last executing test programs: 29.495323139s ago: executing program 2 (id=3733): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='mountinfo\x00') r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) r4 = openat$nullb(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOC_PR_RELEASE(r4, 0x401070ca, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r2, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @empty}}}}, 0x3e) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT(r6, 0x4004f506, &(0x7f0000000080)) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000980)={0x2, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x7e, 0x0, '\x00', 0xff}]}}) ioctl$KVM_RUN(r7, 0xae80, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="b40500000700000071105900400000757b000000000000009500e1ffffff00002b3a47b69dff97bc03f9b56f7b8ed050facf6bd644c9e31851b5b4d40a43477a92d4fd80a30060d5707c9752"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r8 = socket(0xa, 0x2400000001, 0x0) getsockopt$inet6_buf(r8, 0x29, 0x1e, &(0x7f0000034000)=""/144, &(0x7f0000e5f000)=0x90) mount$fuse(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ppoll(&(0x7f0000000000)=[{r0}], 0x1, 0x0, 0x0, 0x0) 29.139813617s ago: executing program 2 (id=3734): r0 = socket$inet_sctp(0x2, 0x1, 0x84) openat$vimc0(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000000)="240000001e00ff3bd90ea7eff078000000000000000000000000000008000f0016040000", 0x24) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/cgroup', 0x0, 0x0) fchdir(r2) r3 = inotify_init1(0x0) inotify_add_watch(r3, &(0x7f0000000200)='.\x00', 0x10000a0) getdents(r2, 0x0, 0xfd02) readv(r1, &(0x7f0000000680)=[{&(0x7f0000000100)=""/215, 0xd7}], 0x1) io_setup(0xedf, &(0x7f0000001740)=0x0) io_submit(r4, 0x1, &(0x7f0000001a40)=[&(0x7f00000017c0)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000180)={@rand_addr, 0x0}, &(0x7f00000001c0)=0x14) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r7 = syz_open_dev$vcsu(&(0x7f00000002c0), 0x3, 0x60804) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)={0x1b, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x4}, 0x48) r9 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000380)={0x0, 0x0, 0x30}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x4, &(0x7f0000000000)=@raw=[@btf_id={0x18, 0xb, 0x3, 0x0, 0x4}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0xa}], &(0x7f0000000040)='GPL\x00', 0x8, 0xf0, &(0x7f0000000080)=""/240, 0x41000, 0x20, '\x00', r5, 0x0, r6, 0x8, &(0x7f0000000240)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0x7, 0x100, 0xfffffffc}, 0x10, 0x0, 0x0, 0x6, &(0x7f00000003c0)=[r7, 0x1, r8, r9], &(0x7f0000000400)=[{0x3, 0x5, 0x8, 0xb}, {0x4, 0x1, 0x7, 0x1}, {0x1, 0x4, 0x6, 0xb}, {0x0, 0x5, 0x9, 0x8}, {0x4, 0x5, 0x7, 0x1}, {0x0, 0x3, 0x0, 0x1}], 0x10, 0x10000}, 0x90) 27.003698762s ago: executing program 1 (id=3741): bind$alg(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r0, &(0x7f0000000580)=ANY=[], 0xfdef) 12.137443822s ago: executing program 0 (id=3749): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x13, r1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x11, &(0x7f0000000080)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e22, 0x3, @mcast2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x4) syz_usb_connect(0x0, 0x2d, &(0x7f0000000a00)={{0x12, 0x1, 0x0, 0xa4, 0xba, 0x17, 0x40, 0xc4b, 0x100, 0xcdcc, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xd7, 0xc4, 0x89, 0x0, [], [{{0x9, 0x5, 0xe, 0x2}}]}}]}}]}}, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0xfd, 0x0, 0xfffff034}, {0x50, 0x0, 0x0, 0xfffffffd}, {0x86, 0x0, 0x0, 0x400}]}, 0x8) 10.56548312s ago: executing program 2 (id=3735): r0 = memfd_create(&(0x7f0000003340)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x05\x00\x00\x00\x00\x00\x00\x00_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xf0y\xd6\xb0\xf2\x9f\xa7\xcf\xad\x86\\\xec\xec\xd6\x9d\bT\xcd\xa2\xea', 0xe) tkill(0x0, 0x1003) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) bpf$MAP_CREATE(0x0, &(0x7f0000000040), 0x48) write(0xffffffffffffffff, &(0x7f0000000040), 0x0) r5 = fcntl$dupfd(r0, 0x0, r0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000007, 0x11, r5, 0x0) read$FUSE(r5, &(0x7f0000001300)={0x2020}, 0xfffffdef) 10.363185346s ago: executing program 0 (id=3754): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c003d000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x0, 0x8b}, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x8, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) landlock_create_ruleset(&(0x7f00000000c0)={0x1000, 0x2}, 0x10, 0x0) fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) syz_emit_vhci(&(0x7f0000000400)=ANY=[@ANYBLOB="02c82031002d0001000e01030006001f0f070400000807001001040007000c00071104007500ffb00e000300f600060e0003000700a3079944e2f0a16a113660658bcd2199c5b906633318ad5ff850ba40fe5431ad26aaec0faf003ebefa7c5e87d968bdd6d9820769ce6f73a5752ec9892419b799f099d3"], 0x36) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x90) 9.515038834s ago: executing program 3 (id=3757): pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) r1 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r1, 0x3) r2 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r2, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r3 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg(r3, &(0x7f0000001500), 0x588, 0x0) close_range(r0, 0xffffffffffffffff, 0x4000000) 9.476510715s ago: executing program 1 (id=3742): sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7b, 0x7b, 0x4, [@datasec={0x6, 0x3, 0x0, 0xf, 0x3, [{0x1, 0x7, 0x2}, {0x4, 0xfd8, 0x1}, {0x2, 0xffffffff, 0x5}], "a0904f"}, @func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0xa, 0x4}, {0xe, 0x1}, {0x2, 0x2}]}, @struct={0x1, 0x2, 0x0, 0x4, 0x0, 0x81, [{0x0, 0x1, 0xe474}, {0x5, 0x3, 0x5}]}]}, {0x0, [0x5f, 0x5f]}}, &(0x7f0000019640)=""/4096, 0x98, 0x1000, 0x1, 0x4}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x1d, 0x80000000, 0xfffffffd, 0x0, 0x200, 0xffffffffffffffff, 0xe2, '\x00', 0x0, r0, 0x2, 0x5}, 0x48) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000580)=[{&(0x7f0000000640)=""/102396, 0x18ffc}], 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) move_mount(0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file0\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./file0/file0\x00', 0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) futex(&(0x7f0000000100)=0x1, 0xd, 0x2, &(0x7f0000000480)={r2, r3+10000000}, 0x0, 0x1) 9.08913122s ago: executing program 4 (id=3760): socket(0x10, 0x80002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @private}}, 0x80, 0x0, 0x0, &(0x7f0000000100)=[{0x10, 0x110, 0x1}], 0x10}, 0x8000) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000340)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r1, 0xc0182101, &(0x7f0000000180)={r2}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000080)={0x0, 0x3, r1, 0x5}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = socket$l2tp(0x2, 0x2, 0x73) syz_emit_ethernet(0xfdef, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff08004500002800000000003c907800"/38, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000290780000"], 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000d00000000080000000850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00', r6}, 0x10) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000040)={0x1000}, 0x10) write(r7, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0200000000", 0x41d) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @rand_addr=0x64010102}, 0x10) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r8 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r4, 0x8208ae63, &(0x7f00000003c0)={0x0, 0x0, @pic={0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x40000000000, 0x9, 0x0, 0x0, 0x0, 0x5000000, 0x2, 0x0, 0x2, 0x0, 0x2, 0x40, 0x0, 0x4], 0x0, 0x2}) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f0000000140)={[0x3, 0x9, 0xb, 0x7, 0x7, 0x81, 0xbaf5, 0x101, 0x9, 0x815, 0x6, 0x7, 0x45c, 0x80000001, 0x1, 0xaa9], 0x12000, 0x80000}) recvfrom$inet(r5, &(0x7f0000000040)=""/25, 0x19, 0x40003120, 0x0, 0x0) 9.056417462s ago: executing program 3 (id=3761): socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f00000001c0), &(0x7f0000000240)=0x4) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, 0x0, 0x20008864) r0 = socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000180)="0100", 0x2, 0x0, 0x0, 0x0) clock_nanosleep(0x0, 0x1, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000cc0)=@newqdisc={0x74, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0x200}}, @qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{0x0, 0xff13, 0x0, 0xffff8000}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xfff, 0x2}}, @TCA_NETEM_DELAY_DIST={0x7, 0x2, "bb31dd"}]}}}]}, 0x74}}, 0x0) bind$packet(r0, &(0x7f0000000400)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$packet(r0, &(0x7f0000000080)="1555f6acfd136f8ed06375bd86dd", 0xe, 0x0, 0x0, 0x0) 8.932088778s ago: executing program 3 (id=3762): r0 = gettid() r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x121301, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0xd) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0xff2e) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 8.812994961s ago: executing program 0 (id=3763): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x13, r1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x11, &(0x7f0000000080)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e22, 0x3, @mcast2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x4) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0xfd, 0x0, 0xfffff034}, {0x50, 0x0, 0x0, 0xfffffffd}, {0x86, 0x0, 0x0, 0x400}]}, 0x8) 8.743946896s ago: executing program 3 (id=3764): unshare(0xa2020000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x54, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x54}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="2c0000003a000b00000000000000000003000000c1fe0080140003000d34d8026a2c01f698880a6f"], 0x2c}}, 0x0) r2 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$kcm(r2, &(0x7f0000001900)={0x0, 0x0, 0x0}, 0x20040000) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r3, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) splice(r3, 0x0, r3, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) close(0xffffffffffffffff) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xffffff63, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f90435fc60040011000a740100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r5 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r5, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x1, {0x0, 0x2}}, 0x10) ppoll(&(0x7f0000000040)=[{r5}], 0x1, 0x0, 0x0, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r7}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000500)={r8, 0x0, 0x0}, 0x20) 8.643957826s ago: executing program 0 (id=3765): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40241, 0x0) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) fsopen(&(0x7f00000002c0)='rpc_pipefs\x00', 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x2c, &(0x7f0000000900)=[@in6={0xa, 0x0, 0x0, @loopback}, @in={0x2, 0x0, @loopback}]}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500280008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001"], 0xfdef) memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12010100000000105801000100000000000109022400010000002009040000010300000009210000000122dc01090589"], 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f0000000340)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x15, 0x4, 0x0, 0x0, 0x54, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x14, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0]}, @cipso={0x86, 0x27, 0x0, [{0x0, 0xb, "34a6caf58db76931cc"}, {0x0, 0xc, "e39335900f115624170e"}, {0x0, 0xa, "4f1347dfaaca82c2"}]}, @noop, @timestamp={0x44, 0x4}]}}}}}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r3, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000540)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0], 0x9, 0x6, 0x7, 0x4}) ioctl$DRM_IOCTL_MODE_GETGAMMA(r3, 0xc02064a4, &(0x7f0000000640)={r4, 0x6, &(0x7f0000000580)=[0xe, 0x1, 0xe, 0x1d98, 0x8001, 0xff], &(0x7f00000005c0)=[0x200, 0x2bb8, 0x8000, 0x2, 0x2, 0xb530], &(0x7f0000000600)=[0x8, 0x401, 0x8, 0xc, 0x100, 0xfff, 0x6, 0xd1, 0x40]}) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120110030000"], 0x0) syz_usb_control_io(r2, &(0x7f00000000c0)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 8.498884074s ago: executing program 1 (id=3766): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000002140)={'wg2\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002300)=ANY=[@ANYBLOB="400000006800010000000000000000000200000000000000060007000700000008000500", @ANYRES32=r4, @ANYBLOB="18000880"], 0x40}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYRES64=r5, @ANYRESDEC=r2], 0x7c}}, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE(r1, 0x50009401, &(0x7f0000000340)={{r2}, "af79ba4178eb1b09b0b08e3adcc0818c4a6b7a869c2e160de556a72925cdc7ba3149b2b0c8a4cb85c5509f78f144b93d755164f2451c782f20acfa4f4ce2e50ac4263ff6ec65537cff12814eef8c9dd6d7361138253e1192e255c2c7105f3a0f7e36474238bf0a0c06dd3db5a307c952a96ee4ef28425a0cef2dee92a0d5225a41f14e6c870ed5d6a070b9c48f9fdaa77b2c0f64889c09e18cfe249e0dfdb449213c95fddc6ad08488cd554c9e2aa5d0ec27741e2ad36fa74473dc9e973d1fa436b7cb2fbda9ce2d57fa1049adb3cb21394b1c8ede514e70eb6a42f1338494452dcb79eb95b1a126302d5eb62c20277a3ea60c726cc747e94fb93db54d6bcad72f8e406c407f1e7dcbfc4548bb564b516748cd6effa787c67b3d489316dc91115a1b3c5c185e0a01c8543c4ce167026f2844f79a97cc9076df5b45bc83350e0762f95c9934cdb201b725d447a76785d789d60cff767eb17fe57bfcca00ff6467f1532100d344f4bab516b4008179ca771854a78c6d7d8e500f5fa6eb7e01a410e9c8eccc3a254508852c225d2ad357dcc4d8cc7da346375accb8ad9d2f4ae7799217a0386906378b4ca6ec5b853b3e96a079fab33184670e42733385a5664c42ac8966b96e0738189804986271f1483ce72217032ce3d1712f188b58778c1086e4b80709a6f142845d436481e5631914ed9e835cd415dfe852e8de7ca2322b190b5a029926353ab9d6ff681594a2c63f937ec68b4872f60aaabad8f482ce8457468c4dab6bd93f3f6875d7237e108d965ab05bc45e5cbe6c7574ded60d434e1099f28295be6e0f72181ac7ac39495bb42cf0b10bb81b250d151a0a2eb9c9f93450441784ea9287612f74b6d88a828caed26bd9be2eea51da115d3fd9cd4934fbc0cb057030390354a1afd7982f373e1a614dba31e9b35465b4807b6e4010de1c0203cfb8e3f6c2376c4d069c2acd21bfafa34fc5767a9919e10f6dfcbbbf4bbdcde8bc33723b916eec7f29d78c6eb8f5b191788efbc914284586963837934c892e358e9e1101ba71e1e8dd1af752338bb2f41c90a6b0d2ce8281e1727f99ad3b50829c5fc7a49a67b5a8357da64702184180792c6c95dd7f2db29e0052b446fcf75fad833416a04d05ba0386a74defbea3631b2cfdba4a2aa9ab670aa71255bb61d39cf0760082ef9ad42b0bf735bd8cb6a664ee5d06585f2b56d0141804218b426c5df28bd699f10a5a62c684051b607d1db2172c7159039e7807ccb51c94e6c90fc7f21d38eb1a2e4daa2040cfb85c40b8669c3dc1b0e3afe76b5bcd3e3fa013bee7efff9bb40b8b88c723d5c5e768f30f0246369475a8b36918079c8e351312d1a423096b354f2f950fef7685366412757529b1008ca0ce926ba7d8317ea2be9d5eb3b341d1995467e4c10b8f701162fab331e4495b862a8e860d64dfccc6a3532c8596dd3b1f746fdc66aebe304db44b35cde32fb3dddae92edae4f289afa1a839e734a5ae7583c51410f19af02e1f0e63d9670687cf6690137b12b8d4d476ab6dc21e3f3ea76e0e2d4c6dc027425ae430700655e8d4d87950cd3d224fc9e7b83f8b2497bf2e5f946b64b6de44b50908f8a66482e044ace24fe594085d62edcbc91ef06bb0c178759b85dc43b2ee9724d3264fdba5618e0d24b8648fe0514fc24d250b4c34c8fd7694a5a429f26b91c5ca9f0b25a9c92695b680edcef938ac0a93edd8bef6a51d6942a389293c087eec90d20d5b4546ad6e6edd38aa81f73017e5a562b4542d4fa62a9adf164ce0ef79cf476608a78519cfd624d1eaac731531b39627a780c8d4302bb1db869e7c6af218a20030f71c2fe26b9726f97bfe36707ea709759e9f5c03c0bb499de83b401a3735b048cdf4fc1afd4ca43e241e64adac74db217868b844aa0bce464487c8923b1372f10ec1285080ace61bfb78c5f744f815a0bc9e7d0df6f615403a904960e5ac200116ece0fe94bd19fddb3b14b68c2dbc04cfe5feaf68f63284c600c508f7c6d83a965a6de080429832fe13c234154a26d1ca3f35b9181bed221c96f8b3b1ab2b63ab601ecd8aacaac5b435d8efb75675a516b424885c3b86082f77555f22bf5e31c1951d2435f7bf1e0f061746dfad0bf9757494578faeadf107c1af96b4226712970415bb01f8d91fb75f9ed668cfe31a13320ee0f2abeab8529f821877e92b9d503331ed38c83f1099b14e0e15210e358026b23ed2e11d5d5d8e73ab9930a896156c32c8ab98edc73fa6d89ecdeb7681e2225ce0db09dc154f861917de91be37a8a2f73f510fea9b0ce7daf418d2f1ae11833105b62e6a1769b0c4fac52727c87d9787abe8dae99fefdc3983481952cf779ab2f50e86580a2cfb497790f33343d43576122b7bae07583dab32ca160617e204689a2dee03c07559f8f2a41b9f0fa6a2b88586563e3deb034f373fd642eb920bf48a32418bee7bbd3ed0951bd856e9c296736ef143e46a1c421f7e132b0ff33a0ab8a9113a710ca72beb6d2e88b15a0381b90ff33e8d435784fdbcc06f9bda947aa960a521cc8a4924687674f48ce439c8c561df7ae4f0ffaa160550a821426d9d7390c2f17b18189ddee1237d537c2d95201c0b8c9e558ea55851fce4fdc465125c638aaf39a72f1fa8e633f31d07fbf13205acf3888864b8ccae06393fff7dd322f02d95891777daf2971802e8cb40669c9ddd28e6159f2043a2cf9dc568da9b48663278d1da2ff670b8f86120c373b4af41b2c47c2890a8f6ec6b15acac8c7a201ef9c1f28e21d0e7463d0814d90a54e9471309ff383a513ceab9bc5cad23b0af7c9c9679ce356434e45fd859d8720988474b3f67299074cafd5120a73ce872ff69a1750ae42f253ae6564ec169611a8bfb42443984cfdb403593ff53f090bc9ad5fd165a233b0b36a8e8241bfcf96205550a6bd5016338dbbeec1a0a4109c22400e8e8a95b465ecdd5648169b66092d26a4fe00181305f7c8bed1df2c7108525cfc9fc945f05245a7bb90e7c01d92013543ca9669846068877c94e065015dce4deef6446280b7c2fb6d9a48a73316a0ceb2f3d2f3a6585f014a54e830f7d7f387eba3b8674884bba734a65b2329aa346e153f9b778b3cec45b2f7a43421f548fb91dc7140242a78788aba2be4ea4cbcc2f0995ced96915e8b937eb19980a100b18b22b72affd35166412823af335ce998a653b855507b8ac4e362f4ff38a67180f9f556b62720704be3195f5ddb2fb9e7a18a8ce479062f050ec6e30c6d2fb4779ff02b9927cc1805bd4a2a5f6a91543f1133a015e73734a0cebd3b626f0849446e1f8e6933f34cdf7974303cdd77d311644cc52c69d65dce0017375a3c1183ce4a5c0eca9ac1bccab149e77f649c994190d5640ebe402e11aea55e9117b8380b9750834afbdaf7cfd6c56334018da3ec458d35545d321817f5efbe7f810a5facedcab5547d843661392f8cab1a49d9b440b5990141ae19db65847291744f706d1908da1e6985cb4f84e4d823f3351593bada65078ba0f568ec1eaa23b22c7bbf9c592ac45b35bac01bc1fb659fea7aee940994012d040d7e501d8eb158f7d35cb023715b54c7771a5b056f2c3a83aa9cbd31c7efb0b69f470d4dd428157d319983c0a36f01778a92d5801483b1bbb435b82fe3bf3e4b8ac3a183150c9a75992df878c0836c2a857aae445ac283079cbdf86482277070a321f183e80ec40d7e7d28c4eb182ebd74b332ec3ddd6be4c147e29de45bc84ed515faa678f07b3e49e922f687a7bf61aabc93e0651e37380d98b254b0a98e8996d691776973c033ddb27ac022e9ba4a0f7e501c8b1478ae30f4aaede2d86a655cf533084c0db36ca6d64409fb89539745d56c5d4490338584c437af725e7ec21d37e46559d981c182f48a0f3cf5cf4eac52f324c5dd3a62eb2eb36f4cd12caa37052503f2e33d937256924c70dc95d8bb3214bb30a85b8d65e89c5bab0c98310d2a020f498111837f3c793e71fc0a392f19f13922ce64c2403222d0ae4a0050031e0187299524b27d3f586f5ae3828fa1cbfbc5225859840e3f81b0de20fef6ff68dd93439369048886b35f1ab957e0bc863b50d1c33e7df51ff7a5a9642e5db2838a25e89afd205c61381e271c27e05492602505e391df7d5b2cc30c6edee4026979df42c426708c7ba840cde49ccb69005ac1b446fb934531ff3ffc8cc018180f959766b725fc6c8b50b9b87daa17300e3f2a87b0aa5cbe37bbb818b9d981a8f48acafe5c486b812c24cafa7e396691f3fd47995b5735bdc881cf539a27e766a242a19446e78a1fd8f968c3ba55631b7024b1af0d3d1747b31c2b4db28abfa410c6974cb4f7dbfa7ef1666a04925370820eea334cc637173a06ee360d9cff920b28ab5ce4fad081dc8b4d94f98fbb202edffcfcb98fafa10148ec7077e7900df1e98a767b402cd0ce62f31c22f876015a7e4cbf8e1713a135c87b3edb6fe737c9d41f88e740600778d0ab14baeba8e088139ea99a56a15614911bcd6557b2b3f615752190592afd75d3fd567899546eb0bdc491d5cbb33e84e03a683e653ffd6a9432c088546a006df6da581b3a44db4aebc364c2abf7444f19350570cc7f3d2aa4a81b02fef435d12e335fc82b743e4cd4efd9359455f44370e5647907c04d337b66cb699f34e82898a4b91dd42765c6cecdc60ce5288ebab6dc312e2fa2585e8870bf5279d3ed9bcd17b4a149c085107e0b27803a8ca0222e73c4e8d6af9b54f758b3b50e593ba13943d4055c4952952ffe889747e60f353bc82ec1a3c6c05522c2e02a5cf206334db9c9064092d222ad1a22d208a6157d1a0e0fa45405a01369b7ddd10196401a644a6749048ef138f306edfdb980923a498ee5150afeb6e21f3d33de5cc3e0be73ebff5ff4f98eafcb37cd7b14676a7f26a22e556f88cd4c43f1580aea5449f1d3fae3b02f11c638cb6605fef6498a0813a04e7678fcc85560d46e51e308687c6d40412d5111019d5faa9bbcd26c5f62a43aa23ebc3dddb81c17b40fa610d1ac843ec9f14460d097f52fbdb70cd466d75885217925ec36fb5e2584fc0951a3ef646f49db455fa08779003169af281ba943d5d18e22f2b50fdb7c677ffbcba8c4ed18f20e5f789398ac90b41aeacc11bd609cee0becb2fb9546c435602157bef89e0f827424bf36e506c1d02d3194a5125e9b6c43b5f4b398b9f9df2abdf32516e384129207d487befd9cf4a41828c05708aa480448a69a29d44febd8de4b5d2d87ee7864d03b1d96ef0bf6b37dfdc529aaf463e6eff2fb682a41b31da7f525dd7242d516db70e33b89038f6f1e8b9a127d12d6539756db9a48545d466f0db26aa3285b3a2f5984ebf41a6eb503491cf9882aa598e005171702714ae4e7dfe223500ab33b831aee9b7cadfd8fb2e495b1d6ec6d2f3131db64dac5b812210d426db1b0906bbdf13712beb2f820e34da0cd1479e0164a728a553f9413205de50939eca3adfcf2613f99efb4a1fbd5f00f19aa418209ceacac1f0f67fa434fd2e4aa6229aab2334289ba630cd12a98b01265c4df3db2267d0dcf65c6245a012f30622a133cb6144b153193e18a19a75e25439ab86cf93193298f17b15202fd43ca09aadcafa45d9b4bca185ce733bedd7098e5a6a01c2b90803069df3643b5742112e3740ab479b215a8825d23cbb3cd623fdb71e7291c7b844ce366d480f55ea5fe5ce46beae2988fdea1264216c701480be9884d6628d64b941927e8bb78e3f790e5878a9a926eb4d25ecffc5f4c4"}) pipe2$watch_queue(&(0x7f0000002240)={0xffffffffffffffff}, 