [ 427.528830][ T47] bridge0: port 1(bridge_slave_0) entered blocking state [ 427.535977][ T47] bridge0: port 1(bridge_slave_0) entered forwarding state [ 427.608171][ T5268] usb 3-1: Using ep0 maxpacket: 8 [ 427.626709][ T5268] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 427.654456][ T5266] bridge0: port 2(bridge_slave_1) entered blocking state [ 427.661685][ T5266] bridge0: port 2(bridge_slave_1) entered forwarding state [ 427.691972][ T5268] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 427.725563][ T5268] usb 3-1: New USB device found, idVendor=0b0e, idProduct=ffff, bcdDevice= 0.40 [ 427.751442][ T5268] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 427.787751][ T5268] usb 3-1: Product: syz [ 427.806824][ T5268] usb 3-1: Manufacturer: syz [ 427.820353][ T5268] usb 3-1: SerialNumber: syz [ 427.829816][ T9038] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 428.057553][ T5268] usbhid 3-1:1.0: can't add hid device: -22 [ 428.085284][ T5268] usbhid 3-1:1.0: probe with driver usbhid failed with error -22 [ 428.128352][ T5268] usb 3-1: USB disconnect, device number 15 [ 428.176895][ T9181] tun0: tun_chr_ioctl cmd 1074025675 [ 428.184348][ T9181] tun0: persist disabled [ 428.348699][ T9038] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 428.511524][ T9038] veth0_vlan: entered promiscuous mode [ 428.952430][ T9198] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1183'. [ 428.970058][ T9038] veth1_vlan: entered promiscuous mode [ 429.075974][ T9038] veth0_macvtap: entered promiscuous mode [ 429.103907][ T9038] veth1_macvtap: entered promiscuous mode [ 429.190743][ T9038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 429.217496][ T9038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 429.243738][ T9038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 429.297556][ T9038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 429.337663][ T9038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 429.379301][ T9038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 429.389292][ T9038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 429.401226][ T9038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 429.412804][ T9038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 429.425412][ T9038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 429.443864][ T9038] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 429.541887][ T9213] xt_CONNSECMARK: invalid mode: 0 [ 429.694859][ T9038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 429.724604][ T5267] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 429.886214][ T9038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 430.107536][ T9038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 430.147685][ T9038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 430.217968][ T9038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 430.267530][ T5267] usb 4-1: Using ep0 maxpacket: 32 [ 430.275143][ T5267] usb 4-1: config 0 has an invalid interface number: 218 but max is 0 [ 430.283442][ T9038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 430.284507][ T5267] usb 4-1: config 0 has no interface number 0 [ 430.303586][ T5267] usb 4-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=74.07 [ 430.331427][ T5267] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 430.338249][ T9038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 430.354355][ T5267] usb 4-1: Product: syz [ 430.368452][ T5267] usb 4-1: Manufacturer: syz [ 430.377537][ T5267] usb 4-1: SerialNumber: syz [ 430.380894][ T9038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 430.388410][ T5267] usb 4-1: config 0 descriptor?? [ 430.416166][ T9038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 430.454572][ T9038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 430.477153][ T9038] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 430.549973][ T9038] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.568262][ T9038] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.577111][ T9038] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.616864][ T9038] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.742369][ T5268] usb 4-1: USB disconnect, device number 13 [ 430.810325][ T9223] program syz.4.1192 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 430.901308][ T415] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 430.930895][ T415] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 430.990734][ T5559] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 431.018365][ T5559] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 432.734507][ T4628] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 432.961373][ T4628] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 432.988047][ T4628] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 433.051492][ T4628] usb 1-1: New USB device found, idVendor=0eef, idProduct=c002, bcdDevice= 0.00 [ 433.097867][ T4628] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 433.122619][ T4628] usb 1-1: config 0 descriptor?? [ 433.436986][ T5559] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.540857][ T4628] usbhid 1-1:0.0: can't add hid device: -71 [ 433.546900][ T4628] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 433.585853][ T4628] usb 1-1: USB disconnect, device number 18 [ 433.871929][ T5559] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.994596][ T5559] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.120198][ T5559] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.265628][ T5559] bridge_slave_1: left allmulticast mode [ 434.271754][ T5559] bridge_slave_1: left promiscuous mode [ 434.277612][ T5559] bridge0: port 2(bridge_slave_1) entered disabled state [ 434.287397][ T5559] bridge_slave_0: left allmulticast mode [ 434.293692][ T5559] bridge_slave_0: left promiscuous mode [ 434.300835][ T5559] bridge0: port 1(bridge_slave_0) entered disabled state [ 434.535087][ T9260] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1204'. [ 434.760342][ T5360] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 434.923737][ T5224] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 434.950292][ T5224] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 434.958777][ T5360] usb 1-1: Using ep0 maxpacket: 8 [ 434.967399][ T5224] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 434.979942][ T5224] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 434.985907][ T5360] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 434.998283][ T5224] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 435.005708][ T5224] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 435.031490][ T5360] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 435.086957][ T5360] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 435.128053][ T5360] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 435.162129][ T5360] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 435.228089][ T5360] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 435.273559][ T5360] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 435.622995][ T5360] usb 1-1: usb_control_msg returned -32 [ 435.645228][ T5360] usbtmc 1-1:16.0: can't read capabilities [ 435.739770][ T5559] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 435.762078][ T5559] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 435.774464][ T5559] bond0 (unregistering): Released all slaves [ 437.039716][ T5222] Bluetooth: hci3: command tx timeout [ 437.141050][ T5559] hsr_slave_0: left promiscuous mode [ 437.166595][ T5559] hsr_slave_1: left promiscuous mode [ 437.177418][ T5559] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 437.186657][ T5559] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 437.208375][ T5559] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 437.215821][ T5559] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 437.378466][ T5559] veth1_macvtap: left promiscuous mode [ 437.384055][ T5559] veth0_macvtap: left promiscuous mode [ 437.402277][ T5559] veth1_vlan: left promiscuous mode [ 437.418445][ T5559] veth0_vlan: left promiscuous mode [ 437.449609][ T4628] usb 1-1: USB disconnect, device number 19 [ 437.986857][ T5224] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 438.009333][ T5224] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 438.021519][ T5224] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 438.042966][ T5224] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 438.050825][ T5224] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 438.059709][ T9314] 9pnet_fd: p9_fd_create_tcp (9314): problem connecting socket to 127.0.0.1 [ 438.064161][ T5224] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 438.167825][ T4628] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 438.348000][ T4628] usb 1-1: Using ep0 maxpacket: 16 [ 438.362344][ T4628] usb 1-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 7.79 [ 438.381846][ T4628] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 438.406369][ T4628] usb 1-1: Product: syz [ 438.411137][ T4628] usb 1-1: Manufacturer: syz [ 438.421840][ T4628] usb 1-1: SerialNumber: syz [ 438.435931][ T4628] usb 1-1: config 0 descriptor?? [ 438.676726][ T4628] usb 1-1: Limiting number of CPorts to U8_MAX [ 438.708628][ T4628] usb 1-1: Not enough endpoints found in device, aborting! [ 438.709116][ T5268] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 438.783668][ T9314] 9pnet_fd: p9_fd_create_tcp (9314): problem connecting socket to 127.0.0.1 [ 438.807007][ T5559] team0 (unregistering): Port device team_slave_1 removed [ 438.939446][ T9310] nbd: must specify a device to reconfigure [ 438.955623][ T4628] usb 1-1: USB disconnect, device number 20 [ 438.962772][ T5559] team0 (unregistering): Port device team_slave_0 removed [ 438.971291][ T5268] usb 4-1: Using ep0 maxpacket: 8 [ 438.979706][ T5268] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 439.002232][ T5268] usb 4-1: config 0 has no interface number 0 [ 439.017009][ T5268] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 439.032816][ T5268] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 439.060744][ T5268] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 439.086293][ T5268] usb 4-1: config 0 descriptor?? [ 439.110660][ T5268] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 439.118035][ T5222] Bluetooth: hci3: command tx timeout [ 439.396632][ T9322] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 439.409023][ T9322] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 439.836103][ T9328] input: syz0 as /devices/virtual/input/input21 [ 439.958256][ T9330] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 440.158548][ T5222] Bluetooth: hci4: command tx timeout [ 440.193519][ T9267] chnl_net:caif_netlink_parms(): no params data found [ 440.333259][ T1258] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.340749][ T1258] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.424447][ T9267] bridge0: port 1(bridge_slave_0) entered blocking state [ 440.457843][ T9267] bridge0: port 1(bridge_slave_0) entered disabled state [ 440.465081][ T9267] bridge_slave_0: entered allmulticast mode [ 440.510407][ T9267] bridge_slave_0: entered promiscuous mode [ 440.529457][ T9267] bridge0: port 2(bridge_slave_1) entered blocking state [ 440.538965][ T9267] bridge0: port 2(bridge_slave_1) entered disabled state [ 440.556247][ T9267] bridge_slave_1: entered allmulticast mode [ 440.571620][ T9267] bridge_slave_1: entered promiscuous mode [ 440.798855][ T9267] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 440.830730][ T9267] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 441.198412][ T5222] Bluetooth: hci3: command tx timeout [ 441.802644][ T4628] usb 4-1: USB disconnect, device number 14 [ 441.810075][ T9267] team0: Port device team_slave_0 added [ 441.821119][ T9315] chnl_net:caif_netlink_parms(): no params data found [ 441.855429][ T9267] team0: Port device team_slave_1 added [ 441.868848][ T4628] iowarrior 4-1:0.1: I/O-Warror #0 now disconnected [ 442.221162][ T9267] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 442.245441][ T5222] Bluetooth: hci4: command tx timeout [ 442.276768][ T9267] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 443.238449][ T9369] syz.4.1242[9369] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 443.238607][ T9369] syz.4.1242[9369] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 444.195578][ T5222] Bluetooth: hci3: command tx timeout [ 444.238465][ T9267] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 444.284752][ T9267] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 444.292068][ T9267] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 444.327764][ T5222] Bluetooth: hci4: command tx timeout [ 444.352202][ T9267] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 444.741145][ T9315] bridge0: port 1(bridge_slave_0) entered blocking state [ 444.775415][ T9315] bridge0: port 1(bridge_slave_0) entered disabled state [ 444.785330][ T9315] bridge_slave_0: entered allmulticast mode [ 444.798775][ T9315] bridge_slave_0: entered promiscuous mode [ 444.856562][ T9267] hsr_slave_0: entered promiscuous mode [ 444.930423][ T9267] hsr_slave_1: entered promiscuous mode [ 444.957978][ T9315] bridge0: port 2(bridge_slave_1) entered blocking state [ 444.965580][ T9315] bridge0: port 2(bridge_slave_1) entered disabled state [ 445.003527][ T9315] bridge_slave_1: entered allmulticast mode [ 445.017655][ T9315] bridge_slave_1: entered promiscuous mode [ 445.161729][ T9315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 445.229231][ T9315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 445.338331][ T9390] netlink: 'syz.3.1250': attribute type 1 has an invalid length. [ 445.391944][ T9315] team0: Port device team_slave_0 added [ 445.457018][ T9315] team0: Port device team_slave_1 added [ 445.625480][ T9391] Process accounting resumed [ 445.823358][ T9315] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 445.844474][ T9315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 445.942588][ T9315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 445.975531][ T9315] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 445.994326][ T9315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 446.097119][ T9315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 446.407815][ T5222] Bluetooth: hci4: command tx timeout [ 446.556802][ T9315] hsr_slave_0: entered promiscuous mode [ 446.795273][ T9315] hsr_slave_1: entered promiscuous mode [ 446.951261][ T9315] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 447.080827][ T9315] Cannot create hsr debugfs directory [ 447.831448][ T9267] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 447.957728][ T9315] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.011935][ T9267] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 448.032079][ T9267] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 448.068944][ T9267] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 448.133515][ T9315] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.253717][ T9315] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.439659][ T9315] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.639903][ T9421] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1260'. [ 448.646493][ T9267] 8021q: adding VLAN 0 to HW filter on device bond0 [ 448.722805][ T9267] 8021q: adding VLAN 0 to HW filter on device team0 [ 448.759412][ T5268] bridge0: port 1(bridge_slave_0) entered blocking state [ 448.766573][ T5268] bridge0: port 1(bridge_slave_0) entered forwarding state [ 448.796085][ T5268] bridge0: port 2(bridge_slave_1) entered blocking state [ 448.803292][ T5268] bridge0: port 2(bridge_slave_1) entered forwarding state [ 448.990815][ T9315] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 449.030364][ T9315] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 449.062972][ T9315] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 449.104218][ T9315] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 449.408256][ T9315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 449.481498][ T9315] 8021q: adding VLAN 0 to HW filter on device team0 [ 449.549703][ T5267] bridge0: port 1(bridge_slave_0) entered blocking state [ 449.556903][ T5267] bridge0: port 1(bridge_slave_0) entered forwarding state [ 449.581908][ T9267] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 449.612867][ T5267] bridge0: port 2(bridge_slave_1) entered blocking state [ 449.620087][ T5267] bridge0: port 2(bridge_slave_1) entered forwarding state [ 449.815836][ T9267] veth0_vlan: entered promiscuous mode [ 449.886736][ T9267] veth1_vlan: entered promiscuous mode [ 450.025495][ T9267] veth0_macvtap: entered promiscuous mode [ 450.080495][ T9267] veth1_macvtap: entered promiscuous mode [ 450.145734][ T9267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 450.186289][ T9267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 450.208245][ T9267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 450.241874][ T9267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 450.272616][ T9267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 450.307618][ T9267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 450.338778][ T9267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 450.357552][ T9267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 450.377768][ T9267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 450.390689][ T9267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 450.412936][ T9267] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 450.450505][ T9267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 450.474256][ T9267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 450.503356][ T9267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 450.521623][ T9267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 450.535586][ T9267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 450.546805][ T9267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 450.557802][ T9267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 450.569381][ T9267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 450.580083][ T9267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 450.591987][ T9267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 450.604754][ T9267] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 450.636201][ T9445] xt_hashlimit: size too large, truncated to 1048576 [ 450.674408][ T9267] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.684944][ T9445] xt_hashlimit: overflow, try lower: 0/0 [ 450.694758][ T9267] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.718385][ T9267] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.727289][ T9267] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.781610][ T9315] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 451.944413][ T9315] veth0_vlan: entered promiscuous mode [ 452.007749][ T7270] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 452.046195][ T7270] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 452.248085][ T9315] veth1_vlan: entered promiscuous mode [ 452.256990][ T7270] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 452.291397][ T7270] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 452.486483][ T9315] veth0_macvtap: entered promiscuous mode [ 452.539714][ T9315] veth1_macvtap: entered promiscuous mode [ 452.785068][ T9458] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1272'. [ 452.858000][ T9458] bond1: entered allmulticast mode [ 452.924258][ T9459] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 452.957366][ T5360] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 452.993309][ T9459] batadv1: entered allmulticast mode [ 453.005846][ T9459] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 453.049785][ T9315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 453.077765][ T9315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 453.107617][ T9315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 453.118437][ T9315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 453.136060][ T9315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 453.158017][ T9315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 453.178642][ T9315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 453.275328][ T9315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 453.295899][ T9315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 453.337217][ T9315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 453.358252][ T9315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 453.399973][ T9315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 453.431805][ T9315] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 453.445465][ T5360] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 453.462042][ T9315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 453.472882][ T5360] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 453.483638][ T9315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 453.494360][ T5360] usb 5-1: New USB device found, idVendor=2179, idProduct=0053, bcdDevice= 0.00 [ 453.505664][ T9315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 453.516288][ T5360] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 453.525590][ T9315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 453.542117][ T9315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 453.553023][ T9315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 453.562928][ T9315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 453.573622][ T9315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 453.584661][ T9315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 453.595380][ T9315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 453.627156][ T5360] usb 5-1: config 0 descriptor?? [ 453.634067][ T9315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 453.672694][ T9315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 453.684658][ T9315] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 453.720882][ T9315] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.731804][ T9315] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.743389][ T9315] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.752305][ T9315] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.773165][ T9465] netlink: 'syz.0.1274': attribute type 29 has an invalid length. [ 453.843130][ T9465] netlink: 'syz.0.1274': attribute type 29 has an invalid length. [ 453.848035][ T5360] usbhid 5-1:0.0: can't add hid device: -71 [ 453.868300][ T5360] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 453.919946][ T5360] usb 5-1: USB disconnect, device number 21 [ 454.020197][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 454.033341][ T5222] Bluetooth: hci2: Malformed Event: 0x02 [ 454.075083][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 454.142769][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 454.171410][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 454.474555][ T9475] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1219'. [ 454.527582][ T5360] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 454.550114][ T9475] block nbd2: not configured, cannot reconfigure [ 454.718405][ T5360] usb 5-1: Using ep0 maxpacket: 16 [ 454.737424][ T5360] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 454.786588][ T5360] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 