last executing test programs: 18m50.619066037s ago: executing program 4 (id=2729): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_audit(0x10, 0x3, 0x9) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b0f, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) socket$kcm(0x11, 0x2, 0x300) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000024882, 0x0) r6 = dup(r5) socket$key(0xf, 0x3, 0x2) ioctl$HDIO_GETGEO(0xffffffffffffffff, 0x301, &(0x7f0000000280)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r6, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) ioctl$KVM_PRE_FAULT_MEMORY(r4, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, 0x0) 18m38.32404618s ago: executing program 4 (id=2743): r0 = syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4ae60) r1 = syz_io_uring_setup(0xed1, 0x0, &(0x7f00000005c0)=0x0, &(0x7f0000000600)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0xa3d, 0x0, 0x0, 0x0, 0xff39) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000040)={'\x00', 0x0, 0x5, 0x2, 0x0, 0x9, "00000000020000000000002100", "00004702", "0300", "97ad3700", ["fdffffff84a438dfc5d5c010", "d78cb8aa211a83be12fff120", "0000efffffffffffbfff00", "0000f8ffffffffffffff00"]}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000000), 0x0, 0x80000, 0x0, 0xffffffffffffffff}) syz_usb_connect(0x0, 0x2d, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b000111000000090400000195699b0009"], 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001a40)=ANY=[], 0x158}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000140)={"4497acf4", 0xb, 0x5, 0x0, 0xffffffff, 0x1000006, 'U\x00', "1575a859", "0725eade", '\'q6O', ["aabe8459c62224475793e8a7", "7f9ce2d2c4f439ff80e1d1c8", "fa0700f22b42a3023be516d1"]}) ioctl$SG_EMULATED_HOST(r4, 0x2203, &(0x7f0000000000)) openat$kvm(0xffffffffffffff9c, 0x0, 0x101302, 0x0) syz_usb_connect(0x2, 0x43, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000a3233910daa658744d2d01020301090231000108"], 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000100)={0x4}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f00009bf000/0x3000)=nil, 0x3000, 0xf, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000e39000/0x3000)=nil, 0x3000, 0x0, 0x4, 0x100) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r7, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) pipe2$9p(&(0x7f0000000080), 0x4800) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) 18m32.902254482s ago: executing program 4 (id=2749): r0 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000005c0)={@dev={0xfe, 0x80, '\x00', 0x40}, @remote, @remote, 0x3, 0x2, 0x5, 0x500, 0xb7, 0xc20022, r1}) syz_emit_ethernet(0x5e, 0x0, 0x0) 18m30.883790971s ago: executing program 4 (id=2750): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x541b, 0xf0ff1f00000000) r1 = syz_open_procfs(0x0, &(0x7f0000000300)='task\x00') r2 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) syz_emit_ethernet(0x3b6, &(0x7f0000000440)=ANY=[], 0x0) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000240)=@mmap={0x1, 0x2, 0x4, 0x100000, 0x9, {}, {0x0, 0x2, 0x4, 0xc0, 0x0, 0xf0, "18a6fc23"}, 0x1, 0x1, {}, 0x1}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="48000000100001040100"/20, @ANYRES32=0x0, @ANYBLOB="ffef000040000000140012800b000100697036677265000004000280140003006970366772653000000000000022000000288fda14ee74bc74ef44aa7430d38d"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f0000000040)=0x1) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000080)={0x980929, 0x6}) ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f0000000080)=0x2) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000180)=@mmap={0x1, 0x1, 0x4, 0x100, 0x81, {}, {0x4, 0x8, 0x8, 0x5, 0x29, 0x9, "0adb3fb8"}, 0x5}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x2400, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x6, 0xff}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x10007f, 0x20000006, 0x4d, 0x6, 0x3, 0x9, 0x2, 0xffff2d34, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x2, 0x7, 0x3c5b, 0x80000001, 0x25, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x0, 0x3, 0xe, 0x8, 0x8000806e, 0x7, 0x17, 0x1, 0x7, 0x200, 0x3e, 0x8c, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x400, 0x80, 0x1, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x7, 0x6c7, 0x8000009, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x7, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x1, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8020, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x43, 0x103], [0x7, 0xa, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xf, 0x4, 0x6, 0x5, 0x0, 0x6, 0x5, 0x1, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2002, 0x2, 0x3, 0x20000008, 0x2, 0x6d03, 0x6, 0x38, 0x3, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xc2, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x1000000a, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x80000000, 0xb, 0x5, 0x93a, 0x6, 0x1000006, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x4, 0xb54, 0x101, 0x10000, 0x4, 0x7fff, 0x10000, 0x7f, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x96, 0xffffffff, 0x80000000, 0x0, 0x4, 0xc8, 0x1, 0xfffff000, 0x10080, 0x3, 0x7e, 0x100, 0x1000, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x1, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) getdents64(r1, &(0x7f0000000100)=""/50, 0x32) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x6, 0x1, 0x2, 0x7fff7ffc}]}) socket$nl_route(0x10, 0x3, 0x0) r5 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) mq_notify(r5, &(0x7f00000000c0)={0x0, 0xc, 0x0, @thr={0x0, 0x0}}) readv(r5, &(0x7f0000000000)=[{&(0x7f0000000100)=""/251}], 0x59) socket(0x40000000015, 0x5, 0x0) 18m23.650588064s ago: executing program 4 (id=2761): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000580)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) socket(0x2b, 0x80801, 0x1) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0xbc3d, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040), 0x2, 0x6}}, 0x20) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="d8000000180081064e81f782db4cb904021d0800fe067c05e8fe55a10a0005000140020003600e41b0000900ac0006fc1100000016000500014002000000035c3b61c1d67f6f94007174cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001b14d6d930dfe1d9d322fe7c4650b5b9bd6ee6f63f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b4ff010000000000000dd6e4edef3d93452a09004b43370e9703920723f97e46bb5c07540d3b", 0xd8}], 0x1}, 0x0) syz_io_uring_setup(0x10f, &(0x7f0000000140)={0x0, 0xb423, 0x0, 0x5, 0x199}, 0x0, 0x0) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="f80000003e000701feffffff00000000017c0000040042800c00018006000600800a0000d1000280cb"], 0xf8}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r4, 0xffffffffffffffff, 0x0) socket(0x1, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) fsopen(&(0x7f0000000000)='nfs\x00', 0x0) socket$netlink(0x10, 0x3, 0x0) pipe2$watch_queue(&(0x7f0000000040), 0x80) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[]) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000001040)={'ip_vti0\x00', &(0x7f0000001000)={'syztnl2\x00', 0x0, 0x0, 0xa000, 0x0, 0x4000, {{0x5, 0x4, 0x0, 0x3, 0x14, 0x64, 0x0, 0x0, 0xa, 0x0, @empty, @rand_addr=0x4}}}}) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r6, 0x29, 0x4b, 0x0, 0x0) 18m15.874798755s ago: executing program 4 (id=2770): r0 = syz_usb_connect(0x5, 0x239, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e388d640697a01006ba8010203010902270201020010000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x103a, 0x1000, 0x103a, 0xfffffffc, 0xff, 0x80000000}, 0x1c) r2 = fsopen(&(0x7f0000000100)='udf\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r2, 0x2, &(0x7f0000000140)='shortad', &(0x7f0000000180)='O', 0x1) syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) socket$rxrpc(0x21, 0x2, 0xa) r3 = syz_io_uring_setup(0x88f, &(0x7f0000000400)={0x0, 0xaee2, 0x4000, 0x2, 0xbfdffffc}, &(0x7f0000000200)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(des3_ede-generic)\x00'}, 0x58) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r7, 0x0, 0x0) r8 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r8, 0x0, 0x0) bind$inet6(r8, 0x0, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(r9, 0x26, 0x0) fcntl$lock(r9, 0x25, 0x0) fcntl$lock(r9, 0x25, 0x0) connect$vsock_stream(r9, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) syz_open_dev$evdev(0x0, 0x55c, 0x20100) io_uring_enter(r3, 0x47f6, 0x0, 0x0, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000e00)='/sys/kernel/crash_elfcorehdr_size', 0x0, 0x0) 17m58.679396232s ago: executing program 32 (id=2764): keyctl$clear(0x5, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x80) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x4, 0xe0, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x3}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'geneve0\x00', 0x0}) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f0000000080)="800000800000210ee7decd7a000000a886dd", 0x12, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r3, 0x1, 0xd8, 0x6, @broadcast}, 0x14) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r5 = io_uring_setup(0x5f64, &(0x7f0000000280)={0x0, 0xc1ba, 0x100, 0x1, 0x300}) r6 = io_uring_setup(0x45a6, &(0x7f0000000500)={0x0, 0x0, 0x1, 0x0, 0x26c, 0x0, r5}) io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x1, 0x7fff0000}]}) add_key$user(&(0x7f0000000440), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000240)="8b", 0x1, 0xfffffffffffffffb) r7 = socket$inet6(0xa, 0x80002, 0x88) setsockopt$inet6_udp_int(r7, 0x11, 0xb, &(0x7f0000000100)=0x7, 0x4) 17m55.708660579s ago: executing program 33 (id=2767): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newtfilter={0x6c, 0x2c, 0xd27, 0x30bd26, 0x8000003, {0x0, 0x0, 0x0, r3, {0x0, 0xfff4}, {}, {0x1, 0x10}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x7f, 0x1, 0x8001}, {0x200, 0x6a6, 0xffff, 0x5, 0x3, 0x2}}}, @TCF_EM_CONTAINER={0x10, 0x2, 0x0, 0x0, {{0xffff, 0x0, 0x7540}, ' '}}]}]}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) (fail_nth: 10) 17m55.025346668s ago: executing program 34 (id=2769): r0 = socket(0x2, 0x3, 0xff) setsockopt$sock_int(r0, 0x1, 0x5, &(0x7f0000000180)=0x400005, 0x4) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000001e40)={'bond_slave_0\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000000ec0)=[{{&(0x7f0000000000)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000040)="281effe935fdca249bd774480a584b135c556eabe1a3f2724200a50e8002a6e5", 0x13}], 0x1, &(0x7f0000001040)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}}}], 0x20}}], 0x1, 0x4800) 17m54.679984793s ago: executing program 35 (id=2771): r0 = socket$inet(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x4}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x2}]}, @IFLA_GROUP={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20048054}, 0x20000050) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) r5 = io_uring_setup(0x168f, &(0x7f0000000400)={0x0, 0x631d, 0x2, 0x2, 0x2d8}) socket$l2tp(0x2, 0x2, 0x73) io_uring_register$IORING_REGISTER_BUFFERS2(r5, 0xf, &(0x7f0000002700)={0x119f, 0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/264, 0xf9}, {&(0x7f00000015c0)=""/4096, 0x400400}, {&(0x7f0000002a00)=""/88, 0x8}], 0x0}, 0x20) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) socket$nl_route(0x10, 0x3, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r4, &(0x7f0000000580)="17", 0xfdef, 0x10008095, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x6, 0x76, 0x0, 0x0) 17m54.491521309s ago: executing program 36 (id=2770): r0 = syz_usb_connect(0x5, 0x239, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e388d640697a01006ba8010203010902270201020010000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x103a, 0x1000, 0x103a, 0xfffffffc, 0xff, 0x80000000}, 0x1c) r2 = fsopen(&(0x7f0000000100)='udf\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r2, 0x2, &(0x7f0000000140)='shortad', &(0x7f0000000180)='O', 0x1) syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) socket$rxrpc(0x21, 0x2, 0xa) r3 = syz_io_uring_setup(0x88f, &(0x7f0000000400)={0x0, 0xaee2, 0x4000, 0x2, 0xbfdffffc}, &(0x7f0000000200)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(des3_ede-generic)\x00'}, 0x58) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r7, 0x0, 0x0) r8 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r8, 0x0, 0x0) bind$inet6(r8, 0x0, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(r9, 0x26, 0x0) fcntl$lock(r9, 0x25, 0x0) fcntl$lock(r9, 0x25, 0x0) connect$vsock_stream(r9, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) syz_open_dev$evdev(0x0, 0x55c, 0x20100) io_uring_enter(r3, 0x47f6, 0x0, 0x0, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000e00)='/sys/kernel/crash_elfcorehdr_size', 0x0, 0x0) 13m38.623843037s ago: executing program 9 (id=5355): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000086d0404e100000000000109022400010000300f0904000004030000000921faff080122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) 13m37.1237528s ago: executing program 9 (id=5362): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="4dc07f947163300c", 0x8) 13m37.040635391s ago: executing program 9 (id=5363): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_CONNECT(r0, 0x0, 0x0) 13m37.031142292s ago: executing program 9 (id=5364): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount_setattr(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, &(0x7f00000002c0)={0x0, 0x2, 0x100000}, 0x20) unshare(0x2a020400) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r1, 0x0) syz_clone(0xd5ba2180, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) 13m36.93187858s ago: executing program 9 (id=5366): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x5c, 0x2, 0x6, 0x5, 0xa, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x3}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4}, @IPSET_ATTR_PORT_TO={0x6}]}]}, 0x5c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002440)=ANY=[@ANYBLOB="34000000090605000a00000000000000000000000900020073797a300000000005000100060000000c00078006000440"], 0x34}}, 0x0) 13m36.710650501s ago: executing program 9 (id=5371): r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x2, 0x2) r1 = syz_open_procfs(0x0, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10002, 0x1, 0x1}) r2 = gettid() ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0xc0405626, &(0x7f0000000040)) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 13m36.416039733s ago: executing program 37 (id=5371): r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x2, 0x2) r1 = syz_open_procfs(0x0, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10002, 0x1, 0x1}) r2 = gettid() ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0xc0405626, &(0x7f0000000040)) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 13m15.672241992s ago: executing program 3 (id=5536): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000800)={'wlan0\x00'}) sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, 0x0, 0x0) 13m15.527897609s ago: executing program 3 (id=5537): r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000740), 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) 13m15.385489774s ago: executing program 3 (id=5539): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0xe, 0x3, "7acc6338a90000b03bd9"}, @NFTA_MATCH_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_COMPAT={0x14, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}]}], {0x14}}, 0x98}}, 0x0) 13m15.272197619s ago: executing program 3 (id=5541): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount_setattr(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, &(0x7f00000002c0)={0x0, 0x2, 0x100000}, 0x20) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) syz_clone(0xd5ba2180, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) 13m14.979906093s ago: executing program 3 (id=5543): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtfilter={0x98, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {}, {0x2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x5c, 0x2, [@TCA_MATCHALL_ACT={0x58, 0x2, [@m_simple={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xb, 0x3, '.,\\-\\{\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x55b, 0x2, 0x10000000, 0x7, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x7, 0xb}}]}, 0x98}}, 0x801) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 13m14.520576323s ago: executing program 3 (id=5545): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWCHAIN={0x4c, 0x3, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x4}, @NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc}, @NFTA_COUNTER_BYTES={0xc}]}]}], {0x14}}, 0x74}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 13m13.669070969s ago: executing program 38 (id=5545): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWCHAIN={0x4c, 0x3, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x4}, @NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc}, @NFTA_COUNTER_BYTES={0xc}]}]}], {0x14}}, 0x74}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 13m13.224430033s ago: executing program 7 (id=5550): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000540)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)="e4e32dd2b696733552eca3e954943a18709f72fbd259a936c67ebe806ab21823f4a0c47bff45323c2b30982dfc67b46cc9a5a07c33fc", 0x36}], 0x1, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x60}], 0x1, 0x8001) recvmmsg(r1, &(0x7f0000008c40)=[{{0x0, 0x0, &(0x7f0000008580)=[{&(0x7f0000006140)=""/7, 0x7}, {&(0x7f0000006180)=""/131, 0x83}], 0x2}}], 0x1, 0x0, 0x0) 13m12.284839938s ago: executing program 7 (id=5556): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000b00)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010027bd7000fbdbdf252700000008000300", @ANYRES32, @ANYBLOB="06003600040000000a0006"], 0x34}, 0x1, 0x0, 0x0, 0x20004841}, 0x80) 13m12.065922339s ago: executing program 7 (id=5558): syz_usb_connect(0x5, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100004107f540f30c7593de1a00000001090224000100"], 0x0) 13m8.930127763s ago: executing program 7 (id=5569): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) unshare(0x2a020400) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) syz_clone(0xd5ba2180, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) 13m8.277234646s ago: executing program 7 (id=5572): syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x200, 0x102) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r1 = dup(r0) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000100)=@urb_type_control={0x2, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 13m6.256172883s ago: executing program 7 (id=5590): r0 = socket(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'macvlan0\x00', 0x0}) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000000)={0x4, 0x0, 0x0, r1}, 0xc) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000080)={0x1, 0x1, 0x0, r1, 0x267a4e37}, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x20008000) 13m5.599502379s ago: executing program 39 (id=5590): r0 = socket(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'macvlan0\x00', 0x0}) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000000)={0x4, 0x0, 0x0, r1}, 0xc) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000080)={0x1, 0x1, 0x0, r1, 0x267a4e37}, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x20008000) 6m39.682510857s ago: executing program 6 (id=9941): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x65) recvmmsg(r0, &(0x7f0000000200)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x10020, 0x0) syz_emit_ethernet(0x8e, 0x0, 0x0) 6m38.721767226s ago: executing program 6 (id=9949): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xd, &(0x7f0000000280)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b708"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="2800000070000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="1000018004000480080001"], 0x28}, 0x1, 0x1000000000000000}, 0x0) 6m38.704669471s ago: executing program 6 (id=9950): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000013c0)={'veth1_macvtap\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000002840)=ANY=[@ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b0001006d616373656300001800028005000900010000000c000100000000000000000008000500", @ANYRES32=r1], 0x50}}, 0x0) 6m38.658813078s ago: executing program 6 (id=9951): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount_setattr(0xffffffffffffff9c, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x2, 0x100000}, 0x20) unshare(0x2a020400) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) syz_clone(0xd5ba2180, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) 6m38.336556598s ago: executing program 6 (id=9954): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f00000000c0)={0x0, @in={{0x2, 0x0, @empty}}}, &(0x7f0000000040)=0x90) 6m38.09828948s ago: executing program 6 (id=9955): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1) sendto$inet6(r0, 0x0, 0x0, 0x200c8004, &(0x7f0000000280)={0xa, 0x4e22, 0x0, @mcast2}, 0x1c) sendto$inet6(r0, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c) sendmsg$inet6(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000240)}], 