0x80) r8 = add_key$user(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000180)="8e", 0x1, 0xffffffffffffffff) keyctl$KEYCTL_WATCH_KEY(0x20, r8, r7, 0x0) keyctl$update(0x2, r8, &(0x7f0000000100)='8', 0x1) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r9) r10 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000300)={0x0, 0x0, 0x8, r10}) 8.347973477s ago: executing program 2 (id=3767): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a68000000060a0b040000000000000000020000033c0004802800018007000100637400001c000280080001400000000208000240000000106700030000000000100001900000010064796e73657400000900010073797a30000000000000094000000003140000001100010000000000000000000000000a"], 0x90}}, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)={{0x12, 0x1, 0x0, 0xab, 0xbe, 0x67, 0x40, 0x17e9, 0x8b4e, 0x9c08, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff}}]}}]}}, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000680)={0x44, 0x0, &(0x7f0000000380)={0x0, 0xa, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000980)={0x14, &(0x7f0000000400)={0x0, 0x7, 0x20, {0x20, 0x30, "c4a41b389462920929dcf125de1042d577d592fbacde1ac58b3bd242fd9a"}}, &(0x7f0000000800)={0x0, 0x3, 0xcd, @string={0xcd, 0x3, "22aab1c4267dba0417e6face7b62356ace27dc23d087e0c94d9212835dc3595cee827bfacb28fafddda045b7f6f3bd864d020cc4da3aa1f448ebe3292260873f6a6fb5c3bad267134437c802a5bb64f32ce0d461990f952cc3ce09d22919154bd942760dab2059a6bf3ed9f14b094f829ba8c87d8deb606db5bbc8b9b157beeba2060c651f2db4e1a6dddc34c81ff1c30473dda1228622755ba3fb8f6c5327b2687b9887a9a32321d64ecb4c2c77db0ba2c9a67916b6f8f4bc70d44ee25fc4a1e63dc8316e2f454559d1ee"}}, &(0x7f0000000900)={0x0, 0x22, 0x1a, {[@global=@item_012={0x2, 0x1, 0x9, "a16b"}, @local=@item_012={0x0, 0x2, 0x4}, @main=@item_012={0x0, 0x0, 0xc}, @main=@item_012={0x2, 0x0, 0x9, "0df1"}, @global=@item_012={0x0, 0x1, 0x9}, @global=@item_4={0x3, 0x1, 0x2, "89a12b60"}, @local=@item_012={0x1, 0x2, 0x6dafe63215351552, 'Y'}, @main=@item_4={0x3, 0x0, 0xb, "2078e791"}, @global=@item_4={0x3, 0x1, 0x8, "45cd6e7b"}]}}, &(0x7f0000000940)={0x0, 0x21, 0x9, {0x9, 0x21, 0x1ff, 0x7, 0x1, {0x22, 0xb9d}}}}, &(0x7f0000000bc0)={0x18, &(0x7f00000009c0)={0x0, 0x10, 0x64, "ee351f6bac939afb3250288b9e273f1bf3fb6ebab1ed32a758f0df11b784f1d291d9644ad74cac6593948390c3b3af05c7e7e8b6907039b30ddf6de78a5bd9319754d3da369362fe8fdf96a496e52a701553cd215dd1ba3172c9ec0dbb701f3a627e6302"}, &(0x7f0000000a40)={0x0, 0xa, 0x1, 0xff}, &(0x7f0000000a80)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000ac0)={0x20, 0x1, 0x91, "77cc72c573bb19ed9f7969e879325a41e484b5e529e1290b8ed71ecb7d4c500d3cf2da7ac086fc2746cbd8f1f17bd670f8669c21ebb108ef5a44aff7bfb044947acfaa5f925d4710e1ae210c23e7551d06505ea07cefa9714c119ec6a2299301108250637ab40a59a94d6c1783e49db4b7935f50027f2d597aea40db4f07b7b54e9ba32a050e2854c0131de37e9b5f4e64"}, &(0x7f0000000b80)={0x20, 0x3, 0x1}}) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x12, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000140)) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r4 = dup3(r3, r2, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000240)={@flat, @flat=@weak_binder={0x77622a85, 0xa}, @fda={0x66646185, 0x0, 0x40000000000002}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r6, &(0x7f0000000300)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 8.31945564s ago: executing program 1 (id=3768): timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) io_submit(r1, 0x1, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x7, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x1, 0x0, 0x0, 0x10}]) 8.170701328s ago: executing program 1 (id=3769): r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000500)={'wg0\x00', 0x0}) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f00000000c0)={0x1d, r4}, 0x18) connect$can_j1939(r3, &(0x7f0000000140)={0x1d, r4}, 0x18) sendmsg$can_j1939(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)="4480502ac1216c3f00", 0x9}}, 0x0) setsockopt$sock_int(r3, 0x1, 0x4b, &(0x7f0000000240)=0x7ff, 0x4) recvmsg$can_j1939(r3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=""/79, 0x10}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000600)={'tunl0\x00', &(0x7f00000008c0)={'erspan0\x00', r2, 0x40, 0x7, 0x7ff, 0x1, {{0x20, 0x4, 0x0, 0x8, 0x80, 0x67, 0x0, 0x9, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, {[@ssrr={0x89, 0xf, 0x67, [@dev={0xac, 0x14, 0x14, 0x11}, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback]}, @noop, @end, @lsrr={0x83, 0xffffffffffffff85, 0x9f, [@remote, @rand_addr=0x64010101, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @private=0xa010100]}, @noop, @rr={0x7, 0x1f, 0x12, [@initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010101, @multicast2]}, @timestamp_addr={0x44, 0xc, 0xe4, 0x1, 0x0, [{@remote, 0x9}]}, @timestamp={0x44, 0xc, 0x47, 0x0, 0x1, [0x7, 0x8b89531]}, @rr={0x7, 0x7, 0xe8, [@broadcast]}, @end]}}}}}) read$FUSE(r0, &(0x7f0000000a40)={0x2020}, 0x2) madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x64) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x9}, 0x80, &(0x7f0000001340)=[{&(0x7f0000000040)="27050200590200000600002fb96dbcf706e10500000088641100114408000300b8bf4a31accb", 0x26}, {&(0x7f0000000180)="4fc9316bdf97a94aa4c01a71f2b55527cb347f01679ab78bec91455755985051", 0x20}, {&(0x7f00000001c0)="b6986e54ee7137807146de0ab782b34caded5e870ee7caf6296abeb8a420c3316d8feddfc875d2cb880b7880d6ce92860ccd4f7d6a5f4ae59c2ef4178d2a6e151b9177cfe4a70abc1e1267d0993ebb2a6d21ee884efb8ffba185c10803067b80f3428de425c426dd3cc9eddeab744f710419fde96d", 0x75}, {&(0x7f0000000240)="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", 0x285}], 0x4}, 0x0) r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f0000000400)={{{@in, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0xdf0d7e7ea3273134}, {{@in=@multicast2}, 0x0, @in=@private=0xa010101}}, 0xe4) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(r7, &(0x7f0000000880)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000840)={&(0x7f0000002a80)=ANY=[@ANYBLOB="00000000b39d14d6b8f1c6509dcfea39ca218eb813c6ea16f25b1f0b589454d51c203c66b8d5b7d0b41df10dbcf01b5b3014677a970c4683cf1d790f1cbff4da0841b511dfadb13ac747fef7d4765279f00abfecffa065e67e1ba295e520c43029d2e85de284c12aea3dd54a9714f54e14d9ffe6b66ff6ffffffffffb8b720cbc402", @ANYRES16=r8, @ANYBLOB="00042abd7000fedbdf25010000000000000008410000004c0018ffffffff75647000"/98], 0x68}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000) r9 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000402525a8a440000102030109021b000101000000090400000007010200090501020000000000"], 0x0) syz_usb_control_io$printer(r9, 0x0, 0x0) r10 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000087cf3440d2190611c4eb000000010902120001000000050904640000ffffff007946e183f34dfb04b30209a1419a93af67dec610950de8adfb9713a3a2badc7a"], 0x0) syz_usb_control_io(r10, 0x0, 0x0) syz_usb_control_io$uac1(r10, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000540)='wg0\x00', &(0x7f0000000580)='([!\x00', 0x0) syz_usb_control_io$hid(r10, 0x0, 0x0) syz_usb_control_io(r10, 0x0, &(0x7f0000000b80)={0x84, &(0x7f0000000680)=ANY=[@ANYBLOB="00000100100024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 8.12002059s ago: executing program 4 (id=3770): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmsg$kcm(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000780)=""/226, 0xe2}, {&(0x7f00000003c0)=""/219, 0xdb}, {&(0x7f00000004c0)=""/113, 0x71}], 0x3}, 0x0) sendmsg$TEAM_CMD_NOOP(r1, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="9a6739095293ce45c8f40e2c91be3d2133df02cbd6b16578b45c83ebc757fc5bcc6959ff7e58976d3089df70fcb63d60b099d3dbad1ee69f75e0480e537903aee2d9b66e8584b6a8b3168b7c0fa7285e9bfb76d31b59bbcf4c68c7d0702ae5a0ddf37a376df34c6934a05994e1ddf3dcb634d7cb762d827e7c009f6adaac650583a91f75be37ef878c8359317fc3b8dc4befed62a8e8ff93752f38e1040bc9b7a7e5a52042951d23a5d294cb73"], 0x6a4}, 0x1, 0x0, 0x0, 0x20040004}, 0x0) 7.998618938s ago: executing program 4 (id=3771): pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) r1 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r1, 0x3) r2 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r2, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r3 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg(r3, &(0x7f0000001500), 0x588, 0x0) close_range(r0, 0xffffffffffffffff, 0x4000000) 7.858226542s ago: executing program 4 (id=3772): socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f00000001c0), &(0x7f0000000240)=0x4) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, 0x0, 0x20008864) r0 = socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000180)="0100", 0x2, 0x0, 0x0, 0x0) clock_nanosleep(0x0, 0x1, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000cc0)=@newqdisc={0x74, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0x200}}, @qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{0x0, 0xff13, 0x0, 0xffff8000}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xfff, 0x2}}, @TCA_NETEM_DELAY_DIST={0x7, 0x2, "bb31dd"}]}}}]}, 0x74}}, 0x0) bind$packet(r0, &(0x7f0000000400)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$packet(r0, &(0x7f0000000080)="1555f6acfd136f8ed06375bd86dd", 0xe, 0x0, 0x0, 0x0) 7.834274631s ago: executing program 3 (id=3773): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c003d000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x0, 0x8b}, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x8, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) landlock_create_ruleset(&(0x7f00000000c0)={0x1000, 0x2}, 0x10, 0x0) fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) syz_emit_vhci(&(0x7f0000000400)=ANY=[@ANYBLOB="02c82031002d0001000e01030006001f0f070400000807001001040007000c00071104007500ffb00e000300f600060e0003000700a3079944e2f0a16a113660658bcd2199c5b906633318ad5ff850ba40fe5431ad26aaec0faf003ebefa7c5e87d968bdd6d9820769ce6f73a5752ec9892419b799f099d3"], 0x36) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x90) 7.672731189s ago: executing program 4 (id=3774): r0 = gettid() r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x121301, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0xd) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0xff2e) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 7.447442851s ago: executing program 4 (id=3775): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40241, 0x0) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) fsopen(&(0x7f00000002c0)='rpc_pipefs\x00', 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x2c, &(0x7f0000000900)=[@in6={0xa, 0x0, 0x0, @loopback}, @in={0x2, 0x0, @loopback}]}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500280008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001"], 0xfdef) memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12010100000000105801000100000000000109022400010000002009040000010300000009210000000122dc01090589"], 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f0000000340)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x12, 0x4, 0x0, 0x0, 0x48, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x14, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0]}, @cipso={0x86, 0x1b, 0x0, [{0x0, 0xb, "34a6caf58db76931cc"}, {0x0, 0xa, "4f1347dfaaca82c2"}]}, @noop, @timestamp={0x44, 0x4}]}}}}}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r3, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_GETGAMMA(r3, 0xc02064a4, &(0x7f0000000640)={0x0, 0x6, &(0x7f0000000580)=[0xe, 0x1, 0xe, 0x1d98, 0x8001, 0xff], &(0x7f00000005c0)=[0x6, 0x200, 0x2bb8, 0x8000, 0x2, 0x2, 0xb530], &(0x7f0000000600)=[0x8, 0x401, 0x8, 0xc, 0x100, 0xfff, 0x6, 0xd1, 0x40]}) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120110030000"], 0x0) syz_usb_control_io(r2, &(0x7f00000000c0)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 6.944594992s ago: executing program 3 (id=3776): r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x8042, 0x0) fcntl$setlease(r2, 0x400, 0x1) fcntl$setlease(r2, 0x8, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) getpeername$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @local}, &(0x7f00000000c0)=0x1c) fcntl$getflags(r2, 0x401) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=@newqdisc={0xac, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x5}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xcb2}]}]}]}}]}, 0xac}}, 0x0) 6.301613282s ago: executing program 2 (id=3777): r0 = memfd_create(&(0x7f0000003340)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x05\x00\x00\x00\x00\x00\x00\x00_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xf0y\xd6\xb0\xf2\x9f\xa7\xcf\xad\x86\\\xec\xec\xd6\x9d\bT\xcd\xa2\xea', 0xe) tkill(0x0, 0x1003) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) bpf$MAP_CREATE(0x0, &(0x7f0000000040), 0x48) write(0xffffffffffffffff, &(0x7f0000000040), 0x0) r3 = fcntl$dupfd(r0, 0x0, r0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000007, 0x11, r3, 0x0) read$FUSE(r3, &(0x7f0000001300)={0x2020}, 0xfffffdef) 6.282573151s ago: executing program 0 (id=3778): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x13, r1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x11, &(0x7f0000000080)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e22, 0x3, @mcast2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x4) syz_usb_connect(0x0, 0x2d, &(0x7f0000000a00)={{0x12, 0x1, 0x0, 0xa4, 0xba, 0x17, 0x40, 0xc4b, 0x100, 0xcdcc, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xd7, 0xc4, 0x89, 0x0, [], [{{0x9, 0x5, 0xe, 0x2}}]}}]}}]}}, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0xfd, 0x0, 0xfffff034}, {0x50, 0x0, 0x0, 0xfffffffd}, {0x86, 0x0, 0x0, 0x400}]}, 0x8) 3.981409555s ago: executing program 2 (id=3779): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) io_setup(0x4, &(0x7f00000014c0)=0x0) syz_open_procfs(0x0, 0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) r2 = dup(0xffffffffffffffff) prlimit64(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet(0x2, 0x3, 0x4) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'team_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mq={0x7}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}]}, @TCA_RATE={0x6}]}, 0x58}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) preadv(r0, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) syz_open_dev$video4linux(&(0x7f0000000040), 0x5, 0x0) ioctl$VIDIOC_SUBDEV_S_CROP(r2, 0xc038563c, &(0x7f00000000c0)={0x0, 0x0, {0x10, 0xa, 0x7ff}}) r6 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r6, 0x0) ppoll(&(0x7f0000000040)=[{r6}], 0x1, &(0x7f0000000080)={0x0, 0x989680}, 0x0, 0x0) move_pages(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r7, 0x0, 0x0, 0x2409c884, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) sendto$inet6(r7, 0x0, 0x0, 0x240000b4, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) 225.972518ms ago: executing program 0 (id=3780): socket(0x10, 0x80002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @private}}, 0x80, 0x0, 0x0, &(0x7f0000000100)=[{0x10, 0x110, 0x1}], 0x10}, 0x8000) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000340)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r1, 0xc0182101, &(0x7f0000000180)={r2}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000080)={0x0, 0x3, r1, 0x5}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = socket$l2tp(0x2, 0x2, 0x73) syz_emit_ethernet(0xfdef, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff08004500002800000000003c907800"/38, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000290780000"], 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000d00000000080000000850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00', r6}, 0x10) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000040)={0x1000}, 0x10) write(r7, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0200000000", 0x41d) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @rand_addr=0x64010102}, 0x10) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r8 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r4, 0x8208ae63, &(0x7f00000003c0)={0x0, 0x0, @pic={0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x40000000000, 0x9, 0x0, 0x0, 0x0, 0x5000000, 0x2, 0x0, 0x2, 0x0, 0x2, 0x40, 0x0, 0x4], 0x0, 0x2}) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f0000000140)={[0x3, 0x9, 0xb, 0x7, 0x7, 0x81, 0xbaf5, 0x101, 0x9, 0x815, 0x6, 0x7, 0x45c, 0x80000001, 0x1, 0xaa9], 0x12000, 0x80000}) recvfrom$inet(r5, &(0x7f0000000040)=""/25, 0x19, 0x40003120, 0x0, 0x0) 0s ago: executing program 1 (id=3781): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmsg$kcm(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000780)=""/226, 0xe2}, {&(0x7f00000003c0)=""/219, 0xdb}, {&(0x7f00000004c0)=""/113, 0x71}], 0x3}, 0x0) sendmsg$TEAM_CMD_NOOP(r1, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="9a6739095293ce45c8f40e2c91be3d2133df02cbd6b16578b45c83ebc757fc5bcc6959ff7e58976d3089df70fcb63d60b099d3dbad1ee69f75e0480e537903aee2d9b66e8584b6a8b3168b7c0fa7285e9bfb76d31b59bbcf4c68c7d0702ae5a0ddf37a376df34c6934a05994e1ddf3dcb634d7cb762d827e7c009f6adaac650583a91f75be37ef878c8359317fc3b8dc4befed62a8e8ff93752f38e1040bc9b7a7e5a52042951d23a5d294cb73"], 0x6a4}, 0x1, 0x0, 0x0, 0x20040004}, 0x0) kernel console output (not intermixed with test programs): 1253.057992][ T5096] hid-generic 0003:0158:0100.0071: unknown main item tag 0x0 [ 1253.065438][ T5096] hid-generic 0003:0158:0100.0071: unknown main item tag 0x0 [ 1253.078274][T19278] usb 4-1: config 0 descriptor?? [ 1253.085939][ T5096] hid-generic 0003:0158:0100.0071: unknown main item tag 0x0 [ 1253.094058][ T5096] hid-generic 0003:0158:0100.0071: unknown main item tag 0x0 [ 1253.101906][T23835] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1253.109227][ T5096] hid-generic 0003:0158:0100.0071: unknown main item tag 0x0 [ 1253.117717][T11330] Bluetooth: hci0: command tx timeout [ 1253.119966][ T9] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1253.136621][ T5096] hid-generic 0003:0158:0100.0071: unknown main item tag 0x0 [ 1253.144186][ T5096] hid-generic 0003:0158:0100.0071: unknown main item tag 0x0 [ 1253.146730][ T2889] hsr_slave_1: left promiscuous mode [ 1253.163077][T19278] hub 4-1:0.0: USB hub found [ 1253.169831][ T5096] hid-generic 0003:0158:0100.0071: unknown main item tag 0x0 [ 