454.833174][ T5360] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 454.836391][ T9478] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1278'. [ 454.865331][ T5360] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 454.865383][ T9478] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1278'. [ 454.876024][ T5360] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 454.924769][ T5360] usb 5-1: config 0 descriptor?? [ 455.450790][ T5360] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 455.881413][ T5360] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 455.903328][ T5360] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 455.914542][ T5360] microsoft 0003:045E:07DA.000B: No inputs registered, leaving [ 455.924228][ T5360] microsoft 0003:045E:07DA.000B: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 455.940057][ T5360] microsoft 0003:045E:07DA.000B: no inputs found [ 455.963365][ T5360] microsoft 0003:045E:07DA.000B: could not initialize ff, continuing anyway [ 455.975906][ T5360] usb 5-1: USB disconnect, device number 22 [ 456.132061][ T5557] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.338605][ T5557] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.455332][ T5557] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.574451][ T5557] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.729282][ T5557] bridge_slave_1: left allmulticast mode [ 456.734966][ T5557] bridge_slave_1: left promiscuous mode [ 456.750425][ T5557] bridge0: port 2(bridge_slave_1) entered disabled state [ 456.768283][ T5557] bridge_slave_0: left allmulticast mode [ 456.773955][ T5557] bridge_slave_0: left promiscuous mode [ 456.782690][ T5557] bridge0: port 1(bridge_slave_0) entered disabled state [ 457.576593][ T25] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 457.809306][ T25] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 457.854933][ T5224] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 457.868251][ T5224] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 457.885281][ T5224] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 457.887148][ T25] usb 1-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.40 [ 457.913385][ T5224] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 457.925286][ T5557] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 457.936250][ T5224] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 457.943702][ T5224] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 457.954497][ T5557] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 457.981006][ T5557] bond0 (unregistering): Released all slaves [ 457.986073][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 458.011118][ T25] usb 1-1: Product: syz [ 458.015338][ T25] usb 1-1: Manufacturer: syz [ 458.020412][ T25] usb 1-1: SerialNumber: syz [ 458.031038][ T25] usbhid 1-1:1.0: couldn't find an input interrupt endpoint [ 458.249436][ T5224] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 458.300052][ T5224] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 458.309358][ T5224] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 458.321868][ T5224] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 458.330543][ T5224] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 458.345046][ T5224] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 458.475483][ T25] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 458.578563][ T9491] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 458.587246][ T9491] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 458.689058][ T5269] usb 1-1: USB disconnect, device number 21 [ 458.706228][ T25] usb 5-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 458.749360][ T25] usb 5-1: config 7 has 1 interface, different from the descriptor's value: 2 [ 458.779728][ T25] usb 5-1: New USB device found, idVendor=19d2, idProduct=1275, bcdDevice= 0.84 [ 458.797794][ T25] usb 5-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 458.816435][ T25] usb 5-1: Product: syz [ 458.821013][ T25] usb 5-1: SerialNumber: syz [ 458.856518][ T25] option 5-1:7.0: GSM modem (1-port) converter detected [ 458.917277][ T9510] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1287'. [ 459.032483][ T5557] hsr_slave_0: left promiscuous mode [ 459.050309][ T5557] hsr_slave_1: left promiscuous mode [ 459.080106][ T5557] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 459.088052][ T5557] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 459.116522][ T5557] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 459.155634][ T5557] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 459.216337][ T5557] veth1_macvtap: left promiscuous mode [ 459.224307][ T5557] veth0_macvtap: left promiscuous mode [ 459.236297][ T5557] veth1_vlan: left promiscuous mode [ 459.244248][ T5557] veth0_vlan: left promiscuous mode [ 459.998028][ T5222] Bluetooth: hci3: command tx timeout [ 460.397904][ T5222] Bluetooth: hci5: command tx timeout [ 460.442175][ T5266] usb 5-1: USB disconnect, device number 23 [ 460.478948][ T5266] option 5-1:7.0: device disconnected [ 460.898987][ T5557] team0 (unregistering): Port device team_slave_1 removed [ 461.435976][ T5557] team0 (unregistering): Port device team_slave_0 removed [ 462.093405][ T5222] Bluetooth: hci3: command tx timeout [ 462.480783][ T5222] Bluetooth: hci5: command tx timeout [ 462.734737][ T9516] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 464.159883][ T5222] Bluetooth: hci3: command tx timeout [ 464.366375][ T9501] chnl_net:caif_netlink_parms(): no params data found [ 464.557824][ T5222] Bluetooth: hci5: command tx timeout [ 464.896996][ T9503] chnl_net:caif_netlink_parms(): no params data found [ 465.127398][ T9566] netlink: 'syz.2.1302': attribute type 1 has an invalid length. [ 465.158094][ T9566] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.1302'. [ 465.222759][ T9501] bridge0: port 1(bridge_slave_0) entered blocking state [ 465.231120][ T9501] bridge0: port 1(bridge_slave_0) entered disabled state [ 465.241247][ T9501] bridge_slave_0: entered allmulticast mode [ 465.286670][ T9501] bridge_slave_0: entered promiscuous mode [ 465.308241][ T5267] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 465.361225][ T9501] bridge0: port 2(bridge_slave_1) entered blocking state [ 465.382183][ T9501] bridge0: port 2(bridge_slave_1) entered disabled state [ 465.396785][ T9501] bridge_slave_1: entered allmulticast mode [ 465.410518][ T9501] bridge_slave_1: entered promiscuous mode [ 465.505791][ T9503] bridge0: port 1(bridge_slave_0) entered blocking state [ 465.524231][ T9503] bridge0: port 1(bridge_slave_0) entered disabled state [ 465.537606][ T9503] bridge_slave_0: entered allmulticast mode [ 465.545408][ T9503] bridge_slave_0: entered promiscuous mode [ 465.560547][ T5267] usb 1-1: New USB device found, idVendor=0458, idProduct=7029, bcdDevice=8b.92 [ 465.578817][ T9503] bridge0: port 2(bridge_slave_1) entered blocking state [ 465.587927][ T5267] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 465.607648][ T9503] bridge0: port 2(bridge_slave_1) entered disabled state [ 465.614937][ T5267] usb 1-1: Product: syz [ 465.625082][ T5267] usb 1-1: Manufacturer: syz [ 465.629997][ T9503] bridge_slave_1: entered allmulticast mode [ 465.642611][ T5267] usb 1-1: SerialNumber: syz [ 465.651406][ T9503] bridge_slave_1: entered promiscuous mode [ 465.682359][ T9501] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 465.728725][ T5267] usb 1-1: config 0 descriptor?? [ 465.793247][ T5267] gspca_main: gspca_sn9c20x-2.14.0 probing 0458:7029 [ 465.810320][ T9501] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 466.237906][ T5222] Bluetooth: hci3: command tx timeout [ 466.313361][ T9503] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 466.492881][ T9503] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 466.648205][ T5222] Bluetooth: hci5: command tx timeout [ 466.670074][ T5267] gspca_sn9c20x: Write register 1001 failed -71 [ 466.710355][ T5267] gspca_sn9c20x: Device initialization failed [ 466.716549][ T5267] gspca_sn9c20x 1-1:0.0: probe with driver gspca_sn9c20x failed with error -71 [ 466.743386][ T5267] usb 1-1: USB disconnect, device number 22 [ 466.924422][ T9501] team0: Port device team_slave_0 added [ 467.121815][ T9503] team0: Port device team_slave_0 added [ 467.153676][ T9503] team0: Port device team_slave_1 added [ 467.379971][ T9501] team0: Port device team_slave_1 added [ 467.710927][ T9501] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 467.731187][ T9501] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 467.764719][ T9501] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 467.816845][ T9503] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 467.850721][ T9503] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 467.878810][ T9503] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 467.892064][ T9501] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 467.899439][ T9501] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 467.942780][ T9501] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 467.983457][ T9503] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 468.002157][ T9503] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 468.083679][ T9601] binder: 9600:9601 ioctl c0306201 0 returned -14 [ 468.087911][ T9503] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 468.279308][ T9501] hsr_slave_0: entered promiscuous mode [ 468.308087][ T9501] hsr_slave_1: entered promiscuous mode [ 468.362469][ T9604] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1313'. [ 468.530728][ T9503] hsr_slave_0: entered promiscuous mode [ 468.573300][ T9503] hsr_slave_1: entered promiscuous mode [ 468.597035][ T9503] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 468.608951][ T9503] Cannot create hsr debugfs directory [ 469.308289][ T5268] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 469.368695][ T9503] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.507750][ T5268] usb 5-1: Using ep0 maxpacket: 32 [ 469.519653][ T5268] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 469.549787][ T5268] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 469.617679][ T5268] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 28739, setting to 1024 [ 469.974952][ T9503] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.403730][ T5268] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 470.416502][ T5268] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 470.426774][ T5268] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 470.436507][ T5268] usb 5-1: config 0 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 470.463239][ T5268] usb 5-1: New USB device found, idVendor=2040, idProduct=4901, bcdDevice=47.77 [ 470.475400][ T5268] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 470.560293][ T9503] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.698649][ T5268] usb 5-1: Product: syz [ 470.705210][ T5268] usb 5-1: Manufacturer: syz [ 470.709925][ T5268] usb 5-1: SerialNumber: syz [ 470.728543][ T5268] usb 5-1: config 0 descriptor?? [ 470.734515][ T9616] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 471.366105][ T9503] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 471.496647][ T5268] hdpvr 5-1:0.0: unexpected answer of status request, len -71 [ 471.504958][ T5268] hdpvr 5-1:0.0: device init failed [ 471.511160][ T5268] hdpvr 5-1:0.0: probe with driver hdpvr failed with error -12 [ 471.524731][ T5268] usb 5-1: USB disconnect, device number 24 [ 471.771610][ T9503] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 471.802485][ T9503] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 471.872438][ T9643] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1325'. [ 