0x1}, 0x0) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f00000000c0), 0x4) 6m37.781757002s ago: executing program 40 (id=9955): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1) sendto$inet6(r0, 0x0, 0x0, 0x200c8004, &(0x7f0000000280)={0xa, 0x4e22, 0x0, @mcast2}, 0x1c) sendto$inet6(r0, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c) sendmsg$inet6(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000240)}], 0x1}, 0x0) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f00000000c0), 0x4) 55.608217002s ago: executing program 1 (id=14203): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000140)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@mptcp=@ack={0x1e, 0x4, 0x3e}]}}}}}}}}, 0x0) 55.553597016s ago: executing program 1 (id=14204): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x840) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000440)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x0, 0x4e29, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0x16, 0x1, 0x0, 0x0, {[@generic={0x2, 0x7, "7a4e7bc3ed"}]}}}}}}}, 0x0) 55.221642095s ago: executing program 1 (id=14205): r0 = fsopen(&(0x7f0000000040)='pvfs2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 54.918396917s ago: executing program 1 (id=14209): r0 = syz_usb_connect(0x3, 0x2d, &(0x7f00000003c0)={{0x12, 0x1, 0x0, 0x5a, 0xe4, 0xc4, 0x10, 0x596, 0x1, 0x5f5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xd6, 0x0, 0x1, 0xb5, 0xe1, 0x45, 0x0, [], [{{0x9, 0x5, 0x83, 0x0, 0x3ff, 0x3, 0x7, 0x4}}]}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000001480)={0x34, &(0x7f0000001180)=ANY=[@ANYBLOB="311710"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 53.168064498s ago: executing program 8 (id=14223): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r0, 0xc0105500, &(0x7f0000000000)={0x20, 0x3, 0x9, 0x1000, 0x0, 0xfffffffe, 0x0}) 52.992763725s ago: executing program 8 (id=14224): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x4) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x303, 0x37}, "475566172f45f011", "bd14060000000000000092f94413582b", "00001000", "4e67cb72f328ac2f"}, 0x28) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000240)="c2", 0x1200}], 0x1) 52.923382378s ago: executing program 8 (id=14225): syz_emit_ethernet(0x3a, &(0x7f0000000080)={@random="d397a19eb3f3", @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x2, 0x6, 0x2c, 0x65, 0x0, 0x7, 0x6, 0x0, @rand_addr=0x64010102, @private=0xa010101, {[@ssrr={0x89, 0x3, 0x91}]}}, {{0x4e23, 0x4e23, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x2, 0xa, 0x0, 0x9}}}}}}, 0x0) 52.709488832s ago: executing program 8 (id=14227): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000b40)=[{{0x0, 0x0, &(0x7f00000005c0)}}], 0x1, 0x840) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000440)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x0, 0x4e29, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0x16, 0x1, 0x0, 0x0, {[@generic={0x2, 0x7, "7a4e7bc3ed"}]}}}}}}}, 0x0) 52.220442501s ago: executing program 8 (id=14230): syz_usb_connect$cdc_ncm(0x2, 0x97, 0x0, &(0x7f00000003c0)={0x0, 0x0, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="020f"]}) 51.641836383s ago: executing program 1 (id=14231): r0 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$can_bcm(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f00000009c0)={0x5, 0x802, 0x0, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "f33d8e7b847ec8b36f1107e036dd98fc469107485e371bcf5c6b77db54f3d984795c49eca9b92241dc9fc39f976ad52e581942d9fc2178681e6866aa6ef10d06"}}, 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={0x5, 0xc02, 0x0, {0x77359400}, {0x77359400}, {0x0, 0x0, 0x1}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "645b6048a2e4931133f6d9919fd48557d76811cd874cc414e02216198977dc3c41ed0880c64c39e5f4059bae641ed1511000"}}, 0x80}}, 0x0) 51.641645646s ago: executing program 8 (id=14232): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x61}, {0x6, 0x0, 0x2}]}) 51.488078083s ago: executing program 1 (id=14233): r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x200, 0x102) r1 = dup(r0) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000100)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x1}, 0x8, 0x0, 0x100, 0x0, 0x0, 0x6, 0x0}) 46.407300406s ago: executing program 2 (id=14248): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r1, r1}, &(0x7f0000000600), &(0x7f0000000640)=r0}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x5, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 46.339404529s ago: executing program 2 (id=14249): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="04230d00c90001"], 0x10) sendmsg$nl_crypto(0xffffffffffffffff, 0x0, 0x8800) socket$packet(0x11, 0x3, 0x300) syz_emit_vhci(0x0, 0x8) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) 46.128676573s ago: executing program 2 (id=14250): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000003b80)={0x0, 0x9, 0x7747, 0x8000}, 0x10) 45.997511935s ago: executing program 2 (id=14251): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000b40)=[{{0x0, 0x0, &(0x7f00000005c0)}}], 0x1, 0x840) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000440)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x0, 0x4e29, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0x16, 0x1, 0x0, 0x0, {[@generic={0x2, 0x7, "7a4e7bc3ed"}]}}}}}}}, 0x0) 45.934344361s ago: executing program 2 (id=14252): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x8000) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="00020201"], 0x18) sendmmsg$inet6(r2, &(0x7f0000001900)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c, &(0x7f0000001200)=[{&(0x7f0000000040)="bd", 0x1}], 0x1}}], 0x1, 0xc0c0) 44.483553223s ago: executing program 2 (id=14258): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket(0x200000000000011, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) connect$netlink(r1, &(0x7f0000000280)=@kern={0x10, 0x0, 0x0, 0x2000}, 0xc) creat(0x0, 0x40) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_X86_SETUP_MCE(r3, 0x4008ae9c, &(0x7f0000000140)={0x1, 0x1, 0x81}) 36.040263026s ago: executing program 41 (id=14233): r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x200, 0x102) r1 = dup(r0) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000100)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x1}, 0x8, 0x0, 0x100, 0x0, 0x0, 0x6, 0x0}) 29.250293923s ago: executing program 42 (id=14258): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket(0x200000000000011, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) connect$netlink(r1, &(0x7f0000000280)=@kern={0x10, 0x0, 0x0, 0x2000}, 0xc) creat(0x0, 0x40) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_X86_SETUP_MCE(r3, 0x4008ae9c, &(0x7f0000000140)={0x1, 0x1, 0x81}) 25.916734535s ago: executing program 5 (id=14315): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x401, 0x4, 0x0, {0x0, 0x0, 0x0, r1, 0x0, 0x4810}, [@IFLA_MTU={0x8, 0x4, 0x620}]}, 0x28}}, 0x6000054) 25.875457439s ago: executing program 5 (id=14316): r0 = syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xf0f05e, 0x1ff, '\x00', @p_u32=0x0}}) write$binfmt_script(r0, &(0x7f0000000280)={'#! ', './file0', [], 0xa, "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"}, 0x2a9) pwritev(r0, &(0x7f0000002740)=[{&(0x7f0000002180)="ce7316", 0x3}], 0x1, 0x2, 0x1) 25.645233647s ago: executing program 5 (id=14317): r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_vs\x00') read$FUSE(r0, &(0x7f0000001c00)={0x2020}, 0x2020) r1 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000240)={0x11, @multicast1, 0x0, 0x4000, 'rr\x00', 0x0, 0x5, 0xfffffffe}, 0x2c) read(r0, &(0x7f0000000140)=""/210, 0xd2) 25.533931893s ago: executing program 5 (id=14318): r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r0, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0x10, &(0x7f0000001080)=[{&(0x7f0000000040)="a72d11a15c048c0a7d63aebc5cea1f81510ff6091475aeec600831aa9d3944e60bc2ad06a619c560aa0118b28f68f1eb14549d633b4b23f179fb680716faa43414787559be90843c35ab30acad8a6740140e00721abc2eb362f7bde53b3c992d3e28ccc20ec84fdc569947047f6c09a647ee8c0a747b951e66c068ccf1af93ee9e6f9528ff79e2f989383b05a690a6bec4634b867c9446c1c644b3010e8a3514c6328323b4bbdd602b8f0dace6aea70902c4ddd2a2f2810f1348b0d0df3c1e6a5938fcfdc87e7580c6be0c6a06eca62d6f787dd16add086a21391c4c707d8b61929d1252681b84c245e0efafe2e6e73ad86a3cf59235ab0eacbb414af92ec3cdac420a064a98e8cc18bdf63f8997f96436e0fe6f06fdbf47fff353b01a861babd4a38d126bfe3e29049e6cc883e6efae6e70ef9ed124b1b09887a58c991e223b6420dca5ae238027e91b17b1707dc5c0d5f59f0ca95614f1ea1d263c1ee54dfe31ae35eb3c8e3b931dff7920c57fbba89adf2e392c1ad719b90c7ade0d38ff9792934ef1fb12f51d8e2fad12486d5883d5b1a46696fad128c6805cfb25bc6487e1e407d6b266971b09d0d864a7a550284e24b6cdc9f4ae1081a638175dffef002c76ac5558d23e41edbe68f4b4950a13aa000326dae5a857603dc5a40d6c6618a98c7b6e1eebd325ea2c14601a25658965f40864fd015d9b2fff83ee5ed3212ebd9fa429f0140f633556ac07c0c08e67a1848c9942ecc47dd4ffede9a429e9e0472be7cdbcd117e621ddf745c00a814ffff0224634472577dc0b35a9c153409f1a2bddc193b20b4d244d9cbbd59816c46000c596865f58b4e640ed4a9ab6086cede697fb113560925498da83273e679e0e28b84961eb7b9c9b4fa916590965c76b48e5d453f27a821bd2bf0946ff2413ec30f7893d1f046e18f736c40ceda26dfc4a0a62f71a3606d3f72c0a858dfd7895e2572292e11af913c6b513a141d28e501ae7c49618d104aac9abb78466a636efb88120d0eef0a501558a5aa34784a9823f2802a0bcdf318f9b436b34b42a2a7cf513f80364ad9a699d2e23eb4f3a2bbce818bd20da61882b3dac699d05dc24f29b72471b712423ace6278c43df2be7a09e815517b86d8b3ce16af3d64a575958c5fd52aac53b391f3d2a67c24c6c13ec11428b61b80a6a58cbba1790a98d190a572070f63fc0b809669895ea9865c3066b06102f6f2c7171dc7f76e1931b3e4deb569ef9d07d5f86a848f50942e93c419c3a23489f14803b08182dfd48b8d4375be6b7f805a21209c05e5927693a8834c8d5a5acbd47ed8a30a8a741d1ad77639b56b3b90c0b2023fa334befd28b2e27cbcd94b0ce7437f88ce67a925cea6d6d7e5313de6d328b1124a8b9ef83fe39ca3da97d33c60b7fd4af67d3c8fccb595a27a5bffc71e5a5b2ec966828993b0c0f83cbc55f9a7fb66a4101d5c83b77885072b6e2b2ceebe32f635509698c05089b9ff1cb1959b211e114dadb224ef2d5e7a3c55b3ac00fcdc9018577603c6301e5d4341b3d7eeb2665349d448d28d5d108f576408cbe533a6adbba18ebb2d84bb9af81108506a2f50fb56d595579000747930449fdf4ed01715ec624a0cb73636a35b9136f10b79e3d7ded09008b92e92c64e26e6b6d17f18b70b1d9813de8d2ff151c7a6a0452c660a57c33f13e2d9b88fa5f5c0505722d2e787a425e4a3e9b5efa9668e9199f5fb9fe7d5b8a57719a57df152e7f2c6a1087a2a24084f82455b65353a70559f04d5ed12defb81497ea69c1c7e69c373524770b7473c16a69c7a3648a9dd93377b89cdff61cf62512d1ee67a55ea67993937c1f55a2179bc9c8a337364cfb84d295adda1ad9700fc2f5c11cbfc1b90affb4666c6e7e23a6f7751410a5651819f29f690c6dba2b8a67e0f7f8cc377feb1854c393578994c85391ba21b3961aed477f771645571dc7d6cae72bf79c82a92a4edc3742b1398060a0a5c9e81c016b7f2ae3db529c6ff824cc28678764d8ab49d7dc68e5b0556c9e7ffb6fef442776d86fbd458741830e57f22a1f8513b92abd5b2df93a67cc560134078f0b8ecc3276e40aadef5cd579888b86b4988f396679250701f3869e7493b33692035ecd94aca5189fd0a0893ccc5bb19c0b4caca86cf90ebc2a5558f39cccb33f6773a4e425bf551fb3b6456ee1cc62fa1843a9e5539bb2d02ae6ef82533a9dbcfb562c1ab18c1f639ae7ff02083746f74a15ba2d10e4b955940a5d6f488d326a99f287c48ad463ce40367aeeff519cbad0a2d7fdbfa48bff75955467977764c2be2bd2ffa18396c46920c40c50a4037003666406d177e2cd20aee423d07169d8f611f635ba0b62b61265ff2c5548446a2423dd1038482b6852b2d9d2f90aa05d82c5e2c3d1af0c7aad72d82b3da67471af7b037bb0424a785e73f35b5a10a2ab300a195c20cd119a5390e0cd5d49c70bd80883b933e843d0d2902749dcf3c140c708a0f004b7a2f50bf311305dc01719016fcce5863815ca7951de710fcb71cd177551ff6fcd9f8bf01b93868f24c6129b6d7917125338cf62110083093fc7f862015d48450d992f2bb43e601cab19b2ea7b83962a382fc2a31fdf2358bf8a9a9e506eaa7b6eb5e7444d1ef459b24ffa51362abce902dfd84201a0e4b5a3b62757aad54fb65b83821c6bba663886de092065a565921ea3eb6781bb8ed4f4db3abcfeeb379b7e52fca790bea719918e299ab01bf5e92177d134360bf7a16a59e9d03d3dcfb0a25599237e3d41b3f0026c9402b1fb1894426303413a2cbcf7c72807ca694afa285990d07c3bca26413c9947b3b344aafc04544b8c11416e0312b028da7302e316c3966d41884b15055a49a4a0b3eac8e11f88a5615fb0af582f065d28e5a454447e9d0cfc60356439ebf7e1d0a00f5b9cc6daf2bd7195ba96b4d1a0679ff0fb1c01282c378a880f90f460889b67d76d4d0e8db6c928d113533d1d10b810303c43d8ff622c5bab7f095b96e64bf9daa48a2bdf3d9d40bac00cf1b66df61a4f7c3e21938e876f81b1179dce6a008f28eb682cae690ced0ea0d542da604d8056f2b1813ed36683c4c51aeb2650772cfb1c55d4e60604ff06344cfc271b2175a6c94defb807af240b483e24298ca73bfc743ca2ca2e77e6d5b817b3c1986601537faf59ac84c74d8bd0c068cb8e6bd03ac2dcf5793fb4a00b3c901a33aa3ee86e4f0db317b94bb8678ab26e36d305ebac4b0f7f164947148255b562dd0f87648499d45bccfb7d8c9d5624cadf8160a396e79fbcdc100058ba4606e41c02fb2cc0dc6c36196bd28acfde82a18cda2321d2d83fecd3b85380667cd1d0bc68298c6c8f10421a80c8fa86912b6c3e8ddd9d9668520d5151409e6b77f0d7730b374a68a744151bfbd123cfdf871e8c24e70d2ca3b50e84a48e0b78c1781000cfc848d43584985763a76c0ab9ba882c55e3e4aa8f2174255db38adb8350b48a77be22a869d13d183325f859b883464e5e46de5ea8a92532b9a794daaeff657cd361f7f158f8bebe36e9de1f5b9721d4263dcc9472229bc02d3f552180abfb25ca7aa36cb914d99c09fd5bb99dcab9b4e3c634d18fc7dfe84dc4425ad1e39c3e7410d49b4ea0a8a2958688c7725822f6dfc0827d19dc385e0e35a949941e4dd1aaeaab9ebe402f8c584bca7efc829f2ccfb63fd7bde1c182a67c14f9d3f033ca674e2604e89cd55a15419f956cd61a755c1b13554dae98e77be078aadfc131c9677381f1dbe6ef194eb17603a463e8b844ab46a6046e1f07d96d66de669359bff4c3d80948a4de3abb2f171a09b5d8999c379fb62244114e218c79805df7d899e5661320ee6721d652b95f09e4dfe69bd67099c73294b17ab574e0b966aa3ab44478965b9dca3cb3b9282945f24ccdd07c638ae25a84a728ca24f87ff49d718121a694be46f3616e27b1041b3c6cd24b9cf775bfc28dfbe0a009048f0599f2d5d6586cfd1e7f7fe69872d08b98f60d28e6af0d49d7f06ad71a7b5c41df261aba5de114022c7288bc265cc17909fdeadc3d7b256d7ab3b96e40f857060f16b54a6bb7248ee571f87ace5ee39eab412706cf52fa711468b21ea129c3f44bceb429fcc1a0ac2aa87b9365077dcfcfa9a1b32a0a09699197c20019a66cbd0a897feab3706c23123b888ada643d4560082033e31596b0483578968e3c9593ebd97141c228a42fc7645f92171c120aabca36657683fd7c72fcb87217f124d6fabc52f1d221d8410b47b0ad4bd944bf4085365e9b52a53911ab4ee142c5a1ebbe034c9d98c538c066f2dc0acf372eb2397dcac765055123e0ba19be22b18c886bf0f7490abe9fde91ffa62e059962bd134be8501cb5b715a744b1398e2c4c7e8afe72e189dda0654296afa1c1f99ab7d800fa40f72a758625c833b6fc7b7d42250522b456e1e7de815350c36c9cb2f4d1c9cb99109f89b456c559463f11b8b58247809b17a4ed4912bd0a47a529f1364d6dc593ea7f3eb98962078ac90e5012ee1c7b4b9ed5a8c7a9c0231b4ce425693faab64fa0f3482a04d4be2e06ee5d103694d288810a1a7f4d1e908dd82dd2016a064ece5cd67ef1dd5f4cda728fc6f1ccdd949dd8f775d862621507248ef4c83ae274969d19c7ddb02a4e8a1ab2b7aa539a442b22735ceedeefe60a1059dfaaa0979ce8d5387b5a047841fd9749b88ca91216b02d7926408a01916b7781bb7167528ccdb9a486d173437a5ba3e552c8674dff2cc9b21054e0e4f86b61b8723fca58ceef4413bffae9e9be79c5b9788f5449811ce78be9bc7a86375a670197baaef751beabcba0aa6c7c33f1cd702cb78ec39fa1f17d9da733d6abf2b80f9c51ac8f6f664b24edc53a7c9525c3016bd05c67272375fe816b2b121f2de68b885a0fd8f8b8c6c342237b632f6414a3eb3480f5f42106c5812e9bfd4e8c8dea8d08525d9aa1da7c7c2ee7ff3d31b79b211dd01e304a8ffc83a89a59f3b1e2ef5e969b6d90bea7e161066f25622fad914bff52bacd2807093dda1838b529ee57f718b374ce2841b924a42457867547a6edcb8412d85f11796742bf640b5819a9546357df778c332af5983c4373a95d9c58b52dba445eee92e6911824f0c534e7a5934d9eac9b7f6fec22002fc53a3003a3304217f567b47cd326edc5f48eb1f46bb20d1e10e72239afc9769344590cf48902aba5405b7d4baa31a912ab398a2f2d3f037614bb56a89244ece50f3a1e058d274f1e70f944eb8a305be91e561e5eb843d057a81f4deb84a6335ec81ca964cdae5f318d4e9aaea2c477cc279c00c698bcfe4b8e04c09079d8f3f5438d9d45a00f50d2f9b245c8c68eebf247e25ba8d26f8b95b21ac9ceb50c0aa2e4bdc032024db216b92f9350a90ac79341af14d3fa8ba908096e1b503341aed667bb184c672dac85fc4f335b3871c3b4e55ea219a857d2d2e135358f6b45a20b3e7de8e09b2041eb7c5084a80258fb524a983752659298a251e178b56f96bc67ae0a78ec92f92d92c9cf0edb5dcb11e739d69410ad44c8df00caa030d7d89f2ec38bd7698115c423cf3e6048793aca08ffbcdac766f1553773fa00031c1d75246e4e1eddf8948d02a3de6d67fd7329e45070f29044587f1e0db50d04e673191a63e30f96ee0d8d52738fab36a7fe2c6ab9301d401e7ca5b1f039193a580e40abbdf40c2d7e27809dec80815d37adae9fe7fb9d3a974c9fc03944d7338d000b81170be4c6792ed6b3", 0xfe0}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f0000001d00)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="e1212f0409000000e70bcf35ac837225dd355ad309a5ec6096633ba38e1ef5baf006020e5f45c993cb5680017c6720bea9b7c451516a8cff7f00000000000019f20b784b2336d43c8a0f7347801a596dfb0b078a967980ccec1d115c7a0000000000000000000000fed6260fdf140498f1274bc569d0d87656d0d18d903580f0ec0915e89bd286b2c25165043f6a001d53f84eaabf01cc310ff28c7c76867ce1a2c9c91b1db7295614e2a4f8711ec37ae999180cb5bbb9c5382120076e117539d423a2ec0f468db35960831f5f883472327697495b8e8ba8e2f3defbe93e1fc733b06dfc74890a3f63b154e9681d69cdd9894c914ee45c286462888ff84e401a6d8895ffda88a171b7359f815d7b6f7562fba1bbff4cba08f7a3f582d7c604013317281c5e9a8e88b66a4717b3c318f85aecbe8b5f3485f8d31bf5a57b9dd53b382ec017a33d1fabe09daf76b3b0"], 0x6b}, 0x0) 25.424049742s ago: executing program 5 (id=14319): syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b000900000000090400020100350400"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r0, 0x0, 0x0) 23.754158898s ago: executing program 5 (id=14321): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f00000004c0)={@val={0x2f3a, 0x800}, @val={0x0, 0x3, 0x3, 0x1}, @ipv4=@igmp={{0x6, 0x4, 0x3, 0x2d, 0xfc0, 0x65, 0x0, 0x1, 0x2, 0x0, @remote, @local, {[@ra={0x94, 0x4}]}}, {0x11, 0x7, 0x0, @rand_addr=0x64010102, "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"}}}, 0xfce) 19.615190162s ago: executing program 0 (id=14333): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@loopback, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@dev, 0x0, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@loopback, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x2}}, {{@in=@multicast2, 0x0, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0xe8) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) sendmsg$key(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x2, 0xa, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 19.539213988s ago: executing program 0 (id=14334): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x6, 0x2, 0x5}}]}, 0x38}}, 0x0) 18.614549835s ago: executing program 0 (id=14335): r0 = mq_open(&(0x7f0000000040)='!