1253.179761][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1253.180658][ T5096] hid-generic 0003:0158:0100.0071: unknown main item tag 0x0 [ 1253.207906][ T5096] hid-generic 0003:0158:0100.0071: unknown main item tag 0x0 [ 1253.215425][ T5096] hid-generic 0003:0158:0100.0071: unknown main item tag 0x2 [ 1253.237743][ T9] usb 3-1: config 0 descriptor?? [ 1253.249468][ T2889] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1253.259731][ T2889] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1253.262114][ T9] cp210x 3-1:0.0: cp210x converter detected [ 1253.267108][ T5096] hid-generic 0003:0158:0100.0071: unknown main item tag 0x0 [ 1253.267171][ T5096] hid-generic 0003:0158:0100.0071: unknown main item tag 0x0 [ 1253.267200][ T5096] hid-generic 0003:0158:0100.0071: unknown main item tag 0x0 [ 1253.267229][ T5096] hid-generic 0003:0158:0100.0071: unknown main item tag 0x0 [ 1253.267258][ T5096] hid-generic 0003:0158:0100.0071: unknown main item tag 0x0 [ 1253.267317][ T5096] hid-generic 0003:0158:0100.0071: unknown main item tag 0x0 [ 1253.267347][ T5096] hid-generic 0003:0158:0100.0071: unknown main item tag 0x0 [ 1253.267375][ T5096] hid-generic 0003:0158:0100.0071: unknown main item tag 0x0 [ 1253.267403][ T5096] hid-generic 0003:0158:0100.0071: unknown main item tag 0x0 [ 1253.267456][ T5096] hid-generic 0003:0158:0100.0071: unknown main item tag 0x0 [ 1253.267486][ T5096] hid-generic 0003:0158:0100.0071: unknown main item tag 0x0 [ 1253.267515][ T5096] hid-generic 0003:0158:0100.0071: unknown main item tag 0x0 [ 1253.267544][ T5096] hid-generic 0003:0158:0100.0071: unknown main item tag 0x0 [ 1253.267597][ T5096] hid-generic 0003:0158:0100.0071: unknown main item tag 0x0 [ 1253.267644][ T5096] hid-generic 0003:0158:0100.0071: unknown main item tag 0x0 [ 1253.267674][ T5096] hid-generic 0003:0158:0100.0071: unknown main item tag 0x0 [ 1253.267704][ T5096] hid-generic 0003:0158:0100.0071: unknown main item tag 0x0 [ 1253.267760][ T5096] hid-generic 0003:0158:0100.0071: unknown main item tag 0x0 [ 1253.267790][ T5096] hid-generic 0003:0158:0100.0071: unknown main item tag 0x0 [ 1253.437493][ T2889] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1253.445094][ T2889] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1253.453089][ T5096] hid-generic 0003:0158:0100.0071: unknown main item tag 0x0 [ 1253.460963][T19278] hub 4-1:0.0: config failed, can't read hub descriptor (err -22) [ 1253.501262][ T2889] veth1_macvtap: left promiscuous mode [ 1253.507881][ T2889] veth0_macvtap: left promiscuous mode [ 1253.513571][ T5096] hid-generic 0003:0158:0100.0071: unknown main item tag 0x0 [ 1253.521584][ T2889] veth0_vlan: left promiscuous mode [ 1253.527975][ T5096] hid-generic 0003:0158:0100.0071: unknown main item tag 0x0 [ 1253.535716][ T5096] hid-generic 0003:0158:0100.0071: unknown main item tag 0x0 [ 1253.567165][ T5096] hid-generic 0003:0158:0100.0071: unknown main item tag 0x0 [ 1253.574764][ T5096] hid-generic 0003:0158:0100.0071: unknown main item tag 0x0 [ 1253.607541][ T5096] hid-generic 0003:0158:0100.0071: unknown main item tag 0x0 [ 1253.615021][ T5096] hid-generic 0003:0158:0100.0071: unknown main item tag 0x0 [ 1253.646628][ T5096] hid-generic 0003:0158:0100.0071: unknown main item tag 0x0 [ 1253.654126][ T5096] hid-generic 0003:0158:0100.0071: unknown main item tag 0x0 [ 1253.670630][ T5096] hid-generic 0003:0158:0100.0071: unknown main item tag 0x0 [ 1253.676474][ T9] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 1253.681813][ T5096] hid-generic 0003:0158:0100.0071: unknown main item tag 0x0 [ 1253.693065][ T5096] hid-generic 0003:0158:0100.0071: unknown main item tag 0x0 [ 1253.700884][T23835] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1253.701225][T23835] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1253.709881][ T9] cp210x 3-1:0.0: failed to get vendor val 0x370c size 73: -121 [ 1253.727406][ T5096] hid-generic 0003:0158:0100.0071: unknown main item tag 0x0 [ 1253.735239][ T5096] hid-generic 0003:0158:0100.0071: unknown main item tag 0x0 [ 1253.741759][ T9] cp210x 3-1:0.0: GPIO initialisation failed: -121 [ 1253.748758][ T5096] hid-generic 0003:0158:0100.0071: unknown main item tag 0x0 [ 1253.768122][ T5096] hid-generic 0003:0158:0100.0071: unknown main item tag 0x0 [ 1253.768328][ T9] usb 3-1: cp210x converter now attached to ttyUSB0 [ 1253.775655][ T5096] hid-generic 0003:0158:0100.0071: unknown main item tag 0x0 [ 1253.809373][ T5096] hid-generic 0003:0158:0100.0071: unknown main item tag 0x0 [ 1253.823247][ T5096] hid-generic 0003:0158:0100.0071: unknown main item tag 0x0 [ 1253.833358][ T25] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 1253.857725][ T5096] hid-generic 0003:0158:0100.0071: unknown main item tag 0x0 [ 1253.865463][ T5096] hid-generic 0003:0158:0100.0071: unknown main item tag 0x0 [ 1253.874713][ T5096] hid-generic 0003:0158:0100.0071: unknown main item tag 0x0 [ 1253.882527][ T5096] hid-generic 0003:0158:0100.0071: unknown main item tag 0x0 [ 1253.890193][ T5096] hid-generic 0003:0158:0100.0071: unknown main item tag 0x0 [ 1253.897976][ T5096] hid-generic 0003:0158:0100.0071: unknown main item tag 0x0 [ 1253.929854][T19278] hid-generic 0003:046D:C314.0072: hidraw0: USB HID v8.00 Device [HID 046d:c314] on usb-dummy_hcd.3-1/input0 [ 1253.948973][ T5096] hid-generic 0003:0158:0100.0071: unknown main item tag 0x0 [ 1253.964049][ T5096] hid-generic 0003:0158:0100.0071: unknown main item tag 0x0 [ 1253.974683][ T5645] usb 3-1: USB disconnect, device number 27 [ 1253.980133][ T5096] hid-generic 0003:0158:0100.0071: unknown main item tag 0x0 [ 1253.990270][ T5096] hid-generic 0003:0158:0100.0071: unknown main item tag 0x0 [ 1254.007465][ T5096] hid-generic 0003:0158:0100.0071: unknown main item tag 0x0 [ 1254.015334][ T5096] hid-generic 0003:0158:0100.0071: unknown main item tag 0x0 [ 1254.033644][ T5096] hid-generic 0003:0158:0100.0071: unknown main item tag 0x0 [ 1254.042308][ T5645] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1254.046232][ T5096] hid-generic 0003:0158:0100.0071: unknown main item tag 0x0 [ 1254.060602][ T25] usb 2-1: Using ep0 maxpacket: 32 [ 1254.070905][ T5645] cp210x 3-1:0.0: device disconnected [ 1254.079474][ T25] usb 2-1: config 11 has an invalid interface number: 101 but max is 2 [ 1254.088391][ T25] usb 2-1: config 11 has an invalid interface number: 170 but max is 2 [ 1254.098518][ T25] usb 2-1: config 11 has an invalid interface number: 139 but max is 2 [ 1254.109155][ T25] usb 2-1: config 11 has no interface number 0 [ 1254.115545][ T5096] hid-generic 0003:0158:0100.0071: unknown main item tag 0x0 [ 1254.123575][ T25] usb 2-1: config 11 has no interface number 1 [ 1254.131868][ T25] usb 2-1: config 11 has no interface number 2 [ 1254.153636][ T5096] hid-generic 0003:0158:0100.0071: unknown main item tag 0x0 [ 1254.162962][ T25] usb 2-1: config 11 interface 101 altsetting 2 bulk endpoint 0x6 has invalid maxpacket 8 [ 1254.174473][ T5096] hid-generic 0003:0158:0100.0071: unknown main item tag 0x0 [ 1254.194253][ T5096] hid-generic 0003:0158:0100.0071: unknown main item tag 0x0 [ 1254.202175][ T25] usb 2-1: config 11 interface 101 altsetting 2 has a duplicate endpoint with address 0x6, skipping [ 1254.246969][ T5096] hid-generic 0003:0158:0100.0071: unknown main item tag 0x0 [ 1254.259147][ T5096] hid-generic 0003:0158:0100.0071: unknown main item tag 0x0 [ 1254.272001][ T25] usb 2-1: config 11 interface 101 altsetting 2 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 1254.288686][ T5096] hid-generic 0003:0158:0100.0071: unknown main item tag 0x0 [ 1254.296221][ T25] usb 2-1: config 11 interface 101 altsetting 2 endpoint 0x8B has invalid maxpacket 512, setting to 64 [ 1254.309760][ T5096] hid-generic 0003:0158:0100.0071: unknown main item tag 0x0 [ 1254.318066][ T5096] hid-generic 0003:0158:0100.0071: unknown main item tag 0x0 [ 1254.325610][ T5096] hid-generic 0003:0158:0100.0071: unknown main item tag 0x0 [ 1254.333205][ T25] usb 2-1: config 11 interface 101 altsetting 2 has a duplicate endpoint with address 0xB, skipping [ 1254.344145][ T5096] hid-generic 0003:0158:0100.0071: unknown main item tag 0x0 [ 1254.351706][ T25] usb 2-1: config 11 interface 101 altsetting 2 endpoint 0xE has invalid maxpacket 512, setting to 64 [ 1254.366635][ T5096] hid-generic 0003:0158:0100.0071: unknown main item tag 0x0 [ 1254.384370][ T5096] hid-generic 0003:0158:0100.0071: unknown main item tag 0x0 [ 1254.395908][ T25] usb 2-1: config 11 interface 101 altsetting 2 has a duplicate endpoint with address 0xC, skipping [ 1254.413499][ T5096] hid-generic 0003:0158:0100.0071: unknown main item tag 0x0 [ 1254.426884][ T25] usb 2-1: config 11 interface 101 altsetting 2 has a duplicate endpoint with address 0xB, skipping [ 1254.438233][ T5096] hid-generic 0003:0158:0100.0071: unknown main item tag 0x0 [ 1254.445664][ T5096] hid-generic 0003:0158:0100.0071: unknown main item tag 0x0 [ 1254.453253][ T25] usb 2-1: config 11 interface 170 altsetting 2 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 1254.464594][ T5096] hid-generic 0003:0158:0100.0071: unknown main item tag 0x0 [ 1254.478386][ T25] usb 2-1: config 11 interface 170 altsetting 2 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 1254.494940][ T5096] hid-generic 0003:0158:0100.0071: unknown main item tag 0x0 [ 1254.523175][ T5096] hid-generic 0003:0158:0100.0071: unknown main item tag 0x0 [ 1254.531110][ T25] usb 2-1: config 11 interface 170 altsetting 2 has a duplicate endpoint with address 0x5, skipping [ 1254.542330][ T5096] hid-generic 0003:0158:0100.0071: unknown main item tag 0x0 [ 1254.550090][ T25] usb 2-1: config 11 interface 170 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 1254.561651][ T5096] hid-generic 0003:0158:0100.0071: unknown main item tag 0x0 [ 1254.569507][ T25] usb 2-1: config 11 interface 170 altsetting 2 has a duplicate endpoint with address 0x5, skipping [ 1254.580869][ T5096] hid-generic 0003:0158:0100.0071: unknown main item tag 0x0 [ 1254.588663][ T5096] hid-generic 0003:0158:0100.0071: unknown main item tag 0x0 [ 1254.596173][ T25] usb 2-1: config 11 interface 170 altsetting 2 has a duplicate endpoint with address 0x2, skipping [ 1254.611516][ T5096] hid-generic 0003:0158:0100.0071: unknown main item tag 0x0 [ 1254.623368][ T25] usb 2-1: config 11 interface 170 altsetting 2 has a duplicate endpoint with address 0xC, skipping [ 1254.634531][ T5096] hid-generic 0003:0158:0100.0071: unknown main item tag 0x0 [ 1254.642488][ T5096] hid-generic 0003:0158:0100.0071: unknown main item tag 0x0 [ 1254.650425][ T25] usb 2-1: config 11 interface 139 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 1254.668759][ T5096] hid-generic 0003:0158:0100.0071: unknown main item tag 0x0 [ 1254.676308][ T25] usb 2-1: config 11 interface 139 altsetting 7 has a duplicate endpoint with address 0xA, skipping [ 1254.687505][ T5096] hid-generic 0003:0158:0100.0071: unknown main item tag 0x0 [ 1254.694953][ T5096] hid-generic 0003:0158:0100.0071: unknown main item tag 0x0 [ 1254.709004][ T25] usb 2-1: config 11 interface 139 altsetting 7 has a duplicate endpoint with address 0x2, skipping [ 1254.726285][ T5096] hid-generic 0003:0158:0100.0071: unknown main item tag 0x0 [ 1254.743645][ T25] usb 2-1: config 11 interface 139 altsetting 7 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 1254.755055][ T5096] hid-generic 0003:0158:0100.0071: unknown main item tag 0x0 [ 1254.762592][ T5096] hid-generic 0003:0158:0100.0071: unknown main item tag 0x0 [ 1254.770368][ T25] usb 2-1: config 11 interface 139 altsetting 7 has a duplicate endpoint with address 0xA, skipping [ 1254.781305][ T5096] hid-generic 0003:0158:0100.0071: unknown main item tag 0x0 [ 1254.788794][ T25] usb 2-1: config 11 interface 139 altsetting 7 has a duplicate endpoint with address 0x1, skipping [ 1254.799886][ T5096] hid-generic 0003:0158:0100.0071: unknown main item tag 0x0 [ 1254.807544][ T5096] hid-generic 0003:0158:0100.0071: unknown main item tag 0x0 [ 1254.815047][ T25] usb 2-1: config 11 interface 139 altsetting 7 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 1254.840334][ T5096] hid-generic 0003:0158:0100.0071: unknown main item tag 0x0 [ 1254.851468][ T25] usb 2-1: config 11 interface 139 altsetting 7 has a duplicate endpoint with address 0x9, skipping [ 1254.862515][ T5096] hid-generic 0003:0158:0100.0071: unknown main item tag 0x0 [ 1254.875475][ T5096] hid-generic 0003:0158:0100.0071: unknown main item tag 0x0 [ 1254.883217][ T25] usb 2-1: config 11 interface 139 altsetting 7 has a duplicate endpoint with address 0xC, skipping [ 1254.894868][ T5096] hid-generic 0003:0158:0100.0071: unknown main item tag 0x0 [ 1254.902483][ T25] usb 2-1: config 11 interface 139 altsetting 7 has a duplicate endpoint with address 0xC, skipping [ 1254.913827][ T5096] hid-generic 0003:0158:0100.0071: unknown main item tag 0x0 [ 1254.932656][ T5096] hid-generic 0003:0158:0100.0071: unknown main item tag 0x0 [ 1254.957039][ T25] usb 2-1: config 11 interface 139 altsetting 7 has a duplicate endpoint with address 0xB, skipping [ 1254.971718][ T5096] hid-generic 0003:0158:0100.0071: unknown main item tag 0x0 [ 1254.982263][ T25] usb 2-1: config 11 interface 139 altsetting 7 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 1254.996634][ T5096] hid-generic 0003:0158:0100.0071: unknown main item tag 0x0 [ 1255.017801][ T5096] hid-generic 0003:0158:0100.0071: unknown main item tag 0x0 [ 1255.028526][ T25] usb 2-1: config 11 interface 139 altsetting 7 has a duplicate endpoint with address 0x7, skipping [ 1255.039719][ T5096] hid-generic 0003:0158:0100.0071: unknown main item tag 0x0 [ 1255.054015][ T25] usb 2-1: config 11 interface 101 has no altsetting 0 [ 1255.061226][ T5096] hid-generic 0003:0158:0100.0071: unknown main item tag 0x0 [ 1255.070863][ T25] usb 2-1: config 11 interface 170 has no altsetting 0 [ 1255.081292][ T5096] hid-generic 0003:0158:0100.0071: unknown main item tag 0x0 [ 1255.089163][ T25] usb 2-1: config 11 interface 139 has no altsetting 0 [ 1255.096176][ T5096] hid-generic 0003:0158:0100.0071: unknown main item tag 0x0 [ 1255.108334][ T5096] hid-generic 0003:0158:0100.0071: unknown main item tag 0x0 [ 1255.117710][ T5096] hid-generic 0003:0158:0100.0071: unknown main item tag 0x0 [ 1255.126139][ T25] usb 2-1: Dual-Role OTG device on HNP port [ 1255.137187][ T5096] hid-generic 0003:0158:0100.0071: unknown main item tag 0x0 [ 1255.145107][ T25] usb 2-1: New USB device found, idVendor=1b3d, idProduct=0154, bcdDevice=3f.49 [ 1255.155425][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1255.166190][ T5096] hid-generic 0003:0158:0100.0071: unknown main item tag 0x0 [ 1255.175064][ T25] usb 2-1: Product: 뉦珝㳩냺荴螺ᥖ朌ꈂ勄쳡细鬄䝮埖祣魛毘℺ጚ綢曝㱫톏乀쁾ꈣ鑺鉐⾇땵替᭍ቤᮨ唳ꈀ퍬㪓ꍤ⣎뎨掤謓鮒ʏ䌳䥌潱ṇ쀛恛⡝矿Ї캘ꊶﳧ㴷쬯⨥覮䫯ꩭᯔ꾍ꏒ笿횫 [ 1255.199532][ T5096] hid-generic 0003:0158:0100.0071: unknown main item tag 0x0 [ 1255.209863][T11330] Bluetooth: hci0: command tx timeout [ 1255.216028][ T5096] hid-generic 0003:0158:0100.0071: unknown main item tag 0x0 [ 1255.224519][ T5096] hid-generic 0003:0158:0100.0071: unknown main item tag 0x0 [ 1255.236124][ T25] usb 2-1: Manufacturer: ꥦ⻥蒒ᔚ罢㪱묒᎞ᵜ栐ꭋࣅ藘옟ἦщ떭䰓᩼㼪ს辣䕎랂汬捀吙Ɗጇ栞ﰴ悇텖⑕蕀㩻鍽㭑粞肞眓ዺ⃄梽斕뵶᠁懴礈Ԉ擷镛斛羸栗ᩦ샣 [ 1255.256352][ T5096] hid-generic 0003:0158:0100.0071: unknown main item tag 0x0 [ 1255.264500][ T5096] hid-generic 0003:0158:0100.0071: unknown main item tag 0x0 [ 1255.273674][ T5096] hid-generic 0003:0158:0100.0071: unknown main item tag 0x0 [ 1255.282051][ T25] usb 2-1: SerialNumber: syz [ 1255.287114][ T5096] hid-generic 0003:0158:0100.0071: unknown main item tag 0x0 [ 1255.298662][T23861] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 1255.308231][ T5096] hid-generic 0003:0158:0100.0071: unknown main item tag 0x0 [ 1255.308357][ T2889] team0 (unregistering): Port device team_slave_1 removed [ 1255.315854][ T5096] hid-generic 0003:0158:0100.0071: unknown main item tag 0x0 [ 1255.339797][ T5096] hid-generic 0003:0158:0100.0071: unknown main item tag 0x0 [ 1255.347501][ T5096] hid-generic 0003:0158:0100.0071: unexpected long global item [ 1255.356439][ T5096] hid-generic 0003:0158:0100.0071: probe with driver hid-generic failed with error -22 [ 1255.376394][ T5096] usb 5-1: USB disconnect, device number 9 [ 1255.468550][ T2889] team0 (unregistering): Port device team_slave_0 removed [ 1255.628451][ T25] ftdi_sio 2-1:11.101: FTDI USB Serial Device converter detected [ 1255.649831][ T25] ftdi_sio ttyUSB0: unknown device type: 0x3f49 [ 1255.676266][ T5645] usb 4-1: reset high-speed USB device number 44 using dummy_hcd [ 1255.701691][ T25] ftdi_sio 2-1:11.170: FTDI USB Serial Device converter detected [ 1255.727701][ T25] ftdi_sio ttyUSB1: unknown device type: 0x3f49 [ 1255.767789][ T25] ftdi_sio 2-1:11.139: FTDI USB Serial Device converter detected [ 1255.785356][ T25] ftdi_sio ttyUSB2: unknown device type: 0x3f49 [ 1255.802620][ T25] usb 2-1: USB disconnect, device number 47 [ 1255.841843][ T25] ftdi_sio 2-1:11.101: device disconnected [ 1255.873350][ T25] ftdi_sio 2-1:11.170: device disconnected [ 1255.898645][ T25] ftdi_sio 2-1:11.139: device disconnected [ 1256.940509][T23809] chnl_net:caif_netlink_parms(): no params data found [ 1257.059182][T23882] sg_write: data in/out 196608/1 bytes for SCSI command 0xf2-- guessing data in; [ 1257.059182][T23882] program syz.1.3666 not setting count and/or reply_len properly [ 1257.226772][T11330] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 1257.235621][T11330] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 1257.285774][T11330] Bluetooth: hci3: unexpected event for opcode 0x0c20 [ 1257.292881][T11330] Bluetooth: hci0: command tx timeout [ 1257.457495][ T5096] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 1257.528814][T23894] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3667'. [ 1257.573887][T23809] bridge0: port 1(bridge_slave_0) entered blocking state [ 1257.601611][T23809] bridge0: port 1(bridge_slave_0) entered disabled state [ 1257.616922][T23809] bridge_slave_0: entered allmulticast mode [ 1257.623477][ T9] usb 4-1: USB disconnect, device number 44 [ 1257.645278][T23809] bridge_slave_0: entered promiscuous mode [ 1257.685734][T23809] bridge0: port 2(bridge_slave_1) entered blocking state [ 1257.704451][ T5096] usb 2-1: config 44 has too many interfaces: 150, using maximum allowed: 32 [ 1257.726001][ T5096] usb 2-1: config 44 has an invalid descriptor of length 17, skipping remainder of the config [ 1257.737968][T23809] bridge0: port 2(bridge_slave_1) entered disabled state [ 1257.770512][T23809] bridge_slave_1: entered allmulticast mode [ 1257.779982][ T5096] usb 2-1: config 44 has 0 interfaces, different from the descriptor's value: 150 [ 1257.792273][T23809] bridge_slave_1: entered promiscuous mode [ 1257.810060][ T5096] usb 2-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 1257.830023][ T5096] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1258.019093][T23809] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1258.051048][T23809] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1258.072913][T23882] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1258.107023][T23882] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1258.132184][T11330] Bluetooth: hci2: link tx timeout [ 1258.139328][T11330] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1258.157511][ T5096] usb 2-1: string descriptor 0 read error: -71 [ 1258.188578][ T5096] usb 2-1: USB disconnect, device number 48 [ 1258.273467][T23809] team0: Port device team_slave_0 added [ 1258.298795][T23809] team0: Port device team_slave_1 added [ 1258.444476][T23809] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1258.466586][T23809] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1258.536582][T23809] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1258.584036][T23809] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1258.602601][T23809] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1258.694053][T11330] Bluetooth: hci1: SCO packet for unknown connection handle 0 [ 1258.706787][T23809] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1259.023553][T23809] hsr_slave_0: entered promiscuous mode [ 1259.058867][T23809] hsr_slave_1: entered promiscuous mode [ 1259.065495][T23923] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3673'. [ 1259.086086][T23923] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3673'. [ 1259.097488][T23809] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1259.105133][T23809] Cannot create hsr debugfs directory [ 1259.217668][T23469] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1259.232561][T23469] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1259.241443][T23469] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1259.251253][T23469] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1259.262875][T23469] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1259.271717][T23469] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1259.396698][ T5645] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 1259.589069][ T5645] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1259.600029][ T5645] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1259.629232][ T5645] usb 3-1: config 0 descriptor?? [ 1260.016754][ T9] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 1260.157203][T11330] Bluetooth: hci2: command 0x0406 tx timeout [ 1260.228526][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1260.235371][ T9] usb 5-1: New USB device found, idVendor=0582, idProduct=00c4, bcdDevice=ac.5f [ 1260.250183][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1260.268175][ T9] usb 5-1: config 0 descriptor?? [ 1260.280574][ T9] usb 5-1: selecting invalid altsetting 0 [ 1260.295056][ T2889] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1260.321129][ T5645] [drm] vendor descriptor length:b9 data:20 30 c4 a4 1b 38 94 62 92 09 29 [ 1260.348303][ T5645] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 1260.364978][ T5645] [drm:udl_init] *ERROR* Selecting channel failed [ 1260.412326][ T5645] [drm] Initialized udl 0.0.1 20120220 for 3-1:0.0 on minor 2 [ 1260.431585][ T5645] [drm] Initialized udl on minor 2 [ 1260.446787][ T5645] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1260.486431][ T5645] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 1260.496703][ T9] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1260.516936][ T9] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1260.525360][ T9] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 1260.544532][ T5645] usb 3-1: USB disconnect, device number 28 [ 1260.605013][ T5096] usb 5-1: USB disconnect, device number 10 [ 1260.734333][ T2889] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1260.764532][T23931] chnl_net:caif_netlink_parms(): no params data found [ 1260.850883][ T2889] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1261.019469][ T2889] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1261.252040][T23931] bridge0: port 1(bridge_slave_0) entered blocking state [ 1261.257094][T23949] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3679'. [ 1261.305719][T23931] bridge0: port 1(bridge_slave_0) entered disabled state [ 1261.324839][T23931] bridge_slave_0: entered allmulticast mode [ 1261.353307][T23931] bridge_slave_0: entered promiscuous mode [ 1261.367501][ T5100] Bluetooth: hci3: command tx timeout [ 1261.433788][T23931] bridge0: port 2(bridge_slave_1) entered blocking state [ 1261.485814][T23931] bridge0: port 2(bridge_slave_1) entered disabled state [ 1261.505440][T23931] bridge_slave_1: entered allmulticast mode [ 1261.514669][T23931] bridge_slave_1: entered promiscuous mode [ 1261.750645][T23809] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1261.788145][T23809] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1261.827224][T23931] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1261.857093][ T5100] Bluetooth: hci4: SCO packet for unknown connection handle 0 [ 1261.889824][T23931] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1261.915369][ T5100] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 1261.987016][T23809] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1262.119725][ T9] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 1262.193703][T23809] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1262.214629][ T2889] bridge_slave_1: left allmulticast mode [ 1262.222003][ T2889] bridge_slave_1: left promiscuous mode [ 1262.234802][ T2889] bridge0: port 2(bridge_slave_1) entered disabled state [ 1262.254416][ T2889] bridge_slave_0: left allmulticast mode [ 1262.262613][ T2889] bridge_slave_0: left promiscuous mode [ 1262.275131][ T2889] bridge0: port 1(bridge_slave_0) entered disabled state [ 1262.340000][ T9] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1262.357954][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1262.380927][ T9] usb 2-1: config 0 descriptor?? [ 1262.392936][T11330] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1262.404016][T11330] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1262.414694][T11330] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1262.416344][ T9] cp210x 2-1:0.0: cp210x converter detected [ 1262.437492][T11330] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1262.445514][T11330] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1262.453282][T11330] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1262.825725][ T9] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 1262.847183][ T9] cp210x 2-1:0.0: failed to get vendor val 0x370c size 73: -121 [ 1262.855916][ T9] cp210x 2-1:0.0: GPIO initialisation failed: -121 [ 1262.875993][ T9] usb 2-1: cp210x converter now attached to ttyUSB0 [ 1262.988327][ T2889] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1263.006074][ T2889] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1263.023907][ T2889] bond0 (unregistering): Released all slaves [ 1263.041963][T23931] team0: Port device team_slave_0 added [ 1263.080713][ T5151] usb 2-1: USB disconnect, device number 49 [ 1263.123721][ T5151] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1263.147952][ T5151] cp210x 2-1:0.0: device disconnected [ 1263.155067][T23931] team0: Port device team_slave_1 added [ 1263.195274][ T2889] : left promiscuous mode [ 1263.269746][T23931] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1263.277477][T23931] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1263.304228][T23931] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1263.360287][T23931] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1263.367744][T23931] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1263.400481][T23931] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1263.436895][T11330] Bluetooth: hci3: command tx timeout [ 1263.599464][T23931] hsr_slave_0: entered promiscuous mode [ 1263.607485][T23931] hsr_slave_1: entered promiscuous mode [ 1263.614534][T23931] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1263.633843][T23931] Cannot create hsr debugfs directory [ 1263.946170][T23983] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3688'. [ 1263.964778][ T2889] hsr_slave_0: left promiscuous mode [ 1263.966684][T23983] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3688'. [ 1263.982233][ T2889] hsr_slave_1: left promiscuous mode [ 1263.994984][ T2889] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1264.023957][ T2889] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1264.047700][ T2889] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1264.064935][ T2889] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1264.125328][ T2889] veth1_macvtap: left promiscuous mode [ 1264.137290][ T2889] veth0_macvtap: left promiscuous mode [ 1264.143696][ T2889] veth1_vlan: left promiscuous mode [ 1264.149333][ T2889] veth0_vlan: left promiscuous mode [ 1264.276728][T16938] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 1264.304534][T11330] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 1264.333539][T11330] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 1264.366383][T11330] Bluetooth: hci4: unexpected event for opcode 0x0c20 [ 1264.488852][T16938] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1264.516654][T16938] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1264.554764][T16938] usb 2-1: config 0 descriptor?? [ 1264.568544][T11330] Bluetooth: hci1: command tx timeout [ 1264.576949][T23998] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3690'. [ 1265.325506][T16938] [drm] vendor descriptor length:b9 data:20 30 c4 a4 1b 38 94 62 92 09 29 [ 1265.338611][T16938] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 1265.350598][T16938] [drm:udl_init] *ERROR* Selecting channel failed [ 1265.359388][ T2889] team0 (unregistering): Port device team_slave_1 removed [ 1265.399845][T16938] [drm] Initialized udl 0.0.1 20120220 for 2-1:0.0 on minor 2 [ 1265.408062][T16938] [drm] Initialized udl on minor 2 [ 1265.425451][T16938] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1265.439590][T16938] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 1265.477342][ T5645] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1265.485707][T16938] usb 2-1: USB disconnect, device number 50 [ 1265.514687][ T5645] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 1265.526926][T11330] Bluetooth: hci3: command tx timeout [ 1265.549912][ T2889] team0 (unregistering): Port device team_slave_0 removed [ 1266.646685][T11330] Bluetooth: hci1: command tx timeout [ 1266.788524][T23809] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1266.798362][T23970] chnl_net:caif_netlink_parms(): no params data found [ 1267.061589][T23809] 8021q: adding VLAN 0 to HW filter on device team0 [ 1267.399818][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 1267.407041][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1267.449416][T24063] random: crng reseeded on system resumption [ 1267.459617][ T5096] bridge0: port 2(bridge_slave_1) entered blocking state [ 1267.466922][ T5096] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1267.542827][T23970] bridge0: port 1(bridge_slave_0) entered blocking state [ 1267.560853][T23970] bridge0: port 1(bridge_slave_0) entered disabled state [ 1267.586383][T23970] bridge_slave_0: entered allmulticast mode [ 1267.596890][T11330] Bluetooth: hci3: command tx timeout [ 1267.612084][T23970] bridge_slave_0: entered promiscuous mode [ 1267.700488][T23970] bridge0: port 2(bridge_slave_1) entered blocking state [ 1267.727482][T23970] bridge0: port 2(bridge_slave_1) entered disabled state [ 1267.734838][T23970] bridge_slave_1: entered allmulticast mode [ 1267.778901][T23970] bridge_slave_1: entered promiscuous mode [ 1267.911326][ T2889] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1268.089935][ T5100] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1268.101064][ T5100] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1268.112649][ T5100] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1268.125709][T23970] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1268.149654][ T5100] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1268.159987][ T5100] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1268.184389][ T5100] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1268.298459][ T2889] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1268.336129][T23970] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1268.525273][T11330] Bluetooth: hci2: unexpected event for opcode 0x080e [ 1268.545986][ T2889] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1268.719475][T11330] Bluetooth: hci1: command tx timeout [ 1268.751853][ T2889] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1268.793138][T23970] team0: Port device team_slave_0 added [ 1268.851309][T23809] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1268.859020][T23931] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1268.878120][T23931] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1268.900626][T23931] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1268.914405][T23931] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1268.944186][T23970] team0: Port device team_slave_1 added [ 1269.023770][T23970] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1269.046699][T23970] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1269.072719][ C0] vkms_vblank_simulate: vblank timer overrun [ 1269.081819][T23970] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1269.126401][T23970] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1269.139303][T23970] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1269.170586][T23970] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1269.377818][T11330] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 1269.388163][T11330] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 1269.409826][T23970] hsr_slave_0: entered promiscuous mode [ 1269.411852][T11330] Bluetooth: hci2: unexpected event for opcode 0x0c20 [ 1269.424624][T23970] hsr_slave_1: entered promiscuous mode [ 1269.432931][T23970] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1269.440879][T23970] Cannot create hsr debugfs directory [ 1269.588860][ T2889] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1269.722073][T23809] veth0_vlan: entered promiscuous mode [ 1269.785831][ T2889] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1269.862499][ T2889] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1269.934840][T24080] chnl_net:caif_netlink_parms(): no params data found [ 1269.963812][T23809] veth1_vlan: entered promiscuous mode [ 1269.991442][ T2889] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1270.309701][T23809] veth0_macvtap: entered promiscuous mode [ 1270.317354][T11330] Bluetooth: hci4: command tx timeout [ 1270.469882][T24080] bridge0: port 1(bridge_slave_0) entered blocking state [ 1270.497254][T24080] bridge0: port 1(bridge_slave_0) entered disabled state [ 1270.504611][T24080] bridge_slave_0: entered allmulticast mode [ 1270.539027][T24080] bridge_slave_0: entered promiscuous mode [ 1270.569573][T24080] bridge0: port 2(bridge_slave_1) entered blocking state [ 1270.606875][T24080] bridge0: port 2(bridge_slave_1) entered disabled state [ 1270.614222][T24080] bridge_slave_1: entered allmulticast mode [ 1270.648890][T24080] bridge_slave_1: entered promiscuous mode [ 1270.669997][T23809] veth1_macvtap: entered promiscuous mode [ 1270.797026][T11330] Bluetooth: hci1: command tx timeout [ 1270.831773][T24080] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1270.873184][T23931] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1270.901372][T24080] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1270.914573][ T5100] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1270.926811][ T5100] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1270.935471][ T5100] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1270.958911][ T5100] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1270.976056][ T5100] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1270.983933][ T5100] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1271.138134][T24080] team0: Port device team_slave_0 added [ 1271.160095][T24080] team0: Port device team_slave_1 added [ 1271.215429][ T2889] bridge_slave_1: left allmulticast mode [ 1271.229040][ T2889] bridge_slave_1: left promiscuous mode [ 1271.234954][ T2889] bridge0: port 2(bridge_slave_1) entered disabled state [ 1271.268522][ T2889] bridge_slave_0: left allmulticast mode [ 1271.274464][ T2889] bridge_slave_0: left promiscuous mode [ 1271.282122][ T2889] bridge0: port 1(bridge_slave_0) entered disabled state [ 1271.295034][ T2889] bridge_slave_1: left allmulticast mode [ 1271.311447][ T2889] bridge_slave_1: left promiscuous mode [ 1271.322101][ T2889] bridge0: port 2(bridge_slave_1) entered disabled state [ 1271.332572][ T2889] bridge_slave_0: left allmulticast mode [ 1271.338712][ T2889] bridge_slave_0: left promiscuous mode [ 1271.344521][ T2889] bridge0: port 1(bridge_slave_0) entered disabled state [ 1272.252538][ T2889] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1272.265422][ T2889] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1272.276877][ T2889] bond0 (unregistering): Released all slaves [ 1272.397546][T11330] Bluetooth: hci4: command tx timeout [ 1272.443927][ T2889] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1272.457102][ T2889] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1272.469438][ T2889] bond0 (unregistering): Released all slaves [ 1272.597464][ T2889] : left promiscuous mode [ 1272.663370][T23809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1272.675148][T23809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1272.685077][T23809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1272.695561][T23809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1272.705487][T23809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1272.716244][T23809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1272.726741][T23809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1272.741781][T23809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1272.775841][T23809] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1272.790655][T23931] 8021q: adding VLAN 0 to HW filter on device team0 [ 1272.804790][T24080] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1272.816105][T24080] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1272.843870][T24080] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1272.857337][T24080] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1272.864352][T24080] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1272.890424][ C0] vkms_vblank_simulate: vblank timer overrun [ 1272.905834][T24080] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1273.040180][T11330] Bluetooth: hci2: command tx timeout [ 1273.091488][T16938] bridge0: port 1(bridge_slave_0) entered blocking state [ 1273.098686][T16938] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1273.176104][T23809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1273.187125][T23809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1273.206631][T23809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1273.217392][T23809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1273.227434][T23809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1273.238104][T23809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1273.248044][T23809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1273.259172][T23809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1273.271564][T23809] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1273.292047][T24080] hsr_slave_0: entered promiscuous mode [ 1273.299144][T24080] hsr_slave_1: entered promiscuous mode [ 1273.305461][T24080] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1273.313136][T24080] Cannot create hsr debugfs directory [ 1273.321459][T16938] bridge0: port 2(bridge_slave_1) entered blocking state [ 1273.328719][T16938] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1273.424892][T23809] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1273.437651][T23809] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1273.446484][T23809] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1273.455757][T23809] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1273.887036][T23970] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1273.903787][T23970] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1273.935423][ T2889] hsr_slave_0: left promiscuous mode [ 1273.951468][ T2889] hsr_slave_1: left promiscuous mode [ 1273.964196][ T2889] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1273.973454][ T2889] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1273.992631][ T2889] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1274.012283][ T2889] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1274.036000][ T2889] hsr_slave_0: left promiscuous mode [ 1274.046096][ T2889] hsr_slave_1: left promiscuous mode [ 1274.060363][ T2889] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1274.080210][ T2889] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1274.089637][ T2889] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1274.107597][ T2889] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1274.201045][ T2889] veth1_macvtap: left promiscuous mode [ 1274.207023][ T2889] veth0_macvtap: left promiscuous mode [ 1274.212733][ T2889] veth1_vlan: left promiscuous mode [ 1274.228097][ T2889] veth0_vlan: left promiscuous mode [ 1274.235137][ T2889] veth1_macvtap: left promiscuous mode [ 1274.259888][ T2889] veth0_macvtap: left promiscuous mode [ 1274.265662][ T2889] veth1_vlan: left promiscuous mode [ 1274.284635][ T2889] veth0_vlan: left promiscuous mode [ 1274.477514][T11330] Bluetooth: hci4: command tx timeout [ 1275.100341][ T2889] team0 (unregistering): Port device team_slave_1 removed [ 1275.123091][T11330] Bluetooth: hci2: command tx timeout [ 1275.172285][ T2889] team0 (unregistering): Port device team_slave_0 removed [ 1276.294352][ T2889] team0 (unregistering): Port device team_slave_1 removed [ 1276.363703][ T2889] team0 (unregistering): Port device team_slave_0 removed [ 1276.567022][T11330] Bluetooth: hci4: command tx timeout [ 1277.010629][T24116] chnl_net:caif_netlink_parms(): no params data found [ 1277.032261][T23970] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1277.149486][T23970] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1277.199384][T11330] Bluetooth: hci2: command tx timeout [ 1277.524135][T23931] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1277.543518][ T317] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1277.561688][ T317] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1277.591274][T24116] bridge0: port 1(bridge_slave_0) entered blocking state [ 1277.603073][T24116] bridge0: port 1(bridge_slave_0) entered disabled state [ 1277.611720][T24116] bridge_slave_0: entered allmulticast mode [ 1277.619926][T24116] bridge_slave_0: entered promiscuous mode [ 1277.628835][T24116] bridge0: port 2(bridge_slave_1) entered blocking state [ 1277.636008][T24116] bridge0: port 2(bridge_slave_1) entered disabled state [ 1277.643743][T24116] bridge_slave_1: entered allmulticast mode [ 1277.652112][T24116] bridge_slave_1: entered promiscuous mode [ 1277.883293][T24116] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1277.946007][T24116] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1278.216381][T24116] team0: Port device team_slave_0 added [ 1278.257722][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1278.260215][T24116] team0: Port device team_slave_1 added [ 1278.265608][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1278.323816][T24116] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1278.330957][T24116] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1278.358126][T24116] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1278.381177][T24116] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1278.389683][T24116] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1278.416876][T24116] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1278.632471][T24080] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1278.658239][T24080] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1278.677848][T24080] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1278.716191][T24116] hsr_slave_0: entered promiscuous mode [ 1278.725004][T24116] hsr_slave_1: entered promiscuous mode [ 1278.732548][T23931] veth0_vlan: entered promiscuous mode [ 1278.752849][T24080] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1278.858355][T23931] veth1_vlan: entered promiscuous mode [ 1279.165522][ T2889] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1279.214903][T23931] veth0_macvtap: entered promiscuous mode [ 1279.255607][ T2889] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1279.281928][T11330] Bluetooth: hci2: command tx timeout [ 1279.291736][T23970] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1279.360665][ T2889] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1279.376187][T23931] veth1_macvtap: entered promiscuous mode [ 1279.466211][ T2889] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1279.492114][T23970] 8021q: adding VLAN 0 to HW filter on device team0 [ 1279.504161][T23931] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1279.515336][T23931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1279.531988][T23931] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1279.542651][T23931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1279.556039][T23931] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1279.566896][T23931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1279.579081][T23931] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1279.592492][T23931] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1279.606794][T23931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1279.618229][T23931] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1279.629303][T23931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1279.640352][T23931] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1279.651229][T23931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1279.663270][T23931] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1279.710211][T23931] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1279.728508][T23931] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1279.737625][T23931] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1279.747814][T23931] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1279.790838][T16938] bridge0: port 1(bridge_slave_0) entered blocking state [ 1279.798225][T16938] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1279.904049][T24178] FAULT_INJECTION: forcing a failure. [ 1279.904049][T24178] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1279.929217][T24178] CPU: 0 PID: 24178 Comm: syz.0.3706 Not tainted 6.10.0-rc6-syzkaller-00069-g795c58e4c7fc #0 [ 1279.939446][T24178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 1279.949519][T24178] Call Trace: [ 1279.952831][T24178] [ 1279.955777][T24178] dump_stack_lvl+0x241/0x360 [ 1279.960573][T24178] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1279.965801][T24178] ? __pfx__printk+0x10/0x10 [ 1279.970446][T24178] ? __pfx_lock_release+0x10/0x10 [ 1279.975516][T24178] should_fail_ex+0x3b0/0x4e0 [ 1279.980223][T24178] _copy_to_iter+0x1f6/0x1960 [ 1279.984939][T24178] ? __virt_addr_valid+0x183/0x520 [ 1279.990123][T24178] ? __pfx_lock_release+0x10/0x10 [ 1279.995186][T24178] ? __pfx__copy_to_iter+0x10/0x10 [ 1280.000335][T24178] ? validate_chain+0x11e/0x5900 [ 1280.005377][T24178] ? __virt_addr_valid+0x183/0x520 [ 1280.010515][T24178] ? __virt_addr_valid+0x183/0x520 [ 1280.015671][T24178] ? __virt_addr_valid+0x44e/0x520 [ 1280.020861][T24178] ? __phys_addr_symbol+0x2f/0x70 [ 1280.025905][T24178] ? __check_object_size+0x49c/0x900 [ 1280.031215][T24178] __skb_datagram_iter+0x374/0x870 [ 1280.036423][T24178] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 1280.042120][T24178] skb_copy_datagram_iter+0xd1/0x250 [ 1280.047453][T24178] tcp_recvmsg_locked+0x9a0/0x2640 [ 1280.052636][T24178] ? __pfx_tcp_recvmsg_locked+0x10/0x10 [ 1280.058197][T24178] ? tcp_recvmsg+0x23c/0x920 [ 1280.062840][T24178] tcp_recvmsg+0x25d/0x920 [ 1280.067273][T24178] ? __pfx_tcp_recvmsg+0x10/0x10 [ 1280.072232][T24178] ? sock_rps_record_flow+0x1a/0x400 [ 1280.077520][T24178] ? inet_recvmsg+0xde/0x2d0 [ 1280.082117][T24178] ? __pfx_tcp_recvmsg+0x10/0x10 [ 1280.087077][T24178] inet_recvmsg+0x150/0x2d0 [ 1280.091608][T24178] ? __pfx_inet_recvmsg+0x10/0x10 [ 1280.096767][T24178] ? aa_sock_msg_perm+0x91/0x160 [ 1280.101724][T24178] ? bpf_lsm_socket_recvmsg+0x9/0x10 [ 1280.107010][T24178] ? security_socket_recvmsg+0x90/0xb0 [ 1280.112500][T24178] sock_recvmsg+0x1ae/0x280 [ 1280.117050][T24178] __sys_recvfrom+0x256/0x3e0 [ 1280.121850][T24178] ? __pfx___sys_recvfrom+0x10/0x10 [ 1280.127076][T24178] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1280.133426][T24178] __ia32_compat_sys_recvfrom+0xe4/0x100 [ 1280.139082][T24178] __do_fast_syscall_32+0xb4/0x120 [ 1280.144239][T24178] ? exc_page_fault+0x590/0x8c0 [ 1280.149111][T24178] do_fast_syscall_32+0x34/0x80 [ 1280.153987][T24178] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1280.160335][T24178] RIP: 0023:0xf744b579 [ 1280.164408][T24178] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1280.184032][T24178] RSP: 002b:00000000f5d4357c EFLAGS: 00000206 ORIG_RAX: 0000000000000173 [ 1280.192472][T24178] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000080 [ 1280.200555][T24178] RDX: 00000000fffffd0b RSI: 0000000000000000 RDI: 0000000000000000 [ 1280.208534][T24178] RBP: 00000000fffffd25 R08: 0000000000000000 R09: 0000000000000000 [ 1280.216528][T24178] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1280.224538][T24178] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1280.232527][T24178] [ 1280.235566][ C0] vkms_vblank_simulate: vblank timer overrun [ 1280.250014][T16938] bridge0: port 2(bridge_slave_1) entered blocking state [ 1280.257313][T16938] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1280.365223][ T2889] bridge_slave_1: left allmulticast mode [ 1280.375210][ T2889] bridge_slave_1: left promiscuous mode [ 1280.385016][ T2889] bridge0: port 2(bridge_slave_1) entered disabled state [ 1280.397290][ T2889] bridge_slave_0: left allmulticast mode [ 1280.403004][ T2889] bridge_slave_0: left promiscuous mode [ 1280.413757][ T2889] bridge0: port 1(bridge_slave_0) entered disabled state [ 1280.951887][ T2889] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1280.964825][ T2889] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1280.977043][ T2889] bond0 (unregistering): Released all slaves [ 1281.106274][T23970] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1281.127738][T23970] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1281.296033][T24080] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1281.404287][ T77] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1281.422656][ T77] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1281.459047][T14436] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1281.480413][T14436] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1281.585534][T23970] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1281.651004][ T2889] hsr_slave_0: left promiscuous mode [ 1281.671594][ T2889] hsr_slave_1: left promiscuous mode [ 1281.679360][ T2889] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1281.689132][ T2889] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1281.698063][ T2889] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1281.706063][ T2889] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1281.744719][ T2889] veth1_macvtap: left promiscuous mode [ 1281.750492][ T2889] veth0_macvtap: left promiscuous mode [ 1281.758333][ T2889] veth1_vlan: left promiscuous mode [ 1281.763746][ T2889] veth0_vlan: left promiscuous mode [ 1282.136851][ T5645] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 1282.326867][ T5645] usb 4-1: Using ep0 maxpacket: 16 [ 1282.353113][ T5645] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 1282.368389][ T5645] usb 4-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 1282.379375][ T5645] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1282.394734][ T5645] usb 4-1: config 0 descriptor?? [ 1282.526387][ T2889] team0 (unregistering): Port device team_slave_1 removed [ 1282.613079][ T2889] team0 (unregistering): Port device team_slave_0 removed [ 1282.950781][T24192] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1282.972923][T24192] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1282.986266][ T5645] hid (null): invalid report_count 983040256 [ 1282.999224][ T5645] hid (null): unknown global tag 0xc [ 1283.017472][ T5645] hid-generic 0003:0158:0100.0073: unknown main item tag 0x0 [ 1283.027055][ T5645] hid-generic 0003:0158:0100.0073: invalid report_count 983040256 [ 1283.034986][ T5645] hid-generic 0003:0158:0100.0073: item 0 4 1 9 parsing failed [ 1283.045104][ T5645] hid-generic 0003:0158:0100.0073: probe with driver hid-generic failed with error -22 [ 1283.379515][T24080] 8021q: adding VLAN 0 to HW filter on device team0 [ 1283.471202][ T5645] usb 4-1: USB disconnect, device number 45 [ 1283.648722][ T5096] bridge0: port 1(bridge_slave_0) entered blocking state [ 1283.656144][ T5096] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1283.771333][ T5151] bridge0: port 2(bridge_slave_1) entered blocking state [ 1283.778585][ T5151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1283.853757][T23970] veth0_vlan: entered promiscuous mode [ 1284.001995][T23970] veth1_vlan: entered promiscuous mode [ 1284.184593][T24080] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1284.253481][T24116] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1284.295553][T23970] veth0_macvtap: entered promiscuous mode [ 1284.441631][T24116] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1284.488397][T24116] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1284.495535][T24213] xt_nat: multiple ranges no longer supported [ 1284.531106][T23970] veth1_macvtap: entered promiscuous mode [ 1284.613164][ T2889] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1284.672983][T24116] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1284.753831][T23970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1284.768590][T23970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1284.782687][T23970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1284.795005][T23970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1284.807307][T23970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1284.825388][T23970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1284.840184][T23970] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1284.892990][ T5100] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1284.918111][ T5100] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1284.919328][ T2889] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1284.939519][ T5100] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1284.949902][ T5100] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1284.974576][ T5100] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1284.981803][T23970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1284.995442][ T5100] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1285.003576][T23970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1285.030460][T23970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1285.066150][T23970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1285.087616][T23970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1285.098894][T23970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1285.111293][T23970] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1285.134197][T24080] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1285.180336][ T2889] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1285.264464][T23970] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1285.274442][T23970] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1285.294762][T23970] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1285.303829][T23970] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1285.375519][ T2889] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1285.577832][T24080] veth0_vlan: entered promiscuous mode [ 1285.734005][T24080] veth1_vlan: entered promiscuous mode [ 1285.798626][T14436] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1285.818540][T14436] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1285.938395][ T2889] bridge_slave_1: left allmulticast mode [ 1285.944117][ T2889] bridge_slave_1: left promiscuous mode [ 1285.955421][ T2889] bridge0: port 2(bridge_slave_1) entered disabled state [ 1285.965423][ T2889] bridge_slave_0: left allmulticast mode [ 1285.974284][ T2889] bridge_slave_0: left promiscuous mode [ 1285.980745][ T2889] bridge0: port 1(bridge_slave_0) entered disabled state [ 1286.456024][ T2889] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1286.469776][ T2889] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1286.481526][ T2889] bond0 (unregistering): Released all slaves [ 1286.511519][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1286.527381][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1286.551510][T24227] chnl_net:caif_netlink_parms(): no params data found [ 1286.649322][T24116] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1286.850800][T24080] veth0_macvtap: entered promiscuous mode [ 1287.087907][T24080] veth1_macvtap: entered promiscuous mode [ 1287.117124][T11330] Bluetooth: hci0: command tx timeout [ 1287.141438][T24116] 8021q: adding VLAN 0 to HW filter on device team0 [ 1287.149973][T24227] bridge0: port 1(bridge_slave_0) entered blocking state [ 1287.168639][T24227] bridge0: port 1(bridge_slave_0) entered disabled state [ 1287.187012][T24227] bridge_slave_0: entered allmulticast mode [ 1287.195063][T24227] bridge_slave_0: entered promiscuous mode [ 1287.230496][ T2889] hsr_slave_0: left promiscuous mode [ 1287.242375][ T2889] hsr_slave_1: left promiscuous mode [ 1287.255102][ T2889] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1287.269114][ T2889] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1287.284742][ T2889] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1287.295475][ T2889] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1287.332635][ T2889] veth1_macvtap: left promiscuous mode [ 1287.338604][ T2889] veth0_macvtap: left promiscuous mode [ 1287.344418][ T2889] veth1_vlan: left promiscuous mode [ 1287.357363][ T2889] veth0_vlan: left promiscuous mode [ 1288.152644][ T2889] team0 (unregistering): Port device team_slave_1 removed [ 1288.208962][ T2889] team0 (unregistering): Port device team_slave_0 removed [ 1288.792596][T24227] bridge0: port 2(bridge_slave_1) entered blocking state [ 1288.804065][T24227] bridge0: port 2(bridge_slave_1) entered disabled state [ 1288.812342][T24227] bridge_slave_1: entered allmulticast mode [ 1288.822684][T24227] bridge_slave_1: entered promiscuous mode [ 1289.004530][T24227] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1289.027430][ T5153] bridge0: port 1(bridge_slave_0) entered blocking state [ 1289.034700][ T5153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1289.051513][T24227] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1289.074050][T24080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1289.087093][T24080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1289.099272][T24080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1289.116543][T24080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1289.128792][T24080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1289.140283][T24080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1289.163580][T24080] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1289.202825][ T5096] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 1289.216370][T11330] Bluetooth: hci0: command tx timeout [ 1289.254756][T24227] team0: Port device team_slave_0 added [ 1289.291710][T24227] team0: Port device team_slave_1 added [ 1289.353453][ T5645] bridge0: port 2(bridge_slave_1) entered blocking state [ 1289.360639][ T5645] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1289.393853][T24080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1289.410560][T24080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1289.421354][ T5096] usb 3-1: Using ep0 maxpacket: 32 [ 1289.440555][ T5096] usb 3-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 1289.454324][T24080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1289.475505][ T5096] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1289.489001][ T5096] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice=dd.3f [ 1289.493490][T24080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1289.499878][ T5096] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1289.516718][ T5096] usb 3-1: Product: syz [ 1289.520918][ T5096] usb 3-1: Manufacturer: syz [ 1289.525557][ T5096] usb 3-1: SerialNumber: syz [ 1289.534887][T24080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1289.556575][T24080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1289.584212][T24080] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1289.681427][ T5100] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1289.692833][ T5100] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1289.702260][ T5100] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1289.711142][ T5100] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1289.719344][ T5100] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1289.729925][ T5100] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1289.757269][T24227] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1289.799476][T24227] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1289.826439][T24227] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1289.858701][T24080] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1289.878814][T24080] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1289.888558][T24080] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1289.897591][T24080] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1289.946383][T24227] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1289.955460][T24227] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1289.981750][ C0] vkms_vblank_simulate: vblank timer overrun [ 1289.989913][T24227] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1290.009700][ T5096] usb 3-1: USB disconnect, device number 29 [ 1290.281514][T24227] hsr_slave_0: entered promiscuous mode [ 1290.289610][T24227] hsr_slave_1: entered promiscuous mode [ 1290.303314][T24227] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1290.311481][T24227] Cannot create hsr debugfs directory [ 1290.536719][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1290.544604][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1290.618217][T24116] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1290.783016][T24283] usb usb8: usbfs: process 24283 (syz.2.3719) did not claim interface 0 before use [ 1290.796395][ T2889] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1291.024660][ T2889] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1291.160613][ T77] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1291.181971][ T77] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1291.203387][ T2889] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1291.286896][T11330] Bluetooth: hci0: command tx timeout [ 1291.350700][ T5645] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 1291.368938][ T2889] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1291.557043][ T5645] usb 3-1: Using ep0 maxpacket: 32 [ 1291.572042][ T5645] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1291.602832][ T5645] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1291.629933][ T5645] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1291.689626][ T5645] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1291.737832][ T5645] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1291.765661][T11330] Bluetooth: hci3: command tx timeout [ 1291.774057][ T5645] usb 3-1: Product: syz [ 1291.778420][ T5645] usb 3-1: Manufacturer: syz [ 1291.783095][ T5645] usb 3-1: SerialNumber: syz [ 1291.862159][T24265] chnl_net:caif_netlink_parms(): no params data found [ 1291.895624][T24116] veth0_vlan: entered promiscuous mode [ 1292.009930][ T5645] usb 3-1: 0:2 : does not exist [ 1292.043493][ T5645] usb 3-1: USB disconnect, device number 30 [ 1292.290492][T24116] veth1_vlan: entered promiscuous mode [ 1292.299392][T24198] udevd[24198]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1292.493720][T24265] bridge0: port 1(bridge_slave_0) entered blocking state [ 1292.511024][T24265] bridge0: port 1(bridge_slave_0) entered disabled state [ 1292.524213][T24265] bridge_slave_0: entered allmulticast mode [ 1292.534736][T24265] bridge_slave_0: entered promiscuous mode [ 1292.553729][T24265] bridge0: port 2(bridge_slave_1) entered blocking state [ 1292.585671][T24265] bridge0: port 2(bridge_slave_1) entered disabled state [ 1292.603145][T24265] bridge_slave_1: entered allmulticast mode [ 1292.611955][T24265] bridge_slave_1: entered promiscuous mode [ 1292.631085][ T2889] bridge_slave_1: left allmulticast mode [ 1292.637371][T24328] xt_nat: multiple ranges no longer supported [ 1292.638179][ T2889] bridge_slave_1: left promiscuous mode [ 1292.658481][ T2889] bridge0: port 2(bridge_slave_1) entered disabled state [ 1292.675144][ T2889] bridge_slave_0: left allmulticast mode [ 1292.681072][ T2889] bridge_slave_0: left promiscuous mode [ 1292.687179][ T2889] bridge0: port 1(bridge_slave_0) entered disabled state [ 1293.213922][ T2889] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1293.229355][ T2889] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1293.241468][ T2889] bond0 (unregistering): Released all slaves [ 1293.359559][T11330] Bluetooth: hci0: command tx timeout [ 1293.624928][T24265] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1293.640518][T24265] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1293.839464][T11330] Bluetooth: hci3: command tx timeout [ 1293.949135][T24265] team0: Port device team_slave_0 added [ 1294.161246][T24265] team0: Port device team_slave_1 added [ 1294.310257][T24265] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1294.330270][T24265] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1294.372017][T24265] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1294.394376][T24116] veth0_macvtap: entered promiscuous mode [ 1294.513935][ T2889] hsr_slave_0: left promiscuous mode [ 1294.559572][ T2889] hsr_slave_1: left promiscuous mode [ 1294.593025][ T2889] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1294.616311][ T2889] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1294.657676][ T2889] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1294.665225][ T2889] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1294.751130][ T2889] veth1_macvtap: left promiscuous mode [ 1294.757530][ T2889] veth0_macvtap: left promiscuous mode [ 1294.763267][ T2889] veth1_vlan: left promiscuous mode [ 1294.768988][ T2889] veth0_vlan: left promiscuous mode [ 1295.112330][T16938] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 1295.296770][T16938] usb 3-1: Using ep0 maxpacket: 32 [ 1295.312575][T16938] usb 3-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 1295.326711][T16938] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1295.343900][T16938] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice=dd.3f [ 1295.353217][T16938] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1295.369790][T16938] usb 3-1: Product: syz [ 1295.374777][T16938] usb 3-1: Manufacturer: syz [ 1295.382976][T16938] usb 3-1: SerialNumber: syz [ 1295.578167][ T2889] team0 (unregistering): Port device team_slave_1 removed [ 1295.662442][ T2889] team0 (unregistering): Port device team_slave_0 removed [ 1295.799191][T16938] usb 3-1: USB disconnect, device number 31 [ 1295.916816][T11330] Bluetooth: hci3: command tx timeout [ 1296.355397][T24265] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1296.363361][T24265] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1296.392967][T24265] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1296.423628][T24227] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1296.585572][T24227] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1296.612688][T24116] veth1_macvtap: entered promiscuous mode [ 1296.652045][T24265] hsr_slave_0: entered promiscuous mode [ 1296.660234][T24265] hsr_slave_1: entered promiscuous mode [ 1296.667878][T24265] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1296.675456][T24265] Cannot create hsr debugfs directory [ 1296.685822][T24227] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1296.812308][T24227] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1296.959817][T24116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1296.970494][T24116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1296.996571][T24116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1297.014852][T24116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1297.044099][T24116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1297.061375][T24116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1297.075137][T24116] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1297.288506][T24116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1297.326602][T24116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1297.346573][T24116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1297.376613][T24116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1297.394843][T24116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1297.420049][T24116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1297.459327][T24116] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1297.672368][T24116] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1297.694229][T24116] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1297.697729][ T5100] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1297.710934][T24116] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1297.729213][ T5100] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1297.731937][T24116] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1297.746091][ T5100] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1297.755295][ T5100] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1297.766072][ T5100] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1297.773732][ T5100] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1297.998033][T11330] Bluetooth: hci3: command tx timeout [ 1298.123278][ T2889] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1298.235224][T24227] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1298.279689][ T2889] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1298.507634][ T2889] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1298.748801][ T2889] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1298.823264][T24227] 8021q: adding VLAN 0 to HW filter on device team0 [ 1298.946921][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1298.987525][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1299.014777][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 1299.022059][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1299.079531][ T2872] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1299.084549][T24378] chnl_net:caif_netlink_parms(): no params data found [ 1299.095018][ T2872] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1299.118997][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 1299.126198][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1299.425921][T24265] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1299.441020][T24265] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1299.461916][T24265] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1299.555436][T24405] netdevsim netdevsim1: Direct firmware load for ng failed with error -2 [ 1299.565939][T24405] netdevsim netdevsim1: Falling back to sysfs fallback for: ng [ 1299.610810][T24265] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1299.652532][ T2889] bridge_slave_1: left allmulticast mode [ 1299.658470][ T2889] bridge_slave_1: left promiscuous mode [ 1299.664518][ T2889] bridge0: port 2(bridge_slave_1) entered disabled state [ 1299.694480][ T2889] bridge_slave_0: left allmulticast mode [ 1299.706752][ T2889] bridge_slave_0: left promiscuous mode [ 1299.712610][ T2889] bridge0: port 1(bridge_slave_0) entered disabled state [ 1299.838803][T11330] Bluetooth: hci4: command tx timeout [ 1299.986796][ T5100] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1299.999561][ T5100] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1300.012246][ T5100] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1300.033819][ T5100] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1300.050232][ T5100] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1300.057736][ T5100] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1300.519010][ T2889] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1300.532529][ T2889] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1300.544567][ T2889] bond0 (unregistering): Released all slaves [ 1300.562089][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.568559][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.625098][T24378] bridge0: port 1(bridge_slave_0) entered blocking state [ 1300.640288][T24378] bridge0: port 1(bridge_slave_0) entered disabled state [ 1300.671331][T24378] bridge_slave_0: entered allmulticast mode [ 1300.680595][T24378] bridge_slave_0: entered promiscuous mode [ 1300.800534][T24378] bridge0: port 2(bridge_slave_1) entered blocking state [ 1300.819310][T24378] bridge0: port 2(bridge_slave_1) entered disabled state [ 1300.832310][T24378] bridge_slave_1: entered allmulticast mode [ 1300.840111][T24378] bridge_slave_1: entered promiscuous mode [ 1301.056650][T24378] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1301.154736][T24378] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1301.344827][T24378] team0: Port device team_slave_0 added [ 1301.358528][ T5100] Bluetooth: hci2: command tx timeout [ 1301.387448][ T2889] hsr_slave_0: left promiscuous mode [ 1301.394624][ T2889] hsr_slave_1: left promiscuous mode [ 1301.405886][ T2889] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1301.414647][ T2889] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1301.426283][ T2889] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1301.436137][ T2889] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1301.487450][ T2889] veth1_macvtap: left promiscuous mode [ 1301.493190][ T2889] veth0_macvtap: left promiscuous mode [ 1301.499427][ T2889] veth1_vlan: left promiscuous mode [ 1301.504870][ T2889] veth0_vlan: left promiscuous mode [ 1301.925323][ T5100] Bluetooth: hci4: command tx timeout [ 1302.157893][ T5100] Bluetooth: hci1: command tx timeout [ 1302.307701][T11330] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1302.323160][T11330] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1302.335609][T11330] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1302.364408][T11330] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1302.375417][T11330] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1302.383400][T11330] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1302.705086][ T2889] team0 (unregistering): Port device team_slave_1 removed [ 1302.770741][ T2889] team0 (unregistering): Port device team_slave_0 removed [ 1303.321202][T24378] team0: Port device team_slave_1 added [ 1303.471126][T24378] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1303.478550][T24378] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1303.504806][T24378] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1303.548195][T24378] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1303.555211][T24378] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1303.586815][T24378] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1303.784126][T24378] hsr_slave_0: entered promiscuous mode [ 1303.802758][T24378] hsr_slave_1: entered promiscuous mode [ 1303.815178][T24378] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1303.825561][T24378] Cannot create hsr debugfs directory [ 1303.842488][T24227] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1303.997334][ T5100] Bluetooth: hci4: command tx timeout [ 1304.240884][ T5100] Bluetooth: hci1: command tx timeout [ 1304.348075][T24265] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1304.374281][T24411] chnl_net:caif_netlink_parms(): no params data found [ 1304.393164][T24227] veth0_vlan: entered promiscuous mode [ 1304.477410][ T5100] Bluetooth: hci2: command tx timeout [ 1304.511977][T24227] veth1_vlan: entered promiscuous mode [ 1304.678101][T24452] chnl_net:caif_netlink_parms(): no params data found [ 1304.783885][ T2889] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1304.863630][T24265] 8021q: adding VLAN 0 to HW filter on device team0 [ 1304.954646][ T2889] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1305.147893][ T2889] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1305.205923][T24411] bridge0: port 1(bridge_slave_0) entered blocking state [ 1305.213591][T24411] bridge0: port 1(bridge_slave_0) entered disabled state [ 1305.222570][T24411] bridge_slave_0: entered allmulticast mode [ 1305.231379][T24411] bridge_slave_0: entered promiscuous mode [ 1305.270485][T24452] bridge0: port 1(bridge_slave_0) entered blocking state [ 1305.278867][T24452] bridge0: port 1(bridge_slave_0) entered disabled state [ 1305.286228][T24452] bridge_slave_0: entered allmulticast mode [ 1305.294311][T24452] bridge_slave_0: entered promiscuous mode [ 1305.306280][T24452] bridge0: port 2(bridge_slave_1) entered blocking state [ 1305.318765][T24452] bridge0: port 2(bridge_slave_1) entered disabled state [ 1305.326014][T24452] bridge_slave_1: entered allmulticast mode [ 1305.334461][T24452] bridge_slave_1: entered promiscuous mode [ 1305.378250][ T2889] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1305.400819][T13497] bridge0: port 1(bridge_slave_0) entered blocking state [ 1305.408212][T13497] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1305.419650][T24411] bridge0: port 2(bridge_slave_1) entered blocking state [ 1305.427394][T24411] bridge0: port 2(bridge_slave_1) entered disabled state [ 1305.434732][T24411] bridge_slave_1: entered allmulticast mode [ 1305.454911][T24411] bridge_slave_1: entered promiscuous mode [ 1305.494150][T24227] veth0_macvtap: entered promiscuous mode [ 1305.560757][T13497] bridge0: port 2(bridge_slave_1) entered blocking state [ 1305.567992][T13497] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1305.584376][T24227] veth1_macvtap: entered promiscuous mode [ 1305.606008][T24452] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1305.635202][T24411] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1305.649611][T24411] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1305.669234][T24452] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1305.808801][T24411] team0: Port device team_slave_0 added [ 1305.844384][T24452] team0: Port device team_slave_0 added [ 1305.866087][T24411] team0: Port device team_slave_1 added [ 1305.908996][T24452] team0: Port device team_slave_1 added [ 1305.938274][T24227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1305.949551][T24227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1305.960202][T24227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1305.971138][T24227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1305.981317][T24227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1305.992422][T24227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1306.004568][T24227] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1306.076738][ T5100] Bluetooth: hci4: command tx timeout [ 1306.090376][T24378] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1306.146648][T24378] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1306.163050][T24378] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1306.175191][T24411] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1306.183266][T24411] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1306.210116][T24411] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1306.223670][T24411] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1306.231781][T24411] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1306.261154][T24411] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1306.309289][ T2889] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1306.328238][ T5100] Bluetooth: hci1: command tx timeout [ 1306.361794][T24378] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1306.374795][T24227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1306.386266][T24227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1306.403689][T24227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1306.415108][T24227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1306.425398][T24227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1306.438262][T24227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1306.449948][T24227] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1306.465072][T24452] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1306.472746][T24452] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1306.505049][T24452] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1306.528195][T24452] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1306.536328][T24452] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1306.562289][ C0] vkms_vblank_simulate: vblank timer overrun [ 1306.567682][ T5100] Bluetooth: hci2: command tx timeout [ 1306.570239][T24452] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1306.631230][ T2889] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1306.655521][T24227] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1306.665301][T24227] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1306.674490][T24227] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1306.683546][T24227] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1306.792639][ T2889] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1306.867548][T24452] hsr_slave_0: entered promiscuous mode [ 1306.886123][T24452] hsr_slave_1: entered promiscuous mode [ 1306.907109][T24452] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1306.914728][T24452] Cannot create hsr debugfs directory [ 1306.955369][T24411] hsr_slave_0: entered promiscuous mode [ 1306.963599][T24411] hsr_slave_1: entered promiscuous mode [ 1306.978126][T24411] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1306.985749][T24411] Cannot create hsr debugfs directory [ 1307.057902][ T2889] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1307.202072][T24265] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1307.672938][ T2889] bridge_slave_1: left allmulticast mode [ 1307.681699][ T2889] bridge_slave_1: left promiscuous mode [ 1307.688130][ T2889] bridge0: port 2(bridge_slave_1) entered disabled state [ 1307.698521][ T2889] bridge_slave_0: left allmulticast mode [ 1307.704284][ T2889] bridge_slave_0: left promiscuous mode [ 1307.710619][ T2889] bridge0: port 1(bridge_slave_0) entered disabled state [ 1307.724495][ T2889] bridge_slave_1: left allmulticast mode [ 1307.730656][ T2889] bridge_slave_1: left promiscuous mode [ 1307.736743][ T2889] bridge0: port 2(bridge_slave_1) entered disabled state [ 1307.747157][ T2889] bridge_slave_0: left allmulticast mode [ 1307.752827][ T2889] bridge_slave_0: left promiscuous mode [ 1307.760106][ T2889] bridge0: port 1(bridge_slave_0) entered disabled state [ 1308.407258][ T5100] Bluetooth: hci1: command tx timeout [ 1308.506568][ T2889] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1308.522506][ T2889] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1308.534692][ T2889] bond0 (unregistering): Released all slaves [ 1308.642570][ T5100] Bluetooth: hci2: command tx timeout [ 1308.694817][ T2889] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1308.709165][ T2889] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1308.730822][ T2889] bond0 (unregistering): Released all slaves [ 1308.745047][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1308.753563][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1309.006820][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1309.014784][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1309.217333][T24265] veth0_vlan: entered promiscuous mode [ 1309.312950][T24378] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1309.344741][T24265] veth1_vlan: entered promiscuous mode [ 1309.733505][T24378] 8021q: adding VLAN 0 to HW filter on device team0 [ 1309.742218][T24523] netdevsim netdevsim0: Direct firmware load for ng failed with error -2 [ 1309.751990][T24523] netdevsim netdevsim0: Falling back to sysfs fallback for: ng [ 1309.897140][ T5151] bridge0: port 1(bridge_slave_0) entered blocking state [ 1309.904401][ T5151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1309.952995][T24265] veth0_macvtap: entered promiscuous mode [ 1309.986138][ T2889] hsr_slave_0: left promiscuous mode [ 1309.993672][ T2889] hsr_slave_1: left promiscuous mode [ 1310.003958][ T2889] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1310.014055][ T2889] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1310.026173][ T2889] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1310.033963][ T2889] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1310.048290][ T2889] hsr_slave_0: left promiscuous mode [ 1310.054480][ T2889] hsr_slave_1: left promiscuous mode [ 1310.061874][ T2889] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1310.074838][ T2889] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1310.084105][ T2889] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1310.092000][ T2889] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1310.132720][ T2889] veth1_macvtap: left promiscuous mode [ 1310.138991][ T2889] veth0_macvtap: left promiscuous mode [ 1310.144630][ T2889] veth1_vlan: left promiscuous mode [ 1310.150142][ T2889] veth0_vlan: left promiscuous mode [ 1310.160970][ T2889] veth1_macvtap: left promiscuous mode [ 1310.166774][ T2889] veth0_macvtap: left promiscuous mode [ 1310.172401][ T2889] veth1_vlan: left promiscuous mode [ 1310.177842][ T2889] veth0_vlan: left promiscuous mode [ 1310.719280][ T5100] Bluetooth: hci2: command tx timeout [ 1311.047500][ T2889] team0 (unregistering): Port device team_slave_1 removed [ 1311.141446][ T2889] team0 (unregistering): Port device team_slave_0 removed [ 1311.526676][ T5100] Bluetooth: hci0: command tx timeout [ 1312.261297][ T2889] team0 (unregistering): Port device team_slave_1 removed [ 1312.316353][ T2889] team0 (unregistering): Port device team_slave_0 removed [ 1312.738922][T24265] veth1_macvtap: entered promiscuous mode [ 1312.861765][T16938] bridge0: port 2(bridge_slave_1) entered blocking state [ 1312.869072][T16938] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1313.103819][T24411] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1313.130711][T24265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1313.147291][T24265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1313.157716][T24265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1313.169582][T24265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1313.199224][T24265] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1313.222014][T24411] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1313.307700][T24265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1313.321563][T24265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1313.331782][T24265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1313.342483][T24265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1313.354530][T24265] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1313.356653][ T4837] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 1313.381977][T24411] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1313.404167][T24265] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1313.413709][T24265] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1313.422505][T24265] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1313.431546][T24265] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1313.482102][T24411] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1313.556819][ T4837] usb 1-1: Using ep0 maxpacket: 8 [ 1313.586179][ T4837] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 1313.602031][ T4837] usb 1-1: can't read configurations, error -61 [ 1313.768595][ T4837] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 1313.893163][T24378] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1313.977564][ T4837] usb 1-1: Using ep0 maxpacket: 8 [ 1313.991384][ T4837] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 1314.000966][T24507] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1314.014949][T24507] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1314.024039][ T4837] usb 1-1: can't read configurations, error -61 [ 1314.045695][ T4837] usb usb1-port1: attempt power cycle [ 1314.144475][T24507] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1314.184991][T24507] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1314.223457][T24452] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1314.268728][T24452] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1314.298950][T24378] veth0_vlan: entered promiscuous mode [ 1314.341304][T24452] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1314.358285][T24452] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1314.402788][T24411] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1314.461163][T24378] veth1_vlan: entered promiscuous mode [ 1314.477160][ T4837] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 1314.525885][ T4837] usb 1-1: Using ep0 maxpacket: 8 [ 1314.543387][ T4837] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 1314.563720][ T4837] usb 1-1: can't read configurations, error -61 [ 1314.573147][T24411] 8021q: adding VLAN 0 to HW filter on device team0 [ 1314.649227][T16938] bridge0: port 1(bridge_slave_0) entered blocking state [ 1314.656443][T16938] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1314.683374][T16941] bridge0: port 2(bridge_slave_1) entered blocking state [ 1314.690633][T16941] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1314.736657][ T4837] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 1314.775069][T24378] veth0_macvtap: entered promiscuous mode [ 1314.798913][ T4837] usb 1-1: Using ep0 maxpacket: 8 [ 1314.809037][ T4837] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 1314.813320][T24378] veth1_macvtap: entered promiscuous mode [ 1314.828761][ T4837] usb 1-1: can't read configurations, error -61 [ 1314.838379][ T4837] usb usb1-port1: unable to enumerate USB device [ 1314.971131][T24378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1314.992297][T24378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1315.012619][T24378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1315.036886][T24378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1315.064912][T24378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1315.087168][T24378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1315.120213][T24378] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1315.166926][T24378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1315.185399][ T5100] Bluetooth: Unknown BR/EDR signaling command 0x0e [ 1315.193401][ T5100] Bluetooth: Wrong link type (-22) [ 1315.199053][ T5100] Bluetooth: Unknown BR/EDR signaling command 0x0f [ 1315.205750][ T5100] Bluetooth: Wrong link type (-22) [ 1315.213009][ T5100] Bluetooth: Unknown BR/EDR signaling command 0x10 [ 1315.214164][T24378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1315.220291][ T5100] Bluetooth: Wrong link type (-22) [ 1315.242557][T24378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1315.253468][T24378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1315.263957][T24378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1315.274585][T24378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1315.300045][T24378] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1315.349254][T24378] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1315.358483][T24378] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1315.368426][T24378] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1315.377510][T24378] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1315.557142][T24411] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1315.586731][T24452] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1315.683674][T24452] 8021q: adding VLAN 0 to HW filter on device team0 [ 1315.789452][T16941] bridge0: port 1(bridge_slave_0) entered blocking state [ 1315.796743][T16941] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1315.809906][T24507] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1315.824918][T24507] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1315.863611][T16941] bridge0: port 2(bridge_slave_1) entered blocking state [ 1315.870808][T16941] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1316.064329][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1316.086847][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1316.113960][T24411] veth0_vlan: entered promiscuous mode [ 1316.253588][T24411] veth1_vlan: entered promiscuous mode [ 1316.278233][T24579] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3748'. [ 1316.331299][T24579] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3748'. [ 1316.523377][T24411] veth0_macvtap: entered promiscuous mode [ 1316.597681][T24411] veth1_macvtap: entered promiscuous mode [ 1316.617171][T24452] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1316.730482][T24411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1316.749297][T24411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1316.751724][T24598] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3751'. [ 1316.764864][T24411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1316.769982][T24598] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3751'. [ 1316.790054][T24411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1316.805975][T24411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1316.820750][T24411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1316.831613][T24411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1316.842698][T24411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1316.854779][T24411] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1316.898064][T24411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1316.914154][T24411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1316.924557][T24411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1316.929759][T13497] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 1316.944131][T24411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1316.954237][T24411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1316.974925][T24411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1316.986434][T24411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1316.997073][T24411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1317.009033][T24411] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1317.043567][T24411] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1317.054169][T24411] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1317.064242][T24411] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1317.073927][T24411] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1317.087073][T19278] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 1317.097193][T24452] veth0_vlan: entered promiscuous mode [ 1317.133283][T24452] veth1_vlan: entered promiscuous mode [ 1317.140199][T13497] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 1317.157488][T13497] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0xE has invalid maxpacket 0 [ 1317.211710][T13497] usb 1-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=cd.cc [ 1317.221656][T13497] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1317.244177][T13497] usb 1-1: Product: syz [ 1317.252667][T13497] usb 1-1: Manufacturer: syz [ 1317.257631][T13497] usb 1-1: SerialNumber: syz [ 1317.266310][T13497] usb 1-1: config 0 descriptor?? [ 1317.275883][T13497] cyberjack 1-1:0.0: Reiner SCT Cyberjack USB card reader converter detected [ 1317.304214][T19278] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1317.315323][T13497] cyberjack ttyUSB0: usb_submit_urb(read int) failed [ 1317.340366][T19278] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1317.379757][T13497] usb 1-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 1317.403677][T19278] usb 4-1: config 0 descriptor?? [ 1317.434696][ T2435] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1317.464068][ T2435] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1317.501398][T24452] veth0_macvtap: entered promiscuous mode [ 1317.552060][T13497] usb 1-1: USB disconnect, device number 45 [ 1317.590214][T13497] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 1317.635649][T24452] veth1_macvtap: entered promiscuous mode [ 1317.648498][T13497] cyberjack 1-1:0.0: device disconnected [ 1317.701960][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1317.735201][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1317.787208][T24452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1317.805192][T24452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1317.820245][T24605] netlink: 9514 bytes leftover after parsing attributes in process `syz.4.3753'. [ 1317.834706][T24605] netlink: 90260 bytes leftover after parsing attributes in process `syz.4.3753'. [ 1317.846269][T24452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1317.857278][T24452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1317.874076][T24452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1317.885979][T24452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1317.910234][T24452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1317.921459][T24452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1317.947982][T24452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1317.961911][T24452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1318.009221][T24452] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1318.044063][T24452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1318.063693][T24452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1318.075066][T24452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1318.088075][T24452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1318.112102][T24452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1318.133518][T24452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1318.154385][T24452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1318.191143][T24452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1318.220319][T24452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1318.235719][T24452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1318.305390][T24452] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1318.381282][T24452] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1318.391647][T24452] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1318.403591][T24452] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1318.416704][T24452] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1318.444953][T19278] [drm] vendor descriptor length:b9 data:20 30 c4 a4 1b 38 94 62 92 09 29 [ 1318.473757][T19278] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 1318.499431][T19278] [drm:udl_init] *ERROR* Selecting channel failed [ 1318.541340][T19278] [drm] Initialized udl 0.0.1 20120220 for 4-1:0.0 on minor 2 [ 1318.556558][T19278] [drm] Initialized udl on minor 2 [ 1318.576945][T19278] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1318.611217][T19278] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 1318.621501][ T5096] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1318.648787][ T5096] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1318.657723][T19278] usb 4-1: USB disconnect, device number 46 [ 1318.699366][ T5096] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 1318.790120][ T317] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1318.845663][ T317] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1318.969136][ T2435] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1318.993623][ T2435] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1319.392519][ T5100] Bluetooth: Unknown BR/EDR signaling command 0x0e [ 1319.400052][ T5100] Bluetooth: Wrong link type (-22) [ 1319.405305][ T5100] Bluetooth: Unknown BR/EDR signaling command 0x0f [ 1319.413073][ T5100] Bluetooth: Wrong link type (-22) [ 1319.418399][ T5100] Bluetooth: Unknown BR/EDR signaling command 0x10 [ 1319.425030][ T5100] Bluetooth: Wrong link type (-22) [ 1319.426100][T24550] IPVS: starting estimator thread 0... [ 1319.586786][T24632] IPVS: using max 16 ests per chain, 38400 per kthread [ 1320.068996][T24650] netlink: 16126 bytes leftover after parsing attributes in process `syz.3.3764'. [ 1320.111821][T24650] netlink: 16240 bytes leftover after parsing attributes in process `syz.3.3764'. [ 1320.304555][T24655] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3767'. [ 1320.318791][T24655] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3767'. [ 1320.409532][ T25] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 1320.607824][ T5151] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 1320.615651][ T25] usb 1-1: Using ep0 maxpacket: 16 [ 1320.625147][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 1320.638452][ T25] usb 1-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 1320.656883][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1320.679813][ T25] usb 1-1: config 0 descriptor?? [ 1320.818989][ T5645] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 1320.819923][ T5151] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1320.843894][ T5151] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1320.882192][ T5151] usb 3-1: config 0 descriptor?? [ 1321.028975][ T5645] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1321.077560][ T5645] usb 2-1: New USB device found, idVendor=2525, idProduct=a4a8, bcdDevice= 0.40 [ 1321.099699][ T5645] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1321.112885][ T5645] usb 2-1: Product: syz [ 1321.122983][ T5645] usb 2-1: Manufacturer: syz [ 1321.144967][ T5645] usb 2-1: SerialNumber: syz [ 1321.245227][T24649] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1321.267197][T24649] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1321.291519][ T25] hid (null): invalid report_count 983040256 [ 1321.316784][ T25] hid (null): unknown global tag 0xc [ 1321.344648][ T25] hid-generic 0003:0158:0100.0074: unknown main item tag 0x0 [ 1321.357942][ T25] hid-generic 0003:0158:0100.0074: invalid report_count 983040256 [ 1321.377062][ T25] hid-generic 0003:0158:0100.0074: item 0 4 1 9 parsing failed [ 1321.391020][ T25] hid-generic 0003:0158:0100.0074: probe with driver hid-generic failed with error -22 [ 1321.436195][ T5100] Bluetooth: Unknown BR/EDR signaling command 0x0e [ 1321.444846][ T5100] Bluetooth: Wrong link type (-22) [ 1321.452834][ T5100] Bluetooth: Unknown BR/EDR signaling command 0x0f [ 1321.459725][ T5100] Bluetooth: Wrong link type (-22) [ 1321.464950][ T5100] Bluetooth: Unknown BR/EDR signaling command 0x10 [ 1321.472300][ T5100] Bluetooth: Wrong link type (-22) [ 1321.509719][ T25] usb 1-1: USB disconnect, device number 46 [ 1321.527931][ T5151] [drm] vendor descriptor length:b9 data:20 30 c4 a4 1b 38 94 62 92 09 29 [ 1321.588530][T19278] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 1321.596347][ T5151] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 1321.627068][ T5151] [drm:udl_init] *ERROR* Selecting channel failed [ 1321.662080][ T5151] [drm] Initialized udl 0.0.1 20120220 for 3-1:0.0 on minor 2 [ 1321.669936][ T5151] [drm] Initialized udl on minor 2 [ 1321.681603][ T5151] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1321.692969][ T5151] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 1321.708676][ T5096] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1321.720041][ T5151] usb 3-1: USB disconnect, device number 32 [ 1321.735440][ T5096] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 1321.744684][T24677] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1321.763737][T24677] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1321.817510][T19278] usb 5-1: Using ep0 maxpacket: 16 [ 1321.824587][T19278] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 1321.836957][T19278] usb 5-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 1321.846170][T19278] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1321.858158][T19278] usb 5-1: config 0 descriptor?? [ 1321.906726][ C0] vkms_vblank_simulate: vblank timer overrun [ 1321.969377][ C0] vkms_vblank_simulate: vblank timer overrun [ 1322.073619][ C0] vkms_vblank_simulate: vblank timer overrun [ 1322.355152][ C0] vkms_vblank_simulate: vblank timer overrun [ 1322.729768][ C0] vkms_vblank_simulate: vblank timer overrun [ 1323.229571][ C0] vkms_vblank_simulate: vblank timer overrun [ 1323.944247][ T5645] usb 2-1: USB disconnect, device number 51 [ 1323.990220][ C0] vkms_vblank_simulate: vblank timer overrun [ 1323.997691][T24673] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1324.027330][T24673] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1324.071078][T19278] hid (null): invalid report_count 983040256 [ 1324.097281][T19278] hid (null): unknown global tag 0xc [ 1324.122356][T19278] hid-generic 0003:0158:0100.0075: unknown main item tag 0x0 [ 1324.143526][T19278] hid-generic 0003:0158:0100.0075: invalid report_count 983040256 [ 1324.168305][T19278] hid-generic 0003:0158:0100.0075: item 0 4 1 9 parsing failed [ 1324.184932][T19278] hid-generic 0003:0158:0100.0075: probe with driver hid-generic failed with error -22 [ 1324.297189][T19278] usb 5-1: USB disconnect, device number 11 [ 1325.123263][ C0] vkms_vblank_simulate: vblank timer overrun [ 1326.542465][ C0] vkms_vblank_simulate: vblank timer overrun [ 1328.411029][ C0] vkms_vblank_simulate: vblank timer overrun [ 1330.570536][ C0] vkms_vblank_simulate: vblank timer overrun [ 1333.024860][ C0] vkms_vblank_simulate: vblank timer overrun [ 1335.906235][ C0] vkms_vblank_simulate: vblank timer overrun [ 1339.532706][ C0] vkms_vblank_simulate: vblank timer overrun [ 1344.071304][ C0] vkms_vblank_simulate: vblank timer overrun [ 1349.869155][ C0] vkms_vblank_simulate: vblank timer overrun [ 1356.482041][ C0] vkms_vblank_simulate: vblank timer overrun [ 1363.994335][ C0] vkms_vblank_simulate: vblank timer overrun [ 1372.614697][ C0] vkms_vblank_simulate: vblank timer overrun [ 1372.907150][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 1372.913522][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 1374.248683][T11330] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1374.269190][T11330] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1374.278131][T11330] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1374.289355][T11330] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1374.297687][T11330] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1374.305221][T11330] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1374.707617][ T5100] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1374.732121][ T5100] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1374.746912][ T5100] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1374.756649][ T5100] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1374.765031][ T5100] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 1374.776985][ T5100] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1374.927675][T11330] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1374.942299][T11330] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1374.952239][T11330] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1374.962864][T11330] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1374.971563][T11330] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 1374.979549][T11330] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1375.207670][ T5100] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1375.220451][ T5100] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1375.229699][ T5100] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1375.238799][ T5100] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1375.248779][ T5100] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 1375.256386][ T5100] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1375.412831][T11330] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1375.429961][T11330] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1375.439107][T11330] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1375.452012][T11330] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1375.467744][T11330] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 1375.475213][T11330] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1376.417151][T11330] Bluetooth: hci5: command tx timeout [ 1376.817270][T11330] Bluetooth: hci6: command tx timeout [ 1377.066928][T11330] Bluetooth: hci7: command tx timeout [ 1377.317123][T11330] Bluetooth: hci8: command tx timeout [ 1377.516968][T11330] Bluetooth: hci9: command tx timeout [ 1378.525142][T11330] Bluetooth: hci5: command tx timeout [ 1378.916945][T11330] Bluetooth: hci6: command tx timeout [ 1379.117036][T11330] Bluetooth: hci7: command tx timeout [ 1379.366923][T11330] Bluetooth: hci8: command tx timeout [ 1379.616821][T11330] Bluetooth: hci9: command tx timeout [ 1380.568958][T11330] Bluetooth: hci5: command tx timeout [ 1380.966858][T11330] Bluetooth: hci6: command tx timeout [ 1381.217724][T11330] Bluetooth: hci7: command tx timeout [ 1381.466946][T11330] Bluetooth: hci8: command tx timeout [ 1381.716837][T11330] Bluetooth: hci9: command tx timeout [ 1382.666877][T11330] Bluetooth: hci5: command tx timeout [ 1383.066984][T11330] Bluetooth: hci6: command tx timeout [ 1383.321243][T11330] Bluetooth: hci7: command tx timeout [ 1383.516847][T11330] Bluetooth: hci8: command tx timeout [ 1383.767110][T11330] Bluetooth: hci9: command tx timeout [ 1384.054406][ C0] vkms_vblank_simulate: vblank timer overrun [ 1396.779316][ T5100] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 1396.791146][ T5100] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 1396.801097][ T5100] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 1396.809959][ T5100] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 1396.820148][ T5100] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 1396.827739][ T5100] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 1398.008086][ C0] vkms_vblank_simulate: vblank timer overrun [ 1398.906958][ T5100] Bluetooth: hci10: command tx timeout [ 1399.757716][ T19] rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: { 0-...D } 2689 jiffies s: 184969 root: 0x1/. [ 1399.787368][ T19] rcu: blocking rcu_node structures (internal RCU debug): [ 1399.794821][ T19] Sending NMI from CPU 1 to CPUs 0: [ 1399.800129][ C0] NMI backtrace for cpu 0 [ 1399.800142][ C0] CPU: 0 PID: 24679 Comm: syz.3.3776 Not tainted 6.10.0-rc6-syzkaller-00069-g795c58e4c7fc #0 [ 1399.800162][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 1399.800174][ C0] RIP: 0010:lock_release+0xf5/0x9f0 [ 1399.800201][ C0] Code: 84 d4 05 00 00 48 c7 c0 ec 7f ad 8f 48 c1 e8 03 42 0f b6 04 38 84 c0 0f 85 f7 05 00 00 83 3d 6d f1 3a 0e 00 0f 84 32 05 00 00 <65> 8b 05 f4 fb 8f 7e 85 c0 0f 85 23 05 00 00 65 48 8b 04 25 c0 d4 [ 1399.800217][ C0] RSP: 0018:ffffc90000007b40 EFLAGS: 00000002 [ 1399.800233][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff81728e40 [ 1399.800246][ C0] RDX: 0000000000000000 RSI: ffffffff8c1fe920 RDI: ffffffff8c1fe8e0 [ 1399.800259][ C0] RBP: ffffc90000007c80 R08: ffffffff8fad4daf R09: 1ffffffff1f5a9b5 [ 1399.800274][ C0] R10: dffffc0000000000 R11: fffffbfff1f5a9b6 R12: 1ffff92000000f74 [ 1399.800288][ C0] R13: ffffffff898f49a2 R14: ffff88807ba63000 R15: dffffc0000000000 [ 1399.800302][ C0] FS: 0000000000000000(0000) GS:ffff8880b9400000(0063) knlGS:00000000f5d72b40 [ 1399.800319][ C0] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 1399.800332][ C0] CR2: 00000000f73bedcc CR3: 000000007b5c6000 CR4: 00000000003506f0 [ 1399.800348][ C0] DR0: 0000000000000000 DR1: 0000000000000003 DR2: 0000000000000000 [ 1399.800359][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1399.800371][ C0] Call Trace: [ 1399.800379][ C0] [ 1399.800389][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 1399.800410][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 1399.800431][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1399.800457][ C0] ? nmi_handle+0x2a/0x5a0 [ 1399.800494][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 1399.800515][ C0] ? nmi_handle+0x14f/0x5a0 [ 1399.800541][ C0] ? nmi_handle+0x2a/0x5a0 [ 1399.800569][ C0] ? lock_release+0xf5/0x9f0 [ 1399.800587][ C0] ? default_do_nmi+0x63/0x160 [ 1399.800607][ C0] ? exc_nmi+0x123/0x1f0 [ 1399.800626][ C0] ? end_repeat_nmi+0xf/0x53 [ 1399.800653][ C0] ? advance_sched+0xa02/0xca0 [ 1399.800682][ C0] ? lock_release+0xb0/0x9f0 [ 1399.800702][ C0] ? lock_release+0xf5/0x9f0 [ 1399.800721][ C0] ? lock_release+0xf5/0x9f0 [ 1399.800740][ C0] ? lock_release+0xf5/0x9f0 [ 1399.800759][ C0] [ 1399.800765][ C0] [ 1399.800774][ C0] ? advance_sched+0xa02/0xca0 [ 1399.800800][ C0] ? __netif_schedule+0xc4/0x310 [ 1399.800820][ C0] ? __pfx_lock_release+0x10/0x10 [ 1399.800852][ C0] ? __pfx___netif_schedule+0x10/0x10 [ 1399.800873][ C0] ? do_raw_spin_unlock+0x13c/0x8b0 [ 1399.800898][ C0] ? taprio_set_budgets+0x32c/0x370 [ 1399.800924][ C0] ? advance_sched+0xa02/0xca0 [ 1399.800947][ C0] ? advance_sched+0xa02/0xca0 [ 1399.800973][ C0] advance_sched+0xb32/0xca0 [ 1399.801027][ C0] ? __pfx_advance_sched+0x10/0x10 [ 1399.801052][ C0] __hrtimer_run_queues+0x59b/0xd50 [ 1399.801079][ C0] ? ktime_get_update_offsets_now+0x3c/0x250 [ 1399.801109][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 1399.801136][ C0] ? ktime_get_update_offsets_now+0x22d/0x250 [ 1399.801160][ C0] hrtimer_interrupt+0x396/0x990 [ 1399.801199][ C0] __sysvec_apic_timer_interrupt+0x110/0x3f0 [ 1399.801228][ C0] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 1399.801252][ C0] [ 1399.801258][ C0] [ 1399.801266][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1399.801292][ C0] RIP: 0010:synchronize_rcu+0x0/0x360 [ 1399.801334][ C0] Code: e1 07 80 c1 03 38 c1 0f 8c 97 fe ff ff 4c 89 f7 e8 85 58 7f 00 e9 8a fe ff ff 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 e4 e0 48 [ 1399.801349][ C0] RSP: 0018:ffffc9000420edd8 EFLAGS: 00000206 [ 1399.801364][ C0] RAX: dffffc0000000000 RBX: 1ffff92000841dc4 RCX: ffffffff9479f603 [ 1399.801378][ C0] RDX: 0000000000000001 RSI: ffffffff8bcac820 RDI: ffffffff8c1fe940 [ 1399.801392][ C0] RBP: ffffc9000420eea8 R08: ffffffff94794f0f R09: 1ffffffff28f29e1 [ 1399.801406][ C0] R10: dffffc0000000000 R11: fffffbfff28f29e2 R12: ffffffff94792c48 [ 1399.801420][ C0] R13: 1ffff92000841dc0 R14: 0000000000000a03 R15: ffffc9000420ee20 [ 1399.801449][ C0] lockdep_unregister_key+0x4b7/0x540 [ 1399.801473][ C0] ? __pfx_lockdep_unregister_key+0x10/0x10 [ 1399.801495][ C0] ? rcu_is_watching+0x15/0xb0 [ 1399.801515][ C0] ? qdisc_reset+0x3bb/0x5a0 [ 1399.801544][ C0] __qdisc_destroy+0x165/0x410 [ 1399.801571][ C0] taprio_attach+0x24e/0x390 [ 1399.801600][ C0] ? __pfx_taprio_attach+0x10/0x10 [ 1399.801626][ C0] qdisc_graft+0x128a/0x1580 [ 1399.801648][ C0] ? qdisc_graft+0x301/0x1580 [ 1399.801675][ C0] ? __pfx_qdisc_graft+0x10/0x10 [ 1399.801698][ C0] ? __pfx_qdisc_create+0x10/0x10 [ 1399.801725][ C0] tc_modify_qdisc+0xf47/0x1e40 [ 1399.801756][ C0] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 1399.801792][ C0] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 1399.801813][ C0] rtnetlink_rcv_msg+0x89b/0x1180 [ 1399.801843][ C0] ? rtnetlink_rcv_msg+0x208/0x1180 [ 1399.801871][ C0] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1399.801900][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1399.801921][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1399.801944][ C0] ? __local_bh_enable_ip+0x168/0x200 [ 1399.801962][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 1399.801986][ C0] ? __local_bh_enable_ip+0x168/0x200 [ 1399.802004][ C0] ? dev_hard_start_xmit+0x773/0x7e0 [ 1399.802024][ C0] ? __dev_queue_xmit+0x2d2/0x3d30 [ 1399.802047][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 1399.802069][ C0] ? __dev_queue_xmit+0x2d2/0x3d30 [ 1399.802093][ C0] ? __dev_queue_xmit+0x16c9/0x3d30 [ 1399.802124][ C0] ? __dev_queue_xmit+0x2d2/0x3d30 [ 1399.802152][ C0] ? ref_tracker_free+0x643/0x7e0 [ 1399.802183][ C0] netlink_rcv_skb+0x1e3/0x430 [ 1399.802208][ C0] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1399.802236][ C0] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1399.802274][ C0] ? netlink_deliver_tap+0x2e/0x1b0 [ 1399.802300][ C0] netlink_unicast+0x7ea/0x980 [ 1399.802326][ C0] ? __pfx_netlink_unicast+0x10/0x10 [ 1399.802347][ C0] ? __virt_addr_valid+0x183/0x520 [ 1399.802373][ C0] ? __check_object_size+0x49c/0x900 [ 1399.802401][ C0] ? bpf_lsm_netlink_send+0x9/0x10 [ 1399.802429][ C0] netlink_sendmsg+0x8db/0xcb0 [ 1399.802467][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1399.802493][ C0] ? aa_sock_msg_perm+0x91/0x160 [ 1399.802533][ C0] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1399.802550][ C0] ? security_socket_sendmsg+0x87/0xb0 [ 1399.802572][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1399.802595][ C0] __sock_sendmsg+0x221/0x270 [ 1399.802625][ C0] ____sys_sendmsg+0x525/0x7d0 [ 1399.802653][ C0] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1399.802684][ C0] __sys_sendmsg+0x2b0/0x3a0 [ 1399.802708][ C0] ? __pfx___sys_sendmsg+0x10/0x10 [ 1399.802758][ C0] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 1399.802783][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 1399.802807][ C0] __do_fast_syscall_32+0xb4/0x120 [ 1399.802833][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 1399.802858][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 1399.802884][ C0] do_fast_syscall_32+0x34/0x80 [ 1399.802915][ C0] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1399.802933][ C0] RIP: 0023:0xf747a579 [ 1399.802948][ C0] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1399.802963][ C0] RSP: 002b:00000000f5d7257c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1399.802979][ C0] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000200007c0 [ 1399.802992][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1399.803002][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1399.803013][ C0] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1399.803024][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1399.803044][ C0] SYZFAIL: failed to recv rpc fd=3 want=4 sent=0 n=0 (errno 9: Bad file descriptor) [ 1400.957053][ T5100] Bluetooth: hci10: command tx timeout [ 1403.057277][ T5100] Bluetooth: hci10: command tx timeout [ 1405.166501][ T5100] Bluetooth: hci10: command tx timeout