471.883185][ T9503] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 471.915436][ T9503] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 473.046040][ T9503] 8021q: adding VLAN 0 to HW filter on device bond0 [ 473.127797][ T9501] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 473.148202][ T9501] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 473.181712][ T9501] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 473.232119][ T9501] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 473.373722][ T9503] 8021q: adding VLAN 0 to HW filter on device team0 [ 473.661950][ T4628] bridge0: port 1(bridge_slave_0) entered blocking state [ 473.669301][ T4628] bridge0: port 1(bridge_slave_0) entered forwarding state [ 474.130627][ T4628] bridge0: port 2(bridge_slave_1) entered blocking state [ 474.137817][ T4628] bridge0: port 2(bridge_slave_1) entered forwarding state [ 474.380738][ T9673] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 474.447610][ T47] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 474.641511][ T9501] 8021q: adding VLAN 0 to HW filter on device bond0 [ 474.648575][ T47] usb 5-1: Using ep0 maxpacket: 8 [ 474.667133][ T47] usb 5-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=32.a3 [ 474.698010][ T47] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 474.706147][ T47] usb 5-1: Product: syz [ 474.752619][ T47] usb 5-1: Manufacturer: syz [ 474.757384][ T47] usb 5-1: SerialNumber: syz [ 474.779226][ T9501] 8021q: adding VLAN 0 to HW filter on device team0 [ 474.795538][ T5268] bridge0: port 1(bridge_slave_0) entered blocking state [ 474.802764][ T5268] bridge0: port 1(bridge_slave_0) entered forwarding state [ 474.813799][ T47] usb 5-1: config 0 descriptor?? [ 474.878503][ T5266] bridge0: port 2(bridge_slave_1) entered blocking state [ 474.885709][ T5266] bridge0: port 2(bridge_slave_1) entered forwarding state [ 475.030823][ T47] msi2500 5-1:0.0: Registered as swradio16 [ 475.076666][ T47] msi2500 5-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 475.131983][ T47] usb 5-1: USB disconnect, device number 25 [ 475.161847][ T9501] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 475.315998][ T9503] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 475.653340][ T9503] veth0_vlan: entered promiscuous mode [ 475.685052][ T9503] veth1_vlan: entered promiscuous mode [ 475.864123][ T9503] veth0_macvtap: entered promiscuous mode [ 475.893084][ T9503] veth1_macvtap: entered promiscuous mode [ 475.914170][ T9501] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 475.994985][ T9503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 476.020307][ T9503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 476.043978][ T9503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 476.054798][ T9503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 476.068936][ T9503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 476.083878][ T9503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 476.103398][ T9503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 476.125680][ T9503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 476.138693][ T9503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 476.149740][ T9503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 476.162015][ T9503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 476.178813][ T9503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 476.214638][ T9503] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 476.272344][ T9503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 476.294994][ T9503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 476.309773][ T9503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 476.356915][ T9503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 476.387537][ T9503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 476.399241][ T5268] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 476.423437][ T9503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 476.445094][ T9503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 476.466082][ T9503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 476.478748][ T9503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 476.503502][ T9503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 476.517810][ T9503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 476.542088][ T9503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 476.563623][ T9503] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 476.578157][ T9503] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.587092][ T9503] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.597251][ T9503] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.608190][ T5268] usb 5-1: Using ep0 maxpacket: 8 [ 476.613551][ T9503] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.624551][ T5268] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 476.633669][ T5268] usb 5-1: config 179 has no interface number 0 [ 476.647998][ T5268] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 476.660286][ T5268] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 476.671964][ T5268] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 476.694028][ T5268] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 476.726004][ T5268] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 476.759092][ T5268] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 476.838043][ T9704] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 477.028430][ T9501] veth0_vlan: entered promiscuous mode [ 477.056102][ T5557] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 477.107634][ T5557] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 477.169099][ T5266] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input22 [ 477.268837][ T2942] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 477.270240][ T9501] veth1_vlan: entered promiscuous mode [ 477.288399][ T2942] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 477.532936][ T47] usb 5-1: USB disconnect, device number 26 [ 477.532938][ C0] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 477.548182][ C0] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 477.575521][ T47] xpad 5-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 477.625447][ T9501] veth0_macvtap: entered promiscuous mode [ 477.643214][ T9501] veth1_macvtap: entered promiscuous mode [ 477.713432][ T9501] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 477.745882][ T9501] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 477.786671][ T9501] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 477.815725][ T9501] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 477.863976][ T9501] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 477.903518][ T9501] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 477.928751][ T9501] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 477.980222][ T9501] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 478.056296][ T9501] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 478.139340][ T5224] Bluetooth: hci0: unexpected event for opcode 0x100c [ 478.167416][ T9501] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 478.222111][ T9501] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 478.233864][ T9501] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 478.257772][ T9501] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 478.436152][ T9501] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 479.242950][ T9501] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 479.271919][ T9722] netlink: 'syz.3.1348': attribute type 11 has an invalid length. [ 479.503398][ T9501] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 479.550928][ T9501] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 479.587337][ T9501] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 479.619989][ T9501] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 479.644467][ T9501] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 479.679345][ T9501] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 479.721545][ T9501] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 479.744507][ T9501] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 479.784612][ T9501] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 479.812494][ T9501] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 479.837644][ T9501] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 479.887151][ T9501] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 479.957926][ T9501] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 479.981833][ T9501] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 480.040912][ T9501] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 480.092357][ T9501] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.139187][ T9501] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.171047][ T9501] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.197362][ T9501] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.245351][ T9743] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1355'. [ 481.290572][ T5559] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 481.343890][ T5559] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 481.477248][ T5557] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 481.510412][ T5557] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 481.673217][ T4628] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 481.869898][ T4628] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 481.896155][ T4628] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 481.916989][ T4628] usb 4-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00 [ 481.948528][ T4628] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 481.969167][ T4628] usb 4-1: config 0 descriptor?? [ 483.233690][ T4628] usbhid 4-1:0.0: can't add hid device: -71 [ 483.248192][ T4628] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 483.258919][ T4628] usb 4-1: USB disconnect, device number 15 [ 483.267632][ T5269] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 483.345997][ T35] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.479624][ T5269] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 483.499120][ T5269] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 483.542132][ T35] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.553213][ T5269] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 483.564580][ T5269] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 483.580264][ T5269] usb 5-1: config 0 descriptor?? [ 483.733270][ T35] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.833383][ T35] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.006518][ T35] bridge_slave_1: left allmulticast mode [ 484.012329][ T35] bridge_slave_1: left promiscuous mode [ 484.024009][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 484.049326][ T35] bridge_slave_0: left allmulticast mode [ 484.055504][ T35] bridge_slave_0: left promiscuous mode [ 484.062249][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 484.131832][ T5269] usbhid 5-1:0.0: can't add hid device: -71 [ 484.150158][ T5269] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 484.170963][ T5269] usb 5-1: USB disconnect, device number 27 [ 484.607890][ T9779] Process accounting resumed [ 484.870300][ T5267] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 485.090137][ T5267] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 485.719328][ T5267] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 485.731676][ T5267] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 485.740832][ T5267] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 485.749933][ T5267] usb 3-1: Product: syz [ 485.757110][ T5267] usb 3-1: Manufacturer: syz [ 485.764840][ T5267] usb 3-1: SerialNumber: syz [ 486.013460][ T5224] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 486.025943][ T5224] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 486.045095][ T5224] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 486.059418][ T5224] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 486.082840][ T5224] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 486.092094][ T5224] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 486.094663][ T29] audit: type=1326 audit(2000000888.122:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9799 comm="syz.0.1373" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f50aab779f9 code=0x0 [ 486.343993][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 486.376761][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 486.406637][ T35] bond0 (unregistering): Released all slaves [ 486.568314][ T5268] bridge0: port 1(bridge_slave_0) entered disabled state [ 486.593271][ T9803] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1373'. [ 486.868243][ T5267] cdc_ncm 3-1:1.0: bind() failure [ 486.917715][ T5267] cdc_ncm 3-1:1.1: probe with driver cdc_ncm failed with error -71 [ 486.950080][ T5267] cdc_mbim 3-1:1.1: probe with driver cdc_mbim failed with error -71 [ 486.997742][ T5267] usbtest 3-1:1.1: probe with driver usbtest failed with error -71 [ 487.035143][ T5267] usb 3-1: USB disconnect, device number 16 [ 487.237981][ T35] hsr_slave_0: left promiscuous mode [ 487.248435][ T35] hsr_slave_1: left promiscuous mode [ 487.266145][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 487.284544][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 487.298854][ T5269] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 487.309790][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 487.327511][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 487.364637][ T35] veth1_macvtap: left promiscuous mode [ 487.370660][ T35] veth0_macvtap: left promiscuous mode [ 487.377071][ T35] veth1_vlan: left promiscuous mode [ 487.382608][ T35] veth0_vlan: left promiscuous mode [ 487.487745][ T5269] usb 1-1: Using ep0 maxpacket: 16 [ 487.505091][ T5269] usb 1-1: config index 0 descriptor too short (expected 16456, got 72) [ 487.523751][ T5269] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 487.546324][ T5269] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 487.565428][ T5269] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 487.601385][ T5269] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 487.622584][ T5269] usb 1-1: config 0 has no interface number 0 [ 487.631074][ T9820] misc userio: Can't change port type on an already running userio instance [ 487.848966][ T5269] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 487.860732][ T5269] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 487.871602][ T5269] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 487.882598][ T5269] usb 1-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 487.896527][ T5269] usb 1-1: config 0 interface 125 has no altsetting 0 [ 487.903733][ T5269] usb 1-1: config 0 interface 125 has no altsetting 2 [ 487.980693][ T5269] usb 1-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 488.144033][ T5269] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 488.239528][ T5222] Bluetooth: hci3: command tx timeout [ 488.271939][ T5269] usb 1-1: Product: syz [ 488.363961][ T5269] usb 1-1: Manufacturer: syz [ 488.467986][ T5269] usb 1-1: SerialNumber: syz [ 488.588641][ T5269] usb 1-1: config 0 descriptor?? [ 488.626365][ T5269] usb 1-1: selecting invalid altsetting 2 [ 489.473769][ C1] usb 1-1: async_complete: urb error -71 [ 489.479622][ C1] usb 1-1: async_complete: urb error -71 [ 489.485366][ C1] usb 1-1: async_complete: urb error -71 [ 489.491111][ C1] usb 1-1: async_complete: urb error -71 [ 489.513172][ T5269] get_1284_register: usb error -71 [ 489.532719][ T5269] uss720 1-1:0.125: probe with driver uss720 failed with error -71 [ 489.589033][ T5269] usb 1-1: USB disconnect, device number 23 [ 489.696818][ T35] team0 (unregistering): Port device team_slave_1 removed [ 489.792356][ T35] team0 (unregistering): Port device team_slave_0 removed [ 490.326951][ T5222] Bluetooth: hci3: command tx timeout [ 490.929797][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 491.252956][ T9797] chnl_net:caif_netlink_parms(): no params data found [ 491.530889][ T9861] Bluetooth: MGMT ver 1.23 [ 491.589580][ T9861] Bluetooth: hci3: invalid length 0, exp 2 for type 26 [ 491.715388][ T9797] bridge0: port 1(bridge_slave_0) entered blocking state [ 491.732112][ T9797] bridge0: port 1(bridge_slave_0) entered disabled state [ 491.744432][ T9797] bridge_slave_0: entered allmulticast mode [ 491.752938][ T9797] bridge_slave_0: entered promiscuous mode [ 491.762603][ T9797] bridge0: port 2(bridge_slave_1) entered blocking state [ 491.775181][ T9797] bridge0: port 2(bridge_slave_1) entered disabled state [ 491.788535][ T9797] bridge_slave_1: entered allmulticast mode [ 491.878967][ T9797] bridge_slave_1: entered promiscuous mode [ 492.052846][ T9797] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 492.092262][ T9797] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 492.187804][ T5222] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 492.196750][ T5222] Bluetooth: hci5: Injecting HCI hardware error event [ 492.251474][ T5224] Bluetooth: hci5: hardware error 0x00 [ 492.513010][ T5222] Bluetooth: hci3: command tx timeout [ 493.432143][ T9797] team0: Port device team_slave_0 added [ 493.962538][ T9797] team0: Port device team_slave_1 added [ 494.257787][ T9797] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 494.279481][ T9797] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 494.318598][ T5224] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 494.361806][ T9797] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 494.391888][ T9797] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 494.403325][ T9797] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 494.467611][ T9797] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 494.557798][ T5224] Bluetooth: hci3: command tx timeout [ 494.576996][ T9907] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 494.624495][ T9797] hsr_slave_0: entered promiscuous mode [ 494.669594][ T9797] hsr_slave_1: entered promiscuous mode [ 494.891217][ T9907] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 495.831428][ T9797] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 495.851295][ T9797] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 495.871835][ T9797] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 495.910998][ T9797] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 495.926626][ T9925] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1413'. [ 496.463173][ T9797] 8021q: adding VLAN 0 to HW filter on device bond0 [ 496.571551][ T9936] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 496.584325][ T9936] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 497.249601][ T9797] 8021q: adding VLAN 0 to HW filter on device team0 [ 497.343832][ T4628] bridge0: port 1(bridge_slave_0) entered blocking state [ 497.351101][ T4628] bridge0: port 1(bridge_slave_0) entered forwarding state [ 497.406802][ T4628] bridge0: port 2(bridge_slave_1) entered blocking state [ 497.414114][ T4628] bridge0: port 2(bridge_slave_1) entered forwarding state [ 497.587940][ T59] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 498.394785][ T59] usb 1-1: Using ep0 maxpacket: 16 [ 498.406762][ T59] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 498.440900][ T59] usb 1-1: config 0 has no interface number 0 [ 498.453998][ T59] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 498.501571][ T59] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 498.553031][ T59] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 498.582764][ T59] usb 1-1: Product: syz [ 498.586971][ T59] usb 1-1: SerialNumber: syz [ 498.618521][ T59] usb 1-1: config 0 descriptor?? [ 498.640522][ T59] usbhid 1-1:0.8: couldn't find an input interrupt endpoint [ 498.779206][ T9973] overlay: Unknown parameter 'fowner<00000000000000000000' [ 498.803355][ T9797] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 498.858906][ T4628] usb 1-1: USB disconnect, device number 24 [ 498.991641][ T9797] veth0_vlan: entered promiscuous mode [ 499.009756][ T9969] kvm: kvm [9968]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x11e) = 0xbe702111 [ 499.019847][ T9797] veth1_vlan: entered promiscuous mode [ 499.084755][ T9797] veth0_macvtap: entered promiscuous mode [ 499.110286][ T9797] veth1_macvtap: entered promiscuous mode [ 499.166414][ T9797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 499.186482][ T9797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 499.200437][ T9797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 499.217931][ T9797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 499.229232][ T9797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 499.247534][ T9797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 499.268857][ T9797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 499.285698][ T9797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 499.301671][ T9797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 499.320944][ T9797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 499.335472][ T9797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 499.356316][ T9797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 499.370134][ T9797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 499.391980][ T9797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 499.411873][ T9797] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 499.436242][ T9797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 499.463048][ T9797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 499.511408][ T9797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 499.560162][ T9797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 499.623867][ T9797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 499.677578][ T9797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 499.736051][ T9797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 499.797860][ T9797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 500.280064][ T9797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 500.448129][ T9797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 500.481786][ T9797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 500.529990][ T9797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 500.570596][ T9797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 500.570624][ T9797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 500.586590][ T9797] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 500.623311][ T9797] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.623346][ T9797] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.623371][ T9797] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.623394][ T9797] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.796317][ T9987] xt_hashlimit: Unknown mode mask EB0D38F6, kernel too old? [ 500.823412][ T1111] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 500.823437][ T1111] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 500.980038][ T8291] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 500.980062][ T8291] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 501.522639][T10009] netlink: 'syz.2.1435': attribute type 11 has an invalid length. [ 501.657817][ T5267] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 501.763297][ T1258] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.769821][ T1258] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.858638][ T5267] usb 1-1: Using ep0 maxpacket: 32 [ 501.886634][ T5267] usb 1-1: New USB device found, idVendor=0421, idProduct=04d8, bcdDevice=6a.33 [ 501.906688][ T5267] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 501.920465][ T5267] usb 1-1: config 0 descriptor?? [ 501.932293][ T5267] usb 1-1: bad CDC descriptors [ 501.941437][ T5267] cdc_acm 1-1:0.0: Zero length descriptor references [ 501.949539][ T5267] cdc_acm 1-1:0.0: probe with driver cdc_acm failed with error -22 [ 502.020874][ T5266] usb 5-1: new low-speed USB device number 28 using dummy_hcd [ 502.183293][ T47] usb 1-1: USB disconnect, device number 25 [ 502.229769][ T5266] usb 5-1: config index 0 descriptor too short (expected 6427, got 27) [ 502.258506][ T5266] usb 5-1: config 0 has an invalid interface number: 21 but max is 0 [ 502.286151][ T5266] usb 5-1: config 0 has no interface number 0 [ 502.296970][ T5266] usb 5-1: config 0 interface 21 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 502.317721][ T5266] usb 5-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 502.331640][ T5266] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 502.356519][ T5266] usb 5-1: config 0 descriptor?? [ 502.931066][ T415] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.515530][ T415] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.655058][ T415] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.751994][ T415] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.922110][ T415] bridge_slave_1: left allmulticast mode [ 503.928296][ T415] bridge_slave_1: left promiscuous mode [ 503.934120][ T415] bridge0: port 2(bridge_slave_1) entered disabled state [ 503.944066][ T415] bridge_slave_0: left allmulticast mode [ 503.950294][ T415] bridge_slave_0: left promiscuous mode [ 503.956245][ T415] bridge0: port 1(bridge_slave_0) entered disabled state [ 505.249443][ T5267] usb 5-1: USB disconnect, device number 28 [ 506.352249][ T5222] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 506.367848][ T5222] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 506.385733][ T5222] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 506.418592][ T5222] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 506.426720][ T5222] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 506.434698][ T5222] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 506.531067][ T415] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 506.564885][ T415] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 506.593114][ T415] bond0 (unregistering): Released all slaves [ 508.620191][ T5222] Bluetooth: hci3: command tx timeout [ 509.718021][ T5330] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 509.918256][ T5330] usb 5-1: Using ep0 maxpacket: 32 [ 510.009973][ T5330] usb 5-1: New USB device found, idVendor=0b95, idProduct=2791, bcdDevice= d.2d [ 510.047759][ T5330] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 510.055814][ T5330] usb 5-1: Product: syz [ 510.071151][ T5330] usb 5-1: Manufacturer: syz [ 510.075806][ T5330] usb 5-1: SerialNumber: syz [ 510.368987][ T5330] aqc111 5-1:1.0: probe with driver aqc111 failed with error -22 [ 510.446913][ T5330] usb 5-1: USB disconnect, device number 29 [ 510.517204][ T415] hsr_slave_0: left promiscuous mode [ 510.528929][ T415] hsr_slave_1: left promiscuous mode [ 510.558184][ T415] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 510.575984][ T415] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 510.797906][ T5222] Bluetooth: hci3: command tx timeout [ 510.848932][ T415] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 510.890016][ T415] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 511.044554][ T415] veth1_macvtap: left promiscuous mode [ 511.052090][ T415] veth0_macvtap: left promiscuous mode [ 511.057911][ T415] veth1_vlan: left promiscuous mode [ 511.064908][ T415] veth0_vlan: left promiscuous mode [ 511.305971][T10101] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1461'. [ 512.470531][ T415] team0 (unregistering): Port device team_slave_1 removed [ 512.600631][ T415] team0 (unregistering): Port device team_slave_0 removed [ 512.877937][ T5222] Bluetooth: hci3: command tx timeout [ 513.679319][T10106] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 513.831017][T10058] chnl_net:caif_netlink_parms(): no params data found [ 514.280428][ T5360] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 514.293141][T10058] bridge0: port 1(bridge_slave_0) entered blocking state [ 514.320771][T10058] bridge0: port 1(bridge_slave_0) entered disabled state [ 514.347805][T10058] bridge_slave_0: entered allmulticast mode [ 514.365662][T10058] bridge_slave_0: entered promiscuous mode [ 514.388623][T10058] bridge0: port 2(bridge_slave_1) entered blocking state [ 514.406172][T10058] bridge0: port 2(bridge_slave_1) entered disabled state [ 514.427405][T10058] bridge_slave_1: entered allmulticast mode [ 514.435538][T10058] bridge_slave_1: entered promiscuous mode [ 514.481998][ T5360] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 514.497883][ T5330] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 514.527207][ T5360] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 514.556583][ T5360] usb 1-1: New USB device found, idVendor=0b05, idProduct=1822, bcdDevice= 0.00 [ 514.587006][ T5360] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 514.597996][T10058] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 514.624548][ T5360] usb 1-1: config 0 descriptor?? [ 514.633009][T10058] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 514.799296][ T5330] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 514.819368][ T5330] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 514.831711][ T5330] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 514.846167][ T5330] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 515.458191][ T5222] Bluetooth: hci3: command tx timeout [ 515.572757][ T5330] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 515.603585][ T5330] usb 5-1: config 0 descriptor?? [ 515.640889][T10058] team0: Port device team_slave_0 added [ 515.649742][T10126] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 515.682061][T10058] team0: Port device team_slave_1 added [ 515.812441][ T5360] asus 0003:0B05:1822.000C: item fetching failed at offset 5/7 [ 515.845412][ T5360] asus 0003:0B05:1822.000C: Asus hid parse failed: -22 [ 515.855609][T10058] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 515.884140][T10058] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 515.885515][ T5360] asus 0003:0B05:1822.000C: probe with driver asus failed with error -22 [ 515.927055][T10058] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 516.058048][T10137] xt_socket: unknown flags 0x8 [ 516.069826][T10137] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 516.178892][T10058] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 516.211007][T10058] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 516.334826][T10058] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 516.918457][T10058] hsr_slave_0: entered promiscuous mode [ 516.940216][T10058] hsr_slave_1: entered promiscuous mode [ 517.177230][ T5330] plantronics 0003:047F:FFFF.000D: unknown main item tag 0xd [ 517.198848][ T5330] plantronics 0003:047F:FFFF.000D: No inputs registered, leaving [ 517.233969][ T5360] usb 1-1: USB disconnect, device number 26 [ 517.240254][ T5330] plantronics 0003:047F:FFFF.000D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 517.280855][ T5330] usb 5-1: USB disconnect, device number 30 [ 517.658561][ T29] audit: type=1800 audit(2000000919.692:199): pid=10149 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.0.1474" name="/" dev="fuse" ino=1 res=0 errno=0 [ 518.209835][T10058] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 518.283919][T10058] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 518.339146][T10058] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 518.387640][T10058] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 518.663462][T10058] 8021q: adding VLAN 0 to HW filter on device bond0 [ 518.668231][ T47] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 518.752416][T10058] 8021q: adding VLAN 0 to HW filter on device team0 [ 518.781426][ T5267] bridge0: port 1(bridge_slave_0) entered blocking state [ 518.788734][ T5267] bridge0: port 1(bridge_slave_0) entered forwarding state [ 518.833224][ T5267] bridge0: port 2(bridge_slave_1) entered blocking state [ 518.840424][ T5267] bridge0: port 2(bridge_slave_1) entered forwarding state [ 518.921878][ T47] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 518.945435][T10058] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 518.971000][ T47] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 65535, setting to 64 [ 518.985311][ T47] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 518.993251][T10058] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 518.994968][ T47] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 519.044602][ T5360] usb 3-1: new full-speed USB device number 17 using dummy_hcd [ 519.067157][T10154] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 519.107832][T10154] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 519.124252][ T47] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 519.253395][ T5360] usb 3-1: not running at top speed; connect to a high speed hub [ 519.273584][ T5360] usb 3-1: config 1 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 519.311055][ T5360] usb 3-1: config 1 interface 0 has no altsetting 0 [ 519.338630][ T5360] usb 3-1: New USB device found, idVendor=046d, idProduct=c29a, bcdDevice= 0.40 [ 519.358560][ T5360] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 519.386986][ T5360] usb 3-1: Product: 囋✼郓ᷣ쾽䤇Ó⯛葴믰ꮘ睢 [ 519.388390][T10058] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 519.404061][ T5360] usb 3-1: Manufacturer: Ь [ 519.410861][ T5360] usb 3-1: SerialNumber: 鋏슣 컓鞤昜ኚ誽젋Қ嵦曂熨璊ꃎꞧ欍㜶ꢒ䡔駌࠭놶昄㳐笑㏉濋筞䲵呻萷橴烗际鑦␵ꏯ੊퓰稏췭⦛炈霢⇢摸 [ 519.539449][T10058] veth0_vlan: entered promiscuous mode [ 519.560078][T10058] veth1_vlan: entered promiscuous mode [ 519.606847][ T5266] usb 4-1: USB disconnect, device number 16 [ 519.638146][T10058] veth0_macvtap: entered promiscuous mode [ 519.662995][T10156] kernel read not supported for file /  (pid: 10156 comm: syz.2.1480) [ 519.673300][T10058] veth1_macvtap: entered promiscuous mode [ 519.682045][ T29] audit: type=1800 audit(2000000921.722:200): pid=10156 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.1480" name=2001 dev="mqueue" ino=39853 res=0 errno=0 [ 519.696663][ T5360] usbhid 3-1:1.0: can't add hid device: -71 [ 519.743736][ T5360] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 519.765565][ T5360] usb 3-1: USB disconnect, device number 17 [ 519.790546][T10058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 519.814147][T10058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 519.847373][T10058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 519.861522][T10058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 519.872491][T10058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 519.887834][T10058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 519.902587][T10058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 519.923316][T10058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 519.941898][T10058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 519.979590][T10058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 520.010075][T10058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 520.034557][T10058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 