\x7f\x00\xca\x00\x00\x00\f\x00\x00\x01E!Tnux\x00', 0x6e93ebbbcc0884f2, 0x0, 0x0) mq_timedreceive(r0, 0x0, 0xfffffffffffffee3, 0x0, 0x0) mq_timedsend(r0, &(0x7f0000000780)=',', 0x1, 0x0, 0x0) 18.524100651s ago: executing program 0 (id=14336): openat$vcsu(0xffffffffffffff9c, 0x0, 0x400000, 0x0) r0 = syz_usb_connect(0x3, 0x73, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000396d0940fd101315ce7e0102030109026100010000000009040001"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 15.479058264s ago: executing program 0 (id=14337): r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000080)=0x6, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x5f0f, 0x4) write$binfmt_script(r0, &(0x7f00000000c0), 0x28) recvmmsg(r0, &(0x7f00000013c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002000, 0x0) 15.374737852s ago: executing program 0 (id=14338): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1a21}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r2}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x48}}, 0x0) 8.356397768s ago: executing program 43 (id=14321): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f00000004c0)={@val={0x2f3a, 0x800}, @val={0x0, 0x3, 0x3, 0x1}, @ipv4=@igmp={{0x6, 0x4, 0x3, 0x2d, 0xfc0, 0x65, 0x0, 0x1, 0x2, 0x0, @remote, @local, {[@ra={0x94, 0x4}]}}, {0x11, 0x7, 0x0, @rand_addr=0x64010102, "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"}}}, 0xfce) 0s ago: executing program 44 (id=14338): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1a21}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r2}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x48}}, 0x0) kernel console output (not intermixed with test programs): 2095.948043][ T5957] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2095.957168][T32702] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2095.965628][T32702] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2095.976166][T32702] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2095.988613][ T5957] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2095.998684][ T5957] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2096.006765][ T5957] usb 9-1: Product: syz [ 2096.011141][T32702] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2096.018098][ T5957] usb 9-1: Manufacturer: syz [ 2096.022891][ T5957] usb 9-1: SerialNumber: syz [ 2096.028680][T32702] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2096.039156][T32702] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2096.054371][ T981] usb 6-1: USB disconnect, device number 117 [ 2096.061797][T32702] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2096.083970][T32702] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2096.096523][T32702] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2096.109199][T32702] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2096.121845][T32702] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 2096.132393][T32702] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 2096.141358][T32702] usb 2-1: Product: syz [ 2096.145772][T32702] usb 2-1: Manufacturer: syz [ 2096.152514][T32702] usb 2-1: SerialNumber: syz [ 2096.162054][T32702] usb 2-1: config 0 descriptor?? [ 2096.174529][T32702] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0 [ 2096.384623][ T981] usb 2-1: USB disconnect, device number 55 [ 2096.394887][ T981] yurex 2-1:0.0: USB YUREX #0 now disconnected [ 2096.461612][ T5957] usb 9-1: 0:2 : does not exist [ 2096.767672][T32702] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 2096.939889][T32702] usb 3-1: Using ep0 maxpacket: 32 [ 2096.959190][T32702] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2096.984492][T32702] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2096.998912][T32702] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 2097.012976][T32702] usb 3-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 2097.024183][T32702] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2097.038620][T32702] usb 3-1: config 0 descriptor?? [ 2097.135050][ T5957] usb 9-1: USB disconnect, device number 118 [ 2097.224813][T18309] udevd[18309]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2097.499398][T32702] usbhid 3-1:0.0: can't add hid device: -71 [ 2097.517809][T32702] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 2097.537324][T32702] usb 3-1: USB disconnect, device number 62 [ 2097.557204][ T981] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 2097.727734][ T981] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2097.747545][ T981] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2097.769466][ T981] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 2097.779717][ T981] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2097.794615][ T981] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2097.804271][T16558] usb 6-1: new full-speed USB device number 118 using dummy_hcd [ 2097.813417][ T981] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2097.830310][ T981] usb 2-1: config 0 descriptor?? [ 2097.972871][T16558] usb 6-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2097.989972][T16558] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 2098.002311][T16558] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 2098.014043][T16558] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 2098.036568][T16558] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 2098.072770][T16558] usb 6-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 2098.117452][T16558] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2098.125602][T16558] usb 6-1: Product: syz [ 2098.147122][T16558] usb 6-1: Manufacturer: syz [ 2098.151826][T16558] usb 6-1: SerialNumber: syz [ 2098.188303][T16558] usb 6-1: config 0 descriptor?? [ 2098.263072][ T981] usbhid 2-1:0.0: can't add hid device: -71 [ 2098.269956][ T981] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 2098.304477][ T981] usb 2-1: USB disconnect, device number 56 [ 2098.352472][T10741] fuse: Unknown parameter 'fd0x0000000000000003' [ 2098.363550][T16558] rc_core: IR keymap rc-imon-rsc not found [ 2098.370548][T16558] Registered IR keymap rc-empty [ 2098.376689][T16558] rc rc0: iMON Station as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 2098.390996][T16558] input: iMON Station as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input163 [ 2098.404541][T16558] imon_raw 6-1:0.0: probe with driver imon_raw failed with error -90 [ 2098.459493][T16558] usb 6-1: USB disconnect, device number 118 [ 2099.008244][T16558] usb 3-1: new full-speed USB device number 63 using dummy_hcd [ 2099.022353][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2099.057460][T32702] usb 2-1: new full-speed USB device number 57 using dummy_hcd [ 2099.180243][T16558] usb 3-1: config 0 has an invalid interface number: 230 but max is 0 [ 2099.190556][T16558] usb 3-1: config 0 has no interface number 0 [ 2099.197556][T16558] usb 3-1: too many endpoints for config 0 interface 230 altsetting 255: 65, using maximum allowed: 30 [ 2099.208879][T16558] usb 3-1: config 0 interface 230 altsetting 255 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2099.223685][T16558] usb 3-1: config 0 interface 230 altsetting 255 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2099.236720][T16558] usb 3-1: config 0 interface 230 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 65 [ 2099.262162][T32702] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2099.277666][T16558] usb 3-1: config 0 interface 230 has no altsetting 0 [ 2099.284529][T16558] usb 3-1: New USB device found, idVendor=5543, idProduct=0781, bcdDevice= 0.00 [ 2099.295698][T32702] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 2099.306778][T16558] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2099.314711][T16558] usb 3-1: config 0 descriptor?? [ 2099.321394][T32702] usb 2-1: New USB device found, idVendor=04b4, idProduct=de61, bcdDevice= 0.00 [ 2099.334340][T32702] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2099.344174][ T981] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2099.369409][T32702] usb 2-1: config 0 descriptor?? [ 2099.385877][T10763] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 2099.652013][T10792] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2099.707834][ T5920] usb 6-1: new high-speed USB device number 119 using dummy_hcd [ 2099.744070][T10794] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2099.796128][T10795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2099.814133][T32702] cypress 0003:04B4:DE61.0097: hidraw0: USB HID v0.00 Device [HID 04b4:de61] on usb-dummy_hcd.1-1/input0 [ 2099.847826][T10797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2099.867646][ T5920] usb 6-1: Using ep0 maxpacket: 32 [ 2099.874681][ T5920] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2099.907440][ T5920] usb 6-1: New USB device found, idVendor=044e, idProduct=121e, bcdDevice= 0.00 [ 2099.916566][ T5920] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2099.929539][ T5920] usb 6-1: config 0 descriptor?? [ 2099.969949][T16558] usbhid 3-1:0.230: can't add hid device: -71 [ 2099.979747][T16558] usbhid 3-1:0.230: probe with driver usbhid failed with error -71 [ 2099.992746][T16558] usb 3-1: USB disconnect, device number 63 [ 2100.015836][T32702] usb 2-1: USB disconnect, device number 57 [ 2100.298027][ T5981] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2100.343637][ T5920] usbhid 6-1:0.0: can't add hid device: -71 [ 2100.352099][ T5920] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 2100.368807][ T5920] usb 6-1: USB disconnect, device number 119 [ 2100.380624][ T981] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2100.521825][T10799] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13569'. [ 2100.746482][T10809] netlink: 68 bytes leftover after parsing attributes in process `syz.2.13574'. [ 2100.857482][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2100.866391][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2101.007403][ T981] usb 9-1: new high-speed USB device number 119 using dummy_hcd [ 2101.028188][ T5920] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 2101.159012][ T981] usb 9-1: config 0 has an invalid interface number: 14 but max is 0 [ 2101.168079][ T981] usb 9-1: config 0 has no interface number 0 [ 2101.174709][ T981] usb 9-1: New USB device found, idVendor=04e6, idProduct=0006, bcdDevice= 1.00 [ 2101.184377][ T981] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2101.196043][ T981] usb 9-1: config 0 descriptor?? [ 2101.202288][ T5920] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2101.215733][ T981] usb-storage 9-1:0.14: USB Mass Storage device detected [ 2101.223076][ T5920] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2101.234009][ T5920] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 2101.244122][ T5920] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2101.255676][ T5920] usb 2-1: config 0 descriptor?? [ 2101.265547][ T981] usb-storage 9-1:0.14: Quirks match for vid 04e6 pid 0006: 1 [ 2101.276213][ T981] usb-storage 9-1:0.14: This device (04e6,0006,0100 S de P 01) has an unneeded Protocol entry in unusual_devs.h (kernel syzkaller) [ 2101.276213][ T981] Please send a copy of this message to and [ 2101.435241][T32702] usb 9-1: USB disconnect, device number 119 [ 2101.730159][T10828] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 2101.878453][ T5920] usb 2-1: string descriptor 0 read error: -71 [ 2101.889734][ T5920] uclogic 0003:256C:006D.0098: failed retrieving string descriptor #200: -71 [ 2101.913396][ T5920] uclogic 0003:256C:006D.0098: failed retrieving pen parameters: -71 [ 2101.931866][ T5920] uclogic 0003:256C:006D.0098: failed probing pen v2 parameters: -71 [ 2101.942435][ T5920] uclogic 0003:256C:006D.0098: failed probing parameters: -71 [ 2101.950402][ T5920] uclogic 0003:256C:006D.0098: probe with driver uclogic failed with error -71 [ 2101.970972][ T5920] usb 2-1: USB disconnect, device number 58 [ 2102.099479][T10840] netlink: 68 bytes leftover after parsing attributes in process `syz.5.13587'. [ 2102.150300][T10842] netlink: 'syz.8.13588': attribute type 10 has an invalid length. [ 2102.164141][T10842] netlink: 4 bytes leftover after parsing attributes in process `syz.8.13588'. [ 2102.367101][T32702] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 2102.527144][T32702] usb 3-1: Using ep0 maxpacket: 32 [ 2102.545273][T32702] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2102.597461][T32702] usb 3-1: New USB device found, idVendor=044e, idProduct=121e, bcdDevice= 0.00 [ 2102.609101][T32702] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2102.638216][T32702] usb 3-1: config 0 descriptor?? [ 2102.649410][T10871] netlink: 68 bytes leftover after parsing attributes in process `syz.8.13602'. [ 2102.807638][ T5920] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 2102.957499][ T5920] usb 2-1: Using ep0 maxpacket: 16 [ 2102.964895][ T5920] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2102.975680][ T5920] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFC, changing to 0x8C [ 2102.989825][ T5920] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 2103.001783][ T5920] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2103.026250][ T5920] usb 2-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 2103.035965][ T5920] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2103.045275][ T5920] usb 2-1: Product: syz [ 2103.049994][ T5920] usb 2-1: Manufacturer: syz [ 2103.054638][ T5920] usb 2-1: SerialNumber: syz [ 2103.063089][ T5920] usb 2-1: config 0 descriptor?? [ 2103.072073][T32702] usbhid 3-1:0.0: can't add hid device: -71 [ 2103.081628][ T5920] xbox_remote_probe: Unexpected endpoint_in [ 2103.092640][T32702] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 2103.117309][T16558] usb 6-1: new high-speed USB device number 120 using dummy_hcd [ 2103.131473][T32702] usb 3-1: USB disconnect, device number 64 [ 2103.285910][ T5920] usb 2-1: USB disconnect, device number 59 [ 2103.293401][T16558] usb 6-1: Using ep0 maxpacket: 16 [ 2103.315881][T16558] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2103.329039][T16558] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2103.341485][T16558] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 2103.359452][T16558] usb 6-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 2103.386615][T16558] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2103.406377][T16558] usb 6-1: config 0 descriptor?? [ 2103.536600][T10897] netlink: 64 bytes leftover after parsing attributes in process `syz.8.13614'. [ 2103.838538][T16558] nintendo 0003:057E:2019.0099: hidraw0: USB HID v80.05 Device [HID 057e:2019] on usb-dummy_hcd.5-1/input0 [ 2103.897378][T32702] usb 3-1: new full-speed USB device number 65 using dummy_hcd [ 2103.922306][T16558] nintendo 0003:057E:2019.0099: Failed to get joycon info; ret=-38 [ 2103.945106][T16558] nintendo 0003:057E:2019.0099: Failed to retrieve controller info; ret=-38 [ 2103.954879][T16558] nintendo 0003:057E:2019.0099: Failed to initialize controller; ret=-38 [ 2103.973674][T16558] nintendo 0003:057E:2019.0099: probe - fail = -38 [ 2103.983870][T16558] nintendo 0003:057E:2019.0099: probe with driver nintendo failed with error -38 [ 2104.043930][T16558] usb 6-1: USB disconnect, device number 120 [ 2104.109846][T32702] usb 3-1: config 0 has an invalid interface number: 230 but max is 0 [ 2104.118383][T32702] usb 3-1: config 0 has no interface number 0 [ 2104.129416][T32702] usb 3-1: too many endpoints for config 0 interface 230 altsetting 255: 65, using maximum allowed: 30 [ 2104.146652][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 2104.146716][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 2104.148956][T10507] net_ratelimit: 752 callbacks suppressed [ 2104.148977][T10507] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2104.172241][T32702] usb 3-1: config 0 interface 230 altsetting 255 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2104.205410][T32702] usb 3-1: config 0 interface 230 altsetting 255 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2104.216015][T32702] usb 3-1: config 0 interface 230 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 65 [ 2104.230173][T32702] usb 3-1: config 0 interface 230 has no altsetting 0 [ 2104.241612][T32702] usb 3-1: New USB device found, idVendor=5543, idProduct=0781, bcdDevice= 0.00 [ 2104.254194][T32702] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2104.265279][T32702] usb 3-1: config 0 descriptor?? [ 2104.372734][T10915] input: syz0 as /devices/virtual/input/input164 [ 2104.540706][ T5920] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2104.636169][T10919] netlink: 16 bytes leftover after parsing attributes in process `syz.8.13622'. [ 2104.780293][ T8736] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2104.882406][T32702] usbhid 3-1:0.230: can't add hid device: -71 [ 2104.902191][T32702] usbhid 3-1:0.230: probe with driver usbhid failed with error -71 [ 2104.919165][T32702] usb 3-1: USB disconnect, device number 65 [ 2105.009574][T10929] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2105.057108][ T5920] usb 6-1: new high-speed USB device number 121 using dummy_hcd [ 2105.207140][ T5920] usb 6-1: Using ep0 maxpacket: 32 [ 2105.220975][ T5920] usb 6-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 2105.237197][ T5920] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2105.245291][ T5920] usb 6-1: Product: syz [ 2105.257552][ T5920] usb 6-1: Manufacturer: syz [ 2105.262241][ T5920] usb 6-1: SerialNumber: syz [ 2105.278416][ T5920] usb 6-1: config 0 descriptor?? [ 2105.463788][T10939] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2105.582532][T16558] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2105.696649][ T5920] peak_usb 6-1:0.0 can0: unable to request usb[type=0 value=0] err=-32 [ 2105.709743][ T5920] peak_usb 6-1:0.0: unable to read PCAN-USB Pro bootloader info (err -32) [ 2105.779348][ T5920] peak_usb 6-1:0.0: probe with driver peak_usb failed with error -32 [ 2105.822569][ T5920] usb 6-1: USB disconnect, device number 121 [ 2105.869607][T10947] netlink: 44 bytes leftover after parsing attributes in process `syz.0.13636'. [ 2105.917383][T16558] usb 3-1: new full-speed USB device number 66 using dummy_hcd [ 2105.979251][T10507] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2106.060905][ T8196] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2106.071890][T16558] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 2106.099398][T16558] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 2106.116680][T16558] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2106.130477][T16558] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2106.140485][T16558] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2106.149087][T16558] usb 3-1: Product: syz [ 2106.153573][T16558] usb 3-1: Manufacturer: syz [ 2106.160639][T16558] usb 3-1: SerialNumber: syz [ 2106.617466][ T981] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2106.802599][T16558] usb 3-1: 0:2 : does not exist [ 2106.840160][T16558] usb 3-1: USB disconnect, device number 66 [ 2106.887348][T32702] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 2106.899994][T18309] udevd[18309]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2106.924672][T10981] fuse: Bad value for 'group_id' [ 2106.936011][T10981] fuse: Bad value for 'group_id' [ 2107.057196][T32702] usb 2-1: Using ep0 maxpacket: 32 [ 2107.066275][T32702] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 2107.075856][T32702] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2107.087315][T32702] usb 2-1: config 0 descriptor?? [ 2107.178961][ T5889] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2107.297640][T32702] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 2107.309077][T32702] usb 2-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2 [ 2107.320458][T32702] usb 2-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw [ 2107.522917][T10998] netlink: 48 bytes leftover after parsing attributes in process `syz.2.13660'. [ 2107.533259][T10998] netlink: 'syz.2.13660': attribute type 10 has an invalid length. [ 2107.545696][T10998] bridge0: port 1(bridge_slave_0) entered disabled state [ 2107.561412][T10998] bridge0: port 1(bridge_slave_0) entered blocking state [ 2107.568705][T10998] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2107.589342][T10999] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13660'. [ 2107.613948][T10998] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 2107.632211][T10999] bridge_slave_1: left allmulticast mode [ 2107.639177][T10999] bridge_slave_1: left promiscuous mode [ 2107.649406][T10999] bridge0: port 2(bridge_slave_1) entered disabled state [ 2107.669853][T10999] bridge_slave_0: left promiscuous mode [ 2107.675633][T10999] bridge0: port 1(bridge_slave_0) entered disabled state [ 2107.713785][T10999] bond0: (slave bridge0): Releasing backup interface [ 2107.732401][T11006] fuse: Bad value for 'group_id' [ 2107.739889][T11006] fuse: Bad value for 'group_id' [ 2108.229368][T11033] netlink: 48 bytes leftover after parsing attributes in process `syz.5.13676'. [ 2108.248769][T11033] netlink: 'syz.5.13676': attribute type 10 has an invalid length. [ 2108.257603][T11033] netlink: 4 bytes leftover after parsing attributes in process `syz.5.13676'. [ 2108.557279][ T981] usb 9-1: new full-speed USB device number 120 using dummy_hcd [ 2108.599233][T11048] netlink: 68 bytes leftover after parsing attributes in process `syz.5.13682'. [ 2108.729524][ T981] usb 9-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 2108.745210][ T981] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2108.756910][ T981] usb 9-1: config 0 descriptor?? [ 2108.778544][ T981] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 2108.975778][ T981] gp8psk: usb in 128 operation failed. [ 2109.110857][T11063] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13689'. [ 2109.188328][ T981] gp8psk: usb in 146 operation failed. [ 2109.197061][ T981] gp8psk: failed to get FW version [ 2109.208456][ T981] gp8psk: usb in 149 operation failed. [ 2109.213985][ T981] gp8psk: failed to get FPGA version [ 2109.439244][ T981] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 2109.451215][ T981] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 2109.661580][ T5889] usb 9-1: USB disconnect, device number 120 [ 2109.754864][T16558] net_ratelimit: 2 callbacks suppressed [ 2109.754887][T16558] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2109.909866][ T5981] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2110.538896][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2110.727313][ T5889] usb 9-1: new high-speed USB device number 121 using dummy_hcd [ 2110.782585][T16558] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2110.877990][ T5889] usb 9-1: Using ep0 maxpacket: 16 [ 2110.885659][ T5889] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2110.909420][ T5889] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2110.921955][ T5889] usb 9-1: config 0 interface 0 has no altsetting 0 [ 2110.931375][ T5889] usb 9-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 2110.943023][ T5889] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2110.954341][ T5889] usb 9-1: config 0 descriptor?? [ 2111.178403][ T8196] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2111.194837][T10507] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2111.402310][ C1] raw-gadget.2 gadget.8: ignoring, device is not running [ 2111.419177][ T5889] usbhid 9-1:0.0: can't add hid device: -71 [ 2111.431715][ T5889] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 2111.450222][ T5889] usb 9-1: USB disconnect, device number 121 [ 2111.837139][T16558] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2112.757108][ T5920] usb 9-1: new high-speed USB device number 122 using dummy_hcd [ 2112.865913][T16558] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2112.942410][ T5836] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2112.978899][ T5920] usb 9-1: Using ep0 maxpacket: 16 [ 2112.985767][ T5920] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2113.056387][ T5920] usb 9-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 2113.070246][ T5920] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2113.114614][ T5920] usb 9-1: config 0 descriptor?? [ 2113.348415][T11161] netlink: 44 bytes leftover after parsing attributes in process `syz.5.13734'. [ 2113.609946][ T5920] mcp2221 0003:04D8:00DD.009A: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.8-1/input0 [ 2113.903120][ T5920] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2114.020013][ T5836] usb 9-1: USB disconnect, device number 122 [ 2114.395224][T11190] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13748'. [ 2114.777610][ T5920] usb 6-1: new high-speed USB device number 122 using dummy_hcd [ 2114.842094][T11206] net_ratelimit: 1 callbacks suppressed [ 2114.842117][T11206] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2114.863481][T11206] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2114.872960][T11206] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2114.883563][T11206] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2114.939096][T16558] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2114.972055][ T5920] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 2114.983043][ T5920] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2114.997622][ T5920] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2115.022123][ T5920] usb 6-1: config 0 interface 0 has no altsetting 0 [ 2115.030738][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2115.040495][ T5920] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2115.057481][ T5920] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2115.079908][ T5920] usb 6-1: config 0 interface 0 has no altsetting 0 [ 2115.090936][ T5920] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2115.107259][ T5920] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2115.121247][ T5920] usb 6-1: config 0 interface 0 has no altsetting 0 [ 2115.129870][ T5920] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2115.139602][ T5920] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2115.151458][ T5920] usb 6-1: config 0 interface 0 has no altsetting 0 [ 2115.160178][ T5920] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2115.170536][ T5920] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2115.182875][ T5920] usb 6-1: config 0 interface 0 has no altsetting 0 [ 2115.192289][ T5920] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2115.202148][ T5920] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2115.214128][ T5920] usb 6-1: config 0 interface 0 has no altsetting 0 [ 2115.222916][ T5920] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2115.232621][ T5920] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2115.244756][ T5920] usb 6-1: config 0 interface 0 has no altsetting 0 [ 2115.253614][ T5920] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2115.263639][ T5920] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2115.275622][ T5920] usb 6-1: config 0 interface 0 has no altsetting 0 [ 2115.286005][ T5920] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 2115.295534][ T5920] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 2115.305195][ T5920] usb 6-1: Product: syz [ 2115.309818][ T5920] usb 6-1: Manufacturer: syz [ 2115.314469][ T5920] usb 6-1: SerialNumber: syz [ 2115.327723][ T5920] usb 6-1: config 0 descriptor?? [ 2115.341802][ T5920] yurex 6-1:0.0: USB YUREX device now attached to Yurex #0 [ 2115.545230][ T5957] usb 6-1: USB disconnect, device number 122 [ 2115.554387][ T5957] yurex 6-1:0.0: USB YUREX #0 now disconnected [ 2115.658700][ T6066] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2115.824667][T11238] netlink: 16 bytes leftover after parsing attributes in process `syz.1.13772'. [ 2115.983229][ T5920] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2116.289297][T11263] netlink: 16 bytes leftover after parsing attributes in process `syz.5.13784'. [ 2116.337643][ T5920] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 2116.498834][ T5920] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2116.519650][ T5920] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2116.547702][ T5920] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 2116.566372][ T5920] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2116.597106][ T5920] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2116.606231][ T5920] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2116.629247][ T5920] usb 3-1: config 0 descriptor?? [ 2116.647179][T16558] usb 6-1: new high-speed USB device number 123 using dummy_hcd [ 2116.828716][T16558] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2116.848981][T16558] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2116.877905][T16558] usb 6-1: Product: syz [ 2116.889979][T16558] usb 6-1: Manufacturer: syz [ 2116.895297][T16558] usb 6-1: SerialNumber: syz [ 2116.911003][T16558] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2116.942631][ T4441] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2116.955377][ T6066] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2116.978553][ T981] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2117.009902][T11289] netlink: 16 bytes leftover after parsing attributes in process `syz.0.13795'. [ 2117.261574][ T5920] usbhid 3-1:0.0: can't add hid device: -71 [ 2117.268701][ T5920] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 2117.281299][ T5920] usb 3-1: USB disconnect, device number 67 [ 2117.311782][T11300] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13801'. [ 2117.323603][T11300] netlink: 'syz.1.13801': attribute type 10 has an invalid length. [ 2117.334249][T11300] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13801'. [ 2117.377717][T16461] usb 9-1: new high-speed USB device number 123 using dummy_hcd [ 2117.539154][T16461] usb 9-1: config 0 has an invalid interface number: 14 but max is 0 [ 2117.547890][T16461] usb 9-1: config 0 has no interface number 0 [ 2117.555132][T16461] usb 9-1: New USB device found, idVendor=04e6, idProduct=0006, bcdDevice= 1.00 [ 2117.564481][T16461] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2117.576282][T16461] usb 9-1: config 0 descriptor?? [ 2117.594622][T16461] usb-storage 9-1:0.14: USB Mass Storage device detected [ 2117.604750][ T5957] usb 6-1: USB disconnect, device number 123 [ 2117.630931][T16461] usb-storage 9-1:0.14: Quirks match for vid 04e6 pid 0006: 1 [ 2117.639861][T16461] usb-storage 9-1:0.14: This device (04e6,0006,0100 S de P 01) has an unneeded Protocol entry in unusual_devs.h (kernel syzkaller) [ 2117.639861][T16461] Please send a copy of this message to and [ 2117.796821][T16461] usb 9-1: USB disconnect, device number 123 [ 2118.118129][ T5889] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 2118.219515][ T981] usb 6-1: Service connection timeout for: 256 [ 2118.225839][ T981] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services [ 2118.236322][ T981] ath9k_htc: Failed to initialize the device [ 2118.244601][ T5957] usb 6-1: ath9k_htc: USB layer deinitialized [ 2118.299991][ T5889] usb 3-1: Using ep0 maxpacket: 32 [ 2118.320095][ T5889] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 2118.337397][ T5889] usb 3-1: config 0 has no interface number 0 [ 2118.351845][ T5889] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 2118.378847][ T5889] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2118.398645][ T5889] usb 3-1: Product: syz [ 2118.402883][ T5889] usb 3-1: Manufacturer: syz [ 2118.413759][ T5889] usb 3-1: SerialNumber: syz [ 2118.423176][ T5889] usb 3-1: config 0 descriptor?? [ 2118.440064][ T5889] smsc95xx v2.0.0 [ 2118.526574][T11324] netlink: 8 bytes leftover after parsing attributes in process `syz.8.13812'. [ 2118.541661][T11324] netlink: 'syz.8.13812': attribute type 10 has an invalid length. [ 2118.551256][T11324] netlink: 4 bytes leftover after parsing attributes in process `syz.8.13812'. [ 2118.844396][ T5889] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 2118.856909][ T5889] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 2120.089576][ T5889] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 2120.101515][ T5889] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -32 [ 2120.139308][ T981] net_ratelimit: 7 callbacks suppressed [ 2120.139323][ T981] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2120.272254][T11394] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2120.325592][T11397] trusted_key: encrypted_key: insufficient parameters specified [ 2120.339885][T11397] trusted_key: encrypted_key: keylen parameter is missing [ 2120.761777][T11420] trusted_key: encrypted_key: insufficient parameters specified [ 2120.780690][T11420] trusted_key: encrypted_key: keylen parameter is missing [ 2120.789014][ T8736] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2120.929540][T11429] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2121.170275][ T981] usb 3-1: USB disconnect, device number 68 [ 2121.197148][ T5920] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2121.420588][T13454] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2122.018432][ T981] usb 9-1: new high-speed USB device number 124 using dummy_hcd [ 2122.177334][ T981] usb 9-1: Using ep0 maxpacket: 8 [ 2122.189474][ T981] usb 9-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 2122.200873][ T981] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2122.209844][ T981] usb 9-1: Product: syz [ 2122.214185][ T981] usb 9-1: Manufacturer: syz [ 2122.221543][ T5920] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2122.235036][ T981] usb 9-1: SerialNumber: syz [ 2122.243882][ T981] usb 9-1: config 0 descriptor?? [ 2122.259291][ T981] gspca_main: se401-2.14.0 probing 047d:5003 [ 2122.656652][ T981] gspca_se401: write req failed req 0x57 val 0x00 error -71 [ 2122.677861][ T981] se401 9-1:0.0: probe with driver se401 failed with error -71 [ 2122.691712][ T981] usb 9-1: USB disconnect, device number 124 [ 2122.699566][ T8196] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2122.708711][ T5981] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2123.177215][ T981] usb 3-1: new full-speed USB device number 69 using dummy_hcd [ 2123.270262][ T5920] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2123.315505][T11502] netlink: 12 bytes leftover after parsing attributes in process `syz.8.13895'. [ 2123.328618][ T981] usb 3-1: device descriptor read/64, error -71 [ 2123.577810][ T981] usb 3-1: new full-speed USB device number 70 using dummy_hcd [ 2123.727224][ T981] usb 3-1: device descriptor read/64, error -71 [ 2123.817191][ T5836] usb 6-1: new high-speed USB device number 124 using dummy_hcd [ 2123.837582][ T981] usb usb3-port1: attempt power cycle [ 2123.929154][ T6098] usb 9-1: new high-speed USB device number 125 using dummy_hcd [ 2123.969612][ T5836] usb 6-1: Using ep0 maxpacket: 16 [ 2123.976692][ T5836] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2123.988294][ T5836] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 2124.018836][ T5836] usb 6-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 2124.028465][ T5836] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2124.036543][ T5836] usb 6-1: Product: syz [ 2124.041142][ T5836] usb 6-1: Manufacturer: syz [ 2124.045830][ T5836] usb 6-1: SerialNumber: syz [ 2124.058362][ T5836] usb 6-1: config 0 descriptor?? [ 2124.068477][ T5836] port100 6-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 2124.097811][ T6098] usb 9-1: too many configurations: 9, using maximum allowed: 8 [ 2124.109547][ T6098] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2124.119724][ T6098] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2124.131397][ T6098] usb 9-1: config 0 interface 0 has no altsetting 0 [ 2124.139366][ T6098] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2124.150131][ T6098] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2124.161252][ T6098] usb 9-1: config 0 interface 0 has no altsetting 0 [ 2124.169572][ T6098] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2124.179387][ T6098] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2124.190810][ T6098] usb 9-1: config 0 interface 0 has no altsetting 0 [ 2124.204761][T11524] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13906'. [ 2124.205321][ T6098] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2124.216088][ T981] usb 3-1: new full-speed USB device number 71 using dummy_hcd [ 2124.226022][ T6098] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2124.242363][ T6098] usb 9-1: config 0 interface 0 has no altsetting 0 [ 2124.250481][ T6098] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2124.259809][ T6098] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2124.272172][ T981] usb 3-1: device descriptor read/8, error -71 [ 2124.283518][ T5920] usb 6-1: USB disconnect, device number 124 [ 2124.288133][ T6098] usb 9-1: config 0 interface 0 has no altsetting 0 [ 2124.315957][ T6098] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2124.327080][ T6098] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2124.339473][ T6098] usb 9-1: config 0 interface 0 has no altsetting 0 [ 2124.347749][ T6098] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2124.356765][ T6098] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2124.369081][ T6098] usb 9-1: config 0 interface 0 has no altsetting 0 [ 2124.376877][ T6098] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2124.389902][ T6098] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2124.401329][ T6098] usb 9-1: config 0 interface 0 has no altsetting 0 [ 2124.410975][ T6098] usb 9-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 2124.421117][ T6098] usb 9-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 2124.433819][ T6098] usb 9-1: Product: syz [ 2124.438185][ T6098] usb 9-1: Manufacturer: syz [ 2124.442833][ T6098] usb 9-1: SerialNumber: syz [ 2124.457777][ T6098] usb 9-1: config 0 descriptor?? [ 2124.470949][ T6098] yurex 9-1:0.0: USB YUREX device now attached to Yurex #0 [ 2124.517864][ T981] usb 3-1: new full-speed USB device number 72 using dummy_hcd [ 2124.552163][ T981] usb 3-1: device descriptor read/8, error -71 [ 2124.667859][ T981] usb usb3-port1: unable to enumerate USB device [ 2124.684304][ T6098] usb 9-1: USB disconnect, device number 125 [ 2124.716205][ T6098] yurex 9-1:0.0: USB YUREX #0 now disconnected [ 2125.012876][T11538] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13912'. [ 2125.338648][ T5920] net_ratelimit: 6 callbacks suppressed [ 2125.338670][ T5920] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2125.667233][ T6098] usb 9-1: new high-speed USB device number 126 using dummy_hcd [ 2125.837253][ T6098] usb 9-1: Using ep0 maxpacket: 16 [ 2125.851269][ T6098] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2125.875187][ T6098] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 2125.904846][ T6098] usb 9-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 2125.914488][ T6098] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2125.931630][ T6098] usb 9-1: Product: syz [ 2125.936876][T11564] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13925'. [ 2125.946369][ T6098] usb 9-1: Manufacturer: syz [ 2125.953724][ T6098] usb 9-1: SerialNumber: syz [ 2125.974188][ T6098] usb 9-1: config 0 descriptor?? [ 2125.996213][ T6098] port100 9-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 2126.214698][ T5920] usb 9-1: USB disconnect, device number 126 [ 2126.384769][T16461] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2126.538008][ T4566] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2126.707873][T16461] usb 6-1: new high-speed USB device number 125 using dummy_hcd [ 2126.877495][T16461] usb 6-1: Using ep0 maxpacket: 32 [ 2126.894800][T16461] usb 6-1: config 0 interface 0 has no altsetting 0 [ 2126.904608][T16461] usb 6-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 2126.914489][T16461] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2126.923395][T16461] usb 6-1: Product: syz [ 2126.928100][T16461] usb 6-1: Manufacturer: syz [ 2126.932873][T16461] usb 6-1: SerialNumber: syz [ 2126.942413][T16461] usb 6-1: config 0 descriptor?? [ 2127.181479][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2127.377667][T16461] gs_usb 6-1:0.0: Configuring for 3 interfaces [ 2127.417450][ T981] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2127.570019][T16461] gs_usb 6-1:0.0: Couldn't get bit timing const for channel 0 (-EREMOTEIO) [ 2127.595444][T16461] gs_usb 6-1:0.0: probe with driver gs_usb failed with error -121 [ 2127.747096][ T5920] usb 9-1: new high-speed USB device number 127 using dummy_hcd [ 2127.938525][ T5920] usb 9-1: too many configurations: 65, using maximum allowed: 8 [ 2127.954469][ T5920] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2127.964923][ T5920] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2127.976344][ T5920] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2127.989392][ T5920] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2128.000677][ T5920] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2128.011024][ T5920] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2128.021446][ T5920] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2128.033025][ T5920] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2128.043800][ T5920] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2128.055431][ T5920] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2128.065787][ T5920] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2128.076313][ T5920] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2128.087223][ T5920] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2128.098730][ T5920] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2128.112378][ T5920] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2128.123086][ T5920] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2128.135275][ T5920] usb 9-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 2128.146132][ T5920] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2128.154653][ T5920] usb 9-1: Product: syz [ 2128.159446][ T5920] usb 9-1: Manufacturer: syz [ 2128.164173][ T5920] usb 9-1: SerialNumber: syz [ 2128.172839][ T5920] usb 9-1: config 0 descriptor?? [ 2128.434017][ T5920] usb 9-1: USB disconnect, device number 127 [ 2128.474065][T16461] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2128.485153][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2128.496448][ T8196] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2129.253553][T11672] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2129.511684][ T6098] usb 6-1: USB disconnect, device number 125 [ 2129.674707][T11693] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 2130.357628][ T5920] usb 9-1: new full-speed USB device number 2 using dummy_hcd [ 2130.529567][ T5920] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2130.557855][ T5920] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2130.581051][ T5920] usb 9-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 2130.597403][ T5920] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2130.615774][ T5920] usb 9-1: Product: syz [ 2130.623555][ T5920] usb 9-1: Manufacturer: syz [ 2130.636882][ T5920] usb 9-1: SerialNumber: syz [ 2130.646796][ T5920] usb 9-1: config 0 descriptor?? [ 2130.872276][ T6098] usb 9-1: USB disconnect, device number 2 [ 2131.167251][ T5889] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 2131.329825][ T5889] usb 3-1: config 0 has an invalid interface number: 115 but max is 0 [ 2131.338667][ T5889] usb 3-1: config 0 has no interface number 0 [ 2131.344810][ T5889] usb 3-1: too many endpoints for config 0 interface 115 altsetting 104: 97, using maximum allowed: 30 [ 2131.356062][ T5889] usb 3-1: config 0 interface 115 altsetting 104 has 0 endpoint descriptors, different from the interface descriptor's value: 97 [ 2131.369734][ T5889] usb 3-1: config 0 interface 115 has no altsetting 0 [ 2131.377113][ T5889] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2131.386270][ T5889] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2131.397248][ T5889] usb 3-1: config 0 descriptor?? [ 2131.413562][ T5889] cp210x 3-1:0.115: cp210x converter detected [ 2131.807105][ T5889] cp210x 3-1:0.115: failed to get vendor val 0x000e size 3: -71 [ 2131.825573][ T5889] usb 3-1: cp210x converter now attached to ttyUSB0 [ 2131.838168][ T5889] usb 3-1: USB disconnect, device number 73 [ 2131.861295][ T5889] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 2131.875715][ T5889] cp210x 3-1:0.115: device disconnected [ 2131.927653][ T5920] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 2132.088280][ T5920] usb 9-1: Using ep0 maxpacket: 32 [ 2132.096031][ T5920] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2132.109901][ T5920] usb 9-1: New USB device found, idVendor=044e, idProduct=121e, bcdDevice= 0.00 [ 2132.121192][ T5920] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2132.135562][ T5920] usb 9-1: config 0 descriptor?? [ 2132.155206][T11782] netlink: 'syz.5.14030': attribute type 10 has an invalid length. [ 2132.174813][T11782] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 2132.218032][T11782] bond0: (slave bond_slave_0): Releasing backup interface [ 2132.251710][T11782] bond0: (slave bond_slave_1): Releasing backup interface [ 2132.274532][T11782] team0: Port device team_slave_0 removed [ 2132.313032][T11782] team0: Port device team_slave_1 removed [ 2132.328581][T11782] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2132.348929][T11782] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2132.368560][T11782] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2132.376211][T11782] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2132.394165][T11782] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 2132.769187][ T5920] usbhid 9-1:0.0: can't add hid device: -71 [ 2132.775282][ T5920] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 2132.803199][ T5920] usb 9-1: USB disconnect, device number 3 [ 2134.110208][ T30] audit: type=1326 audit(1767184514.004:952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11838 comm="syz.8.14056" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f52cad8f749 code=0x0 [ 2134.487322][ T5836] usb 6-1: new high-speed USB device number 126 using dummy_hcd [ 2134.669001][ T5836] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2134.681638][ T5836] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2134.693522][ T5836] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 2134.704753][ T5836] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2134.718305][ T5836] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2134.728957][ T5836] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2134.739872][ T5836] usb 6-1: config 0 descriptor?? [ 2135.353561][ T5836] usbhid 6-1:0.0: can't add hid device: -71 [ 2135.361625][ T5836] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 2135.368320][T16461] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 2135.385247][ T5836] usb 6-1: USB disconnect, device number 126 [ 2135.527433][T16461] usb 3-1: Using ep0 maxpacket: 16 [ 2135.535272][T16461] usb 3-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2135.546614][T16461] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2135.553511][T16461] usb 3-1: New USB device found, idVendor=046d, idProduct=c52b, bcdDevice= 0.00 [ 2135.563213][T16461] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2135.575649][T16461] usb 3-1: config 0 descriptor?? [ 2135.979472][T11865] netlink: 68 bytes leftover after parsing attributes in process `syz.5.14067'. [ 2135.991835][T16461] usbhid 3-1:0.0: can't add hid device: -71 [ 2136.004279][T16461] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 2136.033687][T16461] usb 3-1: USB disconnect, device number 74 [ 2136.212470][T11873] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 2136.339720][T11880] kvm: kvm [11879]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x186) = 0x3 [ 2136.447264][ T6098] usb 6-1: new high-speed USB device number 127 using dummy_hcd [ 2136.599640][ T6098] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2136.613019][ T6098] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2136.626251][ T6098] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 2136.638970][T11888] netlink: 68 bytes leftover after parsing attributes in process `syz.2.14078'. [ 2136.641332][ T6098] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2136.661570][ T6098] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2136.672120][ T6098] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2136.685953][ T6098] usb 6-1: config 0 descriptor?? [ 2137.130851][ T6098] plantronics 0003:047F:FFFF.009B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 2137.355555][ T5920] hid-generic 0000:04AD:0000.009C: unknown main item tag 0x0 [ 2137.365949][ T5920] hid-generic 0000:04AD:0000.009C: unknown main item tag 0x0 [ 2137.374112][ T5920] hid-generic 0000:04AD:0000.009C: unknown main item tag 0x0 [ 2137.382299][ T5920] hid-generic 0000:04AD:0000.009C: unknown main item tag 0x0 [ 2137.389677][ T6098] usb 6-1: USB disconnect, device number 127 [ 2137.398821][ T5920] hid-generic 0000:04AD:0000.009C: unknown main item tag 0x0 [ 2137.407588][ T5920] hid-generic 0000:04AD:0000.009C: unknown main item tag 0x0 [ 2137.416441][ T5920] hid-generic 0000:04AD:0000.009C: unknown main item tag 0x0 [ 2137.440969][ T5920] hid-generic 0000:04AD:0000.009C: unknown main item tag 0x0 [ 2137.459009][ T5920] hid-generic 0000:04AD:0000.009C: unknown main item tag 0x0 [ 2137.475686][ T5920] hid-generic 0000:04AD:0000.009C: unknown main item tag 0x0 [ 2137.493804][ T5920] hid-generic 0000:04AD:0000.009C: hidraw0: HID v0.00 Device [syz0] on syz0 [ 2137.717646][ T5920] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 2137.738403][T30983] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 2137.748589][T30983] Bluetooth: hci4: Injecting HCI hardware error event [ 2137.759956][ T640] Bluetooth: hci4: hardware error 0x00 [ 2137.857393][ T5920] usb 9-1: device descriptor read/64, error -71 [ 2138.097466][ T5920] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 2138.238000][ T5920] usb 9-1: device descriptor read/64, error -71 [ 2138.347697][ T5920] usb usb9-port1: attempt power cycle [ 2138.687457][ T5920] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 2138.718415][ T5920] usb 9-1: device descriptor read/8, error -71 [ 2138.957322][ T5920] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 2138.967290][ T981] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 2138.977874][ T5920] usb 9-1: device descriptor read/8, error -71 [ 2139.088797][ T5920] usb usb9-port1: unable to enumerate USB device [ 2139.117304][ T981] usb 3-1: Using ep0 maxpacket: 32 [ 2139.124522][ T981] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2139.136585][ T981] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2139.147813][ T981] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 2139.162627][ T981] usb 3-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 2139.172190][ T981] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2139.182949][ T981] usb 3-1: config 0 descriptor?? [ 2139.596876][ C0] raw-gadget.3 gadget.2: ignoring, device is not running [ 2139.608673][ C0] raw-gadget.3 gadget.2: ignoring, device is not running [ 2139.615948][ T981] usbhid 3-1:0.0: can't add hid device: -32 [ 2139.622203][ T981] usbhid 3-1:0.0: probe with driver usbhid failed with error -32 [ 2139.641112][ T981] usb 3-1: USB disconnect, device number 75 [ 2139.777559][T16461] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 2139.829092][ T640] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 2139.929506][T16461] usb 6-1: config 0 has no interfaces? [ 2139.939963][T16461] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2139.949353][T16461] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2139.957817][T16461] usb 6-1: Product: syz [ 2139.962140][T16461] usb 6-1: Manufacturer: syz [ 2139.966759][T16461] usb 6-1: SerialNumber: syz [ 2139.974790][T16461] usb 6-1: config 0 descriptor?? [ 2140.201426][ T6098] usb 6-1: USB disconnect, device number 2 [ 2140.927195][ T6098] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 2141.089369][ T6098] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2141.107138][ T6098] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2141.120153][ T6098] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 2141.130542][ T6098] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2141.144346][ T6098] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2141.156621][ T6098] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2141.168772][ T6098] usb 9-1: config 0 descriptor?? [ 2141.477183][ T5836] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 2141.637280][ T5836] usb 3-1: device descriptor read/64, error -71 [ 2141.679934][T12013] misc userio: Invalid payload size [ 2141.685797][T12013] misc userio: No port type given on /dev/userio [ 2141.786793][ T6098] usbhid 9-1:0.0: can't add hid device: -71 [ 2141.797172][ T6098] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 2141.831887][ T6098] usb 9-1: USB disconnect, device number 8 [ 2141.897689][ T5836] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 2142.062481][T30983] Bluetooth: hci1: command 0x0406 tx timeout [ 2142.070137][ T5836] usb 3-1: device descriptor read/64, error -71 [ 2142.189882][ T5836] usb usb3-port1: attempt power cycle [ 2142.527450][ T5836] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 2142.548137][ T5836] usb 3-1: device descriptor read/8, error -71 [ 2142.635344][T12037] misc userio: Invalid payload size [ 2142.641748][T12037] misc userio: No port type given on /dev/userio [ 2142.789906][ T5836] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 2142.818111][ T5836] usb 3-1: device descriptor read/8, error -71 [ 2142.929239][ T5836] usb usb3-port1: unable to enumerate USB device [ 2143.035447][T12059] misc userio: Invalid payload size [ 2143.177728][ T5836] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 2143.317090][ T5836] usb 9-1: device descriptor read/64, error -71 [ 2143.557362][ T5836] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 2143.619937][T12084] misc userio: Invalid payload size [ 2143.689188][ T5836] usb 9-1: device descriptor read/64, error -71 [ 2143.807475][ T5836] usb usb9-port1: attempt power cycle [ 2144.112578][T30983] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2144.133183][T30983] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2144.145504][T30983] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2144.155959][T30983] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2144.165140][ T5836] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 2144.165384][T30983] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2144.200256][ T5836] usb 9-1: device descriptor read/8, error -71 [ 2144.438001][T12111] netlink: 20 bytes leftover after parsing attributes in process `syz.2.14182'. [ 2144.461853][ T5836] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 2144.512810][ T5836] usb 9-1: device descriptor read/8, error -71 [ 2144.630470][ T5836] usb usb9-port1: unable to enumerate USB device [ 2144.715766][T12105] chnl_net:caif_netlink_parms(): no params data found [ 2144.807956][T12105] bridge0: port 1(bridge_slave_0) entered blocking state [ 2144.815998][T12105] bridge0: port 1(bridge_slave_0) entered disabled state [ 2144.823611][T12105] bridge_slave_0: entered allmulticast mode [ 2144.831856][T12105] bridge_slave_0: entered promiscuous mode [ 2144.841647][T12105] bridge0: port 2(bridge_slave_1) entered blocking state [ 2144.848971][T12105] bridge0: port 2(bridge_slave_1) entered disabled state [ 2144.856314][T12105] bridge_slave_1: entered allmulticast mode [ 2144.864815][T12105] bridge_slave_1: entered promiscuous mode [ 2144.897073][ T5836] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 2144.913063][T12105] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2144.925910][T12105] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2144.969394][T12105] team0: Port device team_slave_0 added [ 2144.978643][T12105] team0: Port device team_slave_1 added [ 2145.014893][T12105] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2145.022647][T12105] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2145.035012][ T5836] usb 3-1: device descriptor read/64, error -71 [ 2145.061258][T12105] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2145.074692][T12105] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2145.082367][T12105] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2145.113677][T12105] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2145.163676][T12105] hsr_slave_0: entered promiscuous mode [ 2145.171144][T12105] hsr_slave_1: entered promiscuous mode [ 2145.180935][T12105] debugfs: 'hsr0' already exists in 'hsr' [ 2145.186728][T12105] Cannot create hsr debugfs directory [ 2145.297322][ T5836] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 2145.393625][T12105] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2145.437202][ T5836] usb 3-1: device descriptor read/64, error -71 [ 2145.519519][T12105] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2145.547579][ T5836] usb usb3-port1: attempt power cycle [ 2145.627654][T12105] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2145.735721][T12105] bond0: (slave netdevsim0): Releasing backup interface [ 2145.765812][T12105] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2145.898940][ T5836] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 2145.935355][T12105] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 2145.946197][ T5836] usb 3-1: device descriptor read/8, error -71 [ 2145.962789][T12105] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 2145.979638][T12105] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 2145.994969][T12105] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 2146.102777][T12150] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_bridge, syncid = 0, id = 0 [ 2146.149997][T12105] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2146.182859][T12105] 8021q: adding VLAN 0 to HW filter on device team0 [ 2146.190150][ T5836] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 2146.206798][T16617] bridge0: port 1(bridge_slave_0) entered blocking state [ 2146.214076][T16617] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2146.222041][T30983] Bluetooth: hci0: command tx timeout [ 2146.229586][ T5836] usb 3-1: device descriptor read/8, error -71 [ 2146.259724][T16617] bridge0: port 2(bridge_slave_1) entered blocking state [ 2146.266881][T16617] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2146.337838][ T5836] usb usb3-port1: unable to enumerate USB device [ 2146.380008][T12105] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2146.446287][T12105] veth0_vlan: entered promiscuous mode [ 2146.463166][T12105] veth1_vlan: entered promiscuous mode [ 2146.514126][T12105] veth0_macvtap: entered promiscuous mode [ 2146.525727][T12105] veth1_macvtap: entered promiscuous mode [ 2146.553403][T12105] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2146.572051][T12105] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2146.590878][ T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2146.615501][ T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2146.634326][ T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2146.645889][ T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2146.732769][ T4566] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2146.750215][ T4566] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2146.781301][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2146.790407][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2146.847174][T17527] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 2146.999731][T17527] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2147.011221][T17527] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2147.022363][T17527] usb 9-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 2147.031864][T17527] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2147.043200][T17527] usb 9-1: config 0 descriptor?? [ 2147.461491][T17527] hkems 0003:2006:0118.009D: ignoring exceeding usage max [ 2147.500337][T17527] hkems 0003:2006:0118.009D: hidraw0: USB HID v0.00 Device [HID 2006:0118] on usb-dummy_hcd.8-1/input0 [ 2147.522237][T17527] hkems 0003:2006:0118.009D: no inputs found [ 2147.530704][T17527] hkems 0003:2006:0118.009D: force feedback init failed [ 2147.735210][T17527] usb 9-1: USB disconnect, device number 13 [ 2147.958311][T12173] fido_id[12173]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory [ 2148.297727][T30983] Bluetooth: hci0: command tx timeout [ 2148.757100][T17527] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 2148.921604][T17527] usb 6-1: Using ep0 maxpacket: 32 [ 2148.931578][T17527] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2148.953257][T17527] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2148.968007][T17527] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 2148.987945][T17527] usb 6-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 2149.015969][T17527] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2149.050357][T17527] usb 6-1: config 0 descriptor?? [ 2149.500222][T17527] usbhid 6-1:0.0: can't add hid device: -71 [ 2149.509538][T12207] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14220'. [ 2149.526509][T17527] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 2149.559315][T17527] usb 6-1: USB disconnect, device number 3 [ 2150.377628][T30983] Bluetooth: hci0: command tx timeout [ 2152.468141][T30983] Bluetooth: hci0: command tx timeout [ 2153.921909][ T640] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2153.940755][ T640] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2153.949960][ T640] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2153.968897][ T640] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2153.979452][ T640] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2155.243041][ T50] bond0 (unregistering): Released all slaves [ 2155.727163][ T5920] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 2155.910721][ T5920] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 2155.929359][ T5920] usb 6-1: config 0 interface 0 has no altsetting 0 [ 2155.939561][ T5920] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2155.949397][ T5920] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2155.959110][ T5920] usb 6-1: Product: syz [ 2155.963482][ T5920] usb 6-1: Manufacturer: syz [ 2155.968918][ T5920] usb 6-1: SerialNumber: syz [ 2155.976584][ T5920] usb 6-1: config 0 descriptor?? [ 2156.004913][ T5920] usb 6-1: selecting invalid altsetting 0 [ 2156.057302][ T640] Bluetooth: hci3: command tx timeout [ 2156.289698][ T5920] usb 6-1: USB disconnect, device number 4 [ 2156.436156][T12253] chnl_net:caif_netlink_parms(): no params data found [ 2157.051875][T12253] bridge0: port 1(bridge_slave_0) entered blocking state [ 2157.077261][T12253] bridge0: port 1(bridge_slave_0) entered disabled state [ 2157.112426][T12253] bridge_slave_0: entered allmulticast mode [ 2157.149395][T12253] bridge_slave_0: entered promiscuous mode [ 2157.173521][T12253] bridge0: port 2(bridge_slave_1) entered blocking state [ 2157.217687][T12253] bridge0: port 2(bridge_slave_1) entered disabled state [ 2157.253237][T12253] bridge_slave_1: entered allmulticast mode [ 2157.295305][T12253] bridge_slave_1: entered promiscuous mode [ 2157.583089][T12253] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2157.659942][T12253] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2158.154511][ T640] Bluetooth: hci3: command tx timeout [ 2158.309584][T12253] team0: Port device team_slave_0 added [ 2158.514279][T12253] team0: Port device team_slave_1 added [ 2158.942569][T12253] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2158.952172][T12253] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2158.980924][T12253] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2158.994851][T12253] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2159.013854][T12253] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2159.042887][T12253] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2159.071661][ T981] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 2159.247377][ T981] usb 6-1: Using ep0 maxpacket: 32 [ 2159.255236][ T981] usb 6-1: config 0 has an invalid interface number: 19 but max is 0 [ 2159.275615][ T981] usb 6-1: config 0 has no interface number 0 [ 2159.292033][ T981] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 2159.317951][T12253] hsr_slave_0: entered promiscuous mode [ 2159.327772][ T981] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2159.350795][T12253] hsr_slave_1: entered promiscuous mode [ 2159.360818][ T981] usb 6-1: Product: syz [ 2159.365057][ T981] usb 6-1: Manufacturer: syz [ 2159.378015][T12253] debugfs: 'hsr0' already exists in 'hsr' [ 2159.394503][ T981] usb 6-1: SerialNumber: syz [ 2159.399653][T12253] Cannot create hsr debugfs directory [ 2159.422523][ T981] usb 6-1: config 0 descriptor?? [ 2159.463050][ T981] quatech2 6-1:0.19: Quatech 2nd gen USB to Serial Driver converter detected [ 2159.688100][ T981] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 2159.729245][ T981] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 2159.906658][T12325] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2159.946934][T12325] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2160.196261][ C0] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 2160.208711][ T981] usb 6-1: USB disconnect, device number 5 [ 2160.217546][ T640] Bluetooth: hci3: command tx timeout [ 2160.243835][ T981] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 2160.275350][T12253] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2160.303663][ T981] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 2160.351452][ T981] quatech2 6-1:0.19: device disconnected [ 2161.117445][T16558] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 2161.278038][T16558] usb 6-1: Using ep0 maxpacket: 32 [ 2161.288144][T16558] usb 6-1: config 0 has an invalid interface number: 12 but max is 0 [ 2161.296727][T16558] usb 6-1: config 0 has no interface number 0 [ 2161.303675][T16558] usb 6-1: config 0 interface 12 has no altsetting 0 [ 2161.316551][T16558] usb 6-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 2161.326366][T16558] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2161.341207][T16558] usb 6-1: Product: syz [ 2161.345432][T16558] usb 6-1: Manufacturer: syz [ 2161.351817][T16558] usb 6-1: SerialNumber: syz [ 2161.362408][T16558] usb 6-1: config 0 descriptor?? [ 2161.810022][T16558] f81534 6-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 2161.820272][T16558] f81534 6-1:0.12: f81534_find_config_idx: read failed: -71 [ 2161.828610][T16558] f81534 6-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 2161.836472][T16558] f81534 6-1:0.12: probe with driver f81534 failed with error -71 [ 2161.862677][T16558] usb 6-1: USB disconnect, device number 6 [ 2162.297373][ T640] Bluetooth: hci3: command tx timeout [ 2162.717138][T16558] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 2162.887116][T16558] usb 6-1: Using ep0 maxpacket: 16 [ 2162.894840][T16558] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2162.906847][T16558] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2162.923743][T16558] usb 6-1: config 0 interface 0 has no altsetting 0 [ 2162.931699][T16558] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 2162.945533][T16558] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2162.970620][T16558] usb 6-1: config 0 descriptor?? [ 2163.604026][ T981] usb 6-1: USB disconnect, device number 7 [ 2164.715487][ T981] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 2164.867503][ T981] usb 6-1: Using ep0 maxpacket: 16 [ 2164.875567][ T981] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2164.886418][ T981] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 8 [ 2164.900005][ T981] usb 6-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 2164.910289][ T981] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2164.918713][ T981] usb 6-1: Product: syz [ 2164.923082][ T981] usb 6-1: Manufacturer: syz [ 2164.928423][ T981] usb 6-1: SerialNumber: syz [ 2164.944425][ T981] usb 6-1: config 0 descriptor?? [ 2165.591672][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 2165.598276][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 2165.657496][ T640] Bluetooth: hci1: command 0x0406 tx timeout [ 2167.208877][ T640] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2167.222244][ T640] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2167.238348][ T640] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2167.253500][ T640] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2167.265495][ T640] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2167.519180][ T981] usb 6-1: USB disconnect, device number 8 [ 2167.705974][T12365] chnl_net:caif_netlink_parms(): no params data found [ 2167.967491][ T981] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 2167.981599][T12365] bridge0: port 1(bridge_slave_0) entered blocking state [ 2167.989105][T12365] bridge0: port 1(bridge_slave_0) entered disabled state [ 2167.996842][T12365] bridge_slave_0: entered allmulticast mode [ 2168.011626][T12365] bridge_slave_0: entered promiscuous mode [ 2168.026408][T12365] bridge0: port 2(bridge_slave_1) entered blocking state [ 2168.038023][T12365] bridge0: port 2(bridge_slave_1) entered disabled state [ 2168.045412][T12365] bridge_slave_1: entered allmulticast mode [ 2168.054074][T12365] bridge_slave_1: entered promiscuous mode [ 2168.122963][ T981] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2168.155971][ T981] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2168.178050][ T981] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 2168.188472][ T981] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2168.201942][ T981] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2168.212219][ T981] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2168.234030][ T981] usb 6-1: config 0 descriptor?? [ 2168.281380][T12365] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2168.296801][T12365] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2168.466648][T12365] team0: Port device team_slave_0 added [ 2168.486350][T12365] team0: Port device team_slave_1 added [ 2168.681793][ T981] usbhid 6-1:0.0: can't add hid device: -71 [ 2168.695979][ T981] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 2168.721672][T12365] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2168.733038][ T981] usb 6-1: USB disconnect, device number 9 [ 2168.739238][T12365] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2168.802464][T12365] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2168.816165][T12365] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2168.828579][T12365] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2168.856760][T12365] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2168.997804][T12365] hsr_slave_0: entered promiscuous mode [ 2169.004936][T12365] hsr_slave_1: entered promiscuous mode [ 2169.021152][T12365] debugfs: 'hsr0' already exists in 'hsr' [ 2169.028203][T12365] Cannot create hsr debugfs directory [ 2169.342994][ T640] Bluetooth: hci2: command tx timeout [ 2170.030519][ T981] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 2170.187424][ T981] usb 6-1: Using ep0 maxpacket: 8 [ 2170.198702][ T981] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 2170.232276][ T981] usb 6-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 2170.251982][ T981] usb 6-1: New USB device strings: Mfr=241, Product=1, SerialNumber=3 [ 2170.277411][ T981] usb 6-1: Product: syz [ 2170.281734][ T981] usb 6-1: Manufacturer: syz [ 2170.301459][ T981] usb 6-1: SerialNumber: syz [ 2170.319817][ T981] usb 6-1: config 0 descriptor?? [ 2170.342321][ T981] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 2170.793760][T32702] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 2171.417606][ T640] Bluetooth: hci2: command tx timeout [ 2171.756112][ T981] gspca_zc3xx: reg_w_i err -71 [ 2171.990764][T32702] dvb_usb_az6027 2-1:0.0: probe with driver dvb_usb_az6027 failed with error -110 [ 2172.189515][T12431] netlink: 12 bytes leftover after parsing attributes in process `syz.0.14307'. [ 2172.357301][T32702] usb 2-1: USB disconnect, device number 60 [ 2172.397202][ T981] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 2172.403715][ T981] gspca_zc3xx 6-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 2172.489110][ T981] usb 6-1: USB disconnect, device number 10 [ 2172.877866][ T981] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 2173.039381][ T981] usb 6-1: Using ep0 maxpacket: 16 [ 2173.048039][ T981] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2173.060163][ T981] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 2173.079435][ T981] usb 6-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 2173.089126][ T981] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2173.109754][ T981] usb 6-1: config 0 descriptor?? [ 2173.508184][ T640] Bluetooth: hci2: command tx timeout [ 2173.749576][ T981] usbhid 6-1:0.0: can't add hid device: -71 [ 2173.776189][ T981] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 2173.826441][ T981] usb 6-1: USB disconnect, device number 11 [ 2173.851494][T12253] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2174.158401][T30983] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 2174.176821][T30983] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 2174.192424][T30983] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 2174.202943][T30983] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 2174.212474][T30983] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 2174.977606][ T981] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 2175.147261][ T981] usb 6-1: Using ep0 maxpacket: 32 [ 2175.160299][ T981] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2175.187415][ T981] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2175.212930][ T981] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 2175.244371][ T981] usb 6-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 2175.263878][T12438] chnl_net:caif_netlink_parms(): no params data found [ 2175.271587][ T981] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2175.298614][ T981] usb 6-1: config 0 descriptor?? [ 2175.588881][ T640] Bluetooth: hci2: command tx timeout [ 2175.774419][ T981] input: HID 0458:5011 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0458:5011.009F/input/input166 [ 2175.840021][T12438] bridge0: port 1(bridge_slave_0) entered blocking state [ 2175.867467][T12438] bridge0: port 1(bridge_slave_0) entered disabled state [ 2175.881771][ T981] input: HID 0458:5011 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0458:5011.009F/input/input167 [ 2175.903603][T12438] bridge_slave_0: entered allmulticast mode [ 2175.966216][T12438] bridge_slave_0: entered promiscuous mode [ 2176.000992][T12438] bridge0: port 2(bridge_slave_1) entered blocking state [ 2176.024597][ T981] kye 0003:0458:5011.009F: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.5-1/input0 [ 2176.094704][T12438] bridge0: port 2(bridge_slave_1) entered disabled state [ 2176.154046][T12438] bridge_slave_1: entered allmulticast mode [ 2176.210909][T12438] bridge_slave_1: entered promiscuous mode [ 2176.279764][ T5920] usb 6-1: USB disconnect, device number 12 [ 2176.299817][ T640] Bluetooth: hci5: command tx timeout [ 2176.381785][T12453] fido_id[12453]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 2176.644242][T12438] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2176.663807][T12438] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2176.841579][T12438] team0: Port device team_slave_0 added [ 2176.870424][T12438] team0: Port device team_slave_1 added [ 2177.073492][T12438] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2177.101717][T12438] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2177.163533][T12438] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2177.178546][T12438] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2177.185836][T12438] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2177.221444][T12438] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2177.347983][ T5920] IPVS: starting estimator thread 0... [ 2177.439939][T12463] IPVS: using max 25 ests per chain, 60000 per kthread [ 2177.591615][T12438] hsr_slave_0: entered promiscuous mode [ 2177.600224][T12438] hsr_slave_1: entered promiscuous mode [ 2177.609264][T12438] debugfs: 'hsr0' already exists in 'hsr' [ 2177.615245][T12438] Cannot create hsr debugfs directory [ 2177.748073][ T5920] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 2177.908237][ T5920] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 2177.930603][ T5920] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2177.948567][ T5920] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2177.958236][ T5920] usb 6-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2177.973243][ T5920] usb 6-1: config 0 interface 0 has no altsetting 0 [ 2177.986251][ T5920] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2178.000046][ T5920] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2178.012013][ T5920] usb 6-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2178.025754][ T5920] usb 6-1: config 0 interface 0 has no altsetting 0 [ 2178.036752][ T5920] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2178.049129][ T5920] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2178.058731][ T5920] usb 6-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2178.073347][ T5920] usb 6-1: config 0 interface 0 has no altsetting 0 [ 2178.083023][ T5920] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2178.097116][ T5920] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2178.106186][ T5920] usb 6-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2178.124754][ T5920] usb 6-1: config 0 interface 0 has no altsetting 0 [ 2178.134111][ T5920] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2178.147688][ T5920] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2178.156845][ T5920] usb 6-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2178.172453][ T5920] usb 6-1: config 0 interface 0 has no altsetting 0 [ 2178.183041][ T5920] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2178.193936][ T5920] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2178.206900][ T5920] usb 6-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2178.222912][ T5920] usb 6-1: config 0 interface 0 has no altsetting 0 [ 2178.235739][ T5920] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2178.246802][ T5920] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2178.258588][ T5920] usb 6-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2178.272932][ T5920] usb 6-1: config 0 interface 0 has no altsetting 0 [ 2178.286627][ T5920] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2178.298385][ T5920] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2178.308696][ T5920] usb 6-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2178.325515][ T5920] usb 6-1: config 0 interface 0 has no altsetting 0 [ 2178.336147][ T5920] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 2178.349638][ T5920] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 2178.359089][ T5920] usb 6-1: Product: syz [ 2178.363452][ T5920] usb 6-1: Manufacturer: syz [ 2178.371535][ T5920] usb 6-1: SerialNumber: syz [ 2178.397835][ T640] Bluetooth: hci5: command tx timeout [ 2178.405130][ T5920] usb 6-1: config 0 descriptor?? [ 2178.420113][ T5920] yurex 6-1:0.0: Could not find endpoints [ 2178.636673][ T5920] usb 6-1: USB disconnect, device number 13 [ 2179.231709][T12472] syzkaller1: entered promiscuous mode [ 2179.237762][T12472] syzkaller1: entered allmulticast mode [ 2180.457506][ T640] Bluetooth: hci5: command tx timeout [ 2180.502042][T12479] netlink: 12 bytes leftover after parsing attributes in process `syz.0.14324'. [ 2182.537349][ T640] Bluetooth: hci5: command tx timeout [ 2183.274776][T12498] netlink: 12 bytes leftover after parsing attributes in process `syz.0.14332'. [ 2187.684975][T12514] bond0: entered promiscuous mode [ 2187.693955][T12514] batadv0: entered promiscuous mode [ 2187.706863][T12514] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 2187.718023][T12514] hsr1: entered allmulticast mode [ 2187.723319][T12514] bond0: entered allmulticast mode [ 2187.729081][T12514] batadv0: entered allmulticast mode [ 2187.735137][T12514] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 2187.897054][T12514] bond0: left promiscuous mode [ 2187.931281][T12514] batadv0: left promiscuous mode [ 2188.380865][ T50] hsr_slave_0: left promiscuous mode [ 2188.411525][ T50] hsr_slave_1: left promiscuous mode [ 2188.460633][ T50] veth1_macvtap: left promiscuous mode [ 2188.466390][ T50] veth0_macvtap: left promiscuous mode [ 2188.831299][ T50] pimreg (unregistering): left allmulticast mode [ 2194.754226][T30983] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2194.771860][T30983] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2194.784100][T30983] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2194.809867][T30983] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2194.818080][T30983] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2195.175746][T12519] chnl_net:caif_netlink_parms(): no params data found [ 2195.409498][T12519] bridge0: port 1(bridge_slave_0) entered blocking state [ 2195.416813][T12519] bridge0: port 1(bridge_slave_0) entered disabled state [ 2195.429633][T12519] bridge_slave_0: entered allmulticast mode [ 2195.439538][T12519] bridge_slave_0: entered promiscuous mode [ 2195.453714][T12519] bridge0: port 2(bridge_slave_1) entered blocking state [ 2195.462711][T12519] bridge0: port 2(bridge_slave_1) entered disabled state [ 2195.471106][T12519] bridge_slave_1: entered allmulticast mode [ 2195.480638][T12519] bridge_slave_1: entered promiscuous mode [ 2195.576711][T12519] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2195.594896][T12519] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2195.731675][T12519] team0: Port device team_slave_0 added [ 2195.741894][T12519] team0: Port device team_slave_1 added [ 2195.872627][T12519] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2195.881154][T12519] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2195.918102][T12519] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2195.932886][T12519] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2195.941045][T12519] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2195.970011][T12519] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2196.107632][T12519] hsr_slave_0: entered promiscuous mode [ 2196.114731][T12519] hsr_slave_1: entered promiscuous mode [ 2196.122251][T12519] debugfs: 'hsr0' already exists in 'hsr' [ 2196.131732][T12519] Cannot create hsr debugfs directory [ 2196.857508][ T640] Bluetooth: hci4: command tx timeout [ 2198.937770][ T640] Bluetooth: hci4: command tx timeout [ 2201.017679][ T640] Bluetooth: hci4: command tx timeout [ 2202.926874][T12253] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2203.117430][ T640] Bluetooth: hci4: command tx timeout [ 2203.285547][T30983] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2203.300245][T30983] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2203.312367][T30983] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2203.323220][T30983] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2203.334996][T30983] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2203.724586][T12531] chnl_net:caif_netlink_parms(): no params data found [ 2203.970571][T12531] bridge0: port 1(bridge_slave_0) entered blocking state [ 2203.986269][T12531] bridge0: port 1(bridge_slave_0) entered disabled state [ 2203.994586][T12531] bridge_slave_0: entered allmulticast mode [ 2204.013996][T12531] bridge_slave_0: entered promiscuous mode [ 2204.023669][T12531] bridge0: port 2(bridge_slave_1) entered blocking state [ 2204.031787][T12531] bridge0: port 2(bridge_slave_1) entered disabled state [ 2204.039982][T12531] bridge_slave_1: entered allmulticast mode [ 2204.048404][T12531] bridge_slave_1: entered promiscuous mode [ 2204.181962][T12531] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2204.196854][T12531] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2204.276820][T12531] team0: Port device team_slave_0 added [ 2204.288452][T12531] team0: Port device team_slave_1 added [ 2204.398174][T12531] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2204.405222][T12531] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2204.432449][T12531] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2204.450645][T12531] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2204.464822][T12531] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2204.496908][T12531] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2204.636333][T12531] hsr_slave_0: entered promiscuous mode [ 2204.643575][T12531] hsr_slave_1: entered promiscuous mode [ 2204.651167][T12531] debugfs: 'hsr0' already exists in 'hsr' [ 2204.660299][T12531] Cannot create hsr debugfs directory [ 2205.417366][T30983] Bluetooth: hci0: command tx timeout [ 2207.497841][T30983] Bluetooth: hci0: command tx timeout [ 2209.577668][T30983] Bluetooth: hci0: command tx timeout [ 2211.659341][T30983] Bluetooth: hci0: command tx timeout [ 2213.874407][ T640] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 2213.885753][ T640] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 2213.904574][ T640] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 2213.930688][ T640] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 2213.940574][ T640] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 2214.308701][T12542] chnl_net:caif_netlink_parms(): no params data found [ 2214.561423][T12542] bridge0: port 1(bridge_slave_0) entered blocking state [ 2214.569279][T12542] bridge0: port 1(bridge_slave_0) entered disabled state [ 2214.576646][T12542] bridge_slave_0: entered allmulticast mode [ 2214.591244][T12542] bridge_slave_0: entered promiscuous mode [ 2214.601032][T12542] bridge0: port 2(bridge_slave_1) entered blocking state [ 2214.611254][T12542] bridge0: port 2(bridge_slave_1) entered disabled state [ 2214.622364][T12542] bridge_slave_1: entered allmulticast mode [ 2214.631758][T12542] bridge_slave_1: entered promiscuous mode [ 2214.755535][T12542] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2214.777775][T12542] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2214.948026][T12542] team0: Port device team_slave_0 added [ 2214.959137][T12542] team0: Port device team_slave_1 added [ 2215.077869][T12542] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2215.084873][T12542] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2215.118478][T12542] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2215.134156][T12542] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2215.146130][T12542] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2215.176523][T12542] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2215.489519][T12542] hsr_slave_0: entered promiscuous mode [ 2215.496631][T12542] hsr_slave_1: entered promiscuous mode [ 2215.513888][T12542] debugfs: 'hsr0' already exists in 'hsr' [ 2215.520384][T12542] Cannot create hsr debugfs directory [ 2215.977852][T30983] Bluetooth: hci6: command tx timeout [ 2218.057807][T30983] Bluetooth: hci6: command tx timeout [ 2220.137829][T30983] Bluetooth: hci6: command tx timeout [ 2222.217843][T30983] Bluetooth: hci6: command tx timeout [ 2227.051782][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 2227.058852][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 2227.193797][ T640] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2227.208510][ T640] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2227.218092][ T640] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2227.233736][ T640] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2227.252140][ T640] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2227.620586][T12555] chnl_net:caif_netlink_parms(): no params data found [ 2227.855607][T12555] bridge0: port 1(bridge_slave_0) entered blocking state [ 2227.863945][T12555] bridge0: port 1(bridge_slave_0) entered disabled state [ 2227.872404][T12555] bridge_slave_0: entered allmulticast mode [ 2227.881123][T12555] bridge_slave_0: entered promiscuous mode [ 2227.894982][T12555] bridge0: port 2(bridge_slave_1) entered blocking state [ 2227.910637][T12555] bridge0: port 2(bridge_slave_1) entered disabled state [ 2227.918499][T12555] bridge_slave_1: entered allmulticast mode [ 2227.926571][T12555] bridge_slave_1: entered promiscuous mode [ 2228.074236][T12555] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2228.088704][T12555] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2228.235876][T12555] team0: Port device team_slave_0 added [ 2228.252604][T12555] team0: Port device team_slave_1 added [ 2228.375994][T12555] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2228.388694][T12555] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2228.416686][T12555] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2228.430486][T12555] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2228.440078][T12555] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2228.480848][T12555] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2228.709827][T12555] hsr_slave_0: entered promiscuous mode [ 2228.716824][T12555] hsr_slave_1: entered promiscuous mode [ 2228.725180][T12555] debugfs: 'hsr0' already exists in 'hsr' [ 2228.731968][T12555] Cannot create hsr debugfs directory [ 2229.337306][ T640] Bluetooth: hci1: command tx timeout [ 2231.417279][ T640] Bluetooth: hci1: command tx timeout [ 2233.497234][ T640] Bluetooth: hci1: command tx timeout [ 2234.273366][T30983] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 2234.285796][T30983] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 2234.295806][T30983] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 2234.305086][T30983] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 2234.323382][T30983] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 2234.725913][T12565] chnl_net:caif_netlink_parms(): no params data found [ 2235.001666][T12565] bridge0: port 1(bridge_slave_0) entered blocking state [ 2235.009928][T12565] bridge0: port 1(bridge_slave_0) entered disabled state [ 2235.020672][T12565] bridge_slave_0: entered allmulticast mode [ 2235.029357][T12565] bridge_slave_0: entered promiscuous mode [ 2235.039126][T12565] bridge0: port 2(bridge_slave_1) entered blocking state [ 2235.046415][T12565] bridge0: port 2(bridge_slave_1) entered disabled state [ 2235.055846][T12565] bridge_slave_1: entered allmulticast mode [ 2235.064535][T12565] bridge_slave_1: entered promiscuous mode [ 2235.212783][T12565] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2235.234734][T12565] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2235.332857][T12565] team0: Port device team_slave_0 added [ 2235.354597][T12565] team0: Port device team_slave_1 added [ 2235.451343][T12565] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2235.462852][T12565] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2235.491131][T12565] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2235.513333][T12565] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2235.522953][T12565] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2235.554165][T12565] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2235.577704][T30983] Bluetooth: hci1: command tx timeout [ 2235.760161][T12565] hsr_slave_0: entered promiscuous mode [ 2235.771492][T12565] hsr_slave_1: entered promiscuous mode [ 2235.778350][T12565] debugfs: 'hsr0' already exists in 'hsr' [ 2235.784302][T12565] Cannot create hsr debugfs directory [ 2236.377220][T30983] Bluetooth: hci7: command tx timeout [ 2238.457239][T30983] Bluetooth: hci7: command tx timeout [ 2240.537970][T30983] Bluetooth: hci7: command tx timeout [ 2241.751067][T12253] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2242.617595][T30983] Bluetooth: hci7: command tx timeout [ 2255.459210][ T640] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 2255.477325][ T640] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 2255.527354][ T640] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 2255.588390][ T640] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 2255.596361][ T640] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 2255.990385][T12581] chnl_net:caif_netlink_parms(): no params data found [ 2256.289373][T12581] bridge0: port 1(bridge_slave_0) entered blocking state [ 2256.296778][T12581] bridge0: port 1(bridge_slave_0) entered disabled state [ 2256.318784][T12581] bridge_slave_0: entered allmulticast mode [ 2256.329301][T12581] bridge_slave_0: entered promiscuous mode [ 2256.344003][T12581] bridge0: port 2(bridge_slave_1) entered blocking state [ 2256.351480][T12581] bridge0: port 2(bridge_slave_1) entered disabled state [ 2256.359798][T12581] bridge_slave_1: entered allmulticast mode [ 2256.368343][T12581] bridge_slave_1: entered promiscuous mode [ 2256.473013][T12581] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2256.487558][T12581] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2256.588856][T12581] team0: Port device team_slave_0 added [ 2256.598960][T12581] team0: Port device team_slave_1 added [ 2256.735124][T12581] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2256.743074][T12581] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2256.782239][T12581] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2256.798253][T12581] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2256.805243][T12581] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2256.834045][T12581] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2256.976756][T12581] hsr_slave_0: entered promiscuous mode [ 2256.984466][T12581] hsr_slave_1: entered promiscuous mode [ 2256.995774][T12581] debugfs: 'hsr0' already exists in 'hsr' [ 2257.011778][T12581] Cannot create hsr debugfs directory [ 2257.657717][ T640] Bluetooth: hci8: command tx timeout [ 2259.737366][ T640] Bluetooth: hci8: command tx timeout [ 2261.817585][ T640] Bluetooth: hci8: command tx timeout [ 2263.897325][ T640] Bluetooth: hci8: command tx timeout [ 2264.344610][T30983] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 2264.356212][T30983] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 2264.365222][T30983] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 2264.373568][T30983] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 2264.387309][T30983] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 2264.760729][T12592] chnl_net:caif_netlink_parms(): no params data found [ 2265.673048][T12592] bridge0: port 1(bridge_slave_0) entered blocking state [ 2265.680500][T12592] bridge0: port 1(bridge_slave_0) entered disabled state [ 2265.688921][T12592] bridge_slave_0: entered allmulticast mode [ 2265.702364][T12592] bridge_slave_0: entered promiscuous mode [ 2265.718602][T12592] bridge0: port 2(bridge_slave_1) entered blocking state [ 2265.726692][T12592] bridge0: port 2(bridge_slave_1) entered disabled state [ 2265.736700][T12592] bridge_slave_1: entered allmulticast mode [ 2265.748909][T12592] bridge_slave_1: entered promiscuous mode [ 2266.220354][T12592] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2266.234443][T12592] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2266.362280][T12592] team0: Port device team_slave_0 added [ 2266.374454][T12592] team0: Port device team_slave_1 added [ 2266.457152][ T640] Bluetooth: hci9: command tx timeout [ 2266.513300][T12592] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2266.520716][T12592] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2266.550663][T12592] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2266.564177][T12592] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2266.572504][T12592] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2266.606212][T12592] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2266.756147][T12592] hsr_slave_0: entered promiscuous mode [ 2266.763893][T12592] hsr_slave_1: entered promiscuous mode [ 2266.772476][T12592] debugfs: 'hsr0' already exists in 'hsr' [ 2266.780119][T12592] Cannot create hsr debugfs directory [ 2268.537294][ T640] Bluetooth: hci9: command tx timeout [ 2270.617485][ T640] Bluetooth: hci9: command tx timeout [ 2272.697539][ T640] Bluetooth: hci9: command tx timeout [ 2274.449541][T30983] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 2274.464829][T30983] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 2274.499799][T30983] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 2274.509459][T30983] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 2274.518098][T30983] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 2274.868752][T12604] chnl_net:caif_netlink_parms(): no params data found [ 2275.116661][T12604] bridge0: port 1(bridge_slave_0) entered blocking state [ 2275.124243][T12604] bridge0: port 1(bridge_slave_0) entered disabled state [ 2275.132519][T12604] bridge_slave_0: entered allmulticast mode [ 2275.141648][T12604] bridge_slave_0: entered promiscuous mode [ 2275.152137][T12604] bridge0: port 2(bridge_slave_1) entered blocking state [ 2275.159818][T12604] bridge0: port 2(bridge_slave_1) entered disabled state [ 2275.176348][T12604] bridge_slave_1: entered allmulticast mode [ 2275.192084][T12604] bridge_slave_1: entered promiscuous mode [ 2275.364198][T12604] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2275.378903][T12604] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2275.464071][T12604] team0: Port device team_slave_0 added [ 2275.474165][T12604] team0: Port device team_slave_1 added [ 2275.552600][T12604] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2275.561218][T12604] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2275.591341][T12604] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2275.604774][T12604] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2275.621774][T12604] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2275.651218][T12604] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2275.815985][T12604] hsr_slave_0: entered promiscuous mode [ 2275.832521][T12604] hsr_slave_1: entered promiscuous mode [ 2275.848342][T12604] debugfs: 'hsr0' already exists in 'hsr' [ 2275.854130][T12604] Cannot create hsr debugfs directory [ 2276.537720][T30983] Bluetooth: hci10: command tx timeout [ 2278.617444][T30983] Bluetooth: hci10: command tx timeout [ 2280.481633][T30983] Bluetooth: hci3: command 0x0406 tx timeout [ 2281.295782][ T640] Bluetooth: hci10: command tx timeout [ 2283.667001][ T640] Bluetooth: hci10: command tx timeout [ 2288.303159][T30983] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 2288.316108][T30983] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 2288.331790][T30983] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 2288.359771][T30983] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 2288.367994][T30983] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 2288.608955][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 2288.615318][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 2289.173779][T12623] chnl_net:caif_netlink_parms(): no params data found [ 2290.042826][T12623] bridge0: port 1(bridge_slave_0) entered blocking state [ 2290.080281][T12623] bridge0: port 1(bridge_slave_0) entered disabled state [ 2290.098153][T12623] bridge_slave_0: entered allmulticast mode [ 2290.116029][T12623] bridge_slave_0: entered promiscuous mode [ 2290.144580][T12623] bridge0: port 2(bridge_slave_1) entered blocking state [ 2290.172288][T12623] bridge0: port 2(bridge_slave_1) entered disabled state [ 2290.185082][T12623] bridge_slave_1: entered allmulticast mode [ 2290.207298][T12623] bridge_slave_1: entered promiscuous mode [ 2290.413622][T12623] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2290.444073][T12623] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2290.458164][T30983] Bluetooth: hci11: command tx timeout [ 2290.541570][T30983] Bluetooth: hci2: command 0x0406 tx timeout [ 2290.765798][T12623] team0: Port device team_slave_0 added [ 2290.788592][T12623] team0: Port device team_slave_1 added [ 2291.019300][T12623] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2291.026513][T12623] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2291.107205][T12623] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2291.137331][T12623] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2291.144346][T12623] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2291.223858][T12623] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2291.753972][T12623] hsr_slave_0: entered promiscuous mode [ 2291.797789][T12623] hsr_slave_1: entered promiscuous mode [ 2291.813259][T12623] debugfs: 'hsr0' already exists in 'hsr' [ 2291.826164][T12623] Cannot create hsr debugfs directory [ 2292.537656][ T640] Bluetooth: hci11: command tx timeout [ 2294.617754][ T640] Bluetooth: hci11: command tx timeout [ 2295.336030][T30983] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2295.348277][T30983] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2295.356545][T30983] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2295.364678][T30983] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2295.373148][T30983] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2295.734936][T12683] chnl_net:caif_netlink_parms(): no params data found [ 2296.021850][T12683] bridge0: port 1(bridge_slave_0) entered blocking state [ 2296.029371][T12683] bridge0: port 1(bridge_slave_0) entered disabled state [ 2296.038589][T12683] bridge_slave_0: entered allmulticast mode [ 2296.046713][T12683] bridge_slave_0: entered promiscuous mode [ 2296.056638][T12683] bridge0: port 2(bridge_slave_1) entered blocking state [ 2296.064712][T12683] bridge0: port 2(bridge_slave_1) entered disabled state [ 2296.074075][T12683] bridge_slave_1: entered allmulticast mode [ 2296.082955][T12683] bridge_slave_1: entered promiscuous mode [ 2296.239972][T12683] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2296.255253][T12683] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2296.392494][T12683] team0: Port device team_slave_0 added [ 2296.403463][T12683] team0: Port device team_slave_1 added [ 2296.546083][T12683] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2296.556231][T12683] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2296.586780][T12683] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2296.600622][T12683] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2296.607980][T12683] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2296.640330][T12683] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2296.697344][T30983] Bluetooth: hci11: command tx timeout [ 2296.952625][T12683] hsr_slave_0: entered promiscuous mode [ 2296.962637][T12683] hsr_slave_1: entered promiscuous mode [ 2296.973394][T12683] debugfs: 'hsr0' already exists in 'hsr' [ 2296.982473][T12683] Cannot create hsr debugfs directory [ 2297.417517][T30983] Bluetooth: hci3: command tx timeout [ 2299.497707][T30983] Bluetooth: hci3: command tx timeout [ 2300.784061][T30983] Bluetooth: hci5: command 0x0406 tx timeout [ 2301.579061][ T640] Bluetooth: hci3: command tx timeout [ 2303.657189][ T640] Bluetooth: hci3: command tx timeout [ 2316.593968][T30983] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 2316.605936][T30983] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 2316.616816][T30983] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 2316.636102][T30983] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 2316.657286][T16582] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 2317.001541][T12755] chnl_net:caif_netlink_parms(): no params data found [ 2317.244622][T12755] bridge0: port 1(bridge_slave_0) entered blocking state [ 2317.252038][T12755] bridge0: port 1(bridge_slave_0) entered disabled state [ 2317.261771][T12755] bridge_slave_0: entered allmulticast mode [ 2317.270422][T12755] bridge_slave_0: entered promiscuous mode [ 2317.279846][T12755] bridge0: port 2(bridge_slave_1) entered blocking state [ 2317.287393][T12755] bridge0: port 2(bridge_slave_1) entered disabled state [ 2317.294833][T12755] bridge_slave_1: entered allmulticast mode [ 2317.306279][T12755] bridge_slave_1: entered promiscuous mode [ 2317.433749][T12755] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2317.455655][T12755] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2317.592503][T12755] team0: Port device team_slave_0 added [ 2317.601884][T12755] team0: Port device team_slave_1 added [ 2317.721783][T12755] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2317.729082][T12755] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2317.769627][T12755] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2317.798237][T12755] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2317.805330][T12755] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2317.847922][T12755] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2318.157311][T12755] hsr_slave_0: entered promiscuous mode [ 2318.164509][T12755] hsr_slave_1: entered promiscuous mode [ 2318.171822][T12755] debugfs: 'hsr0' already exists in 'hsr' [ 2318.178116][T12755] Cannot create hsr debugfs directory [ 2318.697346][T16582] Bluetooth: hci12: command tx timeout [ 2320.777714][T16582] Bluetooth: hci12: command tx timeout [ 2321.267303][T16582] Bluetooth: hci4: command 0x0406 tx timeout [ 2322.857533][ T640] Bluetooth: hci12: command tx timeout [ 2324.624636][T12751] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 2324.635674][T12751] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 2324.644224][T12751] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 2324.656085][T12751] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 2324.667412][T12751] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 2324.947863][T12751] Bluetooth: hci12: command tx timeout [ 2325.028381][T12767] chnl_net:caif_netlink_parms(): no params data found [ 2325.268520][T12767] bridge0: port 1(bridge_slave_0) entered blocking state [ 2325.275813][T12767] bridge0: port 1(bridge_slave_0) entered disabled state [ 2325.284027][T12767] bridge_slave_0: entered allmulticast mode [ 2325.294578][T12767] bridge_slave_0: entered promiscuous mode [ 2325.304231][T12767] bridge0: port 2(bridge_slave_1) entered blocking state [ 2325.312338][T12767] bridge0: port 2(bridge_slave_1) entered disabled state [ 2325.320320][T12767] bridge_slave_1: entered allmulticast mode [ 2325.330934][T12767] bridge_slave_1: entered promiscuous mode [ 2325.450243][T12767] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2325.464189][T12767] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2325.595027][T12767] team0: Port device team_slave_0 added [ 2325.611468][T12767] team0: Port device team_slave_1 added [ 2325.738755][T12767] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2325.745765][T12767] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2325.773128][T12767] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2325.786591][T12767] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2325.794206][T12767] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2325.831123][T12767] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2325.985976][T12767] hsr_slave_0: entered promiscuous mode [ 2325.998498][T12767] hsr_slave_1: entered promiscuous mode [ 2326.005409][T12767] debugfs: 'hsr0' already exists in 'hsr' [ 2326.011999][T12767] Cannot create hsr debugfs directory [ 2326.387983][T12751] Bluetooth: hci0: command 0x0406 tx timeout [ 2326.697439][T16582] Bluetooth: hci13: command tx timeout [ 2328.804198][T12751] Bluetooth: hci13: command tx timeout [ 2330.857192][T12751] Bluetooth: hci13: command tx timeout [ 2332.947553][T12751] Bluetooth: hci13: command tx timeout [ 2334.896403][ T640] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 2334.911853][ T640] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 2334.938171][ T640] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 2334.950798][ T640] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 2334.958646][ T640] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 2335.298036][T12830] chnl_net:caif_netlink_parms(): no params data found [ 2335.534993][T12830] bridge0: port 1(bridge_slave_0) entered blocking state [ 2335.543089][T12830] bridge0: port 1(bridge_slave_0) entered disabled state [ 2335.550968][T12830] bridge_slave_0: entered allmulticast mode [ 2335.559586][T12830] bridge_slave_0: entered promiscuous mode [ 2335.570659][T12830] bridge0: port 2(bridge_slave_1) entered blocking state [ 2335.583367][T12830] bridge0: port 2(bridge_slave_1) entered disabled state [ 2335.592496][T12830] bridge_slave_1: entered allmulticast mode [ 2335.601309][T12830] bridge_slave_1: entered promiscuous mode [ 2335.744685][T12830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2335.758607][T12830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2335.823546][ T31] INFO: task syz-executor:12438 blocked for more than 143 seconds. [ 2335.851690][ T31] Tainted: G L syzkaller #0 [ 2335.862669][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2335.878829][ T31] task:syz-executor state:D stack:22392 pid:12438 tgid:12438 ppid:1 task_flags:0x400140 flags:0x00080002 [ 2335.897313][ T31] Call Trace: [ 2335.900654][ T31] [ 2335.903633][ T31] __schedule+0x149b/0x4fd0 [ 2335.928780][ T31] ? __pfx___schedule+0x10/0x10 [ 2335.933729][ T31] ? schedule+0x91/0x360 [ 2336.006955][ T31] schedule+0x165/0x360 [ 2336.011234][ T31] schedule_preempt_disabled+0x13/0x30 [ 2336.016744][ T31] __mutex_lock+0x7e6/0x1350 [ 2336.069586][ T31] ? __mutex_lock+0x5bb/0x1350 [ 2336.075769][ T31] ? del_device_store+0xd1/0x360 [ 2336.081456][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 2336.086534][ T31] ? sysfs_file_kobj+0x1a/0x230 [ 2336.091916][ T31] ? sysfs_file_kobj+0x1a/0x230 [ 2336.096841][ T31] del_device_store+0xd1/0x360 [ 2336.112353][ T31] ? sysfs_file_kobj+0x1a/0x230 [ 2336.117783][ T31] ? __pfx_del_device_store+0x10/0x10 [ 2336.123210][ T31] ? sysfs_file_kobj+0x1e4/0x230 [ 2336.128632][ T31] ? sysfs_kf_write+0x166/0x260 [ 2336.133530][ T31] ? __pfx_sysfs_kf_write+0x10/0x10 [ 2336.141767][ T31] kernfs_fop_write_iter+0x3af/0x540 [ 2336.147516][ T31] vfs_write+0x5c9/0xb30 [ 2336.151816][ T31] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 2336.158262][ T31] ? __pfx_vfs_write+0x10/0x10 [ 2336.163079][ T31] ? kmem_cache_free+0x197/0x620 [ 2336.168567][ T31] ? do_sys_openat2+0x15a/0x200 [ 2336.173509][ T31] ksys_write+0x145/0x250 [ 2336.179824][ T31] ? __pfx_ksys_write+0x10/0x10 [ 2336.184742][ T31] do_syscall_64+0xec/0xf80 [ 2336.189908][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2336.196111][ T31] ? trace_irq_disable+0x37/0x100 [ 2336.201864][ T31] ? clear_bhb_loop+0x60/0xb0 [ 2336.206600][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2336.223565][ T31] RIP: 0033:0x7fe6c1d8e1ff [ 2336.233386][ T31] RSP: 002b:00007fe6c210f220 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 2336.242140][ T31] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007fe6c1d8e1ff [ 2336.250678][ T31] RDX: 0000000000000001 RSI: 00007fe6c210f270 RDI: 0000000000000005 [ 2336.259212][ T31] RBP: 00007fe6c1e152cb R08: 0000000000000000 R09: 00007fe6c210f077 [ 2336.267812][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 2336.275830][ T31] R13: 00007fe6c210f270 R14: 00007fe6c2b14620 R15: 0000000000000003 [ 2336.285517][ T31] [ 2336.290210][ T31] [ 2336.290210][ T31] Showing all locks held in the system: [ 2336.317561][ T31] 1 lock held by khungtaskd/31: [ 2336.322483][ T31] #0: ffffffff8df41aa0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 2336.367335][ T31] 4 locks held by kworker/u8:3/50: [ 2336.372519][ T31] #0: ffff88801aa9f148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 2336.396060][ T31] #1: ffffc90000bb7bc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 2336.407386][ T31] #2: ffffffff8f304cd0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x7a0 [ 2336.416788][ T31] #3: ffffffff8df474c0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 2336.427719][ T31] 4 locks held by kworker/0:3/981: [ 2336.432895][ T31] 2 locks held by getty/5593: [ 2336.444535][ T31] #0: ffff88802f8cf0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 2336.460337][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x449/0x1460 [ 2336.479041][ T31] 4 locks held by kworker/u8:29/13454: [ 2336.485906][ T31] #0: ffff88813ff29948 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 2336.498725][ T31] #1: ffffc90003b47bc0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 2336.510194][ T31] #2: ffffffff8f311d88 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 2336.519895][ T31] #3: ffffffff8df475f8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2b1/0x6e0 [ 2336.531440][ T31] 2 locks held by kworker/0:0/16461: [ 2336.536768][ T31] 3 locks held by kworker/u9:4/16582: [ 2336.545139][ T31] #0: ffff88805ac85148 ((wq_completion)hci6){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 2336.563282][ T31] #1: ffffc9000c49fbc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 2336.581203][ T31] #2: ffff88805c398ec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d3/0x400 [ 2336.595037][ T31] 7 locks held by syz-executor/12365: [ 2336.600917][ T31] #0: ffff8880317ea420 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xb30 [ 2336.610277][ T31] #1: ffff88807bcdd488 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1de/0x540 [ 2336.623909][ T640] Bluetooth: hci6: command 0x0406 tx timeout [ 2336.630941][ T31] #2: ffff8880278372d8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x231/0x540 [ 2336.641686][ T31] #3: ffffffff8eb9faa8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 2336.652592][ T31] #4: ffff88805c6330e8 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb6/0x800 [ 2336.663744][ T31] #5: ffff88805c635250 (&devlink->lock_key){+.+.}-{4:4}, at: nsim_drv_remove+0x50/0x160 [ 2336.677665][ T31] #6: ffffffff8df474c0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 2336.695164][ T31] 4 locks held by syz-executor/12438: [ 2336.701932][ T31] #0: ffff8880317ea420 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xb30 [ 2336.711489][ T31] #1: ffff888146addc88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1de/0x540 [ 2336.721719][ T31] #2: ffff8880278372d8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x231/0x540 [ 2336.732591][ T31] #3: ffffffff8eb9faa8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 2336.743310][ T31] 4 locks held by syz-executor/12519: [ 2336.749397][ T31] #0: ffff8880317ea420 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xb30 [ 2336.758987][ T31] #1: ffff88814d954888 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1de/0x540 [ 2336.769328][ T31] #2: ffff8880278372d8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x231/0x540 [ 2336.782466][ T31] #3: ffffffff8eb9faa8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 2336.795821][ T31] 4 locks held by syz-executor/12531: [ 2336.806610][ T31] #0: ffff8880317ea420 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xb30 [ 2336.817089][ T31] #1: ffff88805b262c88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1de/0x540 [ 2336.827545][ T31] #2: ffff8880278372d8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x231/0x540 [ 2336.837969][ T31] #3: ffffffff8eb9faa8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 2336.848877][ T31] 4 locks held by syz-executor/12542: [ 2336.854290][ T31] #0: ffff8880317ea420 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xb30 [ 2336.869500][ T31] #1: ffff88804c41c488 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1de/0x540 [ 2336.880327][ T31] #2: ffff8880278372d8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x231/0x540 [ 2336.895241][ T31] #3: ffffffff8eb9faa8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 2336.907441][ T31] 4 locks held by syz-executor/12555: [ 2336.912962][ T31] #0: ffff8880317ea420 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xb30 [ 2336.932046][ T31] #1: ffff888031141088 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1de/0x540 [ 2336.944196][ T31] #2: ffff8880278372d8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x231/0x540 [ 2336.956512][ T31] #3: ffffffff8eb9faa8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 2336.967533][ T31] 4 locks held by syz-executor/12565: [ 2336.972954][ T31] #0: ffff8880317ea420 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xb30 [ 2336.982494][ T31] #1: ffff8880378ec488 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1de/0x540 [ 2336.993086][ T31] #2: ffff8880278372d8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x231/0x540 [ 2337.007276][ T31] #3: ffffffff8eb9faa8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 2337.018104][ T640] Bluetooth: hci14: command tx timeout [ 2337.026514][ T31] 4 locks held by syz-executor/12581: [ 2337.037395][ T31] #0: ffff8880317ea420 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xb30 [ 2337.046447][ T31] #1: ffff888043a10c88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1de/0x540 [ 2337.058426][ T31] #2: ffff8880278372d8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x231/0x540 [ 2337.069005][ T31] #3: ffffffff8eb9faa8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 2337.079948][ T31] 4 locks held by syz-executor/12592: [ 2337.085359][ T31] #0: ffff8880317ea420 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xb30 [ 2337.094916][ T31] #1: ffff88803e722088 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1de/0x540 [ 2337.113327][ T31] #2: ffff8880278372d8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x231/0x540 [ 2337.125002][ T31] #3: ffffffff8eb9faa8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 2337.136959][ T31] 4 locks held by syz-executor/12604: [ 2337.142371][ T31] #0: ffff8880317ea420 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xb30 [ 2337.158032][ T31] #1: ffff888060f78088 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1de/0x540 [ 2337.169632][ T31] #2: ffff8880278372d8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x231/0x540 [ 2337.184015][ T31] #3: ffffffff8eb9faa8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 2337.194996][ T31] 4 locks held by syz-executor/12623: [ 2337.202006][ T31] #0: ffff8880317ea420 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xb30 [ 2337.211679][ T31] #1: ffff88804bda7488 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1de/0x540 [ 2337.223507][ T31] #2: ffff8880278372d8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x231/0x540 [ 2337.235364][ T31] #3: ffffffff8eb9faa8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 2337.247786][ T31] 2 locks held by kworker/0:2/12640: [ 2337.253117][ T31] 4 locks held by syz-executor/12683: [ 2337.266524][ T31] #0: ffff8880317ea420 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xb30 [ 2337.276108][ T31] #1: ffff88809b71f088 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1de/0x540 [ 2337.287269][ T31] #2: ffff8880278372d8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x231/0x540 [ 2337.298084][ T31] #3: ffffffff8eb9faa8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 2337.310181][ T31] 4 locks held by syz-executor/12755: [ 2337.315605][ T31] #0: ffff8880317ea420 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xb30 [ 2337.325384][ T31] #1: ffff8880ae50c888 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1de/0x540 [ 2337.342892][ T31] #2: ffff8880278372d8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x231/0x540 [ 2337.354448][ T31] #3: ffffffff8eb9faa8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 2337.365520][ T31] 4 locks held by syz-executor/12767: [ 2337.375835][ T31] #0: ffff8880317ea420 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xb30 [ 2337.385455][ T31] #1: ffff8880374ca888 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1de/0x540 [ 2337.395800][ T31] #2: ffff8880278372d8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x231/0x540 [ 2337.408655][ T31] #3: ffffffff8eb9faa8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 2337.425755][ T31] 1 lock held by syz-executor/12830: [ 2337.431816][ T31] #0: ffffffff8df475f8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x36e/0x6e0 [ 2337.446626][ T31] [ 2337.451407][ T31] ============================================= [ 2337.451407][ T31] [ 2337.462812][ T31] NMI backtrace for cpu 1 [ 2337.462844][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 2337.462873][ T31] Tainted: [L]=SOFTLOCKUP [ 2337.462882][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2337.462895][ T31] Call Trace: [ 2337.462904][ T31] [ 2337.462914][ T31] dump_stack_lvl+0xe8/0x150 [ 2337.462945][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 2337.462976][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 2337.463011][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 2337.463045][ T31] sys_info+0x135/0x170 [ 2337.463069][ T31] watchdog+0xf95/0xfe0 [ 2337.463104][ T31] ? watchdog+0x20a/0xfe0 [ 2337.463141][ T31] kthread+0x711/0x8a0 [ 2337.463172][ T31] ? __pfx_watchdog+0x10/0x10 [ 2337.463202][ T31] ? __pfx_kthread+0x10/0x10 [ 2337.463232][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 2337.463283][ T31] ? __pfx_kthread+0x10/0x10 [ 2337.463312][ T31] ret_from_fork+0x510/0xa50 [ 2337.463336][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 2337.463357][ T31] ? __switch_to+0xc9e/0x1480 [ 2337.463391][ T31] ? __pfx_kthread+0x10/0x10 [ 2337.463420][ T31] ret_from_fork_asm+0x1a/0x30 [ 2337.463467][ T31] [ 2337.463476][ T31] Sending NMI from CPU 1 to CPUs 0: [ 2337.591881][ C0] NMI backtrace for cpu 0 [ 2337.591901][ C0] CPU: 0 UID: 0 PID: 981 Comm: kworker/0:3 Tainted: G L syzkaller #0 PREEMPT(full) [ 2337.591928][ C0] Tainted: [L]=SOFTLOCKUP [ 2337.591935][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2337.591948][ C0] Workqueue: events_power_efficient neigh_periodic_work [ 2337.591974][ C0] RIP: 0010:__lock_acquire+0x885/0x2cf0 [ 2337.591996][ C0] Code: 01 d6 29 da 89 dd c1 c5 13 31 d5 01 f3 29 ee 01 eb c1 c5 04 31 f5 48 c1 e5 20 83 3d 48 58 e4 0d 00 4d 89 e5 0f 85 1f 02 00 00 <48> 83 7c 24 28 00 0f 84 b3 01 00 00 41 8b 45 f8 25 ff 1f 00 00 48 [ 2337.592013][ C0] RSP: 0018:ffffc900000068f0 EFLAGS: 00000046 [ 2337.592028][ C0] RAX: 00000000add6e078 RBX: 0000000002fcf7df RCX: 000000004dbb4af1 [ 2337.592042][ C0] RDX: 000000007f45ee1d RSI: 000000005970cd9e RDI: ffff888025555b80 [ 2337.592055][ C0] RBP: 03813abc00000000 R08: ffffffff8173fd65 R09: ffffffff8df41aa0 [ 2337.592070][ C0] R10: ffffc90000006bf8 R11: ffffffff81acf3d0 R12: ffff888025556778 [ 2337.592085][ C0] R13: ffff888025556778 R14: ffff888025555b80 R15: 0000000000000005 [ 2337.592099][ C0] FS: 0000000000000000(0000) GS:ffff888125e1f000(0000) knlGS:0000000000000000 [ 2337.592115][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2337.592129][ C0] CR2: 00007ffdb365df50 CR3: 000000000dd3a000 CR4: 00000000003526f0 [ 2337.592146][ C0] Call Trace: [ 2337.592154][ C0] [ 2337.592167][ C0] ? stack_trace_save+0x9c/0xe0 [ 2337.592198][ C0] ? unwind_next_frame+0xa5/0x23d0 [ 2337.592220][ C0] ? lock_acquire+0x107/0x340 [ 2337.592240][ C0] ? unwind_next_frame+0xa5/0x23d0 [ 2337.592260][ C0] lock_acquire+0x107/0x340 [ 2337.592277][ C0] ? unwind_next_frame+0xa5/0x23d0 [ 2337.592308][ C0] ? unwind_next_frame+0xa5/0x23d0 [ 2337.592330][ C0] ? synproxy_send_client_synack+0x8bb/0xe20 [ 2337.592358][ C0] ? unwind_next_frame+0xa5/0x23d0 [ 2337.592379][ C0] unwind_next_frame+0xc2/0x23d0 [ 2337.592400][ C0] ? unwind_next_frame+0xa5/0x23d0 [ 2337.592424][ C0] ? unwind_next_frame+0xa5/0x23d0 [ 2337.592445][ C0] ? synproxy_send_tcp+0x3a7/0x700 [ 2337.592470][ C0] ? synproxy_send_client_synack+0x8bb/0xe20 [ 2337.592498][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 2337.592528][ C0] arch_stack_walk+0x11c/0x150 [ 2337.592551][ C0] ? synproxy_send_client_synack+0x8bb/0xe20 [ 2337.592581][ C0] stack_trace_save+0x9c/0xe0 [ 2337.592609][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 2337.592642][ C0] ref_tracker_alloc+0x17d/0x460 [ 2337.592663][ C0] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 2337.592681][ C0] ? dst_init+0xd9/0x450 [ 2337.592705][ C0] ? dst_alloc+0x12a/0x170 [ 2337.592729][ C0] ? ip_route_output_key_hash_rcu+0x1560/0x23e0 [ 2337.592751][ C0] ? ip_route_output_key_hash+0x174/0x280 [ 2337.592771][ C0] ? ip_route_output_flow+0x2a/0x150 [ 2337.592787][ C0] ? ip_route_me_harder+0x6c4/0xf10 [ 2337.592812][ C0] ? synproxy_send_tcp+0x3a7/0x700 [ 2337.592836][ C0] ? synproxy_send_client_synack+0x8bb/0xe20 [ 2337.592867][ C0] ? rcu_is_watching+0x15/0xb0 [ 2337.592892][ C0] dst_init+0xd9/0x450 [ 2337.592919][ C0] dst_alloc+0x12a/0x170 [ 2337.592945][ C0] ip_route_output_key_hash_rcu+0x1560/0x23e0 [ 2337.592970][ C0] ? ip_route_output_key_hash+0xc1/0x280 [ 2337.592991][ C0] ip_route_output_key_hash+0x174/0x280 [ 2337.593012][ C0] ? __pfx___inet_dev_addr_type+0x10/0x10 [ 2337.593036][ C0] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 2337.593059][ C0] ? lock_acquire+0x107/0x340 [ 2337.593081][ C0] ip_route_output_flow+0x2a/0x150 [ 2337.593099][ C0] ? ip_route_me_harder+0x6ae/0xf10 [ 2337.593124][ C0] ip_route_me_harder+0x6c4/0xf10 [ 2337.593152][ C0] ? __pfx_ip_route_me_harder+0x10/0x10 [ 2337.593183][ C0] ? rcu_is_watching+0x15/0xb0 [ 2337.593205][ C0] ? siphash_2u64+0x25/0x2a0 [ 2337.593228][ C0] synproxy_send_tcp+0x3a7/0x700 [ 2337.593259][ C0] synproxy_send_client_synack+0x8bb/0xe20 [ 2337.593292][ C0] ? __pfx_synproxy_send_client_synack+0x10/0x10 [ 2337.593325][ C0] ? nft_osf_eval+0x418/0x770 [ 2337.593353][ C0] ? synproxy_pernet+0x45/0x270 [ 2337.593374][ C0] nft_synproxy_eval_v4+0x36e/0x560 [ 2337.593396][ C0] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 2337.593416][ C0] ? nf_ip_checksum+0x13c/0x510 [ 2337.593436][ C0] nft_synproxy_do_eval+0x345/0x570 [ 2337.593454][ C0] ? call_rcu+0xee/0x890 [ 2337.593475][ C0] ? kmem_cache_free+0x488/0x620 [ 2337.593494][ C0] ? nf_conntrack_free+0x2f7/0x380 [ 2337.593523][ C0] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 2337.593542][ C0] ? do_softirq+0x76/0xd0 [ 2337.593560][ C0] ? process_scheduled_works+0xad1/0x1770 [ 2337.593579][ C0] ? worker_thread+0x8a0/0xda0 [ 2337.593603][ C0] nft_do_chain+0x40c/0x1920 [ 2337.593627][ C0] ? __pfx_nft_do_chain+0x10/0x10 [ 2337.593661][ C0] nft_do_chain_inet+0x25d/0x340 [ 2337.593679][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 2337.593697][ C0] ? ipt_do_table+0x2a3/0x1640 [ 2337.593715][ C0] ? nf_nat_ipv4_local_in+0x223/0x720 [ 2337.593740][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 2337.593758][ C0] nf_hook_slow+0xc5/0x220 [ 2337.593786][ C0] NF_HOOK+0x206/0x3a0 [ 2337.593812][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 2337.593839][ C0] ? NF_HOOK+0x9a/0x3a0 [ 2337.593864][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 2337.593888][ C0] ? ip_rcv_finish_core+0xda3/0x1c00 [ 2337.593916][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 2337.593944][ C0] ? skb_dst+0x4f/0xd0 [ 2337.593973][ C0] ? ip_local_deliver+0x12a/0x1b0 [ 2337.594000][ C0] NF_HOOK+0x30c/0x3a0 [ 2337.594026][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 2337.594051][ C0] ? NF_HOOK+0x9a/0x3a0 [ 2337.594075][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 2337.594099][ C0] ? ip_rcv_core+0x7f7/0xd00 [ 2337.594125][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 2337.594155][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 2337.594179][ C0] __netif_receive_skb+0x143/0x380 [ 2337.594198][ C0] ? process_backlog+0x247/0x1340 [ 2337.594217][ C0] process_backlog+0x54f/0x1340 [ 2337.594243][ C0] __napi_poll+0xae/0x320 [ 2337.594258][ C0] ? skb_defer_free_flush+0x233/0x260 [ 2337.594277][ C0] net_rx_action+0x64a/0xe00 [ 2337.594295][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 2337.594335][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 2337.594367][ C0] handle_softirqs+0x22b/0x7c0 [ 2337.594387][ C0] ? do_softirq+0x76/0xd0 [ 2337.594407][ C0] ? neigh_periodic_work+0xc28/0xe50 [ 2337.594427][ C0] do_softirq+0x76/0xd0 [ 2337.594445][ C0] [ 2337.594451][ C0] [ 2337.594458][ C0] __local_bh_enable_ip+0xf8/0x130 [ 2337.594477][ C0] neigh_periodic_work+0xc28/0xe50 [ 2337.594499][ C0] ? process_scheduled_works+0x9ef/0x1770 [ 2337.594519][ C0] process_scheduled_works+0xad1/0x1770 [ 2337.594550][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 2337.594569][ C0] ? do_raw_spin_lock+0x121/0x290 [ 2337.594602][ C0] worker_thread+0x8a0/0xda0 [ 2337.594632][ C0] kthread+0x711/0x8a0 [ 2337.594657][ C0] ? __pfx_worker_thread+0x10/0x10 [ 2337.594676][ C0] ? __pfx_kthread+0x10/0x10 [ 2337.594701][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 2337.594729][ C0] ? __pfx_kthread+0x10/0x10 [ 2337.594753][ C0] ret_from_fork+0x510/0xa50 [ 2337.594771][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 2337.594788][ C0] ? __switch_to+0xc9e/0x1480 [ 2337.594815][ C0] ? __pfx_kthread+0x10/0x10 [ 2337.594839][ C0] ret_from_fork_asm+0x1a/0x30 [ 2337.594872][ C0] [ 2338.768735][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 2338.775662][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 2338.786385][ T31] Tainted: [L]=SOFTLOCKUP [ 2338.790780][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2338.800880][ T31] Call Trace: [ 2338.804204][ T31] [ 2338.807175][ T31] vpanic+0x1e0/0x670 [ 2338.811211][ T31] panic+0xb9/0xc0 [ 2338.814981][ T31] ? __pfx_panic+0x10/0x10 [ 2338.819463][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 2338.824886][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 2338.831104][ T31] watchdog+0xfdf/0xfe0 [ 2338.835326][ T31] ? watchdog+0x20a/0xfe0 [ 2338.839713][ T31] kthread+0x711/0x8a0 [ 2338.843833][ T31] ? __pfx_watchdog+0x10/0x10 [ 2338.848570][ T31] ? __pfx_kthread+0x10/0x10 [ 2338.853216][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 2338.858484][ T31] ? __pfx_kthread+0x10/0x10 [ 2338.863134][ T31] ret_from_fork+0x510/0xa50 [ 2338.867784][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 2338.872934][ T31] ? __switch_to+0xc9e/0x1480 [ 2338.877678][ T31] ? __pfx_kthread+0x10/0x10 [ 2338.882324][ T31] ret_from_fork_asm+0x1a/0x30 [ 2338.887158][ T31] [ 2338.890807][ T31] Kernel Offset: disabled [ 2338.895144][ T31] Rebooting in 86400 seconds..