520.057027][T10058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 520.071049][T10058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 520.093196][T10058] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 520.134819][T10058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 520.155938][T10058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 520.172499][T10058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 520.183272][T10058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 520.194312][T10058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 520.216176][T10058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 520.226354][T10058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 520.244986][T10058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 520.260992][T10058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 520.273571][T10058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 520.283571][T10058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 520.305253][T10058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 520.318953][ T5267] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 520.338834][T10058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 520.358439][T10058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 520.387020][T10058] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 520.421310][T10058] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 520.441543][T10058] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 520.477571][T10058] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 520.506717][T10058] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 520.527863][ T5267] usb 5-1: Using ep0 maxpacket: 32 [ 520.538713][ T5267] usb 5-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 520.563651][ T5267] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 520.586143][ T5267] usb 5-1: Product: syz [ 520.635834][ T5267] usb 5-1: Manufacturer: syz [ 520.676627][ T5267] usb 5-1: SerialNumber: syz [ 520.744575][ T5267] usb 5-1: config 0 descriptor?? [ 521.382047][T10186] ntfs3: Bad value for 'gid' [ 521.442366][ T7270] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 521.452453][T10186] ntfs3: Bad value for 'gid' [ 521.478600][ T7270] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 521.577935][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 521.593556][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 521.608720][ T5267] airspy 5-1:0.0: Board ID: 00 [ 521.617923][ T5267] airspy 5-1:0.0: Firmware version: [ 521.841291][ T5267] airspy 5-1:0.0: usb_control_msg() failed -71 request 11 [ 521.857743][ T5267] airspy 5-1:0.0: Registered as swradio16 [ 521.871956][ T5267] airspy 5-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 521.910249][ T5267] usb 5-1: USB disconnect, device number 31 [ 521.913875][T10195] Cannot find set identified by id 0 to match [ 522.574849][T10201] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 524.947344][T10224] netlink: zone id is out of range [ 525.017563][ T5360] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 525.040656][T10224] netlink: set zone limit has 4 unknown bytes [ 525.197961][ T5360] usb 1-1: Using ep0 maxpacket: 16 [ 525.526383][ T5360] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 525.852741][ T5360] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 525.877365][ T5360] usb 1-1: config 1 has no interface number 1 [ 525.884951][ T5360] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 527.465747][ T5360] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 527.536823][ T5360] usb 1-1: string descriptor 0 read error: -71 [ 527.566910][ T5360] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 527.607756][ T5360] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 527.624135][ T5360] usb 1-1: can't set config #1, error -71 [ 527.797127][ T5360] usb 1-1: USB disconnect, device number 27 [ 528.635435][ T7272] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.858444][ T7272] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 529.035449][ T7272] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 529.156237][ T7272] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 529.399030][ T7272] bridge_slave_1: left allmulticast mode [ 529.404724][ T7272] bridge_slave_1: left promiscuous mode [ 529.421223][ T7272] bridge0: port 2(bridge_slave_1) entered disabled state [ 529.477152][ T7272] bridge_slave_0: left allmulticast mode [ 529.497704][ T7272] bridge_slave_0: left promiscuous mode [ 529.503856][ T7272] bridge0: port 1(bridge_slave_0) entered disabled state [ 529.571281][ T7272] bridge_slave_1: left allmulticast mode [ 529.576994][ T7272] bridge_slave_1: left promiscuous mode [ 529.593552][ T7272] bridge0: port 2(bridge_slave_1) entered disabled state [ 529.633514][ T7272] bridge_slave_0: left allmulticast mode [ 529.647702][ T7272] bridge_slave_0: left promiscuous mode [ 529.653703][ T7272] bridge0: port 1(bridge_slave_0) entered disabled state [ 530.363058][ T5222] BUG: sleeping function called from invalid context at kernel/locking/mutex.c:585 [ 530.375450][ T5222] in_atomic(): 0, irqs_disabled(): 0, non_block: 0, pid: 5222, name: kworker/u9:4 [ 530.385008][ T5222] preempt_count: 0, expected: 0 [ 530.390446][ T5222] RCU nest depth: 1, expected: 0 [ 530.395473][ T5222] 4 locks held by kworker/u9:4/5222: [ 530.410841][ T5222] #0: ffff88802e1ec148 ((wq_completion)hci2#2){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 530.426698][ T5222] #1: ffffc900036cfd00 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 530.439433][ T5222] #2: ffff8880120f0078 (&hdev->lock){+.+.}-{3:3}, at: hci_le_create_big_complete_evt+0xcf/0xae0 [ 530.450471][ T5222] #3: ffffffff8e7377a0 (rcu_read_lock){....}-{1:2}, at: hci_le_create_big_complete_evt+0xdb/0xae0 [ 530.461916][ T5222] CPU: 0 UID: 0 PID: 5222 Comm: kworker/u9:4 Not tainted 6.11.0-rc1-syzkaller-00154-gc0ecd6388360 #0 [ 530.473010][ T5222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 530.483137][ T5222] Workqueue: hci2 hci_rx_work [ 530.487852][ T5222] Call Trace: [ 530.491150][ T5222] [ 530.494084][ T5222] dump_stack_lvl+0x241/0x360 [ 530.498782][ T5222] ? __pfx_dump_stack_lvl+0x10/0x10 [ 530.504117][ T5222] ? __pfx__printk+0x10/0x10 [ 530.509162][ T5222] __might_resched+0x5d4/0x780 [ 530.513938][ T5222] ? __mutex_lock+0x112/0xd70 [ 530.518670][ T5222] ? __pfx___might_resched+0x10/0x10 [ 530.523974][ T5222] __mutex_lock+0xc1/0xd70 [ 530.528417][ T5222] ? __pfx_lock_acquire+0x10/0x10 [ 530.533617][ T5222] ? hci_le_create_big_complete_evt+0x3d9/0xae0 [ 530.539915][ T5222] ? __pfx___mutex_lock+0x10/0x10 [ 530.544972][ T5222] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 530.550968][ T5222] ? skb_pull_data+0x112/0x230 [ 530.555740][ T5222] ? hci_conn_set_handle+0x9a/0x270 [ 530.560949][ T5222] hci_le_create_big_complete_evt+0x3d9/0xae0 [ 530.567025][ T5222] ? irqentry_exit+0x63/0x90 [ 530.571620][ T5222] ? hci_le_create_big_complete_evt+0xdb/0xae0 [ 530.577948][ T5222] ? __pfx_hci_le_create_big_complete_evt+0x10/0x10 [ 530.584540][ T5222] ? __pfx_hci_le_create_big_complete_evt+0x10/0x10 [ 530.591131][ T5222] ? skb_pull_data+0x105/0x230 [ 530.595895][ T5222] ? hci_le_meta_evt+0x366/0x580 [ 530.600884][ T5222] hci_event_packet+0xa55/0x1540 [ 530.605835][ T5222] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 530.611132][ T5222] ? __pfx_hci_event_packet+0x10/0x10 [ 530.616511][ T5222] ? do_raw_spin_unlock+0x13c/0x8b0 [ 530.621778][ T5222] ? hci_send_to_monitor+0xd8/0x7f0 [ 530.626984][ T5222] ? kcov_remote_start+0x9e/0x7e0 [ 530.632026][ T5222] hci_rx_work+0x3e8/0xca0 [ 530.636448][ T5222] ? process_scheduled_works+0x945/0x1830 [ 530.642224][ T5222] process_scheduled_works+0xa2c/0x1830 [ 530.648145][ T5222] ? __pfx_process_scheduled_works+0x10/0x10 [ 530.654149][ T5222] ? assign_work+0x364/0x3d0 [ 530.658771][ T5222] worker_thread+0x86d/0xd40 [ 530.663375][ T5222] ? __kthread_parkme+0x169/0x1d0 [ 530.668409][ T5222] ? __pfx_worker_thread+0x10/0x10 [ 530.673526][ T5222] kthread+0x2f0/0x390 [ 530.677595][ T5222] ? __pfx_worker_thread+0x10/0x10 [ 530.682723][ T5222] ? __pfx_kthread+0x10/0x10 [ 530.687373][ T5222] ret_from_fork+0x4b/0x80 [ 530.691801][ T5222] ? __pfx_kthread+0x10/0x10 [ 530.696391][ T5222] ret_from_fork_asm+0x1a/0x30 [ 530.701174][ T5222] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 530.717889][ T5222] [ 530.720271][ T5222] ============================= [ 530.725128][ T5222] [ BUG: Invalid wait context ] [ 530.729986][ T5222] 6.11.0-rc1-syzkaller-00154-gc0ecd6388360 #0 Tainted: G W [ 530.738563][ T5222] ----------------------------- [ 530.743395][ T5222] kworker/u9:4/5222 is trying to lock: [ 530.748837][ T5222] ffffffff8fbd95a8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_le_create_big_complete_evt+0x3d9/0xae0 [ 530.759438][ T5222] other info that might help us debug this: [ 530.765313][ T5222] context-{4:4} [ 530.768755][ T5222] 4 locks held by kworker/u9:4/5222: [ 530.774023][ T5222] #0: ffff88802e1ec148 ((wq_completion)hci2#2){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 530.784987][ T5222] #1: ffffc900036cfd00 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 530.796991][ T5222] #2: ffff8880120f0078 (&hdev->lock){+.+.}-{3:3}, at: hci_le_create_big_complete_evt+0xcf/0xae0 [ 530.807533][ T5222] #3: ffffffff8e7377a0 (rcu_read_lock){....}-{1:2}, at: hci_le_create_big_complete_evt+0xdb/0xae0 [ 530.818274][ T5222] stack backtrace: [ 530.821984][ T5222] CPU: 0 UID: 0 PID: 5222 Comm: kworker/u9:4 Tainted: G W 6.11.0-rc1-syzkaller-00154-gc0ecd6388360 #0 [ 530.834346][ T5222] Tainted: [W]=WARN [ 530.838150][ T5222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 530.848214][ T5222] Workqueue: hci2 hci_rx_work [ 530.852920][ T5222] Call Trace: [ 530.856198][ T5222] [ 530.859134][ T5222] dump_stack_lvl+0x241/0x360 [ 530.863858][ T5222] ? __pfx_dump_stack_lvl+0x10/0x10 [ 530.869068][ T5222] ? __pfx__printk+0x10/0x10 [ 530.873753][ T5222] __lock_acquire+0x153b/0x2040 [ 530.878608][ T5222] lock_acquire+0x1ed/0x550 [ 530.883112][ T5222] ? hci_le_create_big_complete_evt+0x3d9/0xae0 [ 530.889525][ T5222] ? __pfx_lock_acquire+0x10/0x10 [ 530.894589][ T5222] ? __mutex_lock+0x112/0xd70 [ 530.899282][ T5222] ? __pfx___might_resched+0x10/0x10 [ 530.904659][ T5222] __mutex_lock+0x136/0xd70 [ 530.909247][ T5222] ? hci_le_create_big_complete_evt+0x3d9/0xae0 [ 530.915533][ T5222] ? __pfx_lock_acquire+0x10/0x10 [ 530.920558][ T5222] ? hci_le_create_big_complete_evt+0x3d9/0xae0 [ 530.926844][ T5222] ? __pfx___mutex_lock+0x10/0x10 [ 530.931868][ T5222] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 530.937845][ T5222] ? skb_pull_data+0x112/0x230 [ 530.942639][ T5222] ? hci_conn_set_handle+0x9a/0x270 [ 530.949444][ T5222] hci_le_create_big_complete_evt+0x3d9/0xae0 [ 530.956492][ T5222] ? irqentry_exit+0x63/0x90 [ 530.961104][ T5222] ? hci_le_create_big_complete_evt+0xdb/0xae0 [ 530.967269][ T5222] ? __pfx_hci_le_create_big_complete_evt+0x10/0x10 [ 530.973853][ T5222] ? __pfx_hci_le_create_big_complete_evt+0x10/0x10 [ 530.980617][ T5222] ? skb_pull_data+0x105/0x230 [ 530.985382][ T5222] ? hci_le_meta_evt+0x366/0x580 [ 530.990408][ T5222] hci_event_packet+0xa55/0x1540 [ 530.995439][ T5222] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 531.000919][ T5222] ? __pfx_hci_event_packet+0x10/0x10 [ 531.006290][ T5222] ? do_raw_spin_unlock+0x13c/0x8b0 [ 531.011618][ T5222] ? hci_send_to_monitor+0xd8/0x7f0 [ 531.016865][ T5222] ? kcov_remote_start+0x9e/0x7e0 [ 531.021920][ T5222] hci_rx_work+0x3e8/0xca0 [ 531.026332][ T5222] ? process_scheduled_works+0x945/0x1830 [ 531.032045][ T5222] process_scheduled_works+0xa2c/0x1830 [ 531.037592][ T5222] ? __pfx_process_scheduled_works+0x10/0x10 [ 531.043567][ T5222] ? assign_work+0x364/0x3d0 [ 531.048159][ T5222] worker_thread+0x86d/0xd40 [ 531.052793][ T5222] ? __kthread_parkme+0x169/0x1d0 [ 531.057902][ T5222] ? __pfx_worker_thread+0x10/0x10 [ 531.063011][ T5222] kthread+0x2f0/0x390 [ 531.067067][ T5222] ? __pfx_worker_thread+0x10/0x10 [ 531.072179][ T5222] ? __pfx_kthread+0x10/0x10 [ 531.076763][ T5222] ret_from_fork+0x4b/0x80 [ 531.081177][ T5222] ? __pfx_kthread+0x10/0x10 [ 531.085761][ T5222] ret_from_fork_asm+0x1a/0x30 [ 531.090531][ T5222] [ 531.304587][ T5222] ================================================================== [ 531.313232][ T5222] BUG: KASAN: slab-use-after-free in hci_le_create_big_complete_evt+0x383/0xae0 [ 531.322288][ T5222] Read of size 8 at addr ffff888012af4000 by task kworker/u9:4/5222 [ 531.330297][ T5222] [ 531.332638][ T5222] CPU: 0 UID: 0 PID: 5222 Comm: kworker/u9:4 Tainted: G W 6.11.0-rc1-syzkaller-00154-gc0ecd6388360 #0 [ 531.345046][ T5222] Tainted: [W]=WARN [ 531.348855][ T5222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 531.358990][ T5222] Workqueue: hci2 hci_rx_work [ 531.363665][ T5222] Call Trace: [ 531.366936][ T5222] [ 531.369862][ T5222] dump_stack_lvl+0x241/0x360 [ 531.374543][ T5222] ? __pfx_dump_stack_lvl+0x10/0x10 [ 531.379737][ T5222] ? __pfx__printk+0x10/0x10 [ 531.384324][ T5222] ? _printk+0xd5/0x120 [ 531.388566][ T5222] ? __virt_addr_valid+0x183/0x530 [ 531.393668][ T5222] ? __virt_addr_valid+0x183/0x530 [ 531.398774][ T5222] print_report+0x169/0x550 [ 531.403271][ T5222] ? __virt_addr_valid+0x183/0x530 [ 531.408470][ T5222] ? __virt_addr_valid+0x183/0x530 [ 531.413578][ T5222] ? __virt_addr_valid+0x45f/0x530 [ 531.418738][ T5222] ? __phys_addr+0xba/0x170 [ 531.423235][ T5222] ? hci_le_create_big_complete_evt+0x383/0xae0 [ 531.429565][ T5222] kasan_report+0x143/0x180 [ 531.434075][ T5222] ? hci_le_create_big_complete_evt+0x383/0xae0 [ 531.440319][ T5222] hci_le_create_big_complete_evt+0x383/0xae0 [ 531.446385][ T5222] ? irqentry_exit+0x63/0x90 [ 531.450976][ T5222] ? hci_le_create_big_complete_evt+0xdb/0xae0 [ 531.457230][ T5222] ? __pfx_hci_le_create_big_complete_evt+0x10/0x10 [ 531.463818][ T5222] ? __pfx_hci_le_create_big_complete_evt+0x10/0x10 [ 531.470401][ T5222] ? skb_pull_data+0x105/0x230 [ 531.475202][ T5222] ? hci_le_meta_evt+0x366/0x580 [ 531.480168][ T5222] hci_event_packet+0xa55/0x1540 [ 531.485120][ T5222] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 531.490405][ T5222] ? __pfx_hci_event_packet+0x10/0x10 [ 531.495776][ T5222] ? do_raw_spin_unlock+0x13c/0x8b0 [ 531.500977][ T5222] ? hci_send_to_monitor+0xd8/0x7f0 [ 531.506176][ T5222] ? kcov_remote_start+0x9e/0x7e0 [ 531.511204][ T5222] hci_rx_work+0x3e8/0xca0 [ 531.515617][ T5222] ? process_scheduled_works+0x945/0x1830 [ 531.521342][ T5222] process_scheduled_works+0xa2c/0x1830 [ 531.526909][ T5222] ? __pfx_process_scheduled_works+0x10/0x10 [ 531.532918][ T5222] ? assign_work+0x364/0x3d0 [ 531.537515][ T5222] worker_thread+0x86d/0xd40 [ 531.542172][ T5222] ? __kthread_parkme+0x169/0x1d0 [ 531.547204][ T5222] ? __pfx_worker_thread+0x10/0x10 [ 531.552314][ T5222] kthread+0x2f0/0x390 [ 531.556637][ T5222] ? __pfx_worker_thread+0x10/0x10 [ 531.561750][ T5222] ? __pfx_kthread+0x10/0x10 [ 531.566334][ T5222] ret_from_fork+0x4b/0x80 [ 531.570745][ T5222] ? __pfx_kthread+0x10/0x10 [ 531.575320][ T5222] ret_from_fork_asm+0x1a/0x30 [ 531.580089][ T5222] [ 531.583096][ T5222] [ 531.585401][ T5222] Allocated by task 5224: [ 531.589720][ T5222] kasan_save_track+0x3f/0x80 [ 531.594384][ T5222] __kasan_kmalloc+0x98/0xb0 [ 531.598965][ T5222] __kmalloc_cache_noprof+0x19c/0x2c0 [ 531.604330][ T5222] __hci_conn_add+0x2f9/0x1850 [ 531.609090][ T5222] hci_le_big_sync_established_evt+0x414/0xc20 [ 531.615367][ T5222] hci_event_packet+0xa55/0x1540 [ 531.620308][ T5222] hci_rx_work+0x3e8/0xca0 [ 531.624724][ T5222] process_scheduled_works+0xa2c/0x1830 [ 531.630273][ T5222] worker_thread+0x86d/0xd40 [ 531.634860][ T5222] kthread+0x2f0/0x390 [ 531.638914][ T5222] ret_from_fork+0x4b/0x80 [ 531.643499][ T5222] ret_from_fork_asm+0x1a/0x30 [ 531.648439][ T5222] [ 531.650764][ T5222] Freed by task 5222: [ 531.654765][ T5222] kasan_save_track+0x3f/0x80 [ 531.659434][ T5222] kasan_save_free_info+0x40/0x50 [ 531.664452][ T5222] poison_slab_object+0xe0/0x150 [ 531.669464][ T5222] __kasan_slab_free+0x37/0x60 [ 531.674214][ T5222] kfree+0x149/0x360 [ 531.678183][ T5222] device_release+0x99/0x1c0 [ 531.682760][ T5222] kobject_put+0x22f/0x480 [ 531.687164][ T5222] hci_conn_del+0x8c4/0xc40 [ 531.691666][ T5222] hci_le_create_big_complete_evt+0x619/0xae0 [ 531.697827][ T5222] hci_event_packet+0xa55/0x1540 [ 531.702792][ T5222] hci_rx_work+0x3e8/0xca0 [ 531.707211][ T5222] process_scheduled_works+0xa2c/0x1830 [ 531.712899][ T5222] worker_thread+0x86d/0xd40 [ 531.717503][ T5222] kthread+0x2f0/0x390 [ 531.721576][ T5222] ret_from_fork+0x4b/0x80 [ 531.725988][ T5222] ret_from_fork_asm+0x1a/0x30 [ 531.730784][ T5222] [ 531.733193][ T5222] The buggy address belongs to the object at ffff888012af4000 [ 531.733193][ T5222] which belongs to the cache kmalloc-8k of size 8192 [ 531.747421][ T5222] The buggy address is located 0 bytes inside of [ 531.747421][ T5222] freed 8192-byte region [ffff888012af4000, ffff888012af6000) [ 531.761173][ T5222] [ 531.763583][ T5222] The buggy address belongs to the physical page: [ 531.769996][ T5222] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x12af0 [ 531.778746][ T5222] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 531.787229][ T5222] ksm flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 531.795132][ T5222] page_type: 0xfdffffff(slab) [ 531.799806][ T5222] raw: 00fff00000000040 ffff888015442280 ffffea0000b6f400 dead000000000003 [ 531.808382][ T5222] raw: 0000000000000000 0000000000020002 00000001fdffffff 0000000000000000 [ 531.816973][ T5222] head: 00fff00000000040 ffff888015442280 ffffea0000b6f400 dead000000000003 [ 531.825641][ T5222] head: 0000000000000000 0000000000020002 00000001fdffffff 0000000000000000 [ 531.834312][ T5222] head: 00fff00000000003 ffffea00004abc01 ffffffffffffffff 0000000000000000 [ 531.843111][ T5222] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 531.851775][ T5222] page dumped because: kasan: bad access detected [ 531.858190][ T5222] page_owner tracks the page as allocated [ 531.863939][ T5222] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 5210, tgid 5210 (syz-executor), ts 61257985938, free_ts 61243236132 [ 531.883379][ T5222] post_alloc_hook+0x1f3/0x230 [ 531.888146][ T5222] get_page_from_freelist+0x2e4c/0x2f10 [ 531.893700][ T5222] __alloc_pages_noprof+0x256/0x6c0 [ 531.898923][ T5222] alloc_slab_page+0x5f/0x120 [ 531.903611][ T5222] allocate_slab+0x5a/0x2f0 [ 531.908249][ T5222] ___slab_alloc+0xcd1/0x14b0 [ 531.913028][ T5222] __slab_alloc+0x58/0xa0 [ 531.917355][ T5222] __kmalloc_noprof+0x25a/0x400 [ 531.922212][ T5222] batadv_hash_new+0xb6/0x2a0 [ 531.926884][ T5222] batadv_nc_mesh_init+0x139/0x3b0 [ 531.932264][ T5222] batadv_mesh_init+0x438/0x730 [ 531.937158][ T5222] batadv_softif_init_late+0xa30/0xef0 [ 531.942608][ T5222] register_netdevice+0x6d7/0x1b00 [ 531.947719][ T5222] rtnl_newlink+0x1591/0x20a0 [ 531.952397][ T5222] rtnetlink_rcv_msg+0x73f/0xcf0 [ 531.957422][ T5222] netlink_rcv_skb+0x1e3/0x430 [ 531.962275][ T5222] page last free pid 5212 tgid 5212 stack trace: [ 531.968588][ T5222] free_unref_page+0xd19/0xea0 [ 531.973437][ T5222] __put_partials+0xeb/0x130 [ 531.978024][ T5222] put_cpu_partial+0x17c/0x250 [ 531.982852][ T5222] __slab_free+0x2ea/0x3d0 [ 531.987440][ T5222] qlist_free_all+0x9e/0x140 [ 531.992034][ T5222] kasan_quarantine_reduce+0x14f/0x170 [ 531.997491][ T5222] __kasan_slab_alloc+0x23/0x80 [ 532.002391][ T5222] __kmalloc_cache_noprof+0x132/0x2c0 [ 532.007764][ T5222] ref_tracker_alloc+0x14b/0x490 [ 532.012695][ T5222] net_rx_queue_update_kobjects+0x16b/0x5b0 [ 532.018591][ T5222] netdev_register_kobject+0x224/0x320 [ 532.024046][ T5222] register_netdevice+0x12c5/0x1b00 [ 532.029277][ T5222] team_newlink+0x10a/0x170 [ 532.033869][ T5222] rtnl_newlink+0x1591/0x20a0 [ 532.038545][ T5222] rtnetlink_rcv_msg+0x73f/0xcf0 [ 532.043546][ T5222] netlink_rcv_skb+0x1e3/0x430 [ 532.048335][ T5222] [ 532.050647][ T5222] Memory state around the buggy address: [ 532.056262][ T5222] ffff888012af3f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 532.064312][ T5222] ffff888012af3f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 532.072364][ T5222] >ffff888012af4000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 532.080409][ T5222] ^ [ 532.084459][ T5222] ffff888012af4080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 532.092518][ T5222] ffff888012af4100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 532.100590][ T5222] ================================================================== [ 532.151796][ T5222] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 532.159048][ T5222] CPU: 0 UID: 0 PID: 5222 Comm: kworker/u9:4 Tainted: G W 6.11.0-rc1-syzkaller-00154-gc0ecd6388360 #0 [ 532.171534][ T5222] Tainted: [W]=WARN [ 532.175354][ T5222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 532.185425][ T5222] Workqueue: hci2 hci_rx_work [ 532.190096][ T5222] Call Trace: [ 532.193358][ T5222] [ 532.196279][ T5222] dump_stack_lvl+0x241/0x360 [ 532.200957][ T5222] ? __pfx_dump_stack_lvl+0x10/0x10 [ 532.206141][ T5222] ? __pfx__printk+0x10/0x10 [ 532.210713][ T5222] ? rcu_is_watching+0x15/0xb0 [ 532.215466][ T5222] ? preempt_schedule+0xe1/0xf0 [ 532.220327][ T5222] ? vscnprintf+0x5d/0x90 [ 532.224669][ T5222] panic+0x349/0x860 [ 532.228559][ T5222] ? check_panic_on_warn+0x21/0xb0 [ 532.233679][ T5222] ? __pfx_panic+0x10/0x10 [ 532.238089][ T5222] ? _raw_spin_unlock_irqrestore+0x130/0x140 [ 532.244062][ T5222] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 532.250381][ T5222] ? print_report+0x502/0x550 [ 532.255044][ T5222] check_panic_on_warn+0x86/0xb0 [ 532.259967][ T5222] ? hci_le_create_big_complete_evt+0x383/0xae0 [ 532.266194][ T5222] end_report+0x77/0x160 [ 532.270428][ T5222] kasan_report+0x154/0x180 [ 532.274914][ T5222] ? hci_le_create_big_complete_evt+0x383/0xae0 [ 532.281239][ T5222] hci_le_create_big_complete_evt+0x383/0xae0 [ 532.287305][ T5222] ? irqentry_exit+0x63/0x90 [ 532.291883][ T5222] ? hci_le_create_big_complete_evt+0xdb/0xae0 [ 532.298023][ T5222] ? __pfx_hci_le_create_big_complete_evt+0x10/0x10 [ 532.304604][ T5222] ? __pfx_hci_le_create_big_complete_evt+0x10/0x10 [ 532.311208][ T5222] ? skb_pull_data+0x105/0x230 [ 532.315961][ T5222] ? hci_le_meta_evt+0x366/0x580 [ 532.320973][ T5222] hci_event_packet+0xa55/0x1540 [ 532.325919][ T5222] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 532.331228][ T5222] ? __pfx_hci_event_packet+0x10/0x10 [ 532.336771][ T5222] ? do_raw_spin_unlock+0x13c/0x8b0 [ 532.341962][ T5222] ? hci_send_to_monitor+0xd8/0x7f0 [ 532.347154][ T5222] ? kcov_remote_start+0x9e/0x7e0 [ 532.352205][ T5222] hci_rx_work+0x3e8/0xca0 [ 532.356612][ T5222] ? process_scheduled_works+0x945/0x1830 [ 532.362339][ T5222] process_scheduled_works+0xa2c/0x1830 [ 532.367941][ T5222] ? __pfx_process_scheduled_works+0x10/0x10 [ 532.373942][ T5222] ? assign_work+0x364/0x3d0 [ 532.378531][ T5222] worker_thread+0x86d/0xd40 [ 532.383153][ T5222] ? __kthread_parkme+0x169/0x1d0 [ 532.388268][ T5222] ? __pfx_worker_thread+0x10/0x10 [ 532.393478][ T5222] kthread+0x2f0/0x390 [ 532.397555][ T5222] ? __pfx_worker_thread+0x10/0x10 [ 532.402943][ T5222] ? __pfx_kthread+0x10/0x10 [ 532.407529][ T5222] ret_from_fork+0x4b/0x80 [ 532.412208][ T5222] ? __pfx_kthread+0x10/0x10 [ 532.416965][ T5222] ret_from_fork_asm+0x1a/0x30 [ 532.421725][ T5222] [ 532.425022][ T5222] Kernel Offset: disabled [ 532.429359][ T5222] Rebooting in 